$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0076b21-6a17-3725-b27a-a9c15ff3e01d.roa File: a0076b21-6a17-3725-b27a-a9c15ff3e01d.roa (raw, json) Hash identifier: aoBzvdugm9szKfSPHYGNho1Mg4LPlYFlVodgUz6skQs= Subject key identifier: 40:FE:DD:9C:83:9C:35:30:20:49:86:26:83:2F:F5:41:2E:70:78:8E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AAB104B1FF351756B9E035A80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0076b21-6a17-3725-b27a-a9c15ff3e01d.roa Signing time: Mon 28 Jul 2025 12:16:49 +0000 ROA not before: Mon 28 Jul 2025 12:16:49 +0000 ROA not after: Sun 26 Oct 2025 12:16:49 +0000 asID: 6079 IP address blocks: 216.132.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:10:4b:1f:f3:51:75:6b:9e:03:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 28 12:16:49 2025 GMT Not After : Oct 26 12:16:49 2025 GMT Subject: CN=e287e808-2202-484b-b27d-286086052a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:5e:70:bc:d1:92:4c:62:fb:d0:f1:e5:ad: 4b:f5:f5:50:95:8f:cb:49:c0:b8:ec:12:ff:f5:b0: 8b:48:21:05:0c:bc:db:94:1f:24:ea:1a:1b:49:65: 50:b2:76:8d:50:56:62:f0:f5:80:34:b5:e7:99:9b: a6:3b:14:e1:60:44:60:7e:45:bd:fa:88:52:30:45: 83:ad:dc:68:b5:f2:f7:72:f1:8e:5d:d0:ed:2d:46: 5f:5c:fe:b6:1b:7d:a4:6b:2d:f6:70:f8:24:2e:66: c4:95:5b:6f:cd:02:a0:ff:85:98:bf:c4:df:e4:22: 15:7b:e7:9f:c2:ad:53:91:8f:4e:02:43:e0:7b:7b: 5f:b2:29:2b:07:12:e9:0d:40:28:99:af:aa:ef:8e: ad:9f:cc:9b:03:3b:8b:ca:17:30:b1:34:a9:0c:34: 10:93:6f:ab:58:8a:ad:ba:34:9f:9f:71:cf:6c:f5: 02:33:53:6e:ec:90:a2:60:8c:f8:f9:2c:74:6b:f7: 30:b1:69:c6:a5:e1:34:53:eb:79:74:83:e5:45:8a: 88:db:32:5a:c1:a4:dc:1f:9f:99:bb:c2:38:fb:e3: 4e:6d:16:d1:ee:ce:c4:88:46:66:60:da:86:2c:d2: 3d:99:4c:c4:9e:e7:73:37:81:3c:56:70:03:db:b4: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FE:DD:9C:83:9C:35:30:20:49:86:26:83:2F:F5:41:2E:70:78:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0076b21-6a17-3725-b27a-a9c15ff3e01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:aa:92:eb:fd:63:5b:6d:33:ff:3c:23:07:11:3b:cc:97:3f: 82:ad:ae:c7:01:9a:5b:9c:60:cb:3a:ca:6c:7d:37:34:cf:ac: c8:10:c6:cd:ad:3c:d2:7c:0e:e2:1e:29:f4:da:9b:5f:f5:6b: be:bc:2d:61:d0:c2:d8:36:e0:e2:e1:06:63:37:aa:e0:55:3d: e1:e1:23:be:12:7a:91:70:75:fe:bf:6c:05:2a:5e:33:2f:52: 97:6f:cf:ce:d6:8d:2c:a9:65:75:8e:e8:ad:27:f4:3b:cc:9a: 91:65:56:ae:a1:18:9b:15:d7:0e:7c:c6:2e:cd:ce:c6:08:ee: 04:05:49:ee:ce:b5:1e:c4:19:51:c8:9e:2c:b6:9a:f3:3d:cc: df:bd:75:1c:f5:df:a4:76:b4:60:b2:05:0a:95:19:b6:71:35: ac:4d:d8:85:c3:4c:1f:fc:84:db:f5:0b:77:ae:f4:eb:13:60: 8b:33:e9:11:a2:0e:c3:7f:24:fc:b2:0f:69:91:f2:6a:e8:30: 61:f1:57:bc:09:c6:62:c6:a1:2c:51:8c:ce:7f:3d:e8:96:1e: 31:0d:0f:f2:32:16:3e:d0:8b:37:ad:7c:bc:0b:68:40:7b:76: 74:77:15:04:92:87:aa:1b:f5:45:b9:0a:ea:d7:15:0c:ab:15: e8:c2:96:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrEEsf81F1a54DWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyODEyMTY0OVoXDTI1MTAyNjEyMTY0OVowLzEtMCsGA1UEAxMk ZTI4N2U4MDgtMjIwMi00ODRiLWIyN2QtMjg2MDg2MDUyYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZpecLzRkkxi+9Dx5a1L9fVQlY/LScC47BL/ 9bCLSCEFDLzblB8k6hobSWVQsnaNUFZi8PWANLXnmZumOxThYERgfkW9+ohSMEWD rdxotfL3cvGOXdDtLUZfXP62G32kay32cPgkLmbElVtvzQKg/4WYv8Tf5CIVe+ef wq1TkY9OAkPge3tfsikrBxLpDUAoma+q746tn8ybAzuLyhcwsTSpDDQQk2+rWIqt ujSfn3HPbPUCM1Nu7JCiYIz4+Sx0a/cwsWnGpeE0U+t5dIPlRYqI2zJawaTcH5+Z u8I4++NObRbR7s7EiEZmYNqGLNI9mUzEnudzN4E8VnAD27QQdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFED+3ZyDnDUwIEmGJoMv9UEucHiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTAwNzZiMjEtNmExNy0z NzI1LWIyN2EtYTljMTVmZjNlMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2ISIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSqkuv9Y1ttM/88IwcRO8yXP4KtrscBmlucYMs6ymx9NzTPrMgQxs2t PNJ8DuIeKfTam1/1a768LWHQwtg24OLhBmM3quBVPeHhI74SepFwdf6/bAUqXjMv Updvz87WjSypZXWO6K0n9DvMmpFlVq6hGJsV1w58xi7NzsYI7gQFSe7OtR7EGVHI niy2mvM9zN+9dRz136R2tGCyBQqVGbZxNaxN2IXDTB/8hNv1C3eu9OsTYIsz6RGi DsN/JPyyD2mR8mroMGHxV7wJxmLGoSxRjM5/PeiWHjEND/IyFj7QizetfLwLaEB7 dnR3FQSSh6ob9UW5CurXFQyrFejClso= -----END CERTIFICATE-----Generated at Sat Aug 9 01:16:23 2025 by rpki-client