$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/2df21a0f-642d-3655-9fc7-78bdee0fc2fe.roa File: 2df21a0f-642d-3655-9fc7-78bdee0fc2fe.roa (raw, json) Hash identifier: z0YC2gPWgIgcosLWeAU35iEiGPLzUVJrOYkY5a2SqSc= Subject key identifier: 18:BE:3D:FF:77:D7:56:B1:3E:BC:01:29:31:BF:9E:08:9E:99:67:10 Certificate issuer: /CN=44a561a3-0ac9-4535-922f-85de35ad8de7 Certificate serial: 010D0C9F4328584B21CC40E2B6484E08E42A1C60 Authority key identifier: 2C:40:05:53:53:46:71:E6:5F:7D:B7:0F:1B:6F:F5:D6:91:58:19:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/2df21a0f-642d-3655-9fc7-78bdee0fc2fe.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 8075 IP address blocks: 216.238.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:40:e2:b6:48:4e:08:e4:2a:1c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a561a3-0ac9-4535-922f-85de35ad8de7 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=6d05127b-2b24-4f3d-8708-5ba3810c0a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:b3:b5:08:7f:1e:ac:2c:51:48:29:7c:20: 23:d9:03:97:4f:ce:39:2f:a3:bd:ea:f0:f0:9e:7d: 7e:c6:18:d9:20:7f:ad:6e:ae:45:02:ec:bc:a2:6e: c3:d0:43:a3:e3:6a:6a:86:97:df:88:c3:c9:58:c2: d1:df:72:d6:54:c0:0a:c7:57:e6:33:43:32:71:3b: 7c:92:3b:56:8e:a3:c1:bd:a7:f0:1d:57:3c:40:eb: 95:5b:c6:03:90:5a:b8:c5:44:36:48:af:c4:0e:a6: 56:02:44:a6:1d:de:43:79:d5:7f:77:84:28:18:9c: 82:89:72:3b:00:d9:b6:5c:e5:b6:ca:5e:52:b1:8b: 3e:f4:92:5f:32:cd:e2:35:a4:8f:73:a9:fa:6b:3f: ac:9e:10:56:d9:70:e6:cd:a4:5e:dd:e2:94:d1:96: 63:9b:09:e0:ca:00:50:00:1a:41:31:66:5b:fa:71: 4f:b5:c9:18:78:91:95:9d:57:06:5c:09:3f:01:6c: 5b:45:9e:79:8f:30:55:cf:1a:75:c8:b1:2b:dd:f2: c1:11:1d:f8:e3:74:1b:1a:f6:cd:17:55:a7:1b:41: 49:88:71:f8:c6:74:2a:1c:e6:2d:a4:e8:2b:28:e0: e8:a6:ec:aa:04:e9:21:8b:13:1f:7c:10:4a:b7:71: 02:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BE:3D:FF:77:D7:56:B1:3E:BC:01:29:31:BF:9E:08:9E:99:67:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/2df21a0f-642d-3655-9fc7-78bdee0fc2fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.crl X509v3 Authority Key Identifier: keyid:2C:40:05:53:53:46:71:E6:5F:7D:B7:0F:1B:6F:F5:D6:91:58:19:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer sbgp-ipAddrBlock: critical IPv4: 216.238.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:78:7c:11:d9:84:98:f2:8f:2d:34:c8:c0:12:74:e2:32:6e: e0:58:e7:1f:b2:b0:87:f7:0d:a5:4b:23:be:20:b7:d7:28:ee: 07:d4:38:2e:8d:26:0f:7d:56:25:b2:be:04:0e:0e:8f:5d:fa: 4e:f6:01:80:c5:52:e8:19:ff:5f:f6:01:2c:a7:b0:4c:8f:70: 62:cb:66:65:fa:a4:b9:43:ec:d6:f3:47:00:0d:9e:51:f0:bc: c7:7e:3f:ed:04:5a:7a:99:57:d1:02:ce:61:c1:17:65:b9:a7: 39:cf:4b:f7:db:4f:ec:85:49:aa:8a:54:f4:32:30:51:75:dc: e1:98:19:cd:53:90:50:a2:61:32:fe:a5:2a:36:8d:2e:e8:a4: c8:50:05:a4:d1:d8:16:8b:b3:14:6e:d0:da:d5:84:1d:c2:b8: 66:e7:cb:d2:a1:31:4e:3f:42:ac:ca:de:e2:9b:4e:5a:9b:89: 45:11:39:e8:d1:ec:33:d2:96:f2:fd:53:1a:b6:ef:90:9d:20: 77:f0:40:a0:27:2d:b7:73:d6:5d:11:5c:4a:f0:52:2b:c3:65: 30:39:b8:5e:76:38:c7:32:83:2e:e2:7d:6c:9a:12:cc:37:97: 1e:f0:32:d8:d8:87:de:c2:e6:d6:68:90:af:a6:39:86:e7:14: 22:a6:1b:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzEDitkhOCOQqHGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRhNTYxYTMtMGFjOS00NTM1LTkyMmYtODVkZTM1YWQ4 ZGU3MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NmQwNTEyN2ItMmIyNC00ZjNkLTg3MDgtNWJhMzgxMGMwYTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLWztQh/HqwsUUgpfCAj2QOXT845L6O96vDw nn1+xhjZIH+tbq5FAuy8om7D0EOj42pqhpffiMPJWMLR33LWVMAKx1fmM0MycTt8 kjtWjqPBvafwHVc8QOuVW8YDkFq4xUQ2SK/EDqZWAkSmHd5DedV/d4QoGJyCiXI7 ANm2XOW2yl5SsYs+9JJfMs3iNaSPc6n6az+snhBW2XDmzaRe3eKU0ZZjmwngygBQ ABpBMWZb+nFPtckYeJGVnVcGXAk/AWxbRZ55jzBVzxp1yLEr3fLBER3443QbGvbN F1WnG0FJiHH4xnQqHOYtpOgrKODopuyqBOkhixMffBBKt3ECrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBi+Pf9311axPrwBKTG/ngiemWcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NGE1 NjFhMy0wYWM5LTQ1MzUtOTIyZi04NWRlMzVhZDhkZTcvMmRmMjFhMGYtNjQyZC0z NjU1LTlmYzctNzhiZGVlMGZjMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDRhNTYxYTMtMGFjOS00NTM1LTky MmYtODVkZTM1YWQ4ZGU3LzQ0YTU2MWEzLTBhYzktNDUzNS05MjJmLTg1ZGUzNWFk OGRlNy5jcmwwHwYDVR0jBBgwFoAULEAFU1NGceZffbcPG2/11pFYGS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NGE1NjFhMy0wYWM5LTQ1MzUtOTIyZi04NWRl MzVhZDhkZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O6HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx4fBHZhJjyjy00yMASdOIybuBY5x+ysIf3DaVLI74gt9co7gfUOC6N Jg99ViWyvgQODo9d+k72AYDFUugZ/1/2ASynsEyPcGLLZmX6pLlD7NbzRwANnlHw vMd+P+0EWnqZV9ECzmHBF2W5pznPS/fbT+yFSaqKVPQyMFF13OGYGc1TkFCiYTL+ pSo2jS7opMhQBaTR2BaLsxRu0NrVhB3CuGbny9KhMU4/QqzK3uKbTlqbiUUROejR 7DPSlvL9Uxq275CdIHfwQKAnLbdz1l0RXErwUivDZTA5uF52OMcygy7ifWyaEsw3 lx7wMtjYh97C5tZokK+mOYbnFCKmG1g= -----END CERTIFICATE-----Generated at Thu Oct 9 03:40:10 2025 by rpki-client