$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa File: 6f3608bf-3d7e-3946-adc4-5ab836814644.roa (raw, json) Hash identifier: bHYKX2RBakbQTsr3ru3KxaXtFaqnUOHpNxXZQdK0PYk= Subject key identifier: CE:60:0F:52:EB:21:24:62:1A:E2:A8:CB:98:22:99:2E:18:65:A0:BC Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584AFEE6A7D972AEDC9B78C47040 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 8635 IP address blocks: 16.1.38.0/24 maxlen: 24 16.240.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a7:d9:72:ae:dc:9b:78:c4:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=439f7009-82ef-46f8-8943-2b809048aa75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2d:d8:3d:0a:61:cb:35:f5:a1:0e:62:39:77: 28:94:f7:77:3d:3b:68:55:3b:db:6d:59:fa:33:9a: 40:25:bd:d3:67:4f:ae:72:09:25:02:56:5c:e2:ef: e3:c6:c6:62:57:b7:4b:65:d2:f9:3e:a2:33:74:4d: 1f:89:1f:ed:2d:df:b0:de:bd:82:98:79:6c:44:d4: 03:c0:74:0d:e5:05:0d:13:b5:45:40:51:82:bf:79: 15:98:2c:53:a5:7b:2f:88:51:2c:bd:11:b1:2c:4d: e9:4b:15:7f:9c:09:6f:bf:16:13:20:48:18:80:be: 6d:8f:c4:f2:d8:af:48:9d:35:d2:8b:67:7e:f7:b0: 2c:c7:44:da:0d:8d:b4:bb:0c:a2:db:c2:79:6f:85: 7d:b1:37:5e:ba:c4:f8:45:1d:04:52:fc:21:ad:0b: 16:b9:a9:56:d4:ab:81:bc:4a:29:97:87:b7:d2:e0: 72:07:6a:ae:a9:e2:92:03:72:a9:cb:f7:dc:c7:95: 99:b3:28:e9:bb:37:cc:2c:de:d0:79:47:01:fd:90: a3:43:11:55:9f:6a:6b:d3:cb:fb:a0:75:66:d4:f4: 41:35:c8:f9:bc:ec:d1:4f:82:de:9e:ac:69:b2:4d: 5a:10:aa:6f:16:60:d8:e6:1b:96:83:89:b9:c0:29: 03:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:60:0F:52:EB:21:24:62:1A:E2:A8:CB:98:22:99:2E:18:65:A0:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.1.38.0/24 16.240.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:c4:f0:00:24:21:01:97:2d:73:6b:dd:ac:62:79:14:33:47: a9:e2:ef:1a:4b:7e:50:4f:52:a7:0b:ee:eb:c1:ec:1f:7d:25: e8:2c:b8:ab:bc:30:d1:f3:1e:17:8d:ad:cf:23:72:aa:24:c7: 87:71:d1:b5:61:68:01:67:9c:3c:82:70:80:8e:3f:a8:48:7d: cb:99:77:8f:e3:36:05:4c:a3:be:b6:95:fb:39:f2:6d:f6:b1: 45:1a:da:37:05:9a:6a:ab:7d:d6:08:3f:27:72:f7:23:dc:0e: b2:2d:ce:37:4d:c1:a7:84:99:c5:cb:60:0a:6f:d9:3a:24:57: 43:87:17:ab:34:b8:fd:52:e5:2f:ef:57:0a:fa:5d:37:12:4a: 2b:53:dc:91:5b:62:b4:fb:24:15:c0:53:a6:99:41:a2:18:4f: 2d:ea:09:e3:f0:eb:20:d0:37:67:f5:83:17:61:c4:36:d8:f6: 9a:22:d3:58:be:f0:42:1b:49:c0:91:08:28:bf:46:43:17:c0: ae:80:e4:ff:20:53:4d:e5:6d:12:95:16:75:74:ca:4a:81:dc: 8e:b8:62:0c:44:2d:3e:49:fe:0d:0e:5a:77:6e:04:6f:72:9d: a3:7d:5c:6f:0b:f9:0e:83:6a:8d:e4:f1:d5:ec:43:a9:3e:d7: 99:72:a4:e7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEr+5qfZcq7cm3jEcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NDM5ZjcwMDktODJlZi00NmY4LTg5NDMtMmI4MDkwNDhhYTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C3YPQphyzX1oQ5iOXcolPd3PTtoVTvbbVn6 M5pAJb3TZ0+ucgklAlZc4u/jxsZiV7dLZdL5PqIzdE0fiR/tLd+w3r2CmHlsRNQD wHQN5QUNE7VFQFGCv3kVmCxTpXsviFEsvRGxLE3pSxV/nAlvvxYTIEgYgL5tj8Ty 2K9InTXSi2d+97Asx0TaDY20uwyi28J5b4V9sTdeusT4RR0EUvwhrQsWualW1KuB vEopl4e30uByB2quqeKSA3Kpy/fcx5WZsyjpuzfMLN7QeUcB/ZCjQxFVn2pr08v7 oHVm1PRBNcj5vOzRT4Lenqxpsk1aEKpvFmDY5huWg4m5wCkDJwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFM5gD1LrISRiGuKoy5gimS4YZaC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNmYzNjA4YmYtM2Q3ZS0z OTQ2LWFkYzQtNWFiODM2ODE0NjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAEAEmAwQA EPACMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHrE8AAkIQGXLXNr3axieRQzR6ni7xpLflBPUqcL7uvB7B99 JegsuKu8MNHzHheNrc8jcqokx4dx0bVhaAFnnDyCcICOP6hIfcuZd4/jNgVMo762 lfs58m32sUUa2jcFmmqrfdYIPydy9yPcDrItzjdNwaeEmcXLYApv2TokV0OHF6s0 uP1S5S/vVwr6XTcSSitT3JFbYrT7JBXAU6aZQaIYTy3qCePw6yDQN2f1gxdhxDbY 9poi01i+8EIbScCRCCi/RkMXwK6A5P8gU03lbRKVFnV0ykqB3I64YgxELT5J/g0O WnduBG9ynaN9XG8L+Q6Dao3k8dXsQ6k+15lypOc= -----END CERTIFICATE-----Generated at Thu Oct 9 03:41:23 2025 by rpki-client