$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/12f64c16-6561-3cda-ad8f-15288bbed0ba.roa File: 12f64c16-6561-3cda-ad8f-15288bbed0ba.roa (raw, json) Hash identifier: pGh1kx+PgOGBWvdCNGFNn0n4eyfpZ6LJ8R50WKXIs+w= Subject key identifier: 6D:26:09:2C:43:A6:4F:A5:6B:7B:48:D1:BA:11:DC:C0:CE:12:E0:4C Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BC71820DE52DC9BF14B68 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/12f64c16-6561-3cda-ad8f-15288bbed0ba.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 394708 IP address blocks: 216.255.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c7:18:20:de:52:dc:9b:f1:4b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=870abfd5-7194-4d42-9830-8cc9c174a383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:14:02:dc:0f:b1:13:40:63:43:fa:b8:74:90: ea:f8:13:f0:78:30:90:f4:01:82:c1:db:85:c0:fd: 21:f3:c3:f5:44:91:90:57:66:67:6f:a9:81:6a:d5: c3:5f:aa:95:c0:f0:1f:d2:0b:d6:1a:56:07:2d:ca: d6:96:ae:43:0b:bb:1d:2c:50:b3:d4:00:12:e8:2f: aa:d5:ab:ef:d2:87:dc:90:cf:51:34:44:60:2d:73: f6:ef:6b:3a:41:51:29:8c:5a:f2:64:e3:14:a2:b0: 2f:3c:43:a4:fa:b8:b6:be:3a:58:c7:9f:ac:66:a7: 3e:48:34:47:62:5f:81:57:26:da:ae:3e:7e:21:e4: cb:d3:c3:b7:23:74:f4:d6:9a:25:02:5f:a3:ff:b8: 01:a3:90:f8:0a:aa:97:a4:25:f6:41:19:a6:51:dd: 16:6c:e0:b4:13:3f:d0:30:15:03:ba:bb:30:f7:82: 7e:d5:fb:a0:a5:04:4e:28:9e:70:3a:fa:71:b7:08: 3f:e2:78:a2:70:f6:96:46:dd:7e:01:ac:16:0a:d3: 34:bf:2d:20:d9:10:c2:73:2b:0c:d0:c4:bd:d1:56: 4d:6e:ae:a9:50:67:e3:78:d8:11:c5:75:60:c2:18: 43:cd:8c:ae:62:61:d5:3c:f2:31:3b:d9:91:0a:49: 90:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:26:09:2C:43:A6:4F:A5:6B:7B:48:D1:BA:11:DC:C0:CE:12:E0:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/12f64c16-6561-3cda-ad8f-15288bbed0ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:5e:ad:0b:96:f0:b2:9d:2f:32:69:d2:d4:66:ba:c3:30:d7: cd:25:f2:b2:b1:40:e6:8f:2b:d7:6f:8b:da:81:96:02:d7:35: df:e9:b8:5b:a7:d8:48:51:1c:22:14:82:b6:0e:26:21:ee:2c: 33:0b:e7:ad:5f:e1:20:1a:65:87:f6:5a:a5:81:e7:9a:6e:07: db:46:b0:3c:67:95:52:ee:11:9d:c2:a8:01:17:1f:9c:e4:14: 7c:4b:37:f1:ab:37:d0:cd:35:c3:d3:5d:67:b5:f8:97:05:d4: f3:0b:14:b7:63:f3:f7:24:f1:8b:0c:1d:ff:0f:d1:45:03:69: 57:a9:d6:5e:63:6c:45:2c:5e:4d:5a:ee:9d:80:f1:f5:e4:50: c0:35:3e:5c:94:fc:2d:e4:a6:59:6f:ac:ce:a8:43:d4:ae:3b: bc:c3:1c:3c:3c:9f:f9:25:de:9d:2c:bf:3f:13:aa:bd:98:d1: 51:8a:56:b8:0c:d0:36:22:9d:00:b8:ef:7b:f3:b0:29:72:87: 65:e6:a4:32:ac:77:be:02:a1:b4:58:5f:67:2f:fa:2e:4e:00: 15:9c:8b:75:a7:d3:67:40:d8:3a:98:1c:d9:5e:0f:89:f4:1f: 62:bd:c2:f0:5b:1f:7e:62:dd:54:84:6f:a6:24:d8:f1:95:82: db:4c:9b:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8cYIN5S3JvxS2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ODcwYWJmZDUtNzE5NC00ZDQyLTk4MzAtOGNjOWMxNzRhMzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihQC3A+xE0BjQ/q4dJDq+BPweDCQ9AGCwduF wP0h88P1RJGQV2Znb6mBatXDX6qVwPAf0gvWGlYHLcrWlq5DC7sdLFCz1AAS6C+q 1avv0ofckM9RNERgLXP272s6QVEpjFryZOMUorAvPEOk+ri2vjpYx5+sZqc+SDRH Yl+BVybarj5+IeTL08O3I3T01polAl+j/7gBo5D4CqqXpCX2QRmmUd0WbOC0Ez/Q MBUDursw94J+1fugpQROKJ5wOvpxtwg/4niicPaWRt1+AawWCtM0vy0g2RDCcysM 0MS90VZNbq6pUGfjeNgRxXVgwhhDzYyuYmHVPPIxO9mRCkmQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0mCSxDpk+la3tI0boR3MDOEuBMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMTJmNjRjMTYtNjU2MS0z Y2RhLWFkOGYtMTUyODhiYmVkMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9erQuW8LKdLzJp0tRmusMw180l8rKxQOaPK9dvi9qBlgLXNd/puFun 2EhRHCIUgrYOJiHuLDML561f4SAaZYf2WqWB55puB9tGsDxnlVLuEZ3CqAEXH5zk FHxLN/GrN9DNNcPTXWe1+JcF1PMLFLdj8/ck8YsMHf8P0UUDaVep1l5jbEUsXk1a 7p2A8fXkUMA1PlyU/C3kpllvrM6oQ9SuO7zDHDw8n/kl3p0svz8Tqr2Y0VGKVrgM 0DYinQC473vzsClyh2XmpDKsd74CobRYX2cv+i5OABWci3Wn02dA2DqYHNleD4n0 H2K9wvBbH35i3VSEb6Yk2PGVgttMm3g= -----END CERTIFICATE-----Generated at Thu Aug 21 01:28:16 2025 by rpki-client