$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/67301716-8f4a-3b96-99db-05bc4802baaa.roa File: 67301716-8f4a-3b96-99db-05bc4802baaa.roa (raw, json) Hash identifier: /a8cOtCwIL9aBHjJHfeQaWnDQkUt1vHR7Lgi/GHnA3s= Subject key identifier: 5A:70:F6:5A:C1:48:E6:63:77:47:3F:73:44:FC:35:A2:D4:1D:55:B3 Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F4328584AFFEE22C0F50CC24993AE9680 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/67301716-8f4a-3b96-99db-05bc4802baaa.roa Signing time: Wed 27 Aug 2025 21:51:42 +0000 ROA not before: Wed 27 Aug 2025 21:51:42 +0000 ROA not after: Tue 25 Nov 2025 22:51:42 +0000 asID: 40501 IP address blocks: 216.235.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:ee:22:c0:f5:0c:c2:49:93:ae:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Aug 27 21:51:42 2025 GMT Not After : Nov 25 22:51:42 2025 GMT Subject: CN=2e1aa24b-0db9-4bb6-89ec-ba387a8eb911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8f:cd:13:91:ed:a2:4d:04:b0:81:63:12:9c: 9a:87:10:ae:1a:3c:66:5c:a2:a2:72:ca:f7:42:41: 6b:f0:48:39:38:e9:89:3a:d3:4c:fa:ad:f4:1b:f9: e5:01:26:ea:3e:e3:46:90:ef:24:5c:7d:6f:9f:9b: b4:66:7f:bc:18:05:0c:b7:75:32:02:44:5a:69:7a: a8:33:d0:ac:d2:46:cc:50:ed:e4:8b:d0:b2:c2:cd: 76:45:69:07:48:2f:b3:2a:23:9e:d0:9f:b1:6b:31: 4d:12:12:a1:31:ec:13:d4:c9:15:45:35:a1:a9:11: 47:09:a0:5b:53:02:c7:3e:a8:3b:e5:dc:c8:64:21: 5d:cf:66:93:8b:14:86:97:db:a5:f4:cf:d1:44:7e: 65:ab:56:4f:eb:a1:25:92:d1:9e:96:2e:8d:d0:a0: 75:b7:f0:6d:cc:a7:0a:02:f6:64:37:e6:7b:d0:4d: cd:05:1a:86:13:aa:bc:b6:85:cf:97:93:9e:7d:9c: 16:a9:e9:0b:2f:c0:22:ba:95:69:18:55:aa:dc:44: fe:e3:9a:7e:1e:4b:b1:f0:76:8b:37:56:bd:ff:1b: 0a:92:56:3a:54:86:bb:fd:52:ef:31:79:8f:67:73: de:4b:e7:df:ef:de:92:8e:3b:1b:1b:8b:1b:f3:54: fc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:70:F6:5A:C1:48:E6:63:77:47:3F:73:44:FC:35:A2:D4:1D:55:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/67301716-8f4a-3b96-99db-05bc4802baaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:61:ee:0a:3c:77:cd:1d:7c:de:14:d0:69:67:6f:1e:50:ab: 78:d5:a4:39:83:42:86:57:39:50:0f:ae:a7:19:c1:33:80:13: 73:35:4a:bc:80:9c:28:7f:77:c4:03:c7:ce:80:24:1f:89:3f: dd:c5:59:32:f9:84:30:0b:02:11:d6:db:3a:5e:84:a9:88:dc: 6e:f4:30:5e:55:43:93:87:ae:14:a3:c5:34:63:d8:d6:05:47: d1:08:b5:3a:ad:b0:e0:60:b3:bf:47:82:23:52:a4:9b:88:24: aa:f9:30:f7:b5:19:93:ea:5e:2c:2f:27:74:77:e5:ff:1f:4f: 0e:34:41:f6:29:7c:d6:54:87:a1:2b:02:58:8e:99:f4:a6:bf: f2:25:d8:a6:15:63:7a:b6:b0:89:be:fa:af:55:f8:a2:44:fb: c1:c4:9a:ab:18:47:a4:86:b2:4b:6f:c6:29:0d:75:15:8e:6d: a3:27:dd:f8:74:1b:d8:91:47:ec:2d:27:a0:4e:a1:83:fb:02: 4c:ea:f6:1a:60:51:70:8a:b1:15:f3:da:8d:c9:34:f5:f5:20: 57:9c:0e:81:83:38:ba:75:97:bc:92:46:db:f5:13:ce:77:11: 36:5e:03:d5:e7:6e:d0:c6:a9:c6:5e:a5:ba:06:80:25:9b:30: d5:d2:14:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/7iLA9QzCSZOuloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI1MDgyNzIxNTE0MloXDTI1MTEyNTIyNTE0MlowLzEtMCsGA1UEAxMk MmUxYWEyNGItMGRiOS00YmI2LTg5ZWMtYmEzODdhOGViOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY/NE5Htok0EsIFjEpyahxCuGjxmXKKicsr3 QkFr8Eg5OOmJOtNM+q30G/nlASbqPuNGkO8kXH1vn5u0Zn+8GAUMt3UyAkRaaXqo M9Cs0kbMUO3ki9Cyws12RWkHSC+zKiOe0J+xazFNEhKhMewT1MkVRTWhqRFHCaBb UwLHPqg75dzIZCFdz2aTixSGl9ul9M/RRH5lq1ZP66ElktGeli6N0KB1t/BtzKcK AvZkN+Z70E3NBRqGE6q8toXPl5OefZwWqekLL8AiupVpGFWq3ET+45p+Hkux8HaL N1a9/xsKklY6VIa7/VLvMXmPZ3PeS+ff796SjjsbG4sb81T8bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpw9lrBSOZjd0c/c0T8NaLUHVWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvNjczMDE3MTYtOGY0YS0z Yjk2LTk5ZGItMDViYzQ4MDJiYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OtVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFh7go8d80dfN4U0Glnbx5Qq3jVpDmDQoZXOVAPrqcZwTOAE3M1SryA nCh/d8QDx86AJB+JP93FWTL5hDALAhHW2zpehKmI3G70MF5VQ5OHrhSjxTRj2NYF R9EItTqtsOBgs79HgiNSpJuIJKr5MPe1GZPqXiwvJ3R35f8fTw40QfYpfNZUh6Er AliOmfSmv/Il2KYVY3q2sIm++q9V+KJE+8HEmqsYR6SGsktvxikNdRWObaMn3fh0 G9iRR+wtJ6BOoYP7Akzq9hpgUXCKsRXz2o3JNPX1IFecDoGDOLp1l7ySRtv1E853 ETZeA9XnbtDGqcZepboGgCWbMNXSFMc= -----END CERTIFICATE-----Generated at Thu Oct 9 20:04:25 2025 by rpki-client