$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/967f720f-5e94-318c-bedf-d2b5a2038177.roa File: 967f720f-5e94-318c-bedf-d2b5a2038177.roa (raw, json) Hash identifier: qoR5I7zb6PP2//Me5ruy2VlRWzZRLxGR18MVxV1l110= Subject key identifier: FC:5C:C0:62:7B:FB:E1:D4:5F:FF:1A:D5:66:5B:31:B9:24:6B:FA:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AD936756A1EBC5E698490A980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/967f720f-5e94-318c-bedf-d2b5a2038177.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 216.108.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:75:6a:1e:bc:5e:69:84:90:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=03150ab5-6d8a-482b-b875-f6c79dfce908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ca:e1:ad:ad:3d:14:83:1c:56:27:4d:15:f3: f0:8c:43:24:24:78:07:f1:f0:d1:6f:15:60:6d:77: b8:98:02:a4:6f:b9:98:0f:80:21:55:1d:a8:76:96: d4:97:e3:ed:1f:ec:cc:0c:38:2e:91:69:f0:69:5c: 6f:a8:9f:42:c2:f8:87:2e:46:bd:23:1c:30:5e:fc: 39:ef:5b:ae:ee:a5:0d:a7:2f:96:a6:35:45:21:ed: 3e:92:ef:35:0f:8e:a5:fc:b7:a7:76:14:1a:74:97: 6c:ac:a5:df:bd:38:f7:69:b1:af:b3:26:28:51:07: 8f:d0:05:00:db:d6:2c:c5:c3:af:cd:19:2a:7e:16: 22:c1:0f:86:62:17:4a:04:4f:d9:ca:0f:e8:d3:7f: 4f:9d:1b:07:d3:6f:a9:17:93:b5:b7:8c:0a:d3:d4: 5f:17:89:40:bd:04:0e:7d:94:bb:34:59:f7:f3:81: 2e:52:99:67:f8:23:ac:e6:06:9d:1b:45:b4:19:86: 37:7b:d9:7d:8e:90:a7:55:20:59:ec:01:65:72:2f: 21:6a:a5:6c:cb:1d:37:52:3a:a8:54:d9:52:c2:8c: 04:00:3f:18:cb:02:38:13:9a:4f:ce:e7:3c:39:35: b1:66:69:59:1e:bd:ac:b1:c4:15:e9:c8:95:24:7d: b6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5C:C0:62:7B:FB:E1:D4:5F:FF:1A:D5:66:5B:31:B9:24:6B:FA:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/967f720f-5e94-318c-bedf-d2b5a2038177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 216.108.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:cb:bb:5e:82:ac:fd:eb:c0:5a:68:a2:c7:90:d4:d1:fd:7e: db:67:aa:3a:a1:6e:6a:ed:92:b0:bc:6e:ae:38:71:c2:29:9f: 5a:bd:e7:f9:bf:25:d8:84:f0:4b:e0:a7:51:ad:38:b4:6f:46: 19:e1:3c:e7:64:47:dc:d7:be:d5:19:a2:1d:91:ee:ae:c7:56: a3:dd:82:51:60:dc:49:3b:35:cc:4c:e0:12:b1:1f:17:0e:73: cc:73:48:3d:92:7b:82:c8:73:06:8e:81:92:24:98:f0:33:90: 58:f7:7f:26:69:4e:87:c7:f1:7c:b1:fb:8f:65:9f:a3:63:48: 5e:b1:f4:b7:80:c4:5e:6e:13:9f:c6:72:33:a4:56:c2:ba:24: c4:37:23:be:15:c6:78:65:61:fa:b6:50:41:e4:2b:eb:8f:ab: 67:a0:d6:16:e0:4c:b2:cc:fe:64:0b:f9:b6:53:89:46:eb:83: 65:92:c4:09:fc:78:d1:07:5f:2e:91:1b:7c:e4:ca:fa:6a:89: 56:ab:8b:f4:d5:2c:20:c8:7c:e4:8a:66:b1:01:29:64:3d:51: 23:62:33:c7:63:d6:b5:58:39:97:c6:33:b2:11:21:64:01:2a: 98:ae:2d:e6:e3:9f:ff:36:b9:2c:f7:e5:55:cf:fe:d1:10:e2: 78:4e:e3:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNnVqHrxeaYSQqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MDMxNTBhYjUtNmQ4YS00ODJiLWI4NzUtZjZjNzlkZmNlOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsrhra09FIMcVidNFfPwjEMkJHgH8fDRbxVg bXe4mAKkb7mYD4AhVR2odpbUl+PtH+zMDDgukWnwaVxvqJ9CwviHLka9IxwwXvw5 71uu7qUNpy+WpjVFIe0+ku81D46l/LendhQadJdsrKXfvTj3abGvsyYoUQeP0AUA 29YsxcOvzRkqfhYiwQ+GYhdKBE/Zyg/o039PnRsH02+pF5O1t4wK09RfF4lAvQQO fZS7NFn384EuUpln+COs5gadG0W0GYY3e9l9jpCnVSBZ7AFlci8haqVsyx03Ujqo VNlSwowEAD8YywI4E5pPzuc8OTWxZmlZHr2sscQV6ciVJH22kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxcwGJ7++HUX/8a1WZbMbkka/o+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTY3ZjcyMGYtNWU5NC0z MThjLWJlZGYtZDJiNWEyMDM4MTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GzfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfLu16CrP3rwFpooseQ1NH9fttnqjqhbmrtkrC8bq44ccIpn1q95/m/ JdiE8Evgp1GtOLRvRhnhPOdkR9zXvtUZoh2R7q7HVqPdglFg3Ek7NcxM4BKxHxcO c8xzSD2Se4LIcwaOgZIkmPAzkFj3fyZpTofH8Xyx+49ln6NjSF6x9LeAxF5uE5/G cjOkVsK6JMQ3I74VxnhlYfq2UEHkK+uPq2eg1hbgTLLM/mQL+bZTiUbrg2WSxAn8 eNEHXy6RG3zkyvpqiVari/TVLCDIfOSKZrEBKWQ9USNiM8dj1rVYOZfGM7IRIWQB KpiuLebjn/82uSz35VXP/tEQ4nhO47c= -----END CERTIFICATE-----Generated at Sat Aug 23 18:06:11 2025 by rpki-client