$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa File: 861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa (raw, json) Hash identifier: cyN7QTn55f7vJQD/hXKBC5G50z9AySBB1SwJV3dbu2U= Subject key identifier: 7F:7B:1D:FD:FF:7E:F6:B2:78:D2:4A:EC:CB:7F:98:4E:31:67:E4:FE Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584B1C36D1AFB8B88FB848F18080 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 14511 IP address blocks: 216.196.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d1:af:b8:b8:8f:b8:48:f1:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=84d246fc-a987-473a-b9d8-148da9681df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:d9:ff:e1:97:71:c8:47:68:b7:90:f9:2a: f2:70:27:c4:92:34:e6:18:90:e3:ed:c1:43:bd:71: 1b:83:87:01:18:d3:e9:b8:a2:a5:e2:66:a7:35:e7: bd:0b:1a:68:d1:20:68:7e:d1:36:39:63:ec:bf:89: 7a:1e:92:7b:11:65:6e:d1:11:2b:1d:8e:b1:a1:f3: 16:1f:f9:34:9e:03:07:2c:85:b8:b3:ce:b8:60:e6: fb:e2:2e:df:9d:3f:ea:36:b7:c9:04:bd:48:a2:ce: a0:6a:84:7d:d9:d2:ca:bc:78:de:d6:a2:ab:b0:3c: 51:3a:1e:cc:81:22:fa:88:08:ef:a9:6b:76:aa:ac: 20:4d:1a:8a:46:92:6d:fc:60:29:d8:e8:01:4c:56: f6:7c:8f:08:4f:36:1d:c0:30:0a:d2:89:58:43:6d: d4:bf:f1:53:f2:2f:3c:3e:62:ee:3e:ba:c2:20:8a: 22:b6:1a:84:da:ef:67:ef:aa:15:a6:a7:d3:1c:20: 1e:0b:eb:ac:64:c0:a7:b7:56:e4:d7:66:03:a5:5c: 5e:ab:62:eb:c4:0b:8c:9c:22:6a:6a:f8:68:56:5a: c0:99:f4:1b:b8:ea:50:24:86:01:71:8f:3a:c9:13: 18:a7:56:e2:41:49:94:a6:04:e3:a1:86:55:25:e9: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7B:1D:FD:FF:7E:F6:B2:78:D2:4A:EC:CB:7F:98:4E:31:67:E4:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 216.196.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f1:eb:cd:f3:2d:26:7d:c3:00:10:e5:dd:83:dd:ad:10:20: 8c:bd:f4:20:7b:07:24:b6:81:99:8c:b5:31:df:3b:67:29:8b: bb:83:7e:b6:62:65:3e:33:47:37:13:37:f0:a8:ab:4d:a7:42: 80:ad:a2:7b:83:1f:d4:36:46:6e:87:50:7a:75:fd:49:84:4b: b4:14:6d:c4:33:e0:91:b7:c3:f3:fb:3c:1e:98:ab:ed:1c:ed: 72:11:a4:38:c9:8b:d1:91:d6:bd:3d:aa:17:46:f4:8d:68:4b: ad:ad:c7:fd:a1:64:d3:91:fa:99:03:52:5f:0d:ca:65:74:c0: 97:57:9e:9b:04:88:56:73:52:d6:15:01:42:0c:b7:70:4f:64: 32:d7:b5:b0:0e:d2:c4:85:86:10:04:04:9d:13:ca:1a:29:f7: ed:a8:f2:d9:73:4f:03:21:1b:b4:21:b7:62:40:eb:a3:a5:f5: a4:6a:34:d5:53:c4:9f:45:f1:ab:d0:b7:95:80:b6:15:a3:f2: 8f:72:6a:4e:48:05:7b:af:92:ca:49:5b:e7:a7:20:c2:b1:c0: 68:ce:f4:76:33:3e:b7:39:ba:80:f7:3b:6a:5b:3a:2e:27:5c: b1:8b:93:a4:be:e9:76:80:44:9a:24:f0:ce:f4:88:27:d9:9e: f9:a9:ec:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtGvuLiPuEjxgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ODRkMjQ2ZmMtYTk4Ny00NzNhLWI5ZDgtMTQ4ZGE5NjgxZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV/Z/+GXcchHaLeQ+SrycCfEkjTmGJDj7cFD vXEbg4cBGNPpuKKl4manNee9Cxpo0SBoftE2OWPsv4l6HpJ7EWVu0RErHY6xofMW H/k0ngMHLIW4s864YOb74i7fnT/qNrfJBL1Ios6gaoR92dLKvHje1qKrsDxROh7M gSL6iAjvqWt2qqwgTRqKRpJt/GAp2OgBTFb2fI8ITzYdwDAK0olYQ23Uv/FT8i88 PmLuPrrCIIoithqE2u9n76oVpqfTHCAeC+usZMCnt1bk12YDpVxeq2LrxAuMnCJq avhoVlrAmfQbuOpQJIYBcY86yRMYp1biQUmUpgTjoYZVJelW6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH97Hf3/fvayeNJK7Mt/mE4xZ+T+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvODYxZjJiMzAtM2E2NC0z YzY3LThhYjEtNWZmYzhhNjE3ZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2MRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7x683zLSZ9wwAQ5d2D3a0QIIy99CB7ByS2gZmMtTHfO2cpi7uDfrZi ZT4zRzcTN/Coq02nQoCtonuDH9Q2Rm6HUHp1/UmES7QUbcQz4JG3w/P7PB6Yq+0c 7XIRpDjJi9GR1r09qhdG9I1oS62tx/2hZNOR+pkDUl8NymV0wJdXnpsEiFZzUtYV AUIMt3BPZDLXtbAO0sSFhhAEBJ0Tyhop9+2o8tlzTwMhG7Qht2JA66Ol9aRqNNVT xJ9F8avQt5WAthWj8o9yak5IBXuvkspJW+enIMKxwGjO9HYzPrc5uoD3O2pbOi4n XLGLk6S+6XaARJok8M70iCfZnvmp7K4= -----END CERTIFICATE-----Generated at Sat Sep 20 07:18:44 2025 by rpki-client