$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa File: b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa (raw, json) Hash identifier: Bugv0nLnSGE+fmSXBrLVHaAhSxPf5rS7kdVRbfaNRUE= Subject key identifier: 1D:2B:66:88:80:F0:EB:BB:CE:EA:1E:02:23:88:8E:56:8D:3B:A7:C0 Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F4328584AD3A0F8573B4E2381FC347F40 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 40501 IP address blocks: 216.235.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f8:57:3b:4e:23:81:fc:34:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=6b2a4455-9c66-45df-b835-565cf3d6f093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:48:2e:5e:79:6b:18:b5:9f:1b:10:0c:70:14: 63:6a:0a:c8:c6:5c:ac:87:9f:cf:62:5a:4f:88:20: b7:2a:6d:1e:47:45:c7:b5:a5:27:9c:f0:d5:b3:20: 9a:fe:fe:5b:a2:99:b6:2d:f2:cd:c9:80:13:1e:7b: cb:86:ed:98:9b:bd:de:7a:22:f8:5a:b0:b9:13:56: 12:3f:22:24:0b:5f:7c:bb:0e:43:0e:25:2f:73:06: e1:75:48:a6:29:31:a0:37:b9:32:ad:80:89:03:bd: a0:74:b3:f7:bf:b1:c3:4b:73:bb:85:a4:63:c1:05: 5e:0f:4b:cb:9c:a9:aa:15:07:15:e3:2c:c1:d5:06: 81:62:f4:d4:00:59:7f:12:d0:13:60:0b:b2:80:85: cb:33:38:27:0a:6a:14:ba:8f:36:62:78:76:c2:47: b3:38:c7:cc:2b:7a:9a:68:8e:fb:81:26:5d:af:fb: c1:e9:47:58:74:84:7b:08:7e:40:fd:17:d3:25:22: 6c:17:03:e0:b6:6e:34:97:0f:31:06:93:1d:36:27: 5a:f6:ab:e9:33:7c:04:12:bb:34:cc:4c:92:50:f3: a2:de:bf:f5:21:ac:44:cd:3b:65:47:c0:6a:2c:51: 92:e2:72:04:88:7f:56:68:e6:b7:d4:cc:f2:e7:9e: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2B:66:88:80:F0:EB:BB:CE:EA:1E:02:23:88:8E:56:8D:3B:A7:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:10:88:83:41:e9:92:13:5e:9f:9e:9b:e0:e8:92:f9:bf:91: f8:08:43:3e:ec:78:67:7e:35:b7:d2:90:bb:51:69:8c:2b:30: fb:7f:63:26:7c:c9:17:18:92:22:26:8f:28:31:35:1d:2d:6d: da:cb:6f:a0:e3:b3:dc:89:f7:fd:3a:d6:e0:d7:e9:3e:be:96: 2b:55:2b:3b:1e:53:11:38:27:38:a8:05:a2:7d:b3:c8:fc:56: 52:8d:c3:b0:7a:12:7a:7a:5b:81:e7:28:31:d4:47:8b:65:de: 3f:bb:19:08:f6:da:e6:29:af:26:f2:b4:61:02:9f:96:f4:dd: fc:e3:2c:bd:e0:5f:4c:bf:99:70:e8:6f:7d:91:49:49:6b:74: 7a:b1:8c:c8:8e:20:63:a8:09:6a:30:ad:c0:22:41:f5:3a:e3: 9d:03:b2:ab:80:66:42:71:89:da:0c:b7:6b:08:ed:5a:96:20: 1a:2f:91:93:33:9c:65:70:e2:f7:f2:24:6b:b7:ba:04:b6:14: b6:63:85:e2:f9:e6:90:93:bf:5c:0f:b8:ad:f5:ec:e2:83:3e: 30:24:6f:31:77:c2:68:1f:2b:7f:e6:0f:51:16:08:cd:a6:bf: d9:a7:16:06:b0:59:3c:a5:69:c5:7a:93:f8:fa:ed:f6:6b:e0: 58:f2:76:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPhXO04jgfw0f0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NmIyYTQ0NTUtOWM2Ni00NWRmLWI4MzUtNTY1Y2YzZDZmMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEguXnlrGLWfGxAMcBRjagrIxlysh5/PYlpP iCC3Km0eR0XHtaUnnPDVsyCa/v5bopm2LfLNyYATHnvLhu2Ym73eeiL4WrC5E1YS PyIkC198uw5DDiUvcwbhdUimKTGgN7kyrYCJA72gdLP3v7HDS3O7haRjwQVeD0vL nKmqFQcV4yzB1QaBYvTUAFl/EtATYAuygIXLMzgnCmoUuo82Ynh2wkezOMfMK3qa aI77gSZdr/vB6UdYdIR7CH5A/RfTJSJsFwPgtm40lw8xBpMdNida9qvpM3wEErs0 zEySUPOi3r/1IaxEzTtlR8BqLFGS4nIEiH9WaOa31Mzy5568MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0rZoiA8Ou7zuoeAiOIjlaNO6fAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvYjZlY2NmZDAtZmJjNC0z N2NkLWI4ZWEtZjMzYTAzYjdjNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OteMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoQiINB6ZITXp+em+Dokvm/kfgIQz7seGd+NbfSkLtRaYwrMPt/YyZ8 yRcYkiImjygxNR0tbdrLb6Djs9yJ9/061uDX6T6+litVKzseUxE4JzioBaJ9s8j8 VlKNw7B6Enp6W4HnKDHUR4tl3j+7GQj22uYprybytGECn5b03fzjLL3gX0y/mXDo b32RSUlrdHqxjMiOIGOoCWowrcAiQfU6450DsquAZkJxidoMt2sI7VqWIBovkZMz nGVw4vfyJGu3ugS2FLZjheL55pCTv1wPuK317OKDPjAkbzF3wmgfK3/mD1EWCM2m v9mnFgawWTylacV6k/j67fZr4FjydvQ= -----END CERTIFICATE-----Generated at Thu Aug 21 03:56:49 2025 by rpki-client