$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa File: d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa (raw, json) Hash identifier: +Hb2E846Mssx2i12PF++UmTGk7X7v9UZAQ0P2dSjeXs= Subject key identifier: 16:D6:A4:2A:AC:56:E4:13:7E:BD:E2:20:E7:F2:B8:BE:CB:74:02:FA Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584AB650E441F50AB0A5E6E1B900 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 12129 IP address blocks: 216.109.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:e4:41:f5:0a:b0:a5:e6:e1:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=ef346c6e-c375-47cd-85b7-bff24a326d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:81:21:f3:63:5f:c9:8f:25:ed:0c:0e:49: 86:03:c2:50:73:c2:db:60:d0:66:84:57:03:4c:fe: a1:40:00:34:98:a0:0c:8a:92:89:75:6d:2b:11:4d: 90:3c:bc:32:c4:cb:07:af:00:c1:d2:05:42:f5:11: 4d:80:e2:98:e9:53:52:66:f8:9d:43:d9:75:0b:fc: 8a:c3:e3:a9:74:01:2e:dc:9d:b7:41:5a:48:74:f8: 05:66:60:11:bb:ca:44:3a:3e:2e:a3:1b:21:14:59: 00:a5:6f:98:84:d1:52:35:14:92:30:77:04:87:64: 77:05:0b:3a:9b:91:df:58:70:00:ac:f5:34:e9:ec: a6:22:e2:8a:ed:44:af:f3:cd:4f:80:81:1d:be:f9: 26:06:79:2a:4d:28:a1:f9:44:08:74:09:87:38:f9: 9f:19:39:92:5c:d0:13:7e:5a:ec:f7:5e:b3:07:94: 1c:7e:68:ad:ab:5b:e6:a0:49:e9:83:bb:62:20:68: 2f:33:49:7a:b2:96:de:26:b5:ca:44:41:44:72:5d: 5f:58:4e:a3:75:2b:c0:47:16:27:73:75:48:3c:18: 55:02:e4:92:ba:6b:7d:db:eb:f4:cc:8f:19:17:95: 4c:dd:49:b5:4d:af:ca:0c:e3:1d:24:8a:8e:c3:67: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D6:A4:2A:AC:56:E4:13:7E:BD:E2:20:E7:F2:B8:BE:CB:74:02:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 216.109.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:fb:c3:79:7e:c4:3c:5e:33:65:95:91:6c:50:2c:c7:24:de: cc:d2:f8:2c:dc:e7:87:a1:e3:6a:47:65:d2:82:3e:5e:38:34: 8d:42:85:b0:46:89:7b:b0:94:76:e4:d8:34:04:8e:b6:f7:12: a6:9c:ae:c9:3d:51:74:d9:bb:9a:a7:97:31:0f:7d:3e:9d:71: 39:74:3c:86:e4:fe:2e:d1:5e:f2:8a:f2:74:a4:e6:bf:8f:70: f3:eb:c0:c8:9a:ab:45:f8:04:36:b6:6c:2a:28:f5:d4:38:09: 47:14:c9:b6:35:37:bd:4e:8a:4b:f0:5a:b1:78:00:08:38:25: 25:52:bd:0f:3f:17:1c:4b:a2:ad:96:e4:2f:3e:68:b7:d6:c2: d1:96:9e:2e:70:b0:d1:8e:e3:ac:1b:7d:07:4d:18:40:3a:54: df:72:c2:fd:02:c3:f5:59:99:7a:b4:7c:06:13:6e:7d:fb:cd: e6:cb:25:c1:d3:50:e4:1a:9d:13:5a:bb:b4:0e:91:28:f0:d4: 64:2d:6c:89:ad:ef:ca:89:ce:59:48:8d:04:a2:c1:0c:a0:2d: f3:65:df:65:00:5a:1b:e6:e7:2c:3b:ce:d4:eb:8b:ff:96:12: 74:5c:d3:65:a6:7a:bd:7e:ad:bd:05:86:c4:57:1d:0f:7d:70: 35:68:9f:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UORB9QqwpebhuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZWYzNDZjNmUtYzM3NS00N2NkLTg1YjctYmZmMjRhMzI2ZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPyBIfNjX8mPJe0MDkmGA8JQc8LbYNBmhFcD TP6hQAA0mKAMipKJdW0rEU2QPLwyxMsHrwDB0gVC9RFNgOKY6VNSZvidQ9l1C/yK w+OpdAEu3J23QVpIdPgFZmARu8pEOj4uoxshFFkApW+YhNFSNRSSMHcEh2R3BQs6 m5HfWHAArPU06eymIuKK7USv881PgIEdvvkmBnkqTSih+UQIdAmHOPmfGTmSXNAT flrs916zB5Qcfmitq1vmoEnpg7tiIGgvM0l6spbeJrXKREFEcl1fWE6jdSvARxYn c3VIPBhVAuSSumt92+v0zI8ZF5VM3Um1Ta/KDOMdJIqOw2fGkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbWpCqsVuQTfr3iIOfyuL7LdAL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvZDM2YWZiMzMtNzgwNy0z YzIwLWI5ZGYtZjdjZDhmYmY4NGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2G3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/7w3l+xDxeM2WVkWxQLMck3szS+Czc54eh42pHZdKCPl44NI1ChbBG iXuwlHbk2DQEjrb3Eqacrsk9UXTZu5qnlzEPfT6dcTl0PIbk/i7RXvKK8nSk5r+P cPPrwMiaq0X4BDa2bCoo9dQ4CUcUybY1N71OikvwWrF4AAg4JSVSvQ8/FxxLoq2W 5C8+aLfWwtGWni5wsNGO46wbfQdNGEA6VN9ywv0Cw/VZmXq0fAYTbn37zebLJcHT UOQanRNau7QOkSjw1GQtbImt78qJzllIjQSiwQygLfNl32UAWhvm5yw7ztTri/+W EnRc02Wmer1+rb0FhsRXHQ99cDVon4A= -----END CERTIFICATE-----Generated at Mon Aug 4 13:59:33 2025 by rpki-client