$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8a0cb891-7df3-3f1f-9baa-2b030be9c0f4.roa File: 8a0cb891-7df3-3f1f-9baa-2b030be9c0f4.roa (raw, json) Hash identifier: XY5DLdXKQncIdTdJf40GoY6adEMQOIae2eAkY3VYwo0= Subject key identifier: 6E:63:D1:76:5E:61:1B:2E:C7:6C:E9:B8:23:1E:08:27:28:1D:77:5D Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584AC1DF127771FE17C3AB57CC60 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8a0cb891-7df3-3f1f-9baa-2b030be9c0f4.roa Signing time: Tue 05 Aug 2025 16:21:14 +0000 ROA not before: Tue 05 Aug 2025 16:21:14 +0000 ROA not after: Mon 03 Nov 2025 17:21:14 +0000 asID: 23473 IP address blocks: 216.171.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:df:12:77:71:fe:17:c3:ab:57:cc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 5 16:21:14 2025 GMT Not After : Nov 3 17:21:14 2025 GMT Subject: CN=9de8c26a-875b-4ea6-805d-d1a486a031e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f7:f7:31:b2:49:dd:97:ef:7b:50:31:fc:d7: c4:c7:99:ff:71:3d:ee:f6:9b:b2:68:a3:c9:c8:fd: 06:71:d0:cd:83:d8:60:ff:a7:41:11:71:c0:65:6e: f7:85:49:00:0f:93:04:66:11:bd:9f:18:e2:c7:39: 0b:c5:a1:63:ba:5c:e1:57:24:f2:18:5b:12:2d:32: fd:f1:a9:aa:7c:50:3b:0a:70:f2:e1:0b:7b:97:be: 20:54:40:bf:86:73:d3:31:f2:5a:d0:5b:7a:87:16: 03:59:5f:e8:80:32:65:1b:2f:89:a3:1a:31:c4:be: 2d:48:25:80:7f:23:8c:a6:61:be:5e:72:4c:7a:4f: 21:cb:39:8f:0d:5f:2a:20:fd:23:81:71:14:75:9b: d9:6b:1e:b4:6d:06:08:c5:e2:34:b0:d5:0c:91:e1: f1:dc:35:de:61:ee:33:94:48:10:41:09:3c:4a:96: 9f:89:12:2d:b3:f9:f6:71:e7:14:8c:a2:c1:be:95: 41:a9:3a:7a:b0:8c:b8:37:db:a0:86:8b:f3:59:2d: f4:72:7b:a9:f6:6b:9e:8e:e1:e6:4f:c9:c2:b4:88: 8c:f2:0e:06:06:1a:68:36:93:fd:cb:d0:ea:ed:28: 08:e7:01:20:82:29:12:48:6d:e3:96:6e:f7:a3:a2: f0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:63:D1:76:5E:61:1B:2E:C7:6C:E9:B8:23:1E:08:27:28:1D:77:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8a0cb891-7df3-3f1f-9baa-2b030be9c0f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c7:35:c3:92:16:9e:e5:29:26:ba:60:d7:f2:15:33:a4:72: 4b:14:fe:84:68:49:d6:34:d5:24:1a:0e:11:89:98:ea:80:d4: c2:84:9b:06:76:08:29:c9:14:98:71:d1:6b:4c:16:96:60:a4: c8:88:d5:fa:0d:cf:c7:bf:a4:dd:b7:27:76:9c:b3:eb:2f:75: eb:61:1e:83:48:41:e1:81:0f:53:56:f3:98:67:27:a3:bb:a3: 7d:28:5f:cc:52:09:a9:03:7d:35:51:b2:93:3d:95:52:79:a8: 1c:bf:e5:ce:f1:eb:fe:2a:a9:69:0d:09:d6:67:be:eb:91:0e: 66:7c:35:60:3a:3d:84:6e:4e:10:9c:ec:bb:59:06:fa:34:5c: 41:a0:06:e6:b7:92:92:ad:04:00:64:00:14:6a:4f:8f:58:19: 41:26:73:2e:c4:2d:c4:42:91:b6:d1:2d:8e:eb:a2:dd:c4:d3: a4:22:af:d2:22:f1:8f:58:ac:d4:55:7e:3e:c6:29:fa:c7:e4: 81:49:7a:1a:0e:19:f7:93:50:10:13:e3:9e:63:09:4c:a3:73: 6b:aa:ac:c7:67:ca:3f:41:11:53:52:2b:22:ec:d2:64:ba:80: 3d:39:3a:d7:20:cf:07:9a:60:38:ce:fb:33:87:87:f4:49:63: a0:a9:d1:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErB3xJ3cf4Xw6tXzGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgwNTE2MjExNFoXDTI1MTEwMzE3MjExNFowLzEtMCsGA1UEAxMk OWRlOGMyNmEtODc1Yi00ZWE2LTgwNWQtZDFhNDg2YTAzMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvf3MbJJ3Zfve1Ax/NfEx5n/cT3u9puyaKPJ yP0GcdDNg9hg/6dBEXHAZW73hUkAD5MEZhG9nxjixzkLxaFjulzhVyTyGFsSLTL9 8amqfFA7CnDy4Qt7l74gVEC/hnPTMfJa0Ft6hxYDWV/ogDJlGy+JoxoxxL4tSCWA fyOMpmG+XnJMek8hyzmPDV8qIP0jgXEUdZvZax60bQYIxeI0sNUMkeHx3DXeYe4z lEgQQQk8SpafiRIts/n2cecUjKLBvpVBqTp6sIy4N9ughovzWS30cnup9muejuHm T8nCtIiM8g4GBhpoNpP9y9Dq7SgI5wEggikSSG3jlm73o6LwnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5j0XZeYRsux2zpuCMeCCcoHXddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOGEwY2I4OTEtN2RmMy0z ZjFmLTliYWEtMmIwMzBiZTljMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/HNcOSFp7lKSa6YNfyFTOkcksU/oRoSdY01SQaDhGJmOqA1MKEmwZ2 CCnJFJhx0WtMFpZgpMiI1foNz8e/pN23J3acs+svdethHoNIQeGBD1NW85hnJ6O7 o30oX8xSCakDfTVRspM9lVJ5qBy/5c7x6/4qqWkNCdZnvuuRDmZ8NWA6PYRuThCc 7LtZBvo0XEGgBua3kpKtBABkABRqT49YGUEmcy7ELcRCkbbRLY7rot3E06Qir9Ii 8Y9YrNRVfj7GKfrH5IFJehoOGfeTUBAT455jCUyjc2uqrMdnyj9BEVNSKyLs0mS6 gD05OtcgzweaYDjO+zOHh/RJY6Cp0cY= -----END CERTIFICATE-----Generated at Thu Aug 21 03:52:30 2025 by rpki-client