$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa File: 767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa (raw, json) Hash identifier: 1YcBqGpdFVtDLKcbsluNZ9q87PrI3Bknvo5KJwxOJvc= Subject key identifier: 88:D0:41:7E:97:89:81:D1:5D:72:BE:9E:90:5B:7C:EF:CA:A9:BB:08 Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F4328584AD23BAFE42EB624416A33A9A0 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 40501 IP address blocks: 216.235.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:af:e4:2e:b6:24:41:6a:33:a9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=413af218-be48-474f-bd89-037db1ae5f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:a5:9e:60:0b:08:d9:7f:d0:dc:26:15:28: ed:32:cd:17:8b:17:0e:7b:c3:01:65:55:33:13:34: 50:09:90:04:dc:0e:64:ad:ef:90:89:56:91:55:db: 0f:92:e3:3d:58:ab:0a:8f:b8:9d:6d:a0:4b:8a:70: a5:c8:6a:5b:7f:91:92:0e:a6:70:47:4d:71:a1:b9: d5:0d:43:17:f6:13:ff:a9:e1:06:d8:cf:7c:0a:ae: 7f:9c:c0:a3:24:46:7d:27:35:12:9a:73:7a:49:e5: 8b:bc:a5:15:40:fe:ad:57:00:a7:20:ec:a1:a3:15: fc:d6:19:26:a1:bf:18:94:74:f6:45:3c:b7:09:6a: e1:f2:68:db:71:e8:8c:c8:fa:80:e8:6d:51:7b:4f: 8c:f8:ed:72:f3:6c:75:b2:9e:c3:cf:a5:d3:fb:49: a5:db:76:2c:79:5f:77:26:c5:0d:cf:e3:7a:7e:91: 2a:a8:18:1c:7f:c6:e9:05:c4:15:f0:53:bf:76:5d: de:a7:54:5d:22:63:2d:fa:93:b9:f4:5f:6f:d4:4e: 95:4e:f7:b4:bf:0e:0e:3b:fd:20:e1:0e:3e:ab:68: c1:41:38:1e:c2:86:36:68:36:84:98:f0:f6:8b:78: 45:c9:44:c1:66:5d:dd:37:84:7a:a3:0c:b0:0e:69: b1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D0:41:7E:97:89:81:D1:5D:72:BE:9E:90:5B:7C:EF:CA:A9:BB:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:81:5c:3e:81:3b:0a:8f:95:71:e8:bf:51:4e:0b:db:3c:2a: 79:4d:2e:13:14:cd:81:f3:77:7a:b6:61:9d:94:01:dd:55:a5: 59:58:83:1d:58:f5:12:24:60:a1:7c:14:74:77:dd:ac:c5:8d: e7:62:31:bd:6b:67:61:03:52:6c:80:1e:33:cf:88:00:43:a9: 5a:e1:94:c6:19:b3:f9:45:2b:32:42:65:fb:cd:5b:a7:00:08: ff:f9:d0:80:28:e6:29:fc:bb:91:1b:46:32:b2:0a:a7:45:d8: 68:55:45:ca:30:a2:18:e0:81:95:ae:37:e5:69:b9:90:70:57: 1f:5f:fd:13:41:25:ef:31:17:c4:7e:0b:13:b2:7a:eb:8d:f5: 2c:30:40:79:50:a2:f3:36:7a:e2:1d:cc:94:d0:e1:26:18:14: 60:37:3a:c5:b1:08:bb:d4:33:7d:ed:51:76:53:9c:06:24:5a: c7:f4:2f:b5:44:43:8a:da:c1:25:28:15:f8:08:c2:5f:e7:b4: 8b:52:43:a8:f8:22:dc:44:a6:a9:a7:0e:46:4b:32:91:f0:f0: cc:a8:92:fe:24:41:be:91:2c:a8:9d:e9:a7:7d:73:ec:f9:39: 7c:04:64:17:ef:7c:19:0f:b5:c8:34:9d:c1:d4:63:bd:4f:4a: 71:b5:72:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO6/kLrYkQWozqaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NDEzYWYyMTgtYmU0OC00NzRmLWJkODktMDM3ZGIxYWU1ZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbilnmALCNl/0NwmFSjtMs0XixcOe8MBZVUz EzRQCZAE3A5kre+QiVaRVdsPkuM9WKsKj7idbaBLinClyGpbf5GSDqZwR01xobnV DUMX9hP/qeEG2M98Cq5/nMCjJEZ9JzUSmnN6SeWLvKUVQP6tVwCnIOyhoxX81hkm ob8YlHT2RTy3CWrh8mjbceiMyPqA6G1Re0+M+O1y82x1sp7Dz6XT+0ml23YseV93 JsUNz+N6fpEqqBgcf8bpBcQV8FO/dl3ep1RdImMt+pO59F9v1E6VTve0vw4OO/0g 4Q4+q2jBQTgewoY2aDaEmPD2i3hFyUTBZl3dN4R6owywDmmxawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjQQX6XiYHRXXK+npBbfO/KqbsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvNzY3YTBkMzYtNzI3MC0z YzNiLWE3MTYtNWNhNGFiYTFlMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OtRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOBXD6BOwqPlXHov1FOC9s8KnlNLhMUzYHzd3q2YZ2UAd1VpVlYgx1Y 9RIkYKF8FHR33azFjediMb1rZ2EDUmyAHjPPiABDqVrhlMYZs/lFKzJCZfvNW6cA CP/50IAo5in8u5EbRjKyCqdF2GhVRcowohjggZWuN+VpuZBwVx9f/RNBJe8xF8R+ CxOyeuuN9SwwQHlQovM2euIdzJTQ4SYYFGA3OsWxCLvUM33tUXZTnAYkWsf0L7VE Q4rawSUoFfgIwl/ntItSQ6j4ItxEpqmnDkZLMpHw8Myokv4kQb6RLKid6ad9c+z5 OXwEZBfvfBkPtcg0ncHUY71PSnG1cgs= -----END CERTIFICATE-----Generated at Thu Aug 21 03:56:50 2025 by rpki-client