$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/970cd30d-74be-33f9-a710-baa0ae6de29e.roa File: 970cd30d-74be-33f9-a710-baa0ae6de29e.roa (raw, json) Hash identifier: xCGWEHFiiteCYFP3yiA9S+Orj2WjglTtLScpPDtYd+0= Subject key identifier: 7C:49:F3:B0:EA:FE:60:33:E5:8F:D6:72:50:D4:18:F0:D5:A6:77:94 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584ABBE641223208680079D6C480 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/970cd30d-74be-33f9-a710-baa0ae6de29e.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 21859 IP address blocks: 216.132.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:41:22:32:08:68:00:79:d6:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=39e18b61-5c27-4fc3-b48e-bf700bf1f9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:49:c6:67:c5:cd:f0:1b:14:a4:0a:f3:a5:0d: 7e:c2:e1:7f:35:d1:9b:04:32:60:0a:77:79:c5:f1: d5:7a:2b:0f:6f:cc:52:65:9b:ea:51:f6:aa:eb:04: ae:0e:44:23:cd:87:ea:6f:1d:d4:b9:8c:ab:4c:30: 4c:c6:5b:27:f9:ec:84:a8:c7:f6:36:3b:33:5f:64: 5e:9a:93:33:7c:69:23:12:ff:3c:eb:ef:4a:ba:7a: a1:b9:bb:52:dd:70:a7:0d:ea:04:21:eb:f7:50:2a: e6:20:7b:74:18:05:19:0f:c0:6c:26:e2:4e:26:b3: 59:db:04:4f:bf:be:96:25:46:6c:e5:99:96:7a:c3: 54:f9:98:13:ec:77:bc:84:a2:83:40:1b:3f:0d:c9: 01:94:df:73:38:92:b4:c4:f3:b5:26:39:9a:ed:59: 94:7f:54:b9:66:74:42:7b:d8:b1:ea:bb:ab:6d:0b: cf:0b:aa:d8:a4:ad:4b:28:a4:db:a5:33:f2:7e:4c: a8:88:4c:4e:ee:da:69:2b:4f:dc:c4:19:95:50:01: 1d:d3:f5:f6:a1:74:1a:3b:11:2c:6a:62:42:98:5f: dd:13:c8:3c:e0:42:32:9d:8e:42:ba:d3:09:6a:22: d4:94:f9:9d:63:4d:68:8f:c9:ae:19:e3:a2:d6:89: e2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:49:F3:B0:EA:FE:60:33:E5:8F:D6:72:50:D4:18:F0:D5:A6:77:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/970cd30d-74be-33f9-a710-baa0ae6de29e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f8:57:92:d4:f2:d9:20:db:fe:6f:b4:19:50:82:d6:56:af: f4:88:f4:0f:0a:29:61:b2:28:06:ef:45:e5:be:fd:88:50:96: 6e:01:69:97:63:97:1d:3f:b9:f2:57:eb:23:57:2b:ab:47:d7: 70:76:95:fc:ac:e2:1d:9a:ea:c8:c3:8b:71:fd:45:74:41:f5: 84:0a:fb:cb:b4:bf:91:b0:55:97:fc:78:bb:cf:52:d9:19:d8: cf:51:a8:5d:25:68:f0:05:6c:5b:47:e8:8a:8d:b8:fb:0c:a9: ee:ad:e8:7c:17:04:95:e8:ca:32:d6:42:d2:52:a8:94:d0:f7: 11:39:c8:3e:da:ce:09:7d:fb:66:ed:45:e1:db:71:a5:86:32: 57:96:49:36:1b:53:0f:29:29:d7:77:83:66:a6:fc:df:f2:df: fc:7b:5b:80:cf:e6:82:b1:01:61:46:f7:d2:23:1b:87:f7:50: b3:57:64:64:a3:9d:85:8e:aa:a0:59:3b:40:e6:10:41:ef:af: b9:b8:3f:fb:bd:46:76:9e:d3:0e:af:39:21:bc:52:e3:36:0f: b4:ac:48:13:25:7c:97:a9:4c:3d:ce:ff:be:36:08:f3:84:e0: 8e:1c:25:8e:68:fe:98:3b:92:2c:0e:33:47:27:9d:47:c6:33: 2a:fd:d6:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq75kEiMghoAHnWxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk MzllMThiNjEtNWMyNy00ZmMzLWI0OGUtYmY3MDBiZjFmOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgknGZ8XN8BsUpArzpQ1+wuF/NdGbBDJgCnd5 xfHVeisPb8xSZZvqUfaq6wSuDkQjzYfqbx3UuYyrTDBMxlsn+eyEqMf2NjszX2Re mpMzfGkjEv886+9KunqhubtS3XCnDeoEIev3UCrmIHt0GAUZD8BsJuJOJrNZ2wRP v76WJUZs5ZmWesNU+ZgT7He8hKKDQBs/DckBlN9zOJK0xPO1Jjma7VmUf1S5ZnRC e9ix6rurbQvPC6rYpK1LKKTbpTPyfkyoiExO7tppK0/cxBmVUAEd0/X2oXQaOxEs amJCmF/dE8g84EIynY5CutMJaiLUlPmdY01oj8muGeOi1oniUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxJ87Dq/mAz5Y/WclDUGPDVpneUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTcwY2QzMGQtNzRiZS0z M2Y5LWE3MTAtYmFhMGFlNmRlMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IRlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv4V5LU8tkg2/5vtBlQgtZWr/SI9A8KKWGyKAbvReW+/YhQlm4BaZdj lx0/ufJX6yNXK6tH13B2lfys4h2a6sjDi3H9RXRB9YQK+8u0v5GwVZf8eLvPUtkZ 2M9RqF0laPAFbFtH6IqNuPsMqe6t6HwXBJXoyjLWQtJSqJTQ9xE5yD7azgl9+2bt ReHbcaWGMleWSTYbUw8pKdd3g2am/N/y3/x7W4DP5oKxAWFG99IjG4f3ULNXZGSj nYWOqqBZO0DmEEHvr7m4P/u9Rnae0w6vOSG8UuM2D7SsSBMlfJepTD3O/742CPOE 4I4cJY5o/pg7kiwOM0cnnUfGMyr91rc= -----END CERTIFICATE-----Generated at Sat Aug 9 23:15:26 2025 by rpki-client