$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c8719043-fe53-3e80-9603-d8416e80abe1.roa File: c8719043-fe53-3e80-9603-d8416e80abe1.roa (raw, json) Hash identifier: hrZOi+sq3W8jBE/FVG0HTs3OvadAZEFIAGrmIef5+E4= Subject key identifier: B8:4C:28:54:54:51:7C:DA:87:AA:E0:0C:49:42:21:3E:12:0A:E8:E9 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AC01625DDA690E1222F872800 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c8719043-fe53-3e80-9603-d8416e80abe1.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 21866 IP address blocks: 216.219.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:25:dd:a6:90:e1:22:2f:87:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=dcf0f52e-9918-4095-bb6b-4c147e85049d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:ec:d5:48:64:fe:53:8e:11:4f:8f:78:01: 0f:5a:e5:eb:40:0a:18:82:bb:c0:a6:da:86:a7:df: b9:dc:79:87:ab:f4:8d:d7:e4:fa:9c:f3:7e:07:f7: ce:1b:45:5d:ef:35:fd:38:16:49:55:c1:07:12:f0: f9:cc:e5:39:4e:81:03:a3:96:01:37:63:c7:71:10: 09:74:70:15:69:78:46:5d:c7:3b:1b:6b:dc:cb:c2: 18:95:87:74:3d:8b:f6:b1:fc:e7:63:8e:26:2a:93: d3:0f:e0:96:69:c5:a0:a1:c3:48:3a:97:0b:e4:38: 21:f9:b9:01:c5:cb:ee:0a:0d:07:c1:35:a8:47:59: b8:33:41:72:73:66:20:80:a7:9e:f5:4c:4f:0d:e4: ca:93:20:25:6a:46:4c:fd:0c:97:b4:6d:05:b9:0d: 64:df:4a:8d:e1:7d:d2:bc:73:8b:56:ac:72:be:c7: 22:c8:69:63:07:e2:ef:80:66:5c:2e:a0:1b:27:d2: 3b:9e:31:a5:7b:fc:2f:6e:79:51:17:8a:0c:4b:77: 1d:03:c1:36:2a:be:ed:df:ea:54:d5:e1:c8:80:34: 0c:5a:bc:39:01:8e:1d:93:48:b9:b5:94:68:7a:3c: 49:47:83:f0:05:bf:a5:c4:cc:d3:6e:e6:20:6f:b8: 2f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4C:28:54:54:51:7C:DA:87:AA:E0:0C:49:42:21:3E:12:0A:E8:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c8719043-fe53-3e80-9603-d8416e80abe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 216.219.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a0:65:df:34:c4:66:2c:72:f2:33:68:63:05:43:47:24:9e: 08:f0:99:30:67:f8:39:f5:c1:53:35:18:66:95:37:64:50:db: eb:6f:26:3a:85:92:6f:25:76:c7:7c:a3:51:33:f3:0e:51:7e: 87:bd:86:e0:bc:14:2d:5d:6e:a1:60:54:cf:dc:e5:c4:c0:ff: 07:40:11:c2:51:da:a7:ef:ea:04:82:ef:b0:3e:4a:c7:15:2e: 08:f8:fa:3d:b6:7c:d6:3b:72:cd:fa:12:fe:47:19:2e:98:aa: 07:ab:0d:35:64:0b:45:33:90:d7:af:83:66:ff:3e:d4:23:75: 46:1f:15:5a:bf:f6:d2:f6:db:51:ec:1e:bf:b5:9c:1f:74:83: 6b:1b:83:f0:56:57:41:47:0c:74:8a:0c:82:b0:d9:13:1c:b8: 6e:45:10:5b:7f:57:d0:ef:2c:19:04:3a:8f:64:32:b7:ba:50: 72:bf:2e:b2:c0:4b:26:a2:92:3c:96:85:f3:48:94:c0:1d:6b: 12:f9:5e:cd:f9:dd:52:8e:cc:d5:d0:6a:05:35:2f:90:f3:91: 5b:b0:4d:58:f3:1e:17:ec:85:46:15:45:50:11:c0:1b:b1:41: 34:28:fe:2b:9c:da:11:89:39:3e:51:25:bb:55:10:f9:36:65: be:ed:f5:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFiXdppDhIi+HKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZGNmMGY1MmUtOTkxOC00MDk1LWJiNmItNGMxNDdlODUwNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrTs1Uhk/lOOEU+PeAEPWuXrQAoYgrvAptqG p9+53HmHq/SN1+T6nPN+B/fOG0Vd7zX9OBZJVcEHEvD5zOU5ToEDo5YBN2PHcRAJ dHAVaXhGXcc7G2vcy8IYlYd0PYv2sfznY44mKpPTD+CWacWgocNIOpcL5Dgh+bkB xcvuCg0HwTWoR1m4M0Fyc2YggKee9UxPDeTKkyAlakZM/QyXtG0FuQ1k30qN4X3S vHOLVqxyvsciyGljB+LvgGZcLqAbJ9I7njGle/wvbnlRF4oMS3cdA8E2Kr7t3+pU 1eHIgDQMWrw5AY4dk0i5tZRoejxJR4PwBb+lxMzTbuYgb7gv0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhMKFRUUXzah6rgDElCIT4SCujpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYzg3MTkwNDMtZmU1My0z ZTgwLTk2MDMtZDg0MTZlODBhYmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Nt9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2gZd80xGYscvIzaGMFQ0ckngjwmTBn+Dn1wVM1GGaVN2RQ2+tvJjqF km8ldsd8o1Ez8w5Rfoe9huC8FC1dbqFgVM/c5cTA/wdAEcJR2qfv6gSC77A+SscV Lgj4+j22fNY7cs36Ev5HGS6YqgerDTVkC0UzkNevg2b/PtQjdUYfFVq/9tL221Hs Hr+1nB90g2sbg/BWV0FHDHSKDIKw2RMcuG5FEFt/V9DvLBkEOo9kMre6UHK/LrLA SyaikjyWhfNIlMAdaxL5Xs353VKOzNXQagU1L5DzkVuwTVjzHhfshUYVRVARwBux QTQo/iuc2hGJOT5RJbtVEPk2Zb7t9T0= -----END CERTIFICATE-----Generated at Sat Aug 9 01:03:21 2025 by rpki-client