$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0289596d-80f8-35c4-b20d-9d576f2262cf.roa File: 0289596d-80f8-35c4-b20d-9d576f2262cf.roa (raw, json) Hash identifier: iQYXwbGbZ3llWbSbpr1DQajOns4U2fllMskGZkUvj5I= Subject key identifier: FE:40:B4:60:74:8C:B9:05:81:8C:C2:DB:61:33:2A:90:17:F3:14:76 Certificate issuer: /CN=0d51e326-4804-4f59-a629-20153f71b7fe Certificate serial: 010D0C9F4328584AB220BF5CDA6E14C311B12EE0 Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0289596d-80f8-35c4-b20d-9d576f2262cf.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 14618 IP address blocks: 216.230.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:bf:5c:da:6e:14:c3:11:b1:2e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=59f1f2d9-319d-45c4-b0ce-627d2110d5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:20:b5:6a:d4:cd:0c:6d:a6:1f:de:0c:d1:4e: aa:2b:33:19:65:71:14:6b:13:59:1b:d3:0e:1e:e0: 5f:22:6e:b4:f4:d3:2f:28:a9:b1:c8:44:7b:41:da: 2a:48:76:40:3c:47:3e:fd:57:1f:91:33:4d:08:62: d8:63:4c:80:39:97:46:ae:83:75:7a:24:03:a7:54: e6:5f:8d:24:cc:92:48:37:68:57:c5:5a:19:98:9c: f8:bb:e2:57:77:16:c2:26:b7:fc:9a:a9:a6:45:c8: a6:e9:f5:e5:4e:4f:4f:d4:83:16:20:2a:5f:23:38: 2b:48:a7:a8:25:c8:bd:71:8d:e5:c6:cd:ca:1c:ce: 3e:ae:d5:ed:d3:2b:94:47:28:ca:44:4a:7e:e3:b1: 71:08:a1:5f:62:a3:7f:99:1f:22:e4:6c:57:b5:60: d7:1d:8a:e8:43:d3:a6:20:ba:6c:01:23:8a:5f:34: ba:19:8f:d3:80:57:49:03:93:f9:33:2d:3b:f2:82: d4:ac:8d:8c:34:99:c1:d9:65:02:1b:c5:26:7f:c2: e4:9c:6f:0f:93:d5:ee:d7:72:6d:92:ca:32:3d:e1: 25:86:8c:4a:57:7d:3c:11:0c:1e:5c:22:ec:9e:d1: 9f:be:22:12:cd:e5:f6:fb:4c:29:ab:a0:c5:89:99: ac:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:40:B4:60:74:8C:B9:05:81:8C:C2:DB:61:33:2A:90:17:F3:14:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0289596d-80f8-35c4-b20d-9d576f2262cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl X509v3 Authority Key Identifier: keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer sbgp-ipAddrBlock: critical IPv4: 216.230.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:1b:40:c8:3d:d4:0f:53:1c:3c:3e:4c:6d:73:35:39:99:dc: 63:79:b0:8c:f4:d7:df:56:7e:c1:94:a3:47:a5:6a:bf:5b:44: 28:65:6e:e7:5a:e6:43:13:3b:bc:d7:20:b4:da:3e:1a:28:76: d4:78:30:99:ae:cd:b2:74:d9:d4:7e:a3:e1:1b:f6:77:be:32: 87:be:92:83:08:08:4d:37:da:15:77:58:04:28:00:04:13:81: 33:34:a7:0e:88:b2:62:cc:a7:c8:b9:0f:1d:42:ed:6c:30:96: 25:63:92:90:30:1c:f8:98:3a:d4:01:32:9b:d5:a9:a2:2d:45: 44:a2:80:a1:a1:97:5a:d9:4d:d2:8a:93:2d:9f:72:2b:62:58: b7:52:ac:7b:d2:e3:77:f0:c0:e1:c7:58:ae:f7:db:75:f6:c6: b1:bf:79:2b:9f:25:08:b0:68:e8:f1:5c:9c:75:17:89:85:d1: 82:39:fb:77:5f:2e:07:fa:18:63:99:82:b1:1a:f8:7c:aa:90: 5f:03:ef:a6:ef:fa:7d:c8:34:1a:6d:40:31:3f:3d:2b:84:e6: ee:90:c0:c5:57:ea:49:be:2e:f5:f2:3c:f8:6b:8a:73:0c:f3: d0:db:8a:48:a6:bc:3c:cd:a5:cf:4e:48:f3:68:7f:2a:2c:d0: 17:90:c1:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIL9c2m4UwxGxLuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi N2ZlMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTlmMWYyZDktMzE5ZC00NWM0LWIwY2UtNjI3ZDIxMTBkNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiC1atTNDG2mH94M0U6qKzMZZXEUaxNZG9MO HuBfIm609NMvKKmxyER7QdoqSHZAPEc+/VcfkTNNCGLYY0yAOZdGroN1eiQDp1Tm X40kzJJIN2hXxVoZmJz4u+JXdxbCJrf8mqmmRcim6fXlTk9P1IMWICpfIzgrSKeo Jci9cY3lxs3KHM4+rtXt0yuURyjKREp+47FxCKFfYqN/mR8i5GxXtWDXHYroQ9Om ILpsASOKXzS6GY/TgFdJA5P5My078oLUrI2MNJnB2WUCG8Umf8LknG8Pk9Xu13Jt ksoyPeElhoxKV308EQweXCLsntGfviISzeX2+0wpq6DFiZmsjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5AtGB0jLkFgYzC22EzKpAX8xR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvMDI4OTU5NmQtODBmOC0z NWM0LWIyMGQtOWQ1NzZmMjI2MmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2 MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1 M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8bQMg91A9THDw+TG1zNTmZ3GN5sIz0199WfsGUo0elar9bRChlbuda 5kMTO7zXILTaPhoodtR4MJmuzbJ02dR+o+Eb9ne+Moe+koMICE032hV3WAQoAAQT gTM0pw6IsmLMp8i5Dx1C7WwwliVjkpAwHPiYOtQBMpvVqaItRUSigKGhl1rZTdKK ky2fcitiWLdSrHvS43fwwOHHWK7323X2xrG/eSufJQiwaOjxXJx1F4mF0YI5+3df Lgf6GGOZgrEa+HyqkF8D76bv+n3INBptQDE/PSuE5u6QwMVX6km+LvXyPPhrinMM 89DbikimvDzNpc9OSPNofyos0BeQwSI= -----END CERTIFICATE-----Generated at Wed Aug 6 11:05:16 2025 by rpki-client