$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/2999d207-8783-3b31-adb0-be2d20cbf0a7.roa File: 2999d207-8783-3b31-adb0-be2d20cbf0a7.roa (raw, json) Hash identifier: X+arxyT9LVVNT3lWrPhX8OgbslQEPPegLPvVTsB5OjA= Subject key identifier: 06:68:20:89:3F:EB:AA:24:D3:90:61:97:08:36:88:A9:81:7A:4D:B4 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B2FC1959EBD9D22903383D480 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/2999d207-8783-3b31-adb0-be2d20cbf0a7.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 31898 IP address blocks: 216.115.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:95:9e:bd:9d:22:90:33:83:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=5b623871-75d1-4ec8-b36a-3f3415395fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:14:5d:72:b9:b1:64:58:b1:95:8b:18:ff: 57:7d:11:ce:5a:78:3a:67:f4:74:a9:e8:25:c6:02: a5:cd:f0:c3:3b:b4:f9:37:1a:9b:3c:42:7b:67:12: 2d:98:a0:19:e6:8b:00:d5:a2:a0:76:40:f4:02:9c: 64:f1:46:a5:3b:4a:91:a2:80:72:42:62:94:65:4d: cf:dd:36:10:d9:1d:33:4d:54:3f:c7:42:84:3e:09: e7:05:c5:c0:5b:ba:66:03:6e:92:1b:db:18:01:cc: a7:9a:89:5c:df:16:56:a1:64:14:27:a8:2b:95:76: be:1e:0d:68:96:d2:d7:27:b7:7f:f9:39:67:9e:46: 1d:0a:55:e0:17:66:5b:ec:fe:a0:46:24:92:92:62: 0e:81:03:75:2e:67:ed:fa:41:a3:8d:d9:bf:e2:70: 50:73:a3:dc:9e:24:7a:30:d5:07:54:87:7e:6e:5d: 44:10:f9:58:c9:22:75:1f:b9:a9:97:31:a0:78:a3: af:4c:f9:b9:39:aa:50:ea:ce:aa:30:e6:e9:1f:d5: 98:51:e3:6d:13:b8:a9:6e:33:88:5e:a6:02:43:45: 82:55:8f:c7:85:df:c6:ff:bb:73:88:b9:df:5a:a1: 12:ee:eb:6b:a0:bf:3d:ba:a9:15:97:8c:58:7f:8d: 86:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:68:20:89:3F:EB:AA:24:D3:90:61:97:08:36:88:A9:81:7A:4D:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/2999d207-8783-3b31-adb0-be2d20cbf0a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 216.115.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:37:5e:59:25:85:38:7e:e0:24:77:12:32:b6:2f:91:53:ac: b9:29:36:60:09:bd:bc:2e:c4:c1:d5:3d:b3:e4:03:b7:6f:ec: e1:15:e6:bf:09:47:05:c3:b3:9e:71:93:67:ee:a0:d7:68:33: 4c:d4:d4:f3:3e:16:9f:f2:35:68:d1:22:ac:85:cd:b5:31:1d: e5:4a:20:74:40:05:6c:d0:0c:f7:c2:58:0c:f5:de:3c:fd:ee: a3:66:f8:1c:77:35:13:70:6d:02:4c:71:78:17:7c:c8:fd:b0: 68:67:73:c5:16:bb:14:49:31:65:f7:bd:ef:e3:60:f3:89:84: 37:fa:41:95:40:e1:1d:6a:c7:1d:ec:6b:d5:75:c6:75:0d:80: c2:03:e5:a5:dc:26:bf:93:1a:04:f0:f2:5d:5f:b5:d6:a5:7c: 6a:c3:40:1c:8b:cd:fc:88:b1:94:c9:c5:bb:08:75:fa:d6:13: 0f:33:05:b8:3f:22:9b:a6:29:aa:9d:4c:ee:12:b5:d1:29:d9: 5d:e4:66:6e:7a:51:fe:be:6c:7d:b3:c2:1f:35:33:2e:7f:31: 59:08:19:1a:c4:db:4a:59:2a:9b:4e:91:ce:dd:5e:6e:61:86: 27:33:40:9f:b3:07:fb:e5:37:6d:61:76:35:44:0a:48:db:03: 5f:68:a6:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZWevZ0ikDOD1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NWI2MjM4NzEtNzVkMS00ZWM4LWIzNmEtM2YzNDE1Mzk1ZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFoUXXK5sWRYsZWLGP9XfRHOWng6Z/R0qegl xgKlzfDDO7T5NxqbPEJ7ZxItmKAZ5osA1aKgdkD0Apxk8UalO0qRooByQmKUZU3P 3TYQ2R0zTVQ/x0KEPgnnBcXAW7pmA26SG9sYAcynmolc3xZWoWQUJ6grlXa+Hg1o ltLXJ7d/+TlnnkYdClXgF2Zb7P6gRiSSkmIOgQN1Lmft+kGjjdm/4nBQc6PcniR6 MNUHVId+bl1EEPlYySJ1H7mplzGgeKOvTPm5OapQ6s6qMObpH9WYUeNtE7ipbjOI XqYCQ0WCVY/Hhd/G/7tziLnfWqES7utroL89uqkVl4xYf42GywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZoIIk/66ok05Bhlwg2iKmBek20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMjk5OWQyMDctODc4My0z YjMxLWFkYjAtYmUyZDIwY2JmMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg3XlklhTh+4CR3EjK2L5FTrLkpNmAJvbwuxMHVPbPkA7dv7OEV5r8J RwXDs55xk2fuoNdoM0zU1PM+Fp/yNWjRIqyFzbUxHeVKIHRABWzQDPfCWAz13jz9 7qNm+Bx3NRNwbQJMcXgXfMj9sGhnc8UWuxRJMWX3ve/jYPOJhDf6QZVA4R1qxx3s a9V1xnUNgMID5aXcJr+TGgTw8l1ftdalfGrDQByLzfyIsZTJxbsIdfrWEw8zBbg/ IpumKaqdTO4StdEp2V3kZm56Uf6+bH2zwh81My5/MVkIGRrE20pZKptOkc7dXm5h hiczQJ+zB/vlN21hdjVECkjbA19opok= -----END CERTIFICATE-----Generated at Thu Oct 9 01:23:02 2025 by rpki-client