$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09f0ba6f-e56c-3743-a7a3-1c4bb59e494a.roa File: 09f0ba6f-e56c-3743-a7a3-1c4bb59e494a.roa (raw, json) Hash identifier: wEvrjyJwSs4eCsFaM3ddMkYE8+ZqPj4wBInbXqwET4o= Subject key identifier: 22:88:DE:DB:A5:DC:D5:10:E1:01:9B:8F:06:68:DC:1E:45:3F:8B:C5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AA6F61F7183688998CFC9ED80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09f0ba6f-e56c-3743-a7a3-1c4bb59e494a.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 5065 IP address blocks: 216.132.8.0/24 maxlen: 24 216.132.9.0/24 maxlen: 24 216.132.10.0/24 maxlen: 24 216.132.11.0/24 maxlen: 24 216.132.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:1f:71:83:68:89:98:cf:c9:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=20d68ca7-7cea-49d1-81d7-c0393bbc49f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8d:0a:3c:64:3a:5b:cb:46:22:5f:1f:09:3e: e8:a1:10:fe:78:bf:0c:fb:db:d9:98:e2:56:7f:9e: 79:fa:64:c0:f9:16:70:b5:60:5c:f3:86:98:69:6d: 49:b1:d3:49:67:ae:1e:b4:58:82:29:b0:dc:af:c0: 9d:b3:37:f8:8c:a7:11:dc:51:bb:6b:6f:79:2e:da: 5d:de:63:46:62:40:4e:de:df:d5:3b:44:ab:a3:f2: e9:77:65:cd:b6:55:dd:9b:78:76:ab:ae:3a:4e:60: eb:51:b4:38:b4:9c:59:d3:75:df:22:40:d7:1d:37: b9:83:dd:2c:6b:49:b7:60:ea:15:7e:eb:2e:43:b7: 1c:df:21:89:34:65:d7:ac:c9:2c:68:c1:cd:7a:bd: 32:77:cf:de:e1:76:4a:83:45:8f:ea:58:3c:cd:69: 95:7a:16:d5:89:34:4e:06:ba:f5:78:ee:37:d3:d3: 45:6e:61:ce:0a:5c:67:34:de:a2:62:c2:94:2d:75: 99:7e:9d:6c:d4:a4:14:5c:d5:b8:5a:00:71:26:08: 42:22:10:49:13:8a:2c:38:4a:e6:94:1e:38:d4:cb: 78:fe:e9:67:31:1d:a3:3e:94:14:61:09:7e:c3:50: db:21:b0:7f:bb:7d:34:9c:ae:d2:33:b1:df:03:c6: 4d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:88:DE:DB:A5:DC:D5:10:E1:01:9B:8F:06:68:DC:1E:45:3F:8B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09f0ba6f-e56c-3743-a7a3-1c4bb59e494a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.8.0/22 216.132.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:6f:69:4f:41:eb:c6:d6:81:ca:ae:8a:a7:f5:6e:68:52:c1: ee:1a:67:2b:23:21:b2:58:1b:49:21:3a:b6:ad:61:7f:37:da: 59:45:26:fe:46:d2:c4:b5:4f:64:d1:73:bf:06:bc:ba:de:da: 68:d1:5a:7c:2c:90:4c:f6:d1:45:eb:ac:d8:f0:f5:bd:ca:1c: 87:66:1b:4d:6c:51:7d:46:b8:8c:6f:20:6d:b1:8d:c7:49:ee: 25:f3:5a:2d:3d:b0:50:f8:27:57:d7:32:1c:b1:15:c8:23:95: fb:93:a6:8c:1b:c2:66:e2:18:5c:55:c0:30:66:9a:9a:0a:b4: de:f7:0f:22:1f:74:d1:a9:f1:c0:0a:33:f9:cd:6d:f7:ac:67: 07:b0:a4:e0:5e:59:1c:e2:f3:dd:6a:84:0a:c9:d3:9e:26:6a: 11:09:b2:d8:6f:74:68:2d:39:21:34:fe:80:53:aa:6d:21:73: 11:b9:ec:b0:cd:5e:6b:f9:f4:eb:8b:f0:e0:72:cc:88:38:66: f6:31:40:a9:61:e4:25:ae:60:41:71:c7:cc:7f:dc:75:fb:a1: 21:84:28:df:12:e9:2d:24:e3:bc:1f:9e:ec:02:b6:df:53:85: b1:9a:72:d3:cb:dd:1a:27:d2:c9:e6:87:33:61:5c:a7:69:78: 1f:44:81:5b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqm9h9xg2iJmM/J7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk MjBkNjhjYTctN2NlYS00OWQxLTgxZDctYzAzOTNiYmM0OWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio0KPGQ6W8tGIl8fCT7ooRD+eL8M+9vZmOJW f555+mTA+RZwtWBc84aYaW1JsdNJZ64etFiCKbDcr8Cdszf4jKcR3FG7a295Ltpd 3mNGYkBO3t/VO0Sro/Lpd2XNtlXdm3h2q646TmDrUbQ4tJxZ03XfIkDXHTe5g90s a0m3YOoVfusuQ7cc3yGJNGXXrMksaMHNer0yd8/e4XZKg0WP6lg8zWmVehbViTRO Brr1eO4309NFbmHOClxnNN6iYsKULXWZfp1s1KQUXNW4WgBxJghCIhBJE4osOErm lB441Mt4/ulnMR2jPpQUYQl+w1DbIbB/u300nK7SM7HfA8ZNVQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCKI3tul3NUQ4QGbjwZo3B5FP4vFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDlmMGJhNmYtZTU2Yy0z NzQzLWE3YTMtMWM0YmI1OWU0OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC2IQIAwQA 2IQPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF1vaU9B68bWgcquiqf1bmhSwe4aZysjIbJYG0khOratYX83 2llFJv5G0sS1T2TRc78GvLre2mjRWnwskEz20UXrrNjw9b3KHIdmG01sUX1GuIxv IG2xjcdJ7iXzWi09sFD4J1fXMhyxFcgjlfuTpowbwmbiGFxVwDBmmpoKtN73DyIf dNGp8cAKM/nNbfesZwewpOBeWRzi891qhArJ054mahEJsthvdGgtOSE0/oBTqm0h cxG57LDNXmv59OuL8OByzIg4ZvYxQKlh5CWuYEFxx8x/3HX7oSGEKN8S6S0k47wf nuwCtt9ThbGactPL3Ron0snmhzNhXKdpeB9EgVs= -----END CERTIFICATE-----Generated at Thu Aug 7 04:38:45 2025 by rpki-client