$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/c11ae632-fa02-337a-bb72-d42d4898ffe8.roa File: c11ae632-fa02-337a-bb72-d42d4898ffe8.roa (raw, json) Hash identifier: KrJzVJ+C6K+UzIcwEhtQXkBo9YNgq8Cpwvk0xl5qax8= Subject key identifier: 5B:31:AB:43:C4:88:CE:57:F8:A8:77:1D:7F:E0:36:A4:06:D0:2E:88 Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F4328584AD3A0F14CC652F15CAF71F280 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/c11ae632-fa02-337a-bb72-d42d4898ffe8.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 40501 IP address blocks: 216.235.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f1:4c:c6:52:f1:5c:af:71:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=b17e9a01-9d14-4ec9-ad48-0c1ba520b17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:01:d4:0a:16:9f:e9:86:98:c4:4b:cf:8d:c7: a9:de:f2:2d:12:55:fd:6b:c4:fa:db:9f:a2:15:d2: ce:66:de:96:fd:2a:ce:4c:4a:fa:91:e6:21:9f:90: 25:31:52:16:ac:a9:69:84:f2:a9:b3:06:12:c8:67: e3:ff:b4:0b:81:3a:18:79:f2:e3:2e:ba:e3:46:a5: bd:2f:d8:29:66:af:90:bc:70:70:37:3f:43:2d:cf: 4c:c2:c6:49:75:f2:af:50:86:44:06:0f:b5:bc:37: 3b:e1:3a:42:fc:d4:37:02:3a:f7:c8:3d:d5:ef:7e: 40:6f:e3:c7:e5:8b:43:19:78:5f:02:0a:24:b0:5d: 4a:cb:e6:d6:41:bf:cd:d6:47:45:b7:92:20:15:29: dd:b9:72:41:df:93:f7:1f:94:92:02:86:0e:87:7c: f9:57:19:9f:32:65:ed:e0:c1:82:46:67:7f:6f:97: 9e:e6:d5:d4:9c:27:10:fe:4a:23:ce:aa:6c:82:f1: 75:71:c6:af:35:51:1a:ac:33:71:22:6c:1a:c6:c7: f4:05:61:7a:8b:a4:47:18:05:79:bb:49:72:16:9b: 30:7b:62:c9:cc:6c:26:a8:43:b9:9b:30:c9:b2:dd: 1f:4c:66:0d:d0:b2:75:6e:f8:07:25:43:d9:d9:31: 6f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:31:AB:43:C4:88:CE:57:F8:A8:77:1D:7F:E0:36:A4:06:D0:2E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/c11ae632-fa02-337a-bb72-d42d4898ffe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:10:a1:19:9c:f0:c2:98:53:94:c1:50:74:15:68:16:64:0d: c3:6f:db:14:e8:4b:fa:bf:d9:4a:99:c6:bd:97:16:cb:0d:1f: 24:6d:6c:ed:dc:86:11:5b:01:f7:97:a3:5d:91:40:f6:93:50: 31:23:cb:36:cd:a7:56:be:d1:bb:45:b2:98:06:91:d2:42:20: f0:5d:c9:70:a4:36:bc:c6:35:65:3f:56:d5:cb:b9:84:dc:47: f2:0c:b3:5f:9f:07:fb:0e:31:45:66:48:6d:bc:85:44:b9:7b: 22:b9:9a:5c:f2:7d:2d:e0:33:50:62:5b:13:25:91:b0:65:01: b4:91:5b:9a:34:2c:bb:2d:bf:3a:d8:31:47:1d:2c:61:a0:29: 25:4e:cd:a6:0a:c7:b2:e0:1f:c5:d5:e0:97:1b:99:12:c5:8b: 70:d8:5d:7a:1f:b4:78:56:f5:cc:7f:6d:57:33:9d:60:6e:6f: 97:ee:23:16:06:71:98:52:73:7b:d3:ab:b0:80:c2:f4:62:51: a4:87:eb:22:62:bb:e8:25:d0:ee:72:36:20:d2:e1:45:dd:d1: 07:d0:c0:ef:59:b4:fd:e9:cf:45:8d:fa:b0:fd:32:6b:6d:95: 75:55:9d:9c:7b:3e:9f:82:e7:cd:96:25:68:1b:3e:d1:9d:1c: 07:10:1b:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPFMxlLxXK9x8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YjE3ZTlhMDEtOWQxNC00ZWM5LWFkNDgtMGMxYmE1MjBiMTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AHUChaf6YaYxEvPjcep3vItElX9a8T625+i FdLOZt6W/SrOTEr6keYhn5AlMVIWrKlphPKpswYSyGfj/7QLgToYefLjLrrjRqW9 L9gpZq+QvHBwNz9DLc9MwsZJdfKvUIZEBg+1vDc74TpC/NQ3Ajr3yD3V735Ab+PH 5YtDGXhfAgoksF1Ky+bWQb/N1kdFt5IgFSnduXJB35P3H5SSAoYOh3z5VxmfMmXt 4MGCRmd/b5ee5tXUnCcQ/kojzqpsgvF1ccavNVEarDNxImwaxsf0BWF6i6RHGAV5 u0lyFpswe2LJzGwmqEO5mzDJst0fTGYN0LJ1bvgHJUPZ2TFvmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsxq0PEiM5X+Kh3HX/gNqQG0C6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvYzExYWU2MzItZmEwMi0z MzdhLWJiNzItZDQyZDQ4OThmZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OtZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8QoRmc8MKYU5TBUHQVaBZkDcNv2xToS/q/2UqZxr2XFssNHyRtbO3c hhFbAfeXo12RQPaTUDEjyzbNp1a+0btFspgGkdJCIPBdyXCkNrzGNWU/VtXLuYTc R/IMs1+fB/sOMUVmSG28hUS5eyK5mlzyfS3gM1BiWxMlkbBlAbSRW5o0LLstvzrY MUcdLGGgKSVOzaYKx7LgH8XV4JcbmRLFi3DYXXoftHhW9cx/bVcznWBub5fuIxYG cZhSc3vTq7CAwvRiUaSH6yJiu+gl0O5yNiDS4UXd0QfQwO9ZtP3pz0WN+rD9Mmtt lXVVnZx7Pp+C582WJWgbPtGdHAcQG04= -----END CERTIFICATE-----Generated at Thu Aug 21 03:55:16 2025 by rpki-client