$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4aa5e942-3e3d-3357-9eb5-36a2dd5d556b.roa File: 4aa5e942-3e3d-3357-9eb5-36a2dd5d556b.roa (raw, json) Hash identifier: R2fHeORjrG8qyD80hMBv/xUIW7DnFeakYnjpEU0JudM= Subject key identifier: 78:60:66:C5:4D:BA:8C:30:A1:C6:C4:62:9E:E9:85:F1:AD:74:D7:FB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AB65102CC2CE1204738DEA500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4aa5e942-3e3d-3357-9eb5-36a2dd5d556b.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 16904 IP address blocks: 216.27.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:51:02:cc:2c:e1:20:47:38:de:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=d5092690-ebe2-43d3-b0bd-4e9a50e6037a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f8:76:75:c3:3c:4a:31:41:00:50:21:fd:c2: f5:fe:ff:a6:7b:52:da:36:42:95:77:1e:52:b7:89: e7:75:08:f2:9f:4d:d1:14:96:bc:9a:93:b0:e7:32: 07:d1:82:16:a7:29:85:f0:1b:35:0e:37:78:08:3f: 89:da:e9:fb:4f:a4:44:b2:55:6b:07:65:c2:55:2b: 90:7b:87:d6:d1:f3:db:89:06:dc:58:73:c5:18:91: 37:73:c6:1d:97:a2:ae:27:6a:c5:40:32:d6:05:7a: af:68:bd:06:97:b9:b4:e2:9c:11:e1:26:86:fa:87: 75:74:06:a3:f9:44:e5:80:00:a2:f6:48:1f:3e:24: 5b:a0:3c:55:d5:2f:be:1d:f1:0a:a6:03:06:2e:f4: e2:4d:c2:b7:16:24:26:21:3c:b2:97:1c:72:8f:35: 4c:ab:1c:8a:f6:69:c0:49:4a:a8:71:0e:7d:f2:04: 7a:3c:17:35:80:1c:b8:63:b5:a6:ca:bb:e1:9b:7c: b5:c0:fa:fd:12:fd:f7:db:14:82:f6:e4:73:48:eb: 67:02:5a:00:7a:b9:a0:25:ff:01:7b:36:2d:7d:b9: 4a:38:22:7a:dc:d9:bc:4c:3e:eb:fa:df:86:a1:fc: a7:70:f4:fa:2d:e9:62:3b:1e:f4:96:13:6e:08:34: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:60:66:C5:4D:BA:8C:30:A1:C6:C4:62:9E:E9:85:F1:AD:74:D7:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4aa5e942-3e3d-3357-9eb5-36a2dd5d556b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.27.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:a2:4f:3b:ea:95:82:67:83:1f:90:e2:8b:39:d7:88:40:3f: da:d5:52:74:ca:32:ad:3a:71:69:7d:c2:27:15:9a:d6:66:0f: 6f:0d:34:79:55:87:9b:5b:e9:14:7d:58:bc:f5:e6:bb:1c:ec: 7f:ad:72:c9:9e:0c:e4:5c:9c:79:81:97:df:72:36:f8:9d:e8: 27:88:64:2a:85:82:dd:9d:9d:2d:75:6b:82:13:69:91:b6:14: 47:85:9c:a7:01:17:8a:12:ce:11:80:0e:69:79:3d:d4:86:09: 26:91:a9:85:43:f8:fb:33:ff:30:95:c2:74:80:92:69:dd:5b: 40:48:74:58:0a:b5:a8:11:70:6a:91:0e:7b:e3:66:a6:56:e7: 12:de:b9:23:30:8d:76:8b:4e:46:0d:62:93:36:9c:8c:4a:2e: fc:b8:fb:30:fd:66:5d:64:65:a5:9e:84:8b:70:36:f8:50:4c: 40:c6:dd:6d:2f:2e:eb:b1:8f:01:ae:16:a3:85:b1:01:a3:ad: 8a:bf:46:16:05:e2:ff:d1:1f:bb:85:52:e9:aa:94:fa:8d:be: e7:40:52:39:eb:1f:a9:4c:30:83:0e:6c:6a:a2:85:f8:c3:c6: 03:c3:15:0d:94:73:9a:d6:27:57:e9:cc:4d:e2:cb:c6:06:52: 3c:64:6f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UQLMLOEgRzjepQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDUwOTI2OTAtZWJlMi00M2QzLWIwYmQtNGU5YTUwZTYwMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifh2dcM8SjFBAFAh/cL1/v+me1LaNkKVdx5S t4nndQjyn03RFJa8mpOw5zIH0YIWpymF8Bs1Djd4CD+J2un7T6REslVrB2XCVSuQ e4fW0fPbiQbcWHPFGJE3c8Ydl6KuJ2rFQDLWBXqvaL0Gl7m04pwR4SaG+od1dAaj +UTlgACi9kgfPiRboDxV1S++HfEKpgMGLvTiTcK3FiQmITyylxxyjzVMqxyK9mnA SUqocQ598gR6PBc1gBy4Y7Wmyrvhm3y1wPr9Ev332xSC9uRzSOtnAloAermgJf8B ezYtfblKOCJ63Nm8TD7r+t+GofyncPT6LeliOx70lhNuCDQz9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhgZsVNuowwocbEYp7phfGtdNf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGFhNWU5NDItM2UzZC0z MzU3LTllYjUtMzZhMmRkNWQ1NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGiTzvqlYJngx+Q4os514hAP9rVUnTKMq06cWl9wicVmtZmD28NNHlV h5tb6RR9WLz15rsc7H+tcsmeDORcnHmBl99yNvid6CeIZCqFgt2dnS11a4ITaZG2 FEeFnKcBF4oSzhGADml5PdSGCSaRqYVD+Psz/zCVwnSAkmndW0BIdFgKtagRcGqR DnvjZqZW5xLeuSMwjXaLTkYNYpM2nIxKLvy4+zD9Zl1kZaWehItwNvhQTEDG3W0v LuuxjwGuFqOFsQGjrYq/RhYF4v/RH7uFUumqlPqNvudAUjnrH6lMMIMObGqihfjD xgPDFQ2Uc5rWJ1fpzE3iy8YGUjxkb9E= -----END CERTIFICATE-----Generated at Fri Aug 8 20:52:25 2025 by rpki-client