$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa File: 2d8ca45f-228d-3ffc-9008-f26a1700290a.roa (raw, json) Hash identifier: yokcRkqBLlZ0zPB1uPka8WOU0bvHrJvPsvYTHd7va4g= Subject key identifier: E4:E9:FD:AF:8A:22:DF:04:5B:C0:6D:50:06:EE:83:B6:A1:7F:75:F7 Certificate issuer: /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Certificate serial: 010D0C9F4328584AE46121994601BE53516783E0 Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 8075 IP address blocks: 216.99.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:21:99:46:01:be:53:51:67:83:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=2868cbfa-abc9-41b8-a911-ca1e0b120f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0d:60:17:28:6a:f2:04:61:05:e4:55:17:a6: c4:67:d0:c5:0b:fa:10:d3:c7:b5:42:b8:4d:0e:b9: f1:11:41:97:07:60:9c:63:93:3f:7b:bd:14:9c:99: 9e:7a:c1:17:0a:05:3b:c0:66:a9:0c:55:1e:56:54: 09:18:3d:20:da:cf:da:11:16:48:57:06:08:f5:50: 01:7c:0e:0b:04:98:66:cd:87:80:49:29:00:83:0f: 41:8e:da:1a:1d:40:e2:0d:f6:4d:6d:85:08:a0:55: 61:fe:95:fe:4f:0d:c4:8c:d6:8f:c4:c9:ff:16:4d: 1b:9c:c1:93:af:33:9b:a6:ef:0b:b8:90:65:ae:cb: e0:98:54:73:ae:5a:c4:61:05:c0:68:4b:cc:67:7e: c0:2f:62:25:df:60:3d:b8:e5:89:c4:a0:9c:4b:33: 12:37:45:c1:eb:11:4b:9c:88:8f:d1:12:9f:d5:f8: dc:98:7d:d8:92:25:5b:cd:e8:ac:94:6e:97:1d:92: c7:92:0f:e9:41:84:d7:6d:c0:f9:02:7c:23:cd:7e: 45:b2:4a:76:2f:9f:19:85:1e:b9:a1:de:69:58:59: 73:41:56:df:5b:4b:86:8c:2c:16:2a:05:69:76:9f: 7c:90:55:a0:0c:47:7a:b6:28:aa:6d:0e:cc:f1:bc: 10:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E9:FD:AF:8A:22:DF:04:5B:C0:6D:50:06:EE:83:B6:A1:7F:75:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl X509v3 Authority Key Identifier: keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer sbgp-ipAddrBlock: critical IPv4: 216.99.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ea:18:d9:f8:fe:a8:af:4d:dc:ed:e9:fe:6c:dd:75:ba:52: 61:71:ed:5c:78:9e:ca:b1:f9:29:26:55:7f:fa:7e:ce:34:8b: bf:94:07:10:f9:ce:b1:73:66:99:5d:c7:89:4a:23:79:d8:23: 63:14:e2:d0:c7:bf:f7:74:2c:c3:87:49:8c:2a:55:aa:e6:2d: b5:f1:21:99:66:6d:81:48:fb:e5:1d:74:79:e0:9d:81:c6:f4: c4:ef:17:32:cd:92:7c:87:90:bf:e1:ee:6e:59:a5:85:f9:2c: 5f:6f:3b:56:11:2c:d3:19:32:07:cf:8c:72:89:e7:90:8e:7a: 34:bd:ea:10:1a:94:28:20:dd:0d:d4:c0:49:c8:5f:63:dc:03: d4:2c:03:f9:c0:2d:da:c5:e7:1b:3d:71:61:2e:1b:c0:1a:ca: 47:48:9b:ec:a0:fa:00:8f:a3:e6:ef:5c:a3:4a:db:25:f6:53: 65:4e:8a:c0:e0:27:20:60:f8:5d:41:9c:ba:d8:45:dc:53:21: c5:b0:d7:81:3b:96:86:f4:30:02:8b:c6:8b:91:31:ff:dd:08: ec:31:1b:cd:57:f3:d5:4e:3d:59:0e:ab:2c:4a:9a:ce:ac:25: 97:7f:3e:90:62:60:ab:52:50:d1:e6:63:ba:2c:b9:95:d8:e6: b6:78:fe:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSGZRgG+U1Fng+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY3MmE3OTgtYTk3OS00ZjUxLTg1YWUtZTBlZWMzZGNi OWY3MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk Mjg2OGNiZmEtYWJjOS00MWI4LWE5MTEtY2ExZTBiMTIwZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA1gFyhq8gRhBeRVF6bEZ9DFC/oQ08e1QrhN DrnxEUGXB2CcY5M/e70UnJmeesEXCgU7wGapDFUeVlQJGD0g2s/aERZIVwYI9VAB fA4LBJhmzYeASSkAgw9BjtoaHUDiDfZNbYUIoFVh/pX+Tw3EjNaPxMn/Fk0bnMGT rzObpu8LuJBlrsvgmFRzrlrEYQXAaEvMZ37AL2Il32A9uOWJxKCcSzMSN0XB6xFL nIiP0RKf1fjcmH3YkiVbzeislG6XHZLHkg/pQYTXbcD5AnwjzX5Fskp2L58ZhR65 od5pWFlzQVbfW0uGjCwWKgVpdp98kFWgDEd6tiiqbQ7M8bwQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTp/a+KIt8EW8BtUAbug7ahf3X3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcy YTc5OC1hOTc5LTRmNTEtODVhZS1lMGVlYzNkY2I5ZjcvMmQ4Y2E0NWYtMjI4ZC0z ZmZjLTkwMDgtZjI2YTE3MDAyOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzY3MmE3OTgtYTk3OS00ZjUxLTg1 YWUtZTBlZWMzZGNiOWY3L2M2NzJhNzk4LWE5NzktNGY1MS04NWFlLWUwZWVjM2Rj YjlmNy5jcmwwHwYDVR0jBBgwFoAUuikoNWCwwHyqzvaenrqtsKIgNgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcyYTc5OC1hOTc5LTRmNTEtODVhZS1lMGVl YzNkY2I5ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2GOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADqGNn4/qivTdzt6f5s3XW6UmFx7Vx4nsqx+SkmVX/6fs40i7+UBxD5 zrFzZpldx4lKI3nYI2MU4tDHv/d0LMOHSYwqVarmLbXxIZlmbYFI++UddHngnYHG 9MTvFzLNknyHkL/h7m5ZpYX5LF9vO1YRLNMZMgfPjHKJ55COejS96hAalCgg3Q3U wEnIX2PcA9QsA/nALdrF5xs9cWEuG8AaykdIm+yg+gCPo+bvXKNK2yX2U2VOisDg JyBg+F1BnLrYRdxTIcWw14E7lob0MAKLxouRMf/dCOwxG81X89VOPVkOqyxKms6s JZd/PpBiYKtSUNHmY7osuZXY5rZ4/sI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:46:12 2025 by rpki-client