$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/255b4698-256c-3f6d-9434-66692e131047.roa File: 255b4698-256c-3f6d-9434-66692e131047.roa (raw, json) Hash identifier: AGB8jcLEmRpjp0tdUMpB5f9XvuFBKNejLzj5GAniQJs= Subject key identifier: 03:FE:B0:4D:1E:7C:E5:03:B2:71:E8:FE:50:FB:B7:3D:DA:AC:8B:BB Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584B18073199936D218440E0C180 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/255b4698-256c-3f6d-9434-66692e131047.roa Signing time: Fri 05 Sep 2025 13:01:36 +0000 ROA not before: Fri 05 Sep 2025 13:01:36 +0000 ROA not after: Thu 04 Dec 2025 14:01:36 +0000 asID: 174 IP address blocks: 216.75.140.0/24 maxlen: 24 216.75.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:07:31:99:93:6d:21:84:40:e0:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Sep 5 13:01:36 2025 GMT Not After : Dec 4 14:01:36 2025 GMT Subject: CN=851f68ec-fb52-495f-964a-2aa00989517e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:3b:2d:eb:97:1c:e6:71:f8:a6:cb:ad:2e: 73:e0:26:a8:76:8a:36:c8:1a:e0:bb:75:cf:42:a1: 2a:86:a4:07:80:81:a1:61:26:82:c4:01:09:f5:ad: 9e:46:22:36:b7:03:9e:cb:70:49:ac:ea:3d:ec:8d: ca:7b:0f:40:25:21:bb:78:75:4b:49:3f:da:ad:7f: 1f:9a:c6:79:29:ab:8d:4b:3d:ca:dd:17:4c:0a:01: 33:cd:96:92:5e:57:d5:6d:32:51:78:02:99:29:35: 96:4b:e2:c9:83:1b:ec:6b:f6:ff:90:48:8c:c7:7a: 86:b0:31:34:60:62:18:ce:02:2a:78:88:ff:00:e4: 59:c2:c9:18:b4:f6:93:2f:6f:1d:1c:09:a0:4e:7e: 1c:98:1b:17:82:c7:5c:95:2d:96:58:6b:ab:d7:65: e0:ca:ca:b0:37:19:19:7c:99:83:ef:47:d2:6e:ac: 4e:c3:bc:29:d7:9a:a2:67:b1:59:d0:bb:7e:dd:15: b8:c2:86:fc:81:6f:da:cf:16:4f:65:9c:c0:83:fe: 1a:1c:5f:b0:27:6c:3a:f5:b1:5f:6e:5c:97:20:7d: 63:a7:85:59:d2:6d:ac:e5:42:58:f9:18:7e:a7:a0: 95:b0:f8:a0:17:a7:9d:5b:7d:94:7a:98:ad:5f:02: 65:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FE:B0:4D:1E:7C:E5:03:B2:71:E8:FE:50:FB:B7:3D:DA:AC:8B:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/255b4698-256c-3f6d-9434-66692e131047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.140.0/24 216.75.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0e:ca:fd:e8:33:ae:79:24:23:f5:f6:21:a5:65:40:65:18: 09:a2:a2:83:41:32:da:51:52:5c:2e:76:b9:93:9d:44:eb:55: 07:88:ff:cd:9b:b9:aa:f2:6e:88:c2:98:74:11:ae:01:5f:8f: 87:ce:71:99:8f:16:fd:7e:10:e4:a5:63:cd:e9:8c:0f:60:94: 3d:7d:67:42:64:2e:2b:71:2d:65:1f:c0:d5:9c:ec:3b:d8:ee: 04:d7:04:11:4b:47:fb:6b:3e:63:c5:a2:d5:47:6f:dd:3e:e2: d3:cc:8e:65:a3:16:6d:a5:8c:60:70:4e:f1:02:af:d6:37:c5: 53:ea:e4:c3:8c:c9:ae:c7:90:39:6e:97:3c:2a:3c:d2:c8:fb: f6:96:b1:ff:25:90:2f:3f:57:1e:7f:97:b0:79:52:b1:18:20: 03:c2:c4:65:28:b3:9e:af:d1:33:fd:55:1d:0e:ba:53:a1:b3: 54:70:4e:37:33:f0:15:c4:c1:65:51:dc:02:ce:35:a4:1b:72: 55:ee:0e:b0:59:a3:83:85:b1:e8:0a:1d:d4:34:34:f9:46:27: d9:b2:5f:42:d4:42:24:58:b9:6b:79:46:cd:a3:f1:df:07:62: 50:63:8f:f6:33:04:4c:67:8a:b4:8a:45:4c:ff:ca:85:6a:42: e7:3d:4e:f7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsYBzGZk20hhEDgwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MDkwNTEzMDEzNloXDTI1MTIwNDE0MDEzNlowLzEtMCsGA1UEAxMk ODUxZjY4ZWMtZmI1Mi00OTVmLTk2NGEtMmFhMDA5ODk1MTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFM7LeuXHOZx+KbLrS5z4Caodoo2yBrgu3XP QqEqhqQHgIGhYSaCxAEJ9a2eRiI2twOey3BJrOo97I3Kew9AJSG7eHVLST/arX8f msZ5KauNSz3K3RdMCgEzzZaSXlfVbTJReAKZKTWWS+LJgxvsa/b/kEiMx3qGsDE0 YGIYzgIqeIj/AORZwskYtPaTL28dHAmgTn4cmBsXgsdclS2WWGur12XgysqwNxkZ fJmD70fSbqxOw7wp15qiZ7FZ0Lt+3RW4wob8gW/azxZPZZzAg/4aHF+wJ2w69bFf blyXIH1jp4VZ0m2s5UJY+Rh+p6CVsPigF6edW32UepitXwJlqwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAP+sE0efOUDsnHo/lD7tz3arIu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvMjU1YjQ2OTgtMjU2Yy0z ZjZkLTk0MzQtNjY2OTJlMTMxMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2EuMAwQA 2EuOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGMOyv3oM655JCP19iGlZUBlGAmiooNBMtpRUlwudrmTnUTr VQeI/82buarybojCmHQRrgFfj4fOcZmPFv1+EOSlY83pjA9glD19Z0JkLitxLWUf wNWc7DvY7gTXBBFLR/trPmPFotVHb90+4tPMjmWjFm2ljGBwTvECr9Y3xVPq5MOM ya7HkDlulzwqPNLI+/aWsf8lkC8/Vx5/l7B5UrEYIAPCxGUos56v0TP9VR0OulOh s1RwTjcz8BXEwWVR3ALONaQbclXuDrBZo4OFsegKHdQ0NPlGJ9myX0LUQiRYuWt5 Rs2j8d8HYlBjj/YzBExnirSKRUz/yoVqQuc9Tvc= -----END CERTIFICATE-----Generated at Sat Sep 6 19:00:45 2025 by rpki-client