$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/96567efd-7f1a-34a0-aa70-8cde1c730107.roa File: 96567efd-7f1a-34a0-aa70-8cde1c730107.roa (raw, json) Hash identifier: 1ggaRimgTKSQksakZkn157PT45fPnGjy4FiZ9hJGEYU= Subject key identifier: 24:99:68:CF:D9:B3:A2:E3:63:62:80:1B:50:94:54:89:F7:71:C6:60 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B4D11E2CCA838B0F34E7C9400 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/96567efd-7f1a-34a0-aa70-8cde1c730107.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 401415 IP address blocks: 216.249.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:e2:cc:a8:38:b0:f3:4e:7c:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=9de91fa0-b7ce-4aa2-8cc1-b91935d3121c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5e:c7:60:dd:46:8f:5a:2c:09:ba:73:37:0f: 1e:6f:a7:85:1c:8e:81:f3:86:ef:32:6f:f2:8d:d0: e7:2d:01:1a:62:1c:49:a7:1c:dd:34:ea:23:5d:e0: aa:91:20:fa:79:1a:71:38:89:db:af:da:ab:e2:3b: ec:c9:4f:ef:dd:c7:2c:98:a9:2c:e0:cd:f5:f7:b4: 61:e3:f3:79:29:10:8d:29:01:6f:ae:38:ea:98:1e: c9:46:3f:85:c6:dc:15:16:66:a8:0d:47:25:03:ac: ed:3e:af:af:fc:d5:99:8a:5f:3c:c1:89:9e:c9:0e: da:d1:fd:7b:81:ac:12:a8:92:c1:ab:98:b9:50:f8: 96:ae:85:83:ab:20:75:3c:bd:0b:23:b3:71:84:48: f9:d3:b1:74:95:f4:aa:81:91:06:d5:6e:ff:e3:d0: fc:1e:e7:97:ff:0c:f4:6a:60:ac:65:ea:09:c4:7a: 5e:8d:51:3b:0b:40:fa:c3:bb:e8:b8:45:df:3a:7f: b3:a4:2d:c4:43:96:b1:73:c2:4b:e4:3a:32:67:a6: 91:26:6a:93:2d:78:f5:d2:68:49:aa:66:52:c0:5f: f3:51:33:37:03:4e:ab:55:2c:c4:bc:34:38:11:e4: 38:c7:03:91:da:ce:02:57:93:00:6e:65:5c:c8:80: a5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:99:68:CF:D9:B3:A2:E3:63:62:80:1B:50:94:54:89:F7:71:C6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/96567efd-7f1a-34a0-aa70-8cde1c730107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:3d:bb:c1:37:da:90:35:14:ce:81:57:52:28:44:ad:c2:f7: d9:db:c1:e9:93:84:4a:14:84:1b:61:f3:35:99:75:ff:bf:21: 81:3f:ab:5f:cb:dd:67:a7:29:e4:53:b2:c0:c0:26:7b:0c:97: d7:df:34:12:15:b0:0f:d8:5c:7d:53:8c:9b:42:10:2f:00:d2: 2c:f2:10:45:f5:71:db:e0:82:78:ac:e3:4e:fb:6c:d3:d2:ac: dc:a9:56:d3:c9:43:92:6d:c0:b9:9e:75:ba:47:25:ec:da:b9: 2f:66:33:08:e2:56:9c:9f:e6:af:53:0d:a9:97:fa:28:26:4d: 71:d3:82:40:4f:5f:50:e4:f0:97:e4:b6:e7:ba:6d:dc:d8:07: fb:c2:96:a1:8d:d4:09:58:56:d0:49:62:e0:b0:fe:ba:bf:ee: d4:25:25:cf:6b:91:e0:87:45:6f:22:86:45:13:46:84:91:9d: e0:a9:9b:b2:91:5f:59:0b:5f:66:53:4a:ca:60:39:02:c1:d0: 39:6c:f6:20:08:57:c6:aa:df:74:61:f3:9d:0e:8c:7f:4d:99: d1:f8:4d:19:76:aa:6e:42:95:d1:d0:e7:4c:ce:37:d1:09:60: 0a:f8:8a:a0:b3:6a:3d:bb:ce:27:4e:f6:2d:e4:17:25:41:a5: 78:2c:dd:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEeLMqDiw8058lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk OWRlOTFmYTAtYjdjZS00YWEyLThjYzEtYjkxOTM1ZDMxMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo17HYN1Gj1osCbpzNw8eb6eFHI6B84bvMm/y jdDnLQEaYhxJpxzdNOojXeCqkSD6eRpxOInbr9qr4jvsyU/v3ccsmKks4M3197Rh 4/N5KRCNKQFvrjjqmB7JRj+FxtwVFmaoDUclA6ztPq+v/NWZil88wYmeyQ7a0f17 gawSqJLBq5i5UPiWroWDqyB1PL0LI7NxhEj507F0lfSqgZEG1W7/49D8HueX/wz0 amCsZeoJxHpejVE7C0D6w7vouEXfOn+zpC3EQ5axc8JL5DoyZ6aRJmqTLXj10mhJ qmZSwF/zUTM3A06rVSzEvDQ4EeQ4xwOR2s4CV5MAbmVcyICl2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSZaM/Zs6LjY2KAG1CUVIn3ccZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvOTY1NjdlZmQtN2YxYS0z NGEwLWFhNzAtOGNkZTFjNzMwMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PnKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD89u8E32pA1FM6BV1IoRK3C99nbwemThEoUhBth8zWZdf+/IYE/q1/L 3WenKeRTssDAJnsMl9ffNBIVsA/YXH1TjJtCEC8A0izyEEX1cdvggnis4077bNPS rNypVtPJQ5JtwLmedbpHJezauS9mMwjiVpyf5q9TDamX+igmTXHTgkBPX1Dk8Jfk tue6bdzYB/vClqGN1AlYVtBJYuCw/rq/7tQlJc9rkeCHRW8ihkUTRoSRneCpm7KR X1kLX2ZTSspgOQLB0Dls9iAIV8aq33Rh850OjH9NmdH4TRl2qm5CldHQ50zON9EJ YAr4iqCzaj27zidO9i3kFyVBpXgs3fE= -----END CERTIFICATE-----Generated at Fri Oct 10 14:03:36 2025 by rpki-client