$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa File: 550a151e-c18d-35ce-90a4-5c8c0337abb6.roa (raw, json) Hash identifier: 0LNN7xPiVYhwLHc/H9Bcn6Q07aOgQ/iQef5BEdepirc= Subject key identifier: 62:FD:CF:C8:E7:9C:15:D3:F5:85:88:CD:AD:BE:C1:31:6F:D7:5F:F8 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584A88409D11DE1B5CA86B612580 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 398420 IP address blocks: 216.246.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:9d:11:de:1b:5c:a8:6b:61:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=b6a879bb-e1bc-46e6-8932-7e707b8f2fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:94:a5:24:42:87:49:67:96:86:bf:8e:4e: 1d:f3:b0:6c:8a:71:76:38:8b:1c:9f:46:82:42:e4: 21:5b:e8:36:f0:ca:f1:74:56:93:20:16:df:03:69: e0:e9:8c:20:3f:1d:ad:88:10:4f:60:55:30:d5:18: bc:86:38:09:3a:ce:c7:ad:7a:41:dc:8c:17:5f:29: 06:cf:5c:99:d8:c6:4b:bd:74:cc:66:de:f6:7f:b8: ba:16:f6:b6:c9:1a:bc:29:ca:e9:58:70:80:3e:16: 82:4d:df:db:20:e4:a3:cd:b5:07:ba:c3:bd:8a:9c: 01:4c:c3:79:f5:e0:77:eb:61:0b:e5:04:fd:43:2d: b0:99:67:dc:50:99:34:34:54:9e:18:b1:c6:7c:87: fa:5a:2b:de:42:f4:42:ab:aa:5e:af:75:86:4e:99: 8b:bd:c2:59:ab:d0:bb:e4:3c:09:00:65:b9:48:e8: f6:7f:fb:50:33:67:c9:67:e8:4a:e7:15:99:98:42: c1:84:1d:19:b4:65:90:d3:66:5e:d4:0f:e8:5c:ed: 34:b4:60:c0:24:f1:4e:46:26:7c:94:84:f0:84:7f: 32:71:a4:29:54:25:9f:8a:7c:6a:e4:28:dc:eb:19: 8c:d5:0e:b2:fb:6c:3f:2d:a7:a4:f0:b2:eb:c3:22: 52:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FD:CF:C8:E7:9C:15:D3:F5:85:88:CD:AD:BE:C1:31:6F:D7:5F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:79:15:fe:97:0e:aa:d2:0b:96:fe:8c:ad:1e:c5:84:d7:3d: e5:62:52:cd:c7:5d:cf:77:23:79:d3:f8:a9:fb:a6:81:c4:d0: d3:50:0c:38:8d:9c:ba:76:42:6f:39:3b:d8:91:75:6a:b8:73: ab:e3:f2:e6:49:46:0b:45:bd:27:87:76:ac:24:43:c2:69:d5: b3:47:aa:dc:b8:67:67:df:30:17:0e:72:bd:a4:02:66:58:8a: 3a:de:89:81:95:53:cb:81:4f:21:b9:69:b4:f5:50:6b:be:7b: d1:18:29:89:2c:b6:d7:4c:b7:01:6d:fb:9e:52:f4:f1:6c:c9: f3:b2:57:79:24:c0:84:aa:d9:c3:4b:6b:95:40:5e:58:06:59: 87:7b:da:1f:6d:a1:62:9e:4f:61:30:88:55:10:14:66:54:62: be:58:73:a6:c6:62:3a:d7:4b:2e:a2:e0:f4:6b:8d:63:52:34: 0c:71:28:48:bf:d0:83:fa:87:02:3c:fa:53:d9:72:bc:7e:71: cc:d6:85:aa:3a:20:28:71:a4:23:28:a2:09:9a:da:38:dc:cb: 78:75:a4:55:1e:34:4c:05:e6:9c:79:36:62:6c:b6:37:b5:2e: 51:4e:88:3e:db:a2:11:17:8d:08:00:66:1d:2c:48:67:2c:1a: 7d:10:25:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJ0R3htcqGthJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk YjZhODc5YmItZTFiYy00NmU2LTg5MzItN2U3MDdiOGYyZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogiUpSRCh0lnloa/jk4d87BsinF2OIscn0aC QuQhW+g28MrxdFaTIBbfA2ng6YwgPx2tiBBPYFUw1Ri8hjgJOs7HrXpB3IwXXykG z1yZ2MZLvXTMZt72f7i6Fva2yRq8KcrpWHCAPhaCTd/bIOSjzbUHusO9ipwBTMN5 9eB362EL5QT9Qy2wmWfcUJk0NFSeGLHGfIf6WiveQvRCq6per3WGTpmLvcJZq9C7 5DwJAGW5SOj2f/tQM2fJZ+hK5xWZmELBhB0ZtGWQ02Ze1A/oXO00tGDAJPFORiZ8 lITwhH8ycaQpVCWfinxq5Cjc6xmM1Q6y+2w/Laek8LLrwyJS/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL9z8jnnBXT9YWIza2+wTFv11/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNTUwYTE1MWUtYzE4ZC0z NWNlLTkwYTQtNWM4YzAzMzdhYmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2PbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA15Ff6XDqrSC5b+jK0exYTXPeViUs3HXc93I3nT+Kn7poHE0NNQDDiN nLp2Qm85O9iRdWq4c6vj8uZJRgtFvSeHdqwkQ8Jp1bNHqty4Z2ffMBcOcr2kAmZY ijreiYGVU8uBTyG5abT1UGu+e9EYKYksttdMtwFt+55S9PFsyfOyV3kkwISq2cNL a5VAXlgGWYd72h9toWKeT2EwiFUQFGZUYr5Yc6bGYjrXSy6i4PRrjWNSNAxxKEi/ 0IP6hwI8+lPZcrx+cczWhao6IChxpCMoogma2jjcy3h1pFUeNEwF5px5NmJstje1 LlFOiD7bohEXjQgAZh0sSGcsGn0QJec= -----END CERTIFICATE-----Generated at Sun Aug 10 15:58:44 2025 by rpki-client