$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa File: f890b188-b610-38a0-89b0-8a1a62d249f7.roa (raw, json) Hash identifier: 3VdpklYVAixt+F7xIS4hgdi3jAFoptLVbWNIvUvR1OY= Subject key identifier: 99:46:C7:04:67:03:C9:DE:99:22:D5:63:FE:E9:0E:1D:84:8A:B5:1A Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584AECC13208B1A8C8755CDBC980 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 216.245.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:32:08:b1:a8:c8:75:5c:db:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=09b4dbc9-ea35-4144-9f38-5b9811d68c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:09:94:1b:e5:85:e0:1a:13:dc:2f:d3:3c: ed:e8:d7:85:96:93:d1:fc:ca:a1:45:35:59:66:4d: 49:90:ab:40:a1:d2:9a:5e:00:76:9d:c6:33:db:b2: c1:02:f4:ab:9c:25:81:c7:90:61:ae:00:2f:9f:76: 4b:65:8f:a9:cd:d0:a0:5d:21:ee:fe:f1:fb:5f:39: d1:dc:99:bc:c7:d6:38:be:7f:87:6a:07:6c:fc:cc: 9d:36:45:c8:60:24:ea:0e:33:d1:c9:65:e9:9e:a7: be:0f:37:5f:f8:e2:0f:24:c9:4d:21:ec:09:ab:9c: cc:b6:b6:ec:29:01:61:04:9e:40:2b:9a:c8:a3:a3: b5:91:45:a1:b2:66:0b:9c:ae:f0:74:14:17:8a:e6: 17:fd:00:f8:eb:c2:0d:88:d0:12:52:6f:15:ba:f6: b8:af:1d:9a:bd:5a:d9:55:0a:fc:68:fb:36:0f:a3: da:f1:1f:b6:31:81:54:9b:e0:d4:af:eb:24:8e:c0: b9:29:4d:74:c3:35:94:b8:f3:92:0b:cb:49:c8:ff: 0e:3c:f5:3e:2a:d7:71:74:d1:84:d9:57:28:e4:17: dd:97:31:92:b2:93:04:7f:6e:f7:4b:e1:50:ec:26: a4:4d:a8:e2:65:97:1a:83:8f:1e:42:f1:d3:39:04: dd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:46:C7:04:67:03:C9:DE:99:22:D5:63:FE:E9:0E:1D:84:8A:B5:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 216.245.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:83:ba:a4:14:58:c7:17:2a:ec:15:87:ce:ef:3c:de:77:c9: 17:de:39:73:b8:0b:ba:72:18:fb:ed:b9:1a:c9:7f:18:64:8d: 81:db:17:e3:bc:26:9d:60:90:17:d2:f0:6f:f6:e8:02:0c:a5: 2d:69:fe:29:3e:23:16:70:29:ce:77:8d:26:0a:a2:9b:db:4c: a7:58:bd:3b:e7:24:49:eb:a8:76:08:92:87:91:ed:92:61:f8: f4:50:af:f5:c6:96:a3:5f:b1:0a:cb:93:e3:42:25:b5:7f:9d: 2a:32:fa:05:a4:57:d5:c5:b4:5f:3a:96:2f:e0:0d:5a:03:3f: c4:8e:cc:74:2f:bc:d1:10:b0:67:35:31:65:ff:04:9d:cf:ff: 02:d1:85:ed:58:cc:40:b9:85:39:0b:30:6d:74:28:24:4d:99: 4c:c9:e0:62:04:a6:78:80:bc:1a:ba:e3:51:43:9e:1c:0d:5b: 1e:a2:50:cd:61:f5:1b:50:08:6e:7e:85:11:30:71:6e:59:d1: 31:a0:a5:24:09:5d:ee:ec:92:17:7b:76:17:35:42:72:cb:22: cc:6a:3d:f1:ea:68:49:3f:99:26:1d:f8:32:b7:b9:27:13:6c: 6f:21:84:08:36:b7:c7:db:c9:01:88:c0:3a:9a:67:13:44:d4: 26:e4:82:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTIIsajIdVzbyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDliNGRiYzktZWEzNS00MTQ0LTlmMzgtNWI5ODExZDY4YzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF4JlBvlheAaE9wv0zzt6NeFlpPR/MqhRTVZ Zk1JkKtAodKaXgB2ncYz27LBAvSrnCWBx5BhrgAvn3ZLZY+pzdCgXSHu/vH7XznR 3Jm8x9Y4vn+Hagds/MydNkXIYCTqDjPRyWXpnqe+Dzdf+OIPJMlNIewJq5zMtrbs KQFhBJ5AK5rIo6O1kUWhsmYLnK7wdBQXiuYX/QD468INiNASUm8Vuva4rx2avVrZ VQr8aPs2D6Pa8R+2MYFUm+DUr+skjsC5KU10wzWUuPOSC8tJyP8OPPU+KtdxdNGE 2Vco5BfdlzGSspMEf273S+FQ7CakTajiZZcag48eQvHTOQTdZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlGxwRnA8nemSLVY/7pDh2EirUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvZjg5MGIxODgtYjYxMC0z OGEwLTg5YjAtOGExYTYyZDI0OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PW1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWDuqQUWMcXKuwVh87vPN53yRfeOXO4C7pyGPvtuRrJfxhkjYHbF+O8 Jp1gkBfS8G/26AIMpS1p/ik+IxZwKc53jSYKopvbTKdYvTvnJEnrqHYIkoeR7ZJh +PRQr/XGlqNfsQrLk+NCJbV/nSoy+gWkV9XFtF86li/gDVoDP8SOzHQvvNEQsGc1 MWX/BJ3P/wLRhe1YzEC5hTkLMG10KCRNmUzJ4GIEpniAvBq641FDnhwNWx6iUM1h 9RtQCG5+hREwcW5Z0TGgpSQJXe7skhd7dhc1QnLLIsxqPfHqaEk/mSYd+DK3uScT bG8hhAg2t8fbyQGIwDqaZxNE1Cbkgps= -----END CERTIFICATE-----Generated at Wed Nov 5 09:33:47 2025 by rpki-client