$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7f3d8716-5084-3bfc-ba53-053fa3abb716.roa File: 7f3d8716-5084-3bfc-ba53-053fa3abb716.roa (raw, json) Hash identifier: CkwoAFbJ+uabL1AXkrKZf/QDBrWOzJsIwe6HmyhRlTc= Subject key identifier: EA:04:65:02:37:18:C8:1C:09:34:EE:1D:7A:EC:E6:D3:DA:6A:D0:20 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BC7B898C57907223B50C0 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7f3d8716-5084-3bfc-ba53-053fa3abb716.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 394708 IP address blocks: 216.255.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c7:b8:98:c5:79:07:22:3b:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=e7852705-b61c-458d-bad2-c8f8eaaca440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:76:3f:24:1b:bd:31:b1:cd:2c:55:cf:db: 6c:3f:9a:d6:56:df:cf:dc:47:86:79:76:82:c5:83: 85:49:9d:52:ba:c3:b8:9e:ca:54:a3:4c:bd:ed:e5: ef:10:d9:76:38:b0:17:92:fb:0e:fe:fc:16:a2:bf: ff:ac:ea:15:65:60:dd:42:11:27:1f:d0:2c:f3:96: 2b:07:2e:a2:b2:21:41:22:d3:47:fd:e6:c2:5d:fb: e9:5f:20:ea:98:82:c5:bf:f5:d8:85:a9:3f:e9:fb: da:18:5e:b7:da:6a:d5:fe:cd:cf:36:bf:30:85:49: fd:ef:e2:7f:d7:09:04:19:ff:a2:57:c2:10:13:b0: 59:ea:eb:fd:a2:24:0c:ff:e0:21:d5:3a:d2:45:52: ee:df:47:83:f5:8e:05:f6:17:2d:0a:36:3d:37:ab: 91:61:f9:0c:0d:04:ad:1d:07:a3:00:49:bc:08:a8: 26:31:cf:51:8b:fa:c4:be:a3:f2:cc:41:17:32:4a: 74:f8:d2:cb:a0:35:4a:2f:1e:97:4c:6c:32:f1:59: 5a:1f:d7:a0:a8:53:61:39:d1:d6:f2:55:5c:08:2d: a2:ec:e7:a2:7a:50:ec:cd:c4:ef:e4:4b:87:e0:95: 96:9f:98:a3:80:7e:6b:14:7a:3e:89:65:9e:5f:c9: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:04:65:02:37:18:C8:1C:09:34:EE:1D:7A:EC:E6:D3:DA:6A:D0:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7f3d8716-5084-3bfc-ba53-053fa3abb716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:0e:b3:68:59:98:4f:4a:24:90:eb:ef:06:56:d5:26:60:b4: 26:c4:97:2e:93:2a:1d:cb:9b:fb:4b:a6:98:50:40:89:a5:c9: bb:f6:b2:22:02:c5:4a:56:9b:36:b6:67:74:d3:43:20:67:ee: 4b:82:f0:7a:51:13:62:e7:8e:4a:3d:0e:69:b1:21:b7:d9:65: 66:02:e4:b4:5e:e2:44:63:08:a5:f3:b2:97:e4:57:bb:74:0f: 1c:4e:43:60:d2:3c:5d:89:34:b7:58:64:68:f2:01:1f:48:4e: c5:6d:03:85:3b:ee:9a:b4:02:82:14:42:b4:e8:9f:36:96:21: 8a:8d:73:d9:42:a2:6a:97:86:ef:a6:71:8d:1c:26:ba:02:57: ab:2c:0c:3b:96:64:d7:f6:cd:93:85:55:d2:5f:c8:9e:07:95: 51:15:32:ed:40:44:5e:ac:9c:a8:14:ff:f8:dd:6e:85:cc:46: 77:b9:6d:2c:c9:a8:d1:68:8d:7e:e3:02:06:63:bf:7c:ab:8a: dc:bc:d3:7f:a7:ad:0b:ff:e5:c4:e0:f1:c7:94:f0:0b:b7:47: af:eb:8f:48:fc:ac:8d:d2:6c:51:19:c6:96:a1:23:49:72:9c: d3:5a:a5:9b:0f:21:c7:c4:b6:66:33:38:62:45:78:fe:2a:ce: ad:fe:87:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8e4mMV5ByI7UMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ZTc4NTI3MDUtYjYxYy00NThkLWJhZDItYzhmOGVhYWNhNDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3R2PyQbvTGxzSxVz9tsP5rWVt/P3EeGeXaC xYOFSZ1SusO4nspUo0y97eXvENl2OLAXkvsO/vwWor//rOoVZWDdQhEnH9As85Yr By6isiFBItNH/ebCXfvpXyDqmILFv/XYhak/6fvaGF632mrV/s3PNr8whUn97+J/ 1wkEGf+iV8IQE7BZ6uv9oiQM/+Ah1TrSRVLu30eD9Y4F9hctCjY9N6uRYfkMDQSt HQejAEm8CKgmMc9Ri/rEvqPyzEEXMkp0+NLLoDVKLx6XTGwy8VlaH9egqFNhOdHW 8lVcCC2i7OeielDszcTv5EuH4JWWn5ijgH5rFHo+iWWeX8lZRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoEZQI3GMgcCTTuHXrs5tPaatAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvN2YzZDg3MTYtNTA4NC0z YmZjLWJhNTMtMDUzZmEzYWJiNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2P88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsOs2hZmE9KJJDr7wZW1SZgtCbEly6TKh3Lm/tLpphQQImlybv2siIC xUpWmza2Z3TTQyBn7kuC8HpRE2Lnjko9DmmxIbfZZWYC5LRe4kRjCKXzspfkV7t0 DxxOQ2DSPF2JNLdYZGjyAR9ITsVtA4U77pq0AoIUQrTonzaWIYqNc9lComqXhu+m cY0cJroCV6ssDDuWZNf2zZOFVdJfyJ4HlVEVMu1ARF6snKgU//jdboXMRne5bSzJ qNFojX7jAgZjv3yrity803+nrQv/5cTg8ceU8Au3R6/rj0j8rI3SbFEZxpahI0ly nNNapZsPIcfEtmYzOGJFeP4qzq3+hyQ= -----END CERTIFICATE-----Generated at Sun Aug 24 06:28:09 2025 by rpki-client