$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa File: ef167bf0-e97f-3b1d-8343-53f8aceab489.roa (raw, json) Hash identifier: v124TRvW5avQC/aIUuHeZwhrCfER9xQ/qZAfjQjJovE= Subject key identifier: AC:03:9B:5A:96:54:25:C3:AD:3E:4C:AD:8A:EE:84:E5:0D:46:79:80 Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F4328584BBE402AF34663299517E69580 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 174 IP address blocks: 216.21.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:2a:f3:46:63:29:95:17:e6:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=9b8beb92-9e22-4e10-9d2e-cdcd25a61825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:e8:3f:28:1d:41:17:9c:ca:f6:49:21:ea: 02:33:fd:b6:02:a5:a3:53:db:bd:6d:a6:e3:2d:a8: 87:d1:d8:a8:4f:a5:79:08:b7:5c:37:48:9a:0b:62: 0d:c0:a0:95:ea:46:26:2a:d0:ca:04:66:51:31:0e: ca:25:56:d0:02:74:64:7c:c6:39:cf:19:3b:60:be: c5:a1:af:8a:12:44:3f:9a:f9:9e:09:d5:68:79:3f: 65:8f:63:87:6e:52:e1:4d:f8:ae:69:f9:48:9e:9f: 51:cc:0b:25:1e:38:14:8f:e3:4f:0b:87:5b:64:b5: d4:b9:92:c4:a3:57:b3:02:af:17:84:01:bc:ec:71: 2b:e4:86:7f:67:20:08:8c:5b:17:7f:89:b7:31:06: 7f:f3:f8:67:38:2d:25:b7:87:ef:17:2e:a9:d6:7e: c8:b8:07:24:9b:65:ea:eb:d8:cd:28:dc:0c:da:ce: 2f:de:22:ce:a9:87:94:f7:e7:9f:56:85:b1:4d:92: 14:e2:f7:37:36:70:47:dd:fd:2c:3e:0a:0d:32:bd: 2b:ab:a9:af:04:1e:f5:03:db:5b:30:32:a3:f0:08: c1:fe:09:48:33:67:1a:9b:43:cd:46:72:61:e5:b4: 29:af:d7:9a:ab:98:f3:64:16:99:e9:e3:c7:d4:30: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:03:9B:5A:96:54:25:C3:AD:3E:4C:AD:8A:EE:84:E5:0D:46:79:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv4: 216.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e6:b3:83:5a:08:03:43:0c:74:bd:a0:7e:c4:9c:fb:c5:e7: bb:04:3c:e0:18:0c:c1:c0:39:86:58:dd:24:1d:0d:73:f6:e3: 54:cb:67:2a:e9:f9:aa:c3:9a:d6:ff:56:31:5d:7b:a3:d3:7c: 9f:9d:fb:05:b1:d7:22:e0:57:a1:f6:16:65:f9:bd:8c:82:d4: c2:8c:b6:69:3f:69:0a:13:85:01:dd:be:19:84:4e:fb:66:c0: c1:2a:7d:40:45:84:bd:33:66:cc:77:25:6a:a1:75:14:62:be: 49:cd:9a:de:0d:e1:fd:4f:34:1e:93:78:98:d7:ee:42:0d:98: d7:7a:c8:4c:2e:e8:6b:e8:91:7c:83:e4:e4:6d:d6:81:f2:08: 9c:0d:8c:33:f9:77:11:cd:37:c9:12:86:54:96:10:0e:eb:a2: 1e:6c:23:8d:fc:67:3f:5f:c0:40:23:ad:c5:04:1d:5d:f5:fd: 5c:83:bd:81:a1:e8:e3:7a:f5:7c:04:98:87:a3:4b:05:7b:83: 47:a5:1f:e4:b9:b0:52:49:c0:d4:38:54:1a:45:50:58:95:91: 1b:87:bf:61:c6:4e:dd:98:b2:5e:75:46:d3:5f:90:88:ff:75: 52:91:9d:e1:23:cc:4d:67:8d:68:cb:8c:94:b8:74:6d:00:4f: 92:cb:73:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QCrzRmMplRfmlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OWI4YmViOTItOWUyMi00ZTEwLTlkMmUtY2RjZDI1YTYxODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbvoPygdQRecyvZJIeoCM/22AqWjU9u9babj LaiH0dioT6V5CLdcN0iaC2INwKCV6kYmKtDKBGZRMQ7KJVbQAnRkfMY5zxk7YL7F oa+KEkQ/mvmeCdVoeT9lj2OHblLhTfiuaflInp9RzAslHjgUj+NPC4dbZLXUuZLE o1ezAq8XhAG87HEr5IZ/ZyAIjFsXf4m3MQZ/8/hnOC0lt4fvFy6p1n7IuAckm2Xq 69jNKNwM2s4v3iLOqYeU9+efVoWxTZIU4vc3NnBH3f0sPgoNMr0rq6mvBB71A9tb MDKj8AjB/glIM2cam0PNRnJh5bQpr9eaq5jzZBaZ6ePH1DBrLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwDm1qWVCXDrT5MrYruhOUNRnmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvZWYxNjdiZjAtZTk3Zi0z YjFkLTgzNDMtNTNmOGFjZWFiNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2BXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDms4NaCANDDHS9oH7EnPvF57sEPOAYDMHAOYZY3SQdDXP241TLZyrp +arDmtb/VjFde6PTfJ+d+wWx1yLgV6H2FmX5vYyC1MKMtmk/aQoThQHdvhmETvtm wMEqfUBFhL0zZsx3JWqhdRRivknNmt4N4f1PNB6TeJjX7kINmNd6yEwu6GvokXyD 5ORt1oHyCJwNjDP5dxHNN8kShlSWEA7roh5sI438Zz9fwEAjrcUEHV31/VyDvYGh 6ON69XwEmIejSwV7g0elH+S5sFJJwNQ4VBpFUFiVkRuHv2HGTt2Ysl51RtNfkIj/ dVKRneEjzE1njWjLjJS4dG0AT5LLc70= -----END CERTIFICATE-----Generated at Wed Nov 5 09:03:51 2025 by rpki-client