$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7be8111d-0e20-386d-8dfb-2135cf16f86d.roa File: 7be8111d-0e20-386d-8dfb-2135cf16f86d.roa (raw, json) Hash identifier: AgjTAdW8y/Znpb53Jsxe0l3H6y9MeGvsC5xJkq+snt0= Subject key identifier: 2E:87:C1:DD:3D:43:FE:85:10:F2:42:83:A1:41:38:7D:C5:96:09:2E Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AFC1C09304992E67700ECEB00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7be8111d-0e20-386d-8dfb-2135cf16f86d.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 15204 IP address blocks: 216.106.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:09:30:49:92:e6:77:00:ec:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=c3132dca-1083-402d-8236-bd60067afdd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:78:6b:69:9c:fa:95:cf:6a:7f:08:b6:14: 0e:fc:98:be:b0:b7:35:62:6b:f9:f5:45:68:67:36: 25:2d:62:d1:cb:67:01:2f:dd:c4:08:3f:50:b5:4f: fb:f4:67:91:26:ff:3d:de:63:d8:a4:70:33:1d:66: ae:05:48:54:86:b8:3f:1a:c0:2b:de:d2:0f:40:7c: 60:8f:06:12:03:0d:d6:ad:fc:74:f1:04:72:86:22: 14:d6:bf:b7:9f:11:65:82:42:50:52:58:21:17:24: a5:50:47:5a:9c:5f:40:ba:7c:2c:b2:de:d8:05:f8: 2c:94:2e:5c:11:71:97:25:47:17:bc:10:5e:c0:e2: 0f:e4:0d:04:9e:05:3b:8f:8e:5a:27:d4:e5:b4:98: 7e:99:da:13:ab:01:d3:7f:58:de:5e:c3:23:2c:96: 0f:7b:4f:b6:5f:50:c8:10:01:50:8a:d7:ac:e1:ea: ec:ed:a0:72:11:79:75:d4:95:1d:f3:49:1b:9c:42: 57:70:fe:7f:28:54:ef:46:71:24:ed:f8:52:a3:21: fe:d4:05:da:e6:13:11:7f:4f:46:a2:a8:bc:cc:7a: 11:01:f2:80:e2:06:61:77:80:f2:c4:82:93:f7:07: 66:09:27:0a:02:7f:93:f7:e5:55:1b:3b:fc:fa:b3: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:87:C1:DD:3D:43:FE:85:10:F2:42:83:A1:41:38:7D:C5:96:09:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7be8111d-0e20-386d-8dfb-2135cf16f86d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a1:a0:9c:1b:4c:1b:42:b5:01:ae:12:3e:1a:40:e7:03:9d: fb:43:db:9d:b2:28:74:a1:08:48:8f:c8:a7:73:04:35:3f:cf: 3b:04:5a:d2:4e:5c:b3:d2:2f:a0:93:4b:cf:22:52:64:98:1f: 48:f2:c0:14:46:80:e8:a0:dc:f0:b9:c4:5c:a5:0e:ce:96:32: 50:60:f2:fa:46:b6:65:57:75:f1:6f:2b:39:0d:cb:59:5e:7a: e6:1e:3f:d6:91:a4:5f:25:d9:d4:89:fc:32:39:7e:2d:66:4b: 6d:44:39:7e:00:94:e1:57:13:88:3b:d7:13:14:cd:f1:55:ed: 75:b0:55:52:a3:d5:8e:9d:01:af:7b:87:35:bb:d2:d9:86:96: f6:a7:53:20:c8:3a:7d:8b:ea:ee:72:98:e1:53:9c:f8:ad:33: b8:c2:3b:74:d9:4d:e9:ac:46:ea:17:08:30:44:02:fe:43:8f: 4e:23:1c:09:55:1c:e9:bd:99:ce:78:9c:eb:83:8a:14:61:eb: c5:a5:a1:46:f3:9d:3d:be:f3:2b:4c:cb:06:6f:c5:52:1c:fb: 2c:c6:08:b0:84:28:66:b3:eb:d3:ef:7b:41:83:3b:10:b7:52: 06:08:8d:71:08:27:71:1e:aa:fe:8a:47:5b:40:97:4c:ef:85: ab:a3:1c:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAkwSZLmdwDs6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YzMxMzJkY2EtMTA4My00MDJkLTgyMzYtYmQ2MDA2N2FmZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI54a2mc+pXPan8IthQO/Ji+sLc1Ymv59UVo ZzYlLWLRy2cBL93ECD9QtU/79GeRJv893mPYpHAzHWauBUhUhrg/GsAr3tIPQHxg jwYSAw3Wrfx08QRyhiIU1r+3nxFlgkJQUlghFySlUEdanF9Aunwsst7YBfgslC5c EXGXJUcXvBBewOIP5A0EngU7j45aJ9TltJh+mdoTqwHTf1jeXsMjLJYPe0+2X1DI EAFQites4ers7aByEXl11JUd80kbnEJXcP5/KFTvRnEk7fhSoyH+1AXa5hMRf09G oqi8zHoRAfKA4gZhd4DyxIKT9wdmCScKAn+T9+VVGzv8+rPnbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6Hwd09Q/6FEPJCg6FBOH3FlgkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvN2JlODExMWQtMGUyMC0z ODZkLThkZmItMjEzNWNmMTZmODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2GrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6hoJwbTBtCtQGuEj4aQOcDnftD252yKHShCEiPyKdzBDU/zzsEWtJO XLPSL6CTS88iUmSYH0jywBRGgOig3PC5xFylDs6WMlBg8vpGtmVXdfFvKzkNy1le euYeP9aRpF8l2dSJ/DI5fi1mS21EOX4AlOFXE4g71xMUzfFV7XWwVVKj1Y6dAa97 hzW70tmGlvanUyDIOn2L6u5ymOFTnPitM7jCO3TZTemsRuoXCDBEAv5Dj04jHAlV HOm9mc54nOuDihRh68WloUbznT2+8ytMywZvxVIc+yzGCLCEKGaz69Pve0GDOxC3 UgYIjXEIJ3Eeqv6KR1tAl0zvhaujHAk= -----END CERTIFICATE-----Generated at Fri Oct 10 14:06:21 2025 by rpki-client