$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/a2ea8bcf-9080-3b74-aff5-0699de823188.roa File: a2ea8bcf-9080-3b74-aff5-0699de823188.roa (raw, json) Hash identifier: mM4/e6D2DVycLoMF0CkslO3rXpknTqB8o1oap0+JCJ8= Subject key identifier: 92:82:00:C2:70:A7:0B:8C:70:60:0B:DD:03:53:12:28:F5:1E:32:AE Certificate issuer: /CN=44a561a3-0ac9-4535-922f-85de35ad8de7 Certificate serial: 010D0C9F4328584B0B76BBBE2EB8FDDFD63F0D80 Authority key identifier: 2C:40:05:53:53:46:71:E6:5F:7D:B7:0F:1B:6F:F5:D6:91:58:19:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/a2ea8bcf-9080-3b74-aff5-0699de823188.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 8075 IP address blocks: 216.238.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:bb:be:2e:b8:fd:df:d6:3f:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a561a3-0ac9-4535-922f-85de35ad8de7 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=eeb8e9ed-0c00-4f43-a2ee-adabb7c25496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:e7:43:4f:08:07:03:aa:2f:ff:11:61:83: 31:e1:bf:21:f0:6e:b9:90:54:98:ff:e4:d4:c6:85: f1:ca:72:c3:74:7a:5e:70:cc:89:03:b9:bb:4b:71: e8:87:24:5d:2d:b4:ca:cd:a9:8c:51:36:ae:2f:df: ce:a1:5a:c2:c0:a9:be:24:e4:fb:3d:86:ef:bf:2f: ae:41:3f:26:8c:4e:27:e2:40:84:f6:99:8e:e2:87: e9:32:29:b4:2f:1f:8e:e8:ff:31:d6:48:4a:4a:cf: 71:fb:46:66:35:0f:ef:57:e5:66:6e:2c:ae:35:4f: 4a:46:02:6f:9a:cb:3d:01:1c:6b:6b:35:7b:d2:4f: 3c:75:3f:2c:f7:a6:4e:bd:b3:03:63:49:bf:00:d6: 32:c0:34:a1:d7:8a:d2:91:bb:84:e0:19:57:9e:70: 3d:f8:35:b1:ff:b3:df:0c:fa:cc:b3:60:f3:e2:5c: e4:8d:1c:a6:f2:63:e7:f3:bf:c0:4c:32:56:70:9e: 00:38:f5:50:28:5c:2f:c6:e9:36:c1:e0:c1:17:d9: 6d:e3:af:93:87:43:b1:51:d3:fd:c8:11:44:e3:06: af:49:07:f2:e7:cd:67:5f:16:00:c8:8f:7a:61:a6: 14:be:db:9f:62:86:25:4d:64:18:11:b9:ae:35:c0: 30:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:82:00:C2:70:A7:0B:8C:70:60:0B:DD:03:53:12:28:F5:1E:32:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/a2ea8bcf-9080-3b74-aff5-0699de823188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.crl X509v3 Authority Key Identifier: keyid:2C:40:05:53:53:46:71:E6:5F:7D:B7:0F:1B:6F:F5:D6:91:58:19:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer sbgp-ipAddrBlock: critical IPv4: 216.238.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:07:6d:8e:23:fc:b7:d0:1f:24:dc:d6:0f:f2:42:21:ae:49: 6d:f8:b3:95:95:14:3a:3b:4b:5a:9a:c8:f7:1d:d8:f1:26:19: ed:15:aa:40:7c:a4:8a:56:9b:b2:ee:88:93:bc:58:b5:87:e2: 9f:ff:d7:7c:ab:81:9b:9f:88:f0:45:ac:86:09:29:c2:e3:bd: 59:06:c5:89:79:99:57:20:93:98:19:47:41:69:86:e2:f1:1d: 49:54:c9:c1:26:c9:f5:05:f0:e4:a7:80:01:3f:53:eb:db:2e: 58:ed:02:55:6b:4f:74:e3:a4:1a:a7:c5:0a:ef:2d:fb:e9:57: 9a:1b:82:ca:a3:cc:e6:67:c4:f5:ec:3a:6d:cb:05:4c:49:1b: 16:d3:83:be:8d:f3:1c:3c:48:4e:07:75:b1:dd:98:a8:ed:0d: 42:3d:8d:45:f0:eb:f2:f1:de:dd:62:24:15:ab:12:5f:b4:ed: 56:33:02:7d:b7:a8:26:d7:41:ac:d6:a1:55:9f:dc:58:4e:55: 3a:c6:d3:3e:3a:17:5a:91:25:b0:b9:24:1d:2e:3c:b2:b6:4a: d0:d9:78:f1:61:b6:34:11:65:61:30:9d:b2:b0:6a:55:b2:9e: 84:94:cd:b7:f4:00:5f:51:8e:bb:85:e8:81:5b:1f:46:d9:26: 46:70:9d:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdru+Lrj939Y/DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRhNTYxYTMtMGFjOS00NTM1LTkyMmYtODVkZTM1YWQ4 ZGU3MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZWViOGU5ZWQtMGMwMC00ZjQzLWEyZWUtYWRhYmI3YzI1NDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC/nQ08IBwOqL/8RYYMx4b8h8G65kFSY/+TU xoXxynLDdHpecMyJA7m7S3HohyRdLbTKzamMUTauL9/OoVrCwKm+JOT7PYbvvy+u QT8mjE4n4kCE9pmO4ofpMim0Lx+O6P8x1khKSs9x+0ZmNQ/vV+VmbiyuNU9KRgJv mss9ARxrazV70k88dT8s96ZOvbMDY0m/ANYywDSh14rSkbuE4BlXnnA9+DWx/7Pf DPrMs2Dz4lzkjRym8mPn87/ATDJWcJ4AOPVQKFwvxuk2weDBF9lt46+Th0OxUdP9 yBFE4wavSQfy581nXxYAyI96YaYUvtufYoYlTWQYEbmuNcAwaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKCAMJwpwuMcGAL3QNTEij1HjKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NGE1 NjFhMy0wYWM5LTQ1MzUtOTIyZi04NWRlMzVhZDhkZTcvYTJlYThiY2YtOTA4MC0z Yjc0LWFmZjUtMDY5OWRlODIzMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDRhNTYxYTMtMGFjOS00NTM1LTky MmYtODVkZTM1YWQ4ZGU3LzQ0YTU2MWEzLTBhYzktNDUzNS05MjJmLTg1ZGUzNWFk OGRlNy5jcmwwHwYDVR0jBBgwFoAULEAFU1NGceZffbcPG2/11pFYGS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NGE1NjFhMy0wYWM5LTQ1MzUtOTIyZi04NWRl MzVhZDhkZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O6NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8HbY4j/LfQHyTc1g/yQiGuSW34s5WVFDo7S1qayPcd2PEmGe0VqkB8 pIpWm7LuiJO8WLWH4p//13yrgZufiPBFrIYJKcLjvVkGxYl5mVcgk5gZR0FphuLx HUlUycEmyfUF8OSngAE/U+vbLljtAlVrT3TjpBqnxQrvLfvpV5obgsqjzOZnxPXs Om3LBUxJGxbTg76N8xw8SE4HdbHdmKjtDUI9jUXw6/Lx3t1iJBWrEl+07VYzAn23 qCbXQazWoVWf3FhOVTrG0z46F1qRJbC5JB0uPLK2StDZePFhtjQRZWEwnbKwalWy noSUzbf0AF9RjruF6IFbH0bZJkZwnQM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:41:02 2025 by rpki-client