$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/6dd66cf9-9f74-34a4-a53a-a90b79769ff8.roa File: 6dd66cf9-9f74-34a4-a53a-a90b79769ff8.roa (raw, json) Hash identifier: sNVjMJREK3fnx7oEVuGiovIpT1w5qQRTQ0KhrAiQFO4= Subject key identifier: 08:F3:D2:69:46:ED:B3:73:3F:2A:CD:FA:E1:4D:2D:F2:72:DE:1C:78 Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b Certificate serial: 010D0C9F4328584AD3A11624C31BF810123DD6C0 Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/6dd66cf9-9f74-34a4-a53a-a90b79769ff8.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 21706 IP address blocks: 216.59.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:16:24:c3:1b:f8:10:12:3d:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=576dcb2b-f0fe-4102-9cfb-d7c4d905676f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:40:43:68:b4:03:7b:5c:de:73:ed:5c:4c:f6: ec:9e:b1:26:3a:cc:bb:a3:08:b5:cb:ed:78:9f:57: 62:15:1d:71:7a:71:d1:13:02:8f:55:06:42:c5:33: fc:00:fb:10:99:cf:42:b2:5d:1c:93:6d:11:0f:25: 9a:92:b9:1d:2d:d2:ff:94:12:0e:56:a6:d3:74:c2: a8:3a:5a:e5:ed:0f:5c:c5:6d:37:8c:e9:38:7d:f7: 98:35:29:30:46:c0:ff:c5:ea:23:79:9d:3c:45:26: 4d:77:42:74:f1:70:24:18:f1:db:37:dd:e1:76:e3: dc:75:29:d8:be:db:64:c4:6f:97:56:94:e3:f3:a3: 6f:34:80:c7:33:7c:26:5f:16:41:68:33:b3:22:a4: 85:68:b7:95:77:eb:46:ba:f8:0b:00:90:ac:8d:4f: 66:38:1b:13:f0:0c:8c:e1:de:40:b2:07:f5:d1:db: 7e:1b:02:c2:fb:9c:28:73:c1:2b:f8:41:dd:24:89: fc:ce:78:c8:16:25:96:4a:44:b7:3e:62:9f:78:ce: 13:0a:77:44:1f:28:01:0e:ff:56:c3:bd:bb:ad:ec: f1:34:96:ab:17:15:0a:81:34:ac:89:9c:13:13:44: 56:0f:f6:c4:63:67:a1:93:4a:7c:0b:2d:67:95:96: 20:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F3:D2:69:46:ED:B3:73:3F:2A:CD:FA:E1:4D:2D:F2:72:DE:1C:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/6dd66cf9-9f74-34a4-a53a-a90b79769ff8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl X509v3 Authority Key Identifier: keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer sbgp-ipAddrBlock: critical IPv4: 216.59.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c1:ec:0f:7b:be:03:70:ba:dd:ad:f8:d4:fd:74:74:52:71: ab:29:c9:51:7c:63:8d:4d:42:62:ff:6b:27:32:3d:be:85:fb: fe:aa:8c:df:f9:f4:4b:2d:c6:82:58:ab:39:f5:f1:a7:82:5c: ef:bd:ce:ae:c3:76:4b:d6:54:f7:0a:b8:e1:4d:45:87:07:40: 0d:82:40:42:e5:c6:a6:0b:20:81:16:a1:f9:f5:4b:f4:44:f9: f2:1f:e9:d4:ae:4a:f6:9d:38:b0:fc:2e:aa:d8:69:b5:5d:8f: dd:e2:78:cd:14:da:76:3e:54:36:54:f7:87:0b:3b:d3:90:df: ce:22:49:02:15:c3:6b:07:dd:4d:ee:b9:95:ac:90:60:51:57: b2:da:35:47:25:9d:c2:3b:e1:c9:ef:11:5d:52:6a:28:49:95: 9b:d2:5a:bb:61:51:33:09:b0:35:c1:a8:5b:a5:9f:70:10:64: 01:19:8d:98:5d:01:67:9b:ce:92:05:e2:a8:40:89:74:c7:3e: e8:b5:ef:27:d6:8f:3a:c7:0c:cb:b2:63:53:0f:2d:4a:35:ef: b6:fb:39:fc:13:dd:f2:66:ff:c0:3a:53:79:34:8c:d0:44:a9: 20:1b:13:20:f7:27:b0:b4:f2:dd:24:f3:40:39:17:53:86:16: 13:e5:8e:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToRYkwxv4EBI91sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy ZjFiMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NTc2ZGNiMmItZjBmZS00MTAyLTljZmItZDdjNGQ5MDU2NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0BDaLQDe1zec+1cTPbsnrEmOsy7owi1y+14 n1diFR1xenHREwKPVQZCxTP8APsQmc9Csl0ck20RDyWakrkdLdL/lBIOVqbTdMKo Olrl7Q9cxW03jOk4ffeYNSkwRsD/xeojeZ08RSZNd0J08XAkGPHbN93hduPcdSnY vttkxG+XVpTj86NvNIDHM3wmXxZBaDOzIqSFaLeVd+tGuvgLAJCsjU9mOBsT8AyM 4d5Asgf10dt+GwLC+5woc8Er+EHdJIn8znjIFiWWSkS3PmKfeM4TCndEHygBDv9W w727rezxNJarFxUKgTSsiZwTE0RWD/bEY2ehk0p8Cy1nlZYgRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjz0mlG7bNzPyrN+uFNLfJy3hx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvNmRkNjZjZjktOWY3NC0z NGE0LWE1M2EtYTkwYjc5NzY5ZmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2 NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDB7A97vgNwut2t+NT9dHRScaspyVF8Y41NQmL/aycyPb6F+/6qjN/5 9EstxoJYqzn18aeCXO+9zq7DdkvWVPcKuOFNRYcHQA2CQELlxqYLIIEWofn1S/RE +fIf6dSuSvadOLD8LqrYabVdj93ieM0U2nY+VDZU94cLO9OQ384iSQIVw2sH3U3u uZWskGBRV7LaNUclncI74cnvEV1SaihJlZvSWrthUTMJsDXBqFuln3AQZAEZjZhd AWebzpIF4qhAiXTHPui17yfWjzrHDMuyY1MPLUo177b7OfwT3fJm/8A6U3k0jNBE qSAbEyD3J7C08t0k80A5F1OGFhPljsM= -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:46 2025 by rpki-client