$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a30d1553-8516-3c6d-9b86-2948e9dc1d84.roa File: a30d1553-8516-3c6d-9b86-2948e9dc1d84.roa (raw, json) Hash identifier: XLy293EPbfr/HFJRLly38wRFKVppMu0lxLMbi2KzJGo= Subject key identifier: 2E:B3:B6:3D:44:C9:B0:D2:33:7F:8A:59:CC:60:04:63:B6:C3:67:60 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584B0B76A2053EC34A06C6E72C90 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a30d1553-8516-3c6d-9b86-2948e9dc1d84.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 19437 IP address blocks: 216.185.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a2:05:3e:c3:4a:06:c6:e7:2c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=684bb32c-47be-47eb-bfed-a5ed05b7b8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fa:55:48:b0:ef:22:ee:fa:a6:af:db:13:36: c2:d6:e1:34:10:b0:8a:e0:d0:24:86:a0:c6:fb:10: 34:ba:69:09:34:6f:a4:17:cd:24:94:a4:6a:c8:a9: ac:e9:0a:70:66:26:70:51:66:93:f0:9e:ac:cc:ef: 5b:10:bc:ae:97:7d:ef:71:4f:09:4b:3f:6d:04:e3: 48:c8:49:ee:da:bc:fc:12:4c:19:a2:83:a0:91:17: 83:bb:cd:e3:ee:6c:5f:54:f6:6b:ba:67:b1:9c:f1: cf:e6:b3:2e:16:4b:e6:ad:b5:98:44:4d:46:64:ab: 7a:6e:9d:42:bb:98:c4:59:36:3e:75:15:2f:ca:b0: 55:b2:bf:ba:6f:4f:a1:23:8d:e4:86:79:9d:63:94: 1e:2c:c2:39:a3:36:8a:b3:b9:8d:77:f2:ef:08:d2: 8e:7c:dd:2d:f6:f5:88:5a:48:44:c0:de:92:70:94: 95:28:b4:fb:71:aa:8d:48:d7:4d:26:ae:00:76:9e: ee:5e:9c:eb:b2:cd:cb:58:2c:1c:c5:61:22:de:b4: 52:de:be:bc:10:d3:71:bf:4d:cd:4b:5f:5e:d8:44: 3d:f9:bc:27:21:94:f4:34:f3:d7:2e:8e:2c:a6:87: bb:5d:c1:b7:db:85:02:f8:46:e5:ed:67:1c:80:59: c5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B3:B6:3D:44:C9:B0:D2:33:7F:8A:59:CC:60:04:63:B6:C3:67:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a30d1553-8516-3c6d-9b86-2948e9dc1d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 216.185.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:95:12:31:02:a7:a2:5c:b0:41:ad:8d:8d:0e:a9:a3:9c:14: b4:5c:33:1d:e9:c8:65:b1:3a:10:28:5f:92:19:7c:98:0c:71: 3d:a0:d3:92:45:fb:ea:33:4b:e9:6f:5b:e7:7b:ad:ff:38:eb: 4c:5f:0f:76:85:2b:a2:32:10:c1:81:70:ed:6c:db:c8:66:9b: b8:f8:89:1b:8d:c1:4e:33:74:78:0f:9c:28:21:1f:67:92:cd: e4:cb:d0:19:bb:da:15:81:9f:d1:65:c6:f6:26:bf:a2:c7:eb: a8:98:74:b7:a8:cf:9e:70:68:38:0b:ee:f5:04:6b:e8:01:f0: 39:f9:95:7e:28:9a:dd:5d:a3:9d:a4:96:e9:ef:8e:21:67:f8: 52:4b:f1:bf:e4:87:c7:9c:be:db:4a:66:f1:fd:d9:26:48:24: cb:60:c0:ab:d4:f5:b3:12:87:0d:51:0c:20:54:58:e9:79:07: 5d:d5:36:7a:da:e7:d6:1e:30:f2:36:71:5d:7b:df:00:ef:72: 99:f2:58:07:8f:1a:7e:0f:f2:ce:6c:d6:f2:ca:c8:71:75:9d: 66:37:7d:e1:78:02:3c:d5:fd:73:a8:54:cd:1f:6a:18:02:92: b8:20:4e:90:25:07:d7:09:8b:83:2c:25:11:af:de:38:c5:28: e0:a7:db:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqIFPsNKBsbnLJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk Njg0YmIzMmMtNDdiZS00N2ViLWJmZWQtYTVlZDA1YjdiOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPpVSLDvIu76pq/bEzbC1uE0ELCK4NAkhqDG +xA0umkJNG+kF80klKRqyKms6QpwZiZwUWaT8J6szO9bELyul33vcU8JSz9tBONI yEnu2rz8EkwZooOgkReDu83j7mxfVPZrumexnPHP5rMuFkvmrbWYRE1GZKt6bp1C u5jEWTY+dRUvyrBVsr+6b0+hI43khnmdY5QeLMI5ozaKs7mNd/LvCNKOfN0t9vWI WkhEwN6ScJSVKLT7caqNSNdNJq4Adp7uXpzrss3LWCwcxWEi3rRS3r68ENNxv03N S19e2EQ9+bwnIZT0NPPXLo4spoe7XcG324UC+Ebl7WccgFnF+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6ztj1EybDSM3+KWcxgBGO2w2dgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvYTMwZDE1NTMtODUxNi0z YzZkLTliODYtMjk0OGU5ZGMxZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Lk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGVEjECp6JcsEGtjY0OqaOcFLRcMx3pyGWxOhAoX5IZfJgMcT2g05JF ++ozS+lvW+d7rf8460xfD3aFK6IyEMGBcO1s28hmm7j4iRuNwU4zdHgPnCghH2eS zeTL0Bm72hWBn9FlxvYmv6LH66iYdLeoz55waDgL7vUEa+gB8Dn5lX4omt1do52k lunvjiFn+FJL8b/kh8ecvttKZvH92SZIJMtgwKvU9bMShw1RDCBUWOl5B13VNnra 59YeMPI2cV173wDvcpnyWAePGn4P8s5s1vLKyHF1nWY3feF4AjzV/XOoVM0fahgC krggTpAlB9cJi4MsJRGv3jjFKOCn2xY= -----END CERTIFICATE-----Generated at Fri Sep 19 03:53:15 2025 by rpki-client