$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/fa1c6b6a-b00d-3519-8d4f-3e24681f6178.roa File: fa1c6b6a-b00d-3519-8d4f-3e24681f6178.roa (raw, json) Hash identifier: wLfCQUGmTS7nEXLA3p8hKbxLS+1QurvQO5hm+QcywtA= Subject key identifier: 35:F0:68:E2:A1:CE:A0:42:A6:1D:EC:CB:75:BB:7A:F2:DF:5A:D5:F7 Certificate issuer: /CN=0f420918-35e5-40cb-b0bd-59d73276fa1e Certificate serial: 010D0C9F4328584AF25681AB24EEF205BA2CC440 Authority key identifier: CE:14:8A:A5:94:96:10:E8:87:9B:1A:BC:34:C7:E1:CB:01:F3:24:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/fa1c6b6a-b00d-3519-8d4f-3e24681f6178.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 398146 IP address blocks: 216.24.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/0f420918-35e5-40cb-b0bd-59d73276fa1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/0f420918-35e5-40cb-b0bd-59d73276fa1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:81:ab:24:ee:f2:05:ba:2c:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f420918-35e5-40cb-b0bd-59d73276fa1e Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=d0e0cf76-2212-455f-8527-b9dd662ffb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3f:f7:54:71:39:ab:71:e2:c9:e5:86:45:ff: 28:af:f9:d7:dc:8a:17:58:ed:c3:a8:82:b7:fe:30: 23:34:8b:ae:d0:a1:30:93:0a:c1:f3:b5:67:4e:90: 51:cc:2e:e1:07:40:75:f3:7a:40:ef:ee:1f:2c:81: 05:60:89:88:ad:b7:30:e2:3e:33:4f:e0:a0:c5:21: 8a:97:fb:e0:11:30:8c:ad:07:cc:f6:f8:3e:57:25: 0b:70:66:f5:01:53:3f:9c:de:f6:0b:d9:a1:ad:cc: ee:91:67:aa:f2:10:9c:d4:1b:53:01:9f:d0:2c:6f: a2:4e:85:a6:a0:16:bf:72:42:dd:a9:3e:cc:e4:26: d1:b1:ee:0f:0d:c9:0d:1d:ba:c8:de:07:62:49:57: 6d:f1:4b:7a:4c:94:e6:d5:aa:7e:4b:9d:7e:ff:61: d7:1b:ff:0a:76:4e:31:d2:a3:a9:58:3d:ae:1d:4d: ca:ae:c5:30:14:91:52:46:9c:9d:e2:a1:26:36:69: 54:4b:00:21:64:7d:76:c1:d8:5b:d3:02:8d:91:65: 2a:1f:7f:d8:bb:56:4a:b5:2f:04:bf:15:8f:2b:92: 57:5f:eb:19:b0:be:41:dd:be:e2:bb:54:ad:85:69: ad:fb:68:11:69:d0:82:df:4c:f8:13:a6:49:d1:36: f0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F0:68:E2:A1:CE:A0:42:A6:1D:EC:CB:75:BB:7A:F2:DF:5A:D5:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/fa1c6b6a-b00d-3519-8d4f-3e24681f6178.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/0f420918-35e5-40cb-b0bd-59d73276fa1e.crl X509v3 Authority Key Identifier: keyid:CE:14:8A:A5:94:96:10:E8:87:9B:1A:BC:34:C7:E1:CB:01:F3:24:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e.cer sbgp-ipAddrBlock: critical IPv4: 216.24.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d7:78:8d:d2:0e:cc:00:70:0c:26:22:37:62:35:57:72:cd: d3:be:2f:f4:93:8b:f9:e5:5b:82:b0:a0:26:be:e1:bd:82:76: c9:b2:02:84:d5:e3:7a:95:6c:19:5f:dc:11:05:ee:8e:4c:34: 49:13:de:1a:1b:48:c1:a3:be:72:cd:5d:e1:e9:32:e2:be:88: 5d:0b:41:0b:be:c1:fe:16:f2:15:4f:36:87:a0:be:a8:00:25: 92:c5:e5:22:b1:37:9a:43:21:61:2f:83:aa:72:63:bf:4f:c3: 87:45:e5:02:7f:be:58:7a:f9:2c:62:1b:f1:65:c8:2e:e8:3f: 26:df:36:8e:d1:ee:ec:46:03:3b:e5:e1:e6:db:89:bd:f5:55: da:d3:d0:ec:84:10:9f:29:0d:04:58:c0:2c:70:52:54:c5:6c: 90:9c:55:38:af:01:e2:0a:72:8f:cb:45:52:be:a6:20:ba:bb: 02:73:d8:75:fe:4f:88:7d:3c:37:25:7f:8b:f3:14:68:1c:15: 30:33:ce:d3:db:ca:71:7b:47:da:f1:33:b0:a5:6c:04:2b:f4: b5:19:85:6b:17:13:74:7b:de:e0:a4:4b:2a:58:f7:49:23:97: c3:4a:28:95:d6:36:a2:c5:3f:a5:80:d1:e1:75:00:30:df:ed: 3f:e2:8b:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVoGrJO7yBbosxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY0MjA5MTgtMzVlNS00MGNiLWIwYmQtNTlkNzMyNzZm YTFlMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZDBlMGNmNzYtMjIxMi00NTVmLTg1MjctYjlkZDY2MmZmYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8T/3VHE5q3HiyeWGRf8or/nX3IoXWO3DqIK3 /jAjNIuu0KEwkwrB87VnTpBRzC7hB0B183pA7+4fLIEFYImIrbcw4j4zT+CgxSGK l/vgETCMrQfM9vg+VyULcGb1AVM/nN72C9mhrczukWeq8hCc1BtTAZ/QLG+iToWm oBa/ckLdqT7M5CbRse4PDckNHbrI3gdiSVdt8Ut6TJTm1ap+S51+/2HXG/8Kdk4x 0qOpWD2uHU3KrsUwFJFSRpyd4qEmNmlUSwAhZH12wdhb0wKNkWUqH3/Yu1ZKtS8E vxWPK5JXX+sZsL5B3b7iu1SthWmt+2gRadCC30z4E6ZJ0TbwCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXwaOKhzqBCph3sy3W7evLfWtX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZjQy MDkxOC0zNWU1LTQwY2ItYjBiZC01OWQ3MzI3NmZhMWUvZmExYzZiNmEtYjAwZC0z NTE5LThkNGYtM2UyNDY4MWY2MTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGY0MjA5MTgtMzVlNS00MGNiLWIw YmQtNTlkNzMyNzZmYTFlLzBmNDIwOTE4LTM1ZTUtNDBjYi1iMGJkLTU5ZDczMjc2 ZmExZS5jcmwwHwYDVR0jBBgwFoAUzhSKpZSWEOiHmxq8NMfhywHzJCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZjQyMDkxOC0zNWU1LTQwY2ItYjBiZC01OWQ3 MzI3NmZhMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Bg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnXeI3SDswAcAwmIjdiNVdyzdO+L/STi/nlW4KwoCa+4b2CdsmyAoTV 43qVbBlf3BEF7o5MNEkT3hobSMGjvnLNXeHpMuK+iF0LQQu+wf4W8hVPNoegvqgA JZLF5SKxN5pDIWEvg6pyY79Pw4dF5QJ/vlh6+SxiG/FlyC7oPybfNo7R7uxGAzvl 4ebbib31VdrT0OyEEJ8pDQRYwCxwUlTFbJCcVTivAeIKco/LRVK+piC6uwJz2HX+ T4h9PDclf4vzFGgcFTAzztPbynF7R9rxM7ClbAQr9LUZhWsXE3R73uCkSypY90kj l8NKKJXWNqLFP6WA0eF1ADDf7T/ii9A= -----END CERTIFICATE-----Generated at Sat Aug 23 21:15:38 2025 by rpki-client