$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c54860a6-e47c-3a22-aaa5-3e884fb7dfc1.roa File: c54860a6-e47c-3a22-aaa5-3e884fb7dfc1.roa (raw, json) Hash identifier: fXpb2A/lWnHjYhuKn7jVCnki3p+eKRPORLO/0kunZgc= Subject key identifier: 73:2B:6D:B0:FD:21:99:E3:58:5F:0A:71:1F:22:17:80:BB:25:89:D6 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584AFC1C0FAB1672E782E1033AC0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c54860a6-e47c-3a22-aaa5-3e884fb7dfc1.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 1239 IP address blocks: 216.227.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0f:ab:16:72:e7:82:e1:03:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=514d4432-542f-441c-b607-f48d53f91c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1b:42:14:bc:73:70:e7:e4:6c:9d:26:d7:0b: 6e:b5:7f:15:62:dd:db:35:4a:9a:ed:7c:53:10:a6: 36:de:d2:56:41:1b:3a:10:bf:e1:56:d8:32:aa:ee: 19:b9:70:22:6a:a3:8f:3d:f4:a4:9c:61:55:9a:71: 1f:31:dc:95:49:dc:3c:b9:2a:1b:b2:a2:a7:2d:39: ee:9f:6c:d4:84:4f:dd:de:2e:e4:d8:c3:a9:98:38: 32:3f:42:fa:77:fb:9b:95:cb:cb:71:a9:91:5c:4b: 0d:6d:0c:7b:a7:0f:de:17:c3:a8:86:e5:96:3f:b4: a9:b6:b8:33:16:da:47:c6:c0:f6:4d:e6:da:31:54: 7b:9d:c4:93:20:3a:10:a8:d4:2a:18:d4:b9:f7:1a: f6:a9:48:0b:79:98:68:3e:9b:8c:5f:1f:e8:e1:be: 0a:cc:59:4d:9f:c0:12:b0:bf:8a:5b:bb:61:d4:f9: 17:2d:b1:30:dc:81:4f:c9:bb:70:80:24:30:8b:ec: bc:d8:c6:be:1e:fc:4f:15:dc:7d:55:64:c6:4c:7d: f2:fc:9e:40:6b:30:bb:f2:2c:77:15:22:98:01:96: 5e:eb:e0:63:a1:f3:b2:c9:59:b6:6e:a4:1c:56:49: 8c:c3:b8:25:1d:55:de:cb:50:63:e4:83:49:9c:62: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2B:6D:B0:FD:21:99:E3:58:5F:0A:71:1F:22:17:80:BB:25:89:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c54860a6-e47c-3a22-aaa5-3e884fb7dfc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 216.227.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:b1:20:83:bc:7c:7f:df:cb:9f:d1:35:72:16:b1:b2:fb:ad: cf:fa:e6:d0:ca:d9:83:fc:fa:3d:25:bb:a1:7e:08:32:6e:ec: 1a:49:74:a6:0b:09:05:21:98:26:5f:b4:34:f5:dc:09:01:d5: 62:6f:99:d4:ee:aa:54:60:87:b7:79:8b:6d:d5:4f:c0:68:b2: b0:f9:1e:d6:81:0a:aa:af:e8:6b:5a:9c:12:26:52:00:90:91: 92:8a:23:9b:f0:a4:0a:b9:86:75:de:1c:0f:f4:16:e9:82:27: 92:2e:6d:1f:5e:e4:59:83:ee:f3:ae:85:a9:7c:64:0a:fb:b1: 14:84:43:dd:a9:67:40:2c:fe:6d:86:e4:54:56:4b:67:f6:8f: 42:8b:8b:16:bb:e1:5f:a2:1d:23:ff:92:7c:40:41:01:7e:b1: a4:34:30:46:e9:dc:61:fe:de:5d:6a:d5:70:b7:86:bd:c9:97: f1:58:96:c3:8a:8a:b6:54:e6:40:49:17:b0:3e:6d:2d:34:2c: 96:b0:7d:ed:c0:52:4d:5a:25:7f:ee:e5:93:4c:60:d0:53:00: 22:0c:d7:29:86:71:c7:52:0e:90:2e:3f:17:85:85:82:a6:2f: f9:76:08:ae:11:dc:e0:1a:fd:b8:17:af:50:a9:b1:8c:a3:60: 45:6a:13:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HA+rFnLnguEDOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NTE0ZDQ0MzItNTQyZi00NDFjLWI2MDctZjQ4ZDUzZjkxYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhtCFLxzcOfkbJ0m1wtutX8VYt3bNUqa7XxT EKY23tJWQRs6EL/hVtgyqu4ZuXAiaqOPPfSknGFVmnEfMdyVSdw8uSobsqKnLTnu n2zUhE/d3i7k2MOpmDgyP0L6d/ublcvLcamRXEsNbQx7pw/eF8OohuWWP7Sptrgz FtpHxsD2TebaMVR7ncSTIDoQqNQqGNS59xr2qUgLeZhoPpuMXx/o4b4KzFlNn8AS sL+KW7th1PkXLbEw3IFPybtwgCQwi+y82Ma+HvxPFdx9VWTGTH3y/J5AazC78ix3 FSKYAZZe6+BjofOyyVm2bqQcVkmMw7glHVXey1Bj5INJnGI8PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMrbbD9IZnjWF8KcR8iF4C7JYnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYzU0ODYwYTYtZTQ3Yy0z YTIyLWFhYTUtM2U4ODRmYjdkZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OOCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyxIIO8fH/fy5/RNXIWsbL7rc/65tDK2YP8+j0lu6F+CDJu7BpJdKYL CQUhmCZftDT13AkB1WJvmdTuqlRgh7d5i23VT8BosrD5HtaBCqqv6GtanBImUgCQ kZKKI5vwpAq5hnXeHA/0FumCJ5IubR9e5FmD7vOuhal8ZAr7sRSEQ92pZ0As/m2G 5FRWS2f2j0KLixa74V+iHSP/knxAQQF+saQ0MEbp3GH+3l1q1XC3hr3Jl/FYlsOK irZU5kBJF7A+bS00LJawfe3AUk1aJX/u5ZNMYNBTACIM1ymGccdSDpAuPxeFhYKm L/l2CK4R3OAa/bgXr1CpsYyjYEVqEx0= -----END CERTIFICATE-----Generated at Sun Sep 7 03:52:37 2025 by rpki-client