$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/416ce026-7138-3efd-921a-49bcc4bf3de1.roa File: 416ce026-7138-3efd-921a-49bcc4bf3de1.roa (raw, json) Hash identifier: zs10WgTV0pHrl+HyTsyvvXDruKHHqQV8rl9DJHuJ7ms= Subject key identifier: 0C:FD:25:1D:BF:24:22:83:00:18:31:9F:2D:64:07:DF:B0:5F:D3:DD Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584AF961212F37BBCDA6B5915B70 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/416ce026-7138-3efd-921a-49bcc4bf3de1.roa Signing time: Mon 25 Aug 2025 13:32:45 +0000 ROA not before: Mon 25 Aug 2025 13:32:45 +0000 ROA not after: Sun 23 Nov 2025 14:32:45 +0000 asID: 25198 IP address blocks: 216.75.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:61:21:2f:37:bb:cd:a6:b5:91:5b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Aug 25 13:32:45 2025 GMT Not After : Nov 23 14:32:45 2025 GMT Subject: CN=8a01ffeb-2283-44ce-8c0e-6b64297ec05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:1a:b0:fd:d2:41:c6:04:97:86:7e:b5:f6: de:cf:7a:b2:7e:94:a9:ee:cb:cf:02:37:02:5a:bf: 80:b9:af:6c:fe:d0:b5:b0:c4:fe:db:b0:4b:62:24: 12:b6:b3:ad:a4:9d:9e:e1:10:bf:96:30:15:0c:64: 2d:98:37:e4:0f:84:5e:e6:a9:36:b2:13:f9:52:00: e2:63:34:8a:5b:5e:f9:2d:a0:f4:c7:f0:ee:69:e1: 8b:db:d7:56:ef:ed:1e:3f:5e:7b:b4:db:d9:fd:b8: 39:9e:ef:13:94:2a:41:2a:7e:fe:87:7b:bc:a2:04: cb:b9:86:51:7a:88:de:0e:68:49:37:69:6e:88:d8: 6b:96:7c:35:db:7e:ad:50:42:65:f1:c9:bb:53:f6: ed:67:27:74:db:03:84:52:f2:fa:22:9b:61:de:03: 73:43:62:21:f9:a5:fb:f4:00:4b:b4:49:96:0d:35: ea:e0:79:95:8c:d1:bd:68:b3:1d:7d:d4:c7:2d:cc: d7:c5:19:39:7f:b9:10:f0:e7:ad:91:38:cf:a9:6a: 7f:9e:7b:57:a8:b6:33:18:1d:07:1f:c0:57:d7:7d: 2c:5b:99:cc:94:80:f7:d7:ff:67:8e:73:66:a2:0c: e2:c3:b6:ca:59:43:b8:63:8f:c7:ad:17:de:e2:1a: be:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FD:25:1D:BF:24:22:83:00:18:31:9F:2D:64:07:DF:B0:5F:D3:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/416ce026-7138-3efd-921a-49bcc4bf3de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:3a:9e:d8:0a:38:59:ef:9f:57:b6:1f:f1:f6:d5:cd:bf:3a: c9:d3:2a:b7:e1:a5:58:b3:12:e0:92:8b:b0:99:4c:09:30:7b: f3:cb:52:4d:d2:4b:e5:f6:80:a1:03:01:65:bf:f7:ee:39:84: 21:ac:0c:07:aa:1c:50:1e:c0:33:e7:49:31:75:00:06:05:cb: 0a:bd:52:06:1f:b6:0f:66:f9:87:eb:d4:c5:58:45:24:93:48: 5d:1c:45:74:64:c1:92:ec:2f:94:d1:d1:d2:3f:d0:d7:c6:3e: 31:9e:ac:b7:e9:9b:7c:36:e0:fa:d7:5f:85:c6:77:81:8a:9c: 90:42:23:25:82:c9:b3:b8:6d:7f:21:62:eb:cf:dd:bc:e3:83: ea:b1:55:5b:04:13:bd:99:64:8d:56:a3:3a:69:cb:fc:e2:82: 59:f3:0a:0e:25:40:f0:bd:d9:8b:f1:f9:94:a8:7b:07:eb:6d: 97:a5:67:7b:11:93:a1:03:aa:48:64:99:1e:e5:ba:40:ef:03: 55:75:fa:d1:96:55:bb:3e:6f:bb:57:0d:91:76:70:e4:90:ca: 49:34:52:da:98:60:c2:d8:0c:6c:24:3a:d8:e8:b4:26:00:f0: a9:d9:a7:df:9e:6b:56:5b:fd:24:78:d9:a2:4d:fc:9c:d4:4d: 6d:17:a9:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5YSEvN7vNprWRW3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MDgyNTEzMzI0NVoXDTI1MTEyMzE0MzI0NVowLzEtMCsGA1UEAxMk OGEwMWZmZWItMjI4My00NGNlLThjMGUtNmI2NDI5N2VjMDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN0asP3SQcYEl4Z+tfbez3qyfpSp7svPAjcC Wr+Aua9s/tC1sMT+27BLYiQStrOtpJ2e4RC/ljAVDGQtmDfkD4Re5qk2shP5UgDi YzSKW175LaD0x/DuaeGL29dW7+0eP157tNvZ/bg5nu8TlCpBKn7+h3u8ogTLuYZR eojeDmhJN2luiNhrlnw1236tUEJl8cm7U/btZyd02wOEUvL6Ipth3gNzQ2Ih+aX7 9ABLtEmWDTXq4HmVjNG9aLMdfdTHLczXxRk5f7kQ8OetkTjPqWp/nntXqLYzGB0H H8BX130sW5nMlID31/9njnNmogziw7bKWUO4Y4/HrRfe4hq+dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAz9JR2/JCKDABgxny1kB9+wX9PdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvNDE2Y2UwMjYtNzEzOC0z ZWZkLTkyMWEtNDliY2M0YmYzZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EuCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs6ntgKOFnvn1e2H/H21c2/OsnTKrfhpVizEuCSi7CZTAkwe/PLUk3S S+X2gKEDAWW/9+45hCGsDAeqHFAewDPnSTF1AAYFywq9UgYftg9m+Yfr1MVYRSST SF0cRXRkwZLsL5TR0dI/0NfGPjGerLfpm3w24PrXX4XGd4GKnJBCIyWCybO4bX8h YuvP3bzjg+qxVVsEE72ZZI1Wozppy/ziglnzCg4lQPC92Yvx+ZSoewfrbZelZ3sR k6EDqkhkmR7lukDvA1V1+tGWVbs+b7tXDZF2cOSQykk0UtqYYMLYDGwkOtjotCYA 8KnZp9+ea1Zb/SR42aJN/JzUTW0XqVI= -----END CERTIFICATE-----Generated at Sat Sep 6 18:59:41 2025 by rpki-client