$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa File: d032a8d4-77d0-39c1-86bb-5584ef9af130.roa (raw, json) Hash identifier: EdVqwL54lySK8Bt5CTfMujEBb44/bdbMTqa9Pzv3fSk= Subject key identifier: C5:D4:59:D1:3E:41:66:77:3D:57:63:15:B8:53:01:E5:6D:0B:40:73 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584AF5215373BB5649D11570AE40 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 212238 IP address blocks: 216.107.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:53:73:bb:56:49:d1:15:70:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=5140fbb8-628b-4454-a7f1-8a528048e3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c8:f6:40:5f:92:64:b7:2f:58:18:d9:7e:83: a7:9c:5c:31:1a:50:b0:d6:59:4d:2a:82:10:1f:b0: 74:5d:5e:77:17:82:6d:88:28:ba:17:97:94:ed:48: ed:2e:ff:e3:2b:8c:7b:44:e6:32:c5:d4:83:86:2f: a7:a7:d0:f7:d3:00:2a:63:f4:d4:57:3e:94:5a:f3: 31:cd:12:d5:84:3d:b1:0f:39:fb:cd:17:e4:1a:4a: f5:32:72:80:30:e1:6d:ca:d4:f4:a1:d2:03:9a:42: f2:d6:14:41:e0:35:35:20:2a:6c:07:c5:ac:94:e3: 71:36:1b:aa:00:cc:fc:2f:10:c5:68:70:8d:53:12: 55:89:26:5b:64:5d:1b:34:59:e5:94:e8:df:77:d8: 65:10:5f:68:b3:c4:2c:7d:30:39:ca:f0:cf:13:f0: 51:8b:83:76:95:12:7a:1c:bb:e1:f6:01:c8:22:0b: 9e:d7:c4:a3:ff:e0:77:d6:4a:6d:af:31:92:13:7e: 5f:e7:92:ac:b0:e9:02:6f:3a:ae:3f:88:70:67:d9: 6a:37:c5:29:86:9d:c1:bd:7f:a6:70:2a:e1:c9:09: 02:3a:27:87:86:0a:43:49:d7:75:ae:40:fb:a7:2f: 98:5e:98:b5:fa:2e:7e:6e:6b:7b:d9:48:bc:a2:4a: 44:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D4:59:D1:3E:41:66:77:3D:57:63:15:B8:53:01:E5:6D:0B:40:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 216.107.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:38:6e:ca:c5:46:12:11:be:9c:1f:1c:ba:0d:44:d8:4a:18: f4:b9:e2:63:b9:71:f7:e9:d4:de:4b:d8:bb:b5:da:0e:d1:c6: 04:ab:c1:fa:6a:b0:3e:98:d5:26:25:9b:a2:f5:ba:5e:09:a1: 2f:38:ca:e8:42:f2:69:ad:d3:54:c0:19:ae:18:08:64:73:69: e6:3d:b7:9c:b6:c4:c1:17:2e:a3:cc:d5:9c:2a:e9:c3:79:eb: a8:cd:44:6b:86:66:5f:58:c1:74:c6:d8:83:7c:0a:15:56:5e: 80:6c:70:8b:64:ad:97:60:7b:6a:ce:0d:56:9f:3e:44:86:f5: 6d:bd:e8:0d:ad:e8:cc:0f:6e:30:a9:78:29:cb:8f:c2:19:ac: 38:01:d7:fb:31:04:d7:a8:3c:ba:3f:bf:88:b0:68:b8:ea:1f: e1:10:a7:cd:10:49:50:d8:a9:04:e0:d4:d1:54:0b:a1:5e:cf: 6e:3f:37:19:30:16:e1:65:3c:98:45:d9:c0:f0:71:30:7a:11: db:2e:03:78:18:a1:75:81:39:54:be:83:2d:a4:04:2a:a4:d7: 0f:72:78:b2:1d:bc:9e:aa:46:7e:82:43:12:a5:02:0c:55:7d: 68:26:79:29:f6:25:8b:65:0b:6f:5b:2b:a2:df:c0:b8:81:09: 2e:85:55:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVNzu1ZJ0RVwrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTE0MGZiYjgtNjI4Yi00NDU0LWE3ZjEtOGE1MjgwNDhlM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sj2QF+SZLcvWBjZfoOnnFwxGlCw1llNKoIQ H7B0XV53F4JtiCi6F5eU7UjtLv/jK4x7ROYyxdSDhi+np9D30wAqY/TUVz6UWvMx zRLVhD2xDzn7zRfkGkr1MnKAMOFtytT0odIDmkLy1hRB4DU1ICpsB8WslONxNhuq AMz8LxDFaHCNUxJViSZbZF0bNFnllOjfd9hlEF9os8QsfTA5yvDPE/BRi4N2lRJ6 HLvh9gHIIgue18Sj/+B31kptrzGSE35f55KssOkCbzquP4hwZ9lqN8Uphp3BvX+m cCrhyQkCOieHhgpDSdd1rkD7py+YXpi1+i5+bmt72Ui8okpE7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXUWdE+QWZ3PVdjFbhTAeVtC0BzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZDAzMmE4ZDQtNzdkMC0z OWMxLTg2YmItNTU4NGVmOWFmMTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GuKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE4bsrFRhIRvpwfHLoNRNhKGPS54mO5cffp1N5L2Lu12g7RxgSrwfpq sD6Y1SYlm6L1ul4JoS84yuhC8mmt01TAGa4YCGRzaeY9t5y2xMEXLqPM1Zwq6cN5 66jNRGuGZl9YwXTG2IN8ChVWXoBscItkrZdge2rODVafPkSG9W296A2t6MwPbjCp eCnLj8IZrDgB1/sxBNeoPLo/v4iwaLjqH+EQp80QSVDYqQTg1NFUC6Fez24/Nxkw FuFlPJhF2cDwcTB6EdsuA3gYoXWBOVS+gy2kBCqk1w9yeLIdvJ6qRn6CQxKlAgxV fWgmeSn2JYtlC29bK6LfwLiBCS6FVYM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:23 2025 by rpki-client