$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/36662260-e268-3f6b-b84f-abb203cc78ac.roa File: 36662260-e268-3f6b-b84f-abb203cc78ac.roa (raw, json) Hash identifier: l/lEkcjTDnNSeaEifWmar3/ptU+q2BrIg1flwUaGkqM= Subject key identifier: 6F:29:39:6D:D7:EB:B6:D9:5A:45:80:AA:5D:0E:BC:AE:68:9B:8D:3C Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BBFC36A12DD741DEA1E00 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/36662260-e268-3f6b-b84f-abb203cc78ac.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 394708 IP address blocks: 216.255.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:bf:c3:6a:12:dd:74:1d:ea:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=2df09372-c38d-4513-a46d-76fcc8899580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:6d:1f:3a:ad:63:81:d8:e7:d2:ef:25:8b: 64:2d:12:0f:c9:79:3a:cf:09:62:64:6f:07:c7:92: 4c:89:ea:cd:c3:40:68:b1:0d:b3:c3:87:bb:78:5f: 2f:37:48:93:24:53:7b:06:21:84:bf:43:4e:38:d2: 5c:f7:a9:4b:71:7c:6d:5e:57:4f:06:a2:0b:eb:4a: db:6c:a0:49:f5:95:fc:04:d2:75:cb:9b:28:25:19: e0:b5:fd:42:d4:7f:30:d3:a0:df:13:80:25:cf:ca: 60:1f:ac:e6:a3:c0:b3:20:17:31:33:1d:0b:29:ff: 5b:a1:30:a6:85:24:d7:b4:70:74:1b:2b:e6:f1:e4: 6b:19:ff:e0:cf:24:5c:51:be:40:19:51:21:c0:91: db:8b:6e:1c:3d:40:01:b7:c1:28:9e:4c:5a:25:f4: 90:9b:af:f6:56:b6:7c:f6:a2:b4:1c:82:d1:f5:09: d7:d6:63:4e:42:49:fa:a6:1d:d7:51:17:68:3b:37: df:4d:25:39:74:fd:29:1d:94:c6:40:d3:54:b3:d5: 9a:43:c8:a4:9a:4b:80:5e:80:90:8e:a4:cb:34:2d: e5:92:2b:80:28:c0:cb:f4:c0:e0:1e:c1:08:2c:e9: 83:3c:9d:ad:c2:e3:a1:c3:19:c6:49:a6:27:65:f0: 37:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:29:39:6D:D7:EB:B6:D9:5A:45:80:AA:5D:0E:BC:AE:68:9B:8D:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/36662260-e268-3f6b-b84f-abb203cc78ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c8:d3:f2:ab:80:fd:2b:16:10:7e:90:3f:21:1b:77:a6:2c: 34:20:37:ad:5d:3e:70:66:6c:49:47:95:f2:28:10:1d:b7:da: 4b:3f:1c:63:7a:35:35:27:de:2d:59:1d:0b:ef:c6:7f:0b:06: d4:e8:54:34:2b:5f:16:c3:3b:4d:bf:19:e0:d7:f4:f6:bd:2f: d7:d5:4a:ed:60:7f:0c:15:d0:e5:9c:0d:b6:b8:34:cb:b3:21: 20:d7:8a:ed:c3:2e:d0:50:7e:dd:fb:83:12:2c:49:67:5d:e5: 71:f8:5d:06:a7:c8:6e:1b:7d:d2:19:8c:26:f6:da:20:cb:51: db:16:48:4a:bb:78:cb:a2:0a:7f:ce:5a:e0:10:14:e3:28:d8: 8b:72:07:c7:58:8e:53:a8:3c:f9:fa:fb:8b:a8:81:9e:3d:ca: ac:0b:48:ce:c2:f6:cc:40:78:19:26:fe:57:a4:e4:14:b8:ed: c5:e1:44:7f:e5:05:fa:42:5c:56:e5:bf:de:21:34:a2:f0:ea: cb:59:30:26:53:ec:86:ae:19:ad:d9:5a:a0:c0:be:d0:4d:b7: d9:2c:a3:ce:03:17:7f:4d:48:3c:32:92:2f:fa:4b:a0:c6:45: 0d:21:9c:b2:d8:91:11:43:28:1b:0c:e9:33:55:2d:19:23:98: 90:99:bd:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram7/DahLddB3qHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MmRmMDkzNzItYzM4ZC00NTEzLWE0NmQtNzZmY2M4ODk5NTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3NtHzqtY4HY59LvJYtkLRIPyXk6zwliZG8H x5JMierNw0BosQ2zw4e7eF8vN0iTJFN7BiGEv0NOONJc96lLcXxtXldPBqIL60rb bKBJ9ZX8BNJ1y5soJRngtf1C1H8w06DfE4Alz8pgH6zmo8CzIBcxMx0LKf9boTCm hSTXtHB0Gyvm8eRrGf/gzyRcUb5AGVEhwJHbi24cPUABt8EonkxaJfSQm6/2VrZ8 9qK0HILR9QnX1mNOQkn6ph3XURdoOzffTSU5dP0pHZTGQNNUs9WaQ8ikmkuAXoCQ jqTLNC3lkiuAKMDL9MDgHsEILOmDPJ2twuOhwxnGSaYnZfA33QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8pOW3X67bZWkWAql0OvK5om408MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMzY2NjIyNjAtZTI2OC0z ZjZiLWI4NGYtYWJiMjAzY2M3OGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/I0/KrgP0rFhB+kD8hG3emLDQgN61dPnBmbElHlfIoEB232ks/HGN6 NTUn3i1ZHQvvxn8LBtToVDQrXxbDO02/GeDX9Pa9L9fVSu1gfwwV0OWcDba4NMuz ISDXiu3DLtBQft37gxIsSWdd5XH4XQanyG4bfdIZjCb22iDLUdsWSEq7eMuiCn/O WuAQFOMo2ItyB8dYjlOoPPn6+4uogZ49yqwLSM7C9sxAeBkm/lek5BS47cXhRH/l BfpCXFblv94hNKLw6stZMCZT7IauGa3ZWqDAvtBNt9kso84DF39NSDwyki/6S6DG RQ0hnLLYkRFDKBsM6TNVLRkjmJCZvYc= -----END CERTIFICATE-----Generated at Sat Aug 23 22:11:31 2025 by rpki-client