$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa File: 01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa (raw, json) Hash identifier: Mz0kq+kvbWY+LkbqxNHvpblYkyIt8QqGMDJ2LEAe0/Q= Subject key identifier: 2F:BA:C5:39:95:91:29:CA:F7:85:8C:F4:54:5B:73:B6:94:EB:66:53 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584AE9F668E7AE3E173051007200 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 22066 IP address blocks: 205.213.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:68:e7:ae:3e:17:30:51:00:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=1c279529-ab92-498e-8e96-eef22e851ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3e:ac:57:a0:d1:c2:d6:c6:ab:5a:73:5b:a2: 93:f2:24:32:a4:d6:c8:31:6e:29:f3:94:a0:43:22: 4c:e7:f9:a6:6b:a3:28:a5:ef:0f:33:81:6a:ea:fe: 8e:11:2f:e5:a7:71:4d:9b:22:45:9a:81:69:7b:8e: f5:b0:e5:27:a8:ae:25:6d:01:c8:44:34:ae:53:65: 3e:49:d2:64:60:c7:46:ab:3d:c0:8d:d3:aa:a3:0f: 9e:62:0c:c6:e0:16:1a:88:0d:ed:5a:fa:ec:8c:73: 2c:47:9e:3d:9b:23:3f:42:45:7c:2a:d9:02:0f:75: a5:ae:98:94:2c:01:31:4d:88:22:a7:6e:e6:74:5f: d3:8b:c7:82:96:a5:ee:8e:f2:db:20:a7:aa:09:73: 0e:06:f9:9d:f2:63:58:e2:55:ab:9f:90:ad:e0:c9: 4d:e2:5d:f2:ef:aa:6c:ab:b8:3f:c5:5f:3a:e9:c7: 26:8c:74:ba:a2:c9:a4:20:52:51:ff:21:fe:c2:d1: 3d:4f:58:92:02:f7:bc:59:3b:52:81:62:fe:0e:76: 9c:6f:83:b1:1f:ce:e9:58:b9:7f:76:d3:74:80:27: c0:46:74:86:cc:17:30:bb:42:85:89:81:a9:2f:c2: 25:52:cf:2d:f8:0c:4f:7a:46:6a:80:92:f2:28:0d: e8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BA:C5:39:95:91:29:CA:F7:85:8C:F4:54:5B:73:B6:94:EB:66:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 205.213.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:74:0c:37:c7:95:d2:95:0b:98:91:c7:c9:31:56:e6:3f:e6: c3:4b:f2:7c:71:a6:67:1d:9f:01:f0:05:b9:b5:71:ae:27:c4: 88:d8:4e:2d:ca:1a:96:0e:db:ad:8e:f1:a7:62:9f:b6:7b:a0: 43:52:2d:99:9c:b2:10:56:05:7a:7b:30:e7:c3:61:f6:36:58: 52:09:06:b8:2e:69:8f:de:74:9e:88:9e:67:1c:5d:4a:f5:d8: 61:f2:b7:76:b1:f6:87:5f:03:6e:7e:3a:67:77:53:e9:9a:ab: ec:f7:ce:16:94:51:ab:49:b5:73:2c:9e:0d:83:97:bc:9b:5f: 93:7f:65:b5:a5:2d:d3:ca:1a:17:fa:3c:54:b0:a7:33:c2:f1: 85:cc:aa:94:ab:d6:fe:7f:f7:44:36:9b:38:ac:75:5a:e8:07: ab:60:62:f1:98:04:0b:61:2f:56:df:39:01:87:76:91:fc:b0: ef:aa:60:d6:c8:68:bc:37:dd:17:2e:c2:fa:5a:1c:ff:04:80: 49:ef:f1:56:9c:70:d5:b7:e8:34:19:d3:ea:06:23:ed:64:50: 7f:cd:38:32:56:63:21:07:e1:c4:cb:f0:85:8a:1d:f3:c5:ca: 73:b3:6a:ad:b6:2d:bb:5e:d3:e4:b9:39:f2:2b:73:d9:36:1b: c4:71:23:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9mjnrj4XMFEAcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk MWMyNzk1MjktYWI5Mi00OThlLThlOTYtZWVmMjJlODUxYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT6sV6DRwtbGq1pzW6KT8iQypNbIMW4p85Sg QyJM5/mma6Mope8PM4Fq6v6OES/lp3FNmyJFmoFpe471sOUnqK4lbQHIRDSuU2U+ SdJkYMdGqz3AjdOqow+eYgzG4BYaiA3tWvrsjHMsR549myM/QkV8KtkCD3WlrpiU LAExTYgip27mdF/Ti8eClqXujvLbIKeqCXMOBvmd8mNY4lWrn5Ct4MlN4l3y76ps q7g/xV866ccmjHS6osmkIFJR/yH+wtE9T1iSAve8WTtSgWL+Dnacb4OxH87pWLl/ dtN0gCfARnSGzBcwu0KFiYGpL8IlUs8t+AxPekZqgJLyKA3oAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+6xTmVkSnK94WM9FRbc7aU62ZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvMDFkODdiOTMtZjhhMC0z ZGU4LWI1YzYtNmZlYmFlNWMyYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdWmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR0DDfHldKVC5iRx8kxVuY/5sNL8nxxpmcdnwHwBbm1ca4nxIjYTi3K GpYO262O8adin7Z7oENSLZmcshBWBXp7MOfDYfY2WFIJBrguaY/edJ6InmccXUr1 2GHyt3ax9odfA25+Omd3U+maq+z3zhaUUatJtXMsng2Dl7ybX5N/ZbWlLdPKGhf6 PFSwpzPC8YXMqpSr1v5/90Q2mzisdVroB6tgYvGYBAthL1bfOQGHdpH8sO+qYNbI aLw33RcuwvpaHP8EgEnv8VaccNW36DQZ0+oGI+1kUH/NODJWYyEH4cTL8IWKHfPF ynOzaq22Lbte0+S5OfIrc9k2G8RxI64= -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:45 2025 by rpki-client