$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c532a6-6f34-3db1-ab5e-d5bece943a35.roa File: 24c532a6-6f34-3db1-ab5e-d5bece943a35.roa (raw, json) Hash identifier: tBb9xPYVYvVTWSIm+ynEiIoQCol99codlA68MySQ+OM= Subject key identifier: 82:9E:3A:F3:B0:99:3A:03:E9:BD:E1:8F:3F:14:0D:88:14:0A:E2:87 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AD936759097B7ADB2692F2900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c532a6-6f34-3db1-ab5e-d5bece943a35.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 216.108.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:75:90:97:b7:ad:b2:69:2f:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=6d47619f-3585-4678-875c-6bbe16958105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:97:d7:58:c7:a7:cc:2c:5f:62:41:1b:18:f0: 08:65:73:c9:19:42:2c:d2:39:af:4b:5b:6e:51:cb: 1d:15:3c:6b:85:03:08:14:12:8e:ae:16:f2:2c:90: bb:af:10:b5:56:26:fe:59:0b:ce:61:df:58:b3:3e: 48:08:02:b5:28:9c:7f:df:32:56:72:ca:30:71:dc: 2f:1f:ea:b3:41:48:32:de:fa:54:0a:e8:08:e9:26: c9:c4:30:ff:e5:ef:4b:a7:e2:29:12:54:12:24:43: 8e:44:8c:03:4b:bf:56:b6:03:cc:4b:c3:d1:a8:9f: e6:23:c6:29:2e:0d:0c:46:21:1e:ca:b8:c4:7b:10: 36:ed:7e:aa:34:bc:40:22:8b:38:21:47:21:e8:0e: 10:ee:fe:e2:ef:1a:ce:ef:c3:86:45:a8:7c:c5:2a: 7a:bd:de:21:0e:2e:5f:a8:80:ab:8e:01:7e:86:28: d9:ec:20:d2:33:ca:d2:ce:5e:77:1f:1f:af:d1:b7: 7f:88:70:a7:e8:86:7e:f2:0a:61:d6:68:4d:9b:ea: f8:5f:85:13:f8:70:09:99:6d:6e:d7:9c:2f:b0:07: b6:e5:54:41:63:03:35:d3:bd:6b:9d:6f:cb:c3:8a: 7d:b3:d3:3f:36:df:03:33:5b:c3:f8:97:5a:0f:a8: b0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9E:3A:F3:B0:99:3A:03:E9:BD:E1:8F:3F:14:0D:88:14:0A:E2:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c532a6-6f34-3db1-ab5e-d5bece943a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 216.108.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:75:89:98:cb:ca:b0:2e:45:63:37:1e:8a:17:78:3b:25:22: 5c:27:c0:75:cc:d8:9d:a1:ee:d7:42:55:a3:17:92:43:d6:fe: a2:a3:6a:d4:7a:c0:b5:04:16:0f:93:49:ac:ed:fc:41:39:16: 96:c5:c1:72:93:21:a3:f0:68:9a:72:f3:e6:7e:54:b2:d6:f6: a2:d8:a8:53:e5:fd:e3:fd:99:96:d2:ed:62:05:44:24:d7:28: ee:a1:5d:61:b1:c7:3e:97:95:c1:97:c6:ff:dc:ee:e8:af:eb: 63:75:b1:9c:6a:45:31:38:27:32:2f:9f:34:c9:fb:56:8b:b7: f4:80:3d:d5:1a:1a:19:ef:e5:f1:99:f8:07:99:0c:c6:91:f2: 84:4c:02:6a:5b:2c:92:a6:14:6b:53:a9:36:86:52:3c:e1:55: a0:02:83:26:88:74:d1:9c:65:c9:46:c7:31:d4:ce:e3:28:c8: 2c:d0:fb:e7:b6:15:03:b9:f3:58:48:96:7f:83:54:fd:fe:01: 53:27:08:70:63:a8:cb:ee:0e:08:8d:18:28:e6:5c:6b:b9:17: f5:37:01:76:5e:1f:43:f2:41:31:ef:0e:8d:35:4b:11:5a:6e: 14:ea:e2:e3:9b:86:16:a2:43:03:3e:1e:af:2e:00:29:c5:5b: 87:bc:37:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNnWQl7etsmkvKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk NmQ0NzYxOWYtMzU4NS00Njc4LTg3NWMtNmJiZTE2OTU4MTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5fXWMenzCxfYkEbGPAIZXPJGUIs0jmvS1tu UcsdFTxrhQMIFBKOrhbyLJC7rxC1Vib+WQvOYd9Ysz5ICAK1KJx/3zJWcsowcdwv H+qzQUgy3vpUCugI6SbJxDD/5e9Lp+IpElQSJEOORIwDS79WtgPMS8PRqJ/mI8Yp Lg0MRiEeyrjEexA27X6qNLxAIos4IUch6A4Q7v7i7xrO78OGRah8xSp6vd4hDi5f qICrjgF+hijZ7CDSM8rSzl53Hx+v0bd/iHCn6IZ+8gph1mhNm+r4X4UT+HAJmW1u 15wvsAe25VRBYwM1071rnW/Lw4p9s9M/Nt8DM1vD+JdaD6iwMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKeOvOwmToD6b3hjz8UDYgUCuKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjRjNTMyYTYtNmYzNC0z ZGIxLWFiNWUtZDViZWNlOTQzYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx1iZjLyrAuRWM3HooXeDslIlwnwHXM2J2h7tdCVaMXkkPW/qKjatR6 wLUEFg+TSazt/EE5FpbFwXKTIaPwaJpy8+Z+VLLW9qLYqFPl/eP9mZbS7WIFRCTX KO6hXWGxxz6XlcGXxv/c7uiv62N1sZxqRTE4JzIvnzTJ+1aLt/SAPdUaGhnv5fGZ +AeZDMaR8oRMAmpbLJKmFGtTqTaGUjzhVaACgyaIdNGcZclGxzHUzuMoyCzQ++e2 FQO581hIln+DVP3+AVMnCHBjqMvuDgiNGCjmXGu5F/U3AXZeH0PyQTHvDo01SxFa bhTq4uObhhaiQwM+Hq8uACnFW4e8NxY= -----END CERTIFICATE-----Generated at Sat Aug 23 16:51:52 2025 by rpki-client