$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa File: 6207f57d-7286-3e57-bd00-2ce12029aa76.roa (raw, json) Hash identifier: ZLCrdmMPC5gpRyk+6JA38HY3Il88dougy+lK6Nx4o9o= Subject key identifier: 4B:AF:69:EC:2B:8D:48:32:D1:CB:6C:94:BB:BC:84:8D:64:5B:E5:2C Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584B2A2C4D614C52AE58E2597F80 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 23532 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4d:61:4c:52:ae:58:e2:59:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=7ff8873c-b38f-40f0-a0dd-331fbb66edd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a8:d8:43:80:ee:f7:68:0d:f1:55:94:81:aa: fd:2a:76:6b:35:78:25:fd:9a:a1:25:6f:a4:b3:cb: aa:8a:85:56:b9:76:09:3c:f1:e0:ec:b1:ff:11:0c: 43:98:b2:e4:92:e3:26:60:26:4d:c5:43:c1:cb:34: d7:68:9e:21:17:89:27:6b:2b:aa:7a:e1:fc:f2:00: 9a:2d:a3:2d:9b:b9:22:7f:c2:b7:8f:e2:85:e8:4b: b3:3e:b6:a9:9a:dc:e0:d0:f3:80:dd:5e:4a:3d:f4: d0:6f:ec:39:13:37:82:bf:44:00:24:13:f7:38:cc: f6:8c:4e:08:86:e2:a9:aa:54:98:a9:44:5b:75:38: fd:a8:0f:b5:45:5c:53:4b:b6:a8:b1:23:93:e9:03: 56:91:d3:60:d2:a1:6e:67:9e:05:19:6e:94:85:37: bd:40:27:1a:7d:00:70:06:10:8b:2a:a1:f9:8f:b5: 97:64:92:ee:ad:33:fb:b4:f6:45:92:93:3c:70:56: bf:04:3f:d4:c1:39:a0:7f:80:e8:ac:be:55:5d:ba: 8d:00:da:67:25:df:e2:a5:a4:42:a5:b4:86:eb:c3: c2:60:4e:01:29:f2:0d:d4:6c:b4:df:e7:af:7c:2b: e2:a7:2c:f9:f6:78:07:b0:d1:59:1f:0f:d0:11:45: 25:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AF:69:EC:2B:8D:48:32:D1:CB:6C:94:BB:BC:84:8D:64:5B:E5:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:86:ea:ad:9c:93:2e:c4:34:5d:77:2b:d6:87:fc:11:8f:5b: 42:ab:e3:c0:ae:8b:52:72:39:5c:18:68:90:73:a7:69:c0:c3: 63:d6:c5:41:27:1e:e7:f2:cd:d0:d3:5f:ba:48:b0:b1:d5:fd: c1:42:ad:14:be:38:7b:80:b1:35:46:ed:eb:e8:fa:06:43:26: b0:ac:91:c9:ba:f9:f1:79:eb:30:c5:7c:01:ff:5c:d3:00:d7: 58:68:92:80:7f:87:e2:c5:ca:72:7b:8f:63:ce:5c:5b:c1:a2: ae:d1:cb:1a:c5:c9:ef:59:67:34:d6:06:e0:28:2f:6e:52:67: df:c8:ef:21:76:1e:25:2f:ea:13:34:b0:ac:00:34:b8:2a:74: 48:2d:10:58:39:2e:4a:d5:61:43:23:c8:b7:d3:72:d9:2e:0c: df:99:ab:61:21:bf:84:59:00:e0:3b:e8:e3:17:79:c3:bf:65: db:d0:3b:dd:e8:88:ce:c1:54:13:19:39:42:00:f8:d4:49:15: 50:b3:2a:16:99:aa:ee:c6:b1:7d:d3:dd:96:45:c6:b9:e8:87: 89:34:a3:04:94:97:fa:a3:c8:a1:cf:3b:e9:82:b0:a4:d6:06: 5e:32:0f:3b:c4:76:c4:f5:6f:58:37:b8:fd:be:73:00:2c:55: a1:8c:fe:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLE1hTFKuWOJZf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk N2ZmODg3M2MtYjM4Zi00MGYwLWEwZGQtMzMxZmJiNjZlZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqjYQ4Du92gN8VWUgar9KnZrNXgl/ZqhJW+k s8uqioVWuXYJPPHg7LH/EQxDmLLkkuMmYCZNxUPByzTXaJ4hF4knayuqeuH88gCa LaMtm7kif8K3j+KF6EuzPrapmtzg0POA3V5KPfTQb+w5EzeCv0QAJBP3OMz2jE4I huKpqlSYqURbdTj9qA+1RVxTS7aosSOT6QNWkdNg0qFuZ54FGW6UhTe9QCcafQBw BhCLKqH5j7WXZJLurTP7tPZFkpM8cFa/BD/UwTmgf4DorL5VXbqNANpnJd/ipaRC pbSG68PCYE4BKfIN1Gy03+evfCvipyz59ngHsNFZHw/QEUUlBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuvaewrjUgy0ctslLu8hI1kW+UsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvNjIwN2Y1N2QtNzI4Ni0z ZTU3LWJkMDAtMmNlMTIwMjlhYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqG6q2cky7ENF13K9aH/BGPW0Kr48Cui1JyOVwYaJBzp2nAw2PWxUEn HufyzdDTX7pIsLHV/cFCrRS+OHuAsTVG7evo+gZDJrCskcm6+fF56zDFfAH/XNMA 11hokoB/h+LFynJ7j2POXFvBoq7RyxrFye9ZZzTWBuAoL25SZ9/I7yF2HiUv6hM0 sKwANLgqdEgtEFg5LkrVYUMjyLfTctkuDN+Zq2Ehv4RZAOA76OMXecO/ZdvQO93o iM7BVBMZOUIA+NRJFVCzKhaZqu7GsX3T3ZZFxrnoh4k0owSUl/qjyKHPO+mCsKTW Bl4yDzvEdsT1b1g3uP2+cwAsVaGM/u0= -----END CERTIFICATE-----Generated at Tue Oct 14 17:22:02 2025 by rpki-client