$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/ae2ccd3d-4cbb-3a4b-b820-30cd334d1e64.roa File: ae2ccd3d-4cbb-3a4b-b820-30cd334d1e64.roa (raw, json) Hash identifier: xobbIVp300c91ie7ksFJiuLUcCRzQADTlCcFUgXVd8k= Subject key identifier: B8:C4:6B:26:8B:C9:B3:07:73:E6:2F:11:CF:E3:B4:03:6B:A3:99:17 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584A14657DA6F517E04E12369800 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/ae2ccd3d-4cbb-3a4b-b820-30cd334d1e64.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 399575 IP address blocks: 216.205.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7d:a6:f5:17:e0:4e:12:36:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=1a964559-7a79-4e97-9b57-5ab0c4124c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:5a:f7:96:02:0c:54:25:39:4d:29:86:d5: f2:d9:5f:23:09:f5:12:ac:c2:e6:aa:fe:ab:90:14: 98:86:4f:f4:cc:6e:04:e5:46:51:47:78:8d:5b:73: 90:1e:14:9e:ee:33:81:d2:da:bb:0c:b4:ed:b5:6a: da:bd:fd:96:ac:f7:b9:58:7e:d6:b7:70:d2:60:c2: 63:15:4d:08:31:3e:61:39:1d:76:61:a9:a2:b5:0c: 79:88:03:14:c8:e6:98:0d:42:e2:10:ca:de:d1:31: 6f:fe:39:02:5e:33:31:a8:a9:0c:25:29:d2:64:eb: 78:27:d5:b9:16:98:3b:c1:78:24:d2:50:a9:39:a4: 0c:b3:ed:00:6a:11:82:72:9f:53:9c:14:ce:9f:e6: 13:4d:1f:d9:ff:6a:6e:06:62:d4:f7:6d:66:3e:3c: 82:19:96:cb:95:4a:59:cd:56:a2:08:de:d6:58:75: 5e:17:4d:6a:c5:0a:57:11:42:7c:eb:9f:10:b5:33: 74:4a:6a:37:62:a6:78:a1:36:5c:30:ac:14:95:69: 8f:a9:de:39:b8:6a:de:a2:3f:a1:05:56:80:03:ec: 05:74:fe:f8:4b:35:00:c2:f6:fe:27:e1:7e:a6:b4: 45:9a:d1:b7:c2:a1:ed:e9:52:c5:5f:b1:0f:a2:29: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C4:6B:26:8B:C9:B3:07:73:E6:2F:11:CF:E3:B4:03:6B:A3:99:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/ae2ccd3d-4cbb-3a4b-b820-30cd334d1e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 216.205.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:23:58:f1:ca:7b:fe:89:d7:ee:41:8b:35:54:d7:a2:72:d1: 90:9f:00:14:65:87:07:c2:f6:b3:90:58:e6:03:d1:67:33:80: 5d:02:31:4d:31:25:97:1f:c7:bd:30:ec:e4:ea:4a:4f:40:de: 10:3d:be:1a:05:03:d6:3c:82:14:9a:a8:1c:d8:f4:81:34:3f: 4c:37:d1:03:9b:d9:d2:18:e5:89:6f:c3:5c:49:7f:e9:22:78: c5:82:d9:6f:a6:e8:e5:25:53:91:50:7a:09:49:1c:f9:11:5c: 8d:3f:99:5f:28:52:39:69:06:3c:21:ed:0c:7c:29:26:02:60: ca:41:09:16:b0:17:f1:44:a1:d0:32:a7:e9:d4:57:17:db:9c: b7:8f:cf:b6:e4:b1:20:ba:66:f2:8c:03:aa:7d:54:9c:52:ed: 31:4c:cd:b2:df:ef:d4:0b:56:65:7a:1d:40:2d:81:c8:1b:46: b7:ff:42:85:f5:6e:66:7b:50:4c:0a:5a:f7:4f:09:09:85:11: 15:5d:be:03:e0:83:12:28:fa:ab:7b:95:e9:a7:2a:cd:cf:3b: 6d:9d:c6:79:1f:08:89:b5:96:56:89:03:1a:06:e6:b0:27:15: 94:0e:65:6a:b7:a3:ed:cd:6a:ec:dc:fa:59:2d:d3:55:74:ea: bb:d7:ac:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZX2m9RfgThI2mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MWE5NjQ1NTktN2E3OS00ZTk3LTliNTctNWFiMGM0MTI0YzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpJa95YCDFQlOU0phtXy2V8jCfUSrMLmqv6r kBSYhk/0zG4E5UZRR3iNW3OQHhSe7jOB0tq7DLTttWravf2WrPe5WH7Wt3DSYMJj FU0IMT5hOR12YamitQx5iAMUyOaYDULiEMre0TFv/jkCXjMxqKkMJSnSZOt4J9W5 Fpg7wXgk0lCpOaQMs+0AahGCcp9TnBTOn+YTTR/Z/2puBmLU921mPjyCGZbLlUpZ zVaiCN7WWHVeF01qxQpXEUJ8658QtTN0Smo3YqZ4oTZcMKwUlWmPqd45uGreoj+h BVaAA+wFdP74SzUAwvb+J+F+prRFmtG3wqHt6VLFX7EPoimfEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjEayaLybMHc+YvEc/jtANro5kXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvYWUyY2NkM2QtNGNiYi0z YTRiLWI4MjAtMzBjZDMzNGQxZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2M1kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8jWPHKe/6J1+5BizVU16Jy0ZCfABRlhwfC9rOQWOYD0WczgF0CMU0x JZcfx70w7OTqSk9A3hA9vhoFA9Y8ghSaqBzY9IE0P0w30QOb2dIY5Ylvw1xJf+ki eMWC2W+m6OUlU5FQeglJHPkRXI0/mV8oUjlpBjwh7Qx8KSYCYMpBCRawF/FEodAy p+nUVxfbnLePz7bksSC6ZvKMA6p9VJxS7TFMzbLf79QLVmV6HUAtgcgbRrf/QoX1 bmZ7UEwKWvdPCQmFERVdvgPggxIo+qt7lemnKs3PO22dxnkfCIm1llaJAxoG5rAn FZQOZWq3o+3Nauzc+lkt01V06rvXrKA= -----END CERTIFICATE-----Generated at Sun Jun 15 15:35:07 2025 by rpki-client