$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa File: 429e8e55-3eec-3082-835f-dc4a34d15810.roa (raw, json) Hash identifier: NCzLSbOjM/3WkVY0Vh5uMdVBSewKnVw6ufOWWptPqOw= Subject key identifier: 0B:42:2B:27:9F:79:60:9E:1E:48:40:14:5C:AE:C0:1C:E5:65:B5:3A Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584AB650DE95AE94A340FFEE8C80 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 54238 IP address blocks: 216.213.104.0/22 maxlen: 22 216.213.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:de:95:ae:94:a3:40:ff:ee:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=2db0e019-2404-4bc6-b7aa-f31a32e7bf86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:1f:62:36:a0:91:6c:7a:ec:e8:0e:64:54: 98:15:3d:70:42:44:bf:b7:0b:62:1b:2a:b8:c4:c5: 9f:18:01:52:dd:fd:d2:04:f7:ad:a3:48:94:d7:26: 2f:f5:00:e2:3a:22:69:b6:a8:8e:4e:5f:8c:b2:7a: ad:8e:90:94:5f:bd:48:f6:ed:01:29:43:2e:e1:8b: 7a:34:52:dc:13:91:e9:91:99:a0:be:db:28:ba:35: 13:f3:0b:ad:66:be:ab:a2:f8:8f:af:3f:aa:45:2c: 5a:7d:e1:29:57:d0:f3:fc:40:11:ae:a2:3c:b9:ec: 85:31:bb:40:e5:25:0f:82:ef:d7:07:d3:8b:4e:4e: 8f:05:e6:6a:94:11:e7:b7:5c:14:f8:07:c5:7a:a6: 05:c2:79:9d:9c:4d:97:fc:18:1b:4a:fe:71:7d:72: 63:96:89:67:06:b6:20:0b:1a:0f:e1:a3:17:95:99: 1e:be:49:66:9a:5b:b4:ad:4d:43:5e:13:47:fe:74: fa:6b:73:d0:0d:24:71:e7:db:f3:f1:66:e5:56:f8: d5:cd:e1:7e:e3:8d:ce:b1:17:bf:1e:41:67:70:f1: e9:82:0e:9d:70:70:e5:e2:21:ea:82:7b:af:15:70: e2:fe:05:db:36:8b:06:b0:25:53:95:28:fa:9e:59: 33:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:42:2B:27:9F:79:60:9E:1E:48:40:14:5C:AE:C0:1C:E5:65:B5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 216.213.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:68:5a:51:e1:7e:f2:83:7e:68:97:ff:75:14:33:3c:29:2f: 10:0c:02:4d:1a:c5:e5:b6:74:eb:2e:89:8b:26:87:9b:9f:7b: cb:0a:45:00:de:df:d7:96:91:50:7b:b9:9f:6b:1c:b4:e1:30: 2b:af:1e:81:0b:3a:50:eb:44:b9:3f:10:e4:5d:cf:3d:f0:e7: bb:76:f9:be:de:b5:65:65:b9:d0:8e:14:7f:9b:fb:2f:c8:17: 59:d3:34:27:05:82:86:4c:5f:4f:37:21:29:89:fb:cd:9c:da: bb:b8:12:e8:2f:f5:03:17:37:e9:d4:1f:01:7c:5c:cd:0a:e4: 85:40:fb:60:40:56:84:f2:58:7b:6b:95:0c:58:db:64:f3:91: 1a:aa:d3:66:ef:8e:38:e7:1a:3a:fe:b9:d3:10:eb:64:32:9a: 38:be:8a:f7:fc:ff:a9:e2:01:40:74:2d:ca:f4:f1:51:07:0c: a5:e7:b5:4d:21:a8:86:7e:b6:f7:26:9f:c3:f9:fc:0b:7d:06: d6:25:2c:33:f9:89:e7:c9:93:36:05:c8:e0:05:9e:ba:0c:2f: d1:4d:d3:68:37:a7:22:b5:7c:93:ff:52:0e:d7:e7:be:d3:85: e4:fd:de:25:ee:3f:d3:cc:e9:9e:65:91:63:77:af:87:0a:2a: d3:8c:70:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UN6VrpSjQP/ujIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MmRiMGUwMTktMjQwNC00YmM2LWI3YWEtZjMxYTMyZTdiZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8wfYjagkWx67OgOZFSYFT1wQkS/twtiGyq4 xMWfGAFS3f3SBPeto0iU1yYv9QDiOiJptqiOTl+MsnqtjpCUX71I9u0BKUMu4Yt6 NFLcE5HpkZmgvtsoujUT8wutZr6roviPrz+qRSxafeEpV9Dz/EARrqI8ueyFMbtA 5SUPgu/XB9OLTk6PBeZqlBHnt1wU+AfFeqYFwnmdnE2X/BgbSv5xfXJjlolnBrYg CxoP4aMXlZkevklmmlu0rU1DXhNH/nT6a3PQDSRx59vz8WblVvjVzeF+443OsRe/ HkFncPHpgg6dcHDl4iHqgnuvFXDi/gXbNosGsCVTlSj6nlkz5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtCKyefeWCeHkhAFFyuwBzlZbU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvNDI5ZThlNTUtM2VlYy0z MDgyLTgzNWYtZGM0YTM0ZDE1ODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2NVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdoWlHhfvKDfmiX/3UUMzwpLxAMAk0axeW2dOsuiYsmh5ufe8sKRQDe 39eWkVB7uZ9rHLThMCuvHoELOlDrRLk/EORdzz3w57t2+b7etWVludCOFH+b+y/I F1nTNCcFgoZMX083ISmJ+82c2ru4Eugv9QMXN+nUHwF8XM0K5IVA+2BAVoTyWHtr lQxY22TzkRqq02bvjjjnGjr+udMQ62Qymji+ivf8/6niAUB0Lcr08VEHDKXntU0h qIZ+tvcmn8P5/At9BtYlLDP5iefJkzYFyOAFnroML9FN02g3pyK1fJP/Ug7X577T heT93iXuP9PM6Z5lkWN3r4cKKtOMcBw= -----END CERTIFICATE-----Generated at Sat Aug 9 22:35:00 2025 by rpki-client