$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/0b865a74-43ce-357e-8858-73c4efd70945.roa File: 0b865a74-43ce-357e-8858-73c4efd70945.roa (raw, json) Hash identifier: hQSEtK/hrUYDJFp8XN7EPciUfTD0w3jT9p1BV0JMpwE= Subject key identifier: C3:01:68:2A:2D:A1:28:B1:A9:A4:B2:7B:D2:4D:2A:22:07:3E:E7:2A Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F4328584AD3A0F86E8E5E8B703FBA0B80 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/0b865a74-43ce-357e-8858-73c4efd70945.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 40501 IP address blocks: 216.235.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f8:6e:8e:5e:8b:70:3f:ba:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=437e26d3-c2c1-46e5-a245-96ac0fa36617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:59:45:17:be:61:50:63:47:99:4f:b0:d5: 28:ab:90:23:49:66:63:7e:05:52:72:fb:74:3f:e5: 89:59:2a:1a:88:77:ce:5f:8c:db:2c:32:04:3f:06: a1:ae:2f:ee:ac:32:14:27:fb:89:5e:20:47:11:f6: 5e:65:10:7b:c4:7d:e8:5e:f0:86:85:32:03:de:a6: 4e:31:d2:25:da:26:fd:78:ab:36:d9:4c:b2:30:d5: 3f:91:ed:34:86:c5:55:47:58:5d:eb:80:28:1e:8d: 5c:3f:0b:e3:69:2a:ec:1f:85:ca:46:5c:52:8e:e0: c3:fd:15:7f:8d:6b:ba:02:40:2c:e4:b0:24:b5:be: e7:8a:ae:4f:21:e1:06:62:20:e7:bd:d1:70:95:83: 64:d6:0c:91:7e:d2:20:81:f2:b2:18:c0:6a:a4:1c: 0c:de:44:1c:61:11:bf:77:06:f1:e8:17:cc:17:d5: 63:92:84:02:3d:95:45:0e:10:36:44:6c:63:1b:cb: 48:0b:61:59:a3:11:ea:ee:6f:87:9f:1b:8a:75:0b: 2e:45:28:2c:27:4e:7c:21:50:9b:0f:08:61:ba:59: 38:12:eb:33:85:95:16:36:f7:b2:00:a1:91:99:7e: 6d:d9:bd:6e:04:a1:e6:6d:fa:a2:df:e0:42:f5:65: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:01:68:2A:2D:A1:28:B1:A9:A4:B2:7B:D2:4D:2A:22:07:3E:E7:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/0b865a74-43ce-357e-8858-73c4efd70945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:8a:33:ef:5b:02:12:8d:38:96:e5:60:d1:30:93:7e:08:29: c3:7b:c0:1c:57:74:53:8f:67:b2:92:8c:b7:f4:76:84:e4:87: c7:2d:45:3f:61:ac:85:06:bf:74:17:60:f7:08:a2:c0:26:6e: 42:f6:85:84:46:0a:43:d7:3a:36:08:ed:ce:9c:47:fc:f0:44: 8d:a0:ea:60:66:86:03:a6:d5:fe:56:2f:55:bb:07:a7:fd:85: 76:2d:03:16:d3:c7:4f:67:75:38:5e:fd:bd:e9:6d:7d:8b:35: 49:5a:43:8e:58:b5:92:2a:03:cd:a6:32:6c:55:35:b4:ef:3e: 1c:3a:de:cf:4a:e2:25:e6:b1:3d:53:3d:7f:39:cd:22:91:78: 75:fb:27:02:42:f8:30:a2:3c:04:9f:58:1d:b9:da:30:52:3a: 9d:e6:88:ae:bc:28:33:00:1b:f4:9a:a8:4f:56:b6:fb:7f:01: aa:a4:c3:15:64:e6:7b:d5:3c:f1:e6:09:b1:6a:1d:48:ac:a8: 58:19:66:27:f3:fe:11:82:7b:01:4f:1f:ef:70:cd:91:37:bc: 33:8c:1c:e8:bc:13:2b:84:b6:d0:55:4e:59:83:11:64:3d:8f: c7:84:73:c5:09:50:a2:77:35:b0:1a:e0:ad:61:ca:15:ab:2b: ee:a7:f9:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPhujl6LcD+6C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NDM3ZTI2ZDMtYzJjMS00NmU1LWEyNDUtOTZhYzBmYTM2NjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZxZRRe+YVBjR5lPsNUoq5AjSWZjfgVScvt0 P+WJWSoaiHfOX4zbLDIEPwahri/urDIUJ/uJXiBHEfZeZRB7xH3oXvCGhTID3qZO MdIl2ib9eKs22UyyMNU/ke00hsVVR1hd64AoHo1cPwvjaSrsH4XKRlxSjuDD/RV/ jWu6AkAs5LAktb7niq5PIeEGYiDnvdFwlYNk1gyRftIggfKyGMBqpBwM3kQcYRG/ dwbx6BfMF9VjkoQCPZVFDhA2RGxjG8tIC2FZoxHq7m+HnxuKdQsuRSgsJ058IVCb Dwhhulk4EuszhZUWNveyAKGRmX5t2b1uBKHmbfqi3+BC9WXsTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMBaCotoSixqaSye9JNKiIHPucqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvMGI4NjVhNzQtNDNjZS0z NTdlLTg4NTgtNzNjNGVmZDcwOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OtfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiKM+9bAhKNOJblYNEwk34IKcN7wBxXdFOPZ7KSjLf0doTkh8ctRT9h rIUGv3QXYPcIosAmbkL2hYRGCkPXOjYI7c6cR/zwRI2g6mBmhgOm1f5WL1W7B6f9 hXYtAxbTx09ndThe/b3pbX2LNUlaQ45YtZIqA82mMmxVNbTvPhw63s9K4iXmsT1T PX85zSKReHX7JwJC+DCiPASfWB252jBSOp3miK68KDMAG/SaqE9Wtvt/AaqkwxVk 5nvVPPHmCbFqHUisqFgZZifz/hGCewFPH+9wzZE3vDOMHOi8EyuEttBVTlmDEWQ9 j8eEc8UJUKJ3NbAa4K1hyhWrK+6n+Sg= -----END CERTIFICATE-----Generated at Thu Aug 21 03:56:48 2025 by rpki-client