$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4138a71f-a14e-3f2f-9f5b-e8603a073470.roa File: 4138a71f-a14e-3f2f-9f5b-e8603a073470.roa (raw, json) Hash identifier: /7Yc1SWMN4aRTvo9yUoAk2RY84q5uKMFkRisF/6I6HM= Subject key identifier: 27:D2:2A:86:E8:E7:D8:F7:F0:38:D8:26:8D:A4:32:8F:DB:EB:3C:B4 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584ADD667935A08F4C689C7B7A80 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4138a71f-a14e-3f2f-9f5b-e8603a073470.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 19107 IP address blocks: 216.234.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:79:35:a0:8f:4c:68:9c:7b:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=a00d15f4-3e4d-4701-8344-12398c6404c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:dd:08:16:b5:67:a1:20:db:03:38:24:df: 24:cc:ec:4a:5a:66:6b:31:ca:67:69:8c:5a:a0:c0: 42:4e:5c:11:65:f8:76:ea:12:14:3e:b4:f6:09:13: 6d:94:bf:72:db:3d:b8:21:4f:11:18:5b:34:d9:d9: 8e:fd:ea:c9:8a:7e:02:32:6d:c1:07:4b:6a:e1:99: 16:25:6b:92:5f:e6:80:83:1c:3b:49:a1:e3:49:24: 41:44:42:c2:84:c4:20:a8:66:2c:c1:da:b4:b0:55: a9:5d:b1:6b:17:60:da:bf:93:a0:73:0c:b3:66:da: 05:53:2e:b7:31:40:db:40:31:cd:e1:eb:2a:7a:9d: 33:9a:58:e0:f2:cb:74:30:a4:3d:8c:01:63:07:7b: e7:43:e6:9f:9e:0c:4a:37:3d:3d:aa:d8:b9:b3:73: 86:6c:1a:c8:35:09:be:3e:d0:51:81:af:9a:0a:72: 51:52:8d:2c:27:70:2b:58:2e:93:ec:22:49:50:0b: 21:fb:ed:a8:e7:91:6d:4e:8e:fb:c8:e2:90:23:85: d3:91:4e:9c:41:b1:f2:17:80:37:b0:46:db:e1:cd: db:4c:da:a5:5b:d6:d1:c8:a4:fa:92:7c:98:73:44: d4:92:37:6a:53:1c:c6:f7:c1:8c:a2:62:a9:71:bd: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D2:2A:86:E8:E7:D8:F7:F0:38:D8:26:8D:A4:32:8F:DB:EB:3C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4138a71f-a14e-3f2f-9f5b-e8603a073470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 216.234.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:61:4d:56:58:60:77:34:fc:b9:26:e6:04:0f:da:02:2b:87: 04:5b:ba:0f:8b:73:e5:99:8d:f7:39:3a:29:ea:f3:99:b0:a8: 59:fe:b4:f1:1d:6d:d3:db:3d:ac:7f:c9:e5:f7:59:8d:a7:12: f0:ec:ca:d2:69:29:4f:46:36:07:21:29:40:66:fe:a9:d7:a4: 7f:9c:f6:c6:50:71:4b:91:59:08:ef:8f:4a:6f:9e:32:cc:9a: d7:84:ed:42:42:0e:7a:4d:49:a7:ef:66:44:f9:ca:99:34:ce: 93:0b:54:f0:8f:9a:e6:16:78:1f:82:37:90:01:ce:fc:20:88: 11:57:32:fe:69:37:27:fb:6c:28:77:7a:47:88:53:94:be:44: 1e:25:94:4e:72:bb:f0:f1:9d:01:3f:a8:3e:c1:00:74:4e:8f: c4:7a:e4:a6:b6:a0:fa:af:4b:63:27:b5:21:65:f0:60:69:fb: fe:09:de:10:bd:a7:85:c9:b0:e3:be:27:49:b1:3b:e6:76:8d: d1:e9:68:51:3e:c7:c3:dd:e1:eb:3a:d2:ac:f8:31:32:52:c3: c0:1a:ad:64:51:1e:fd:19:81:92:3e:df:01:68:a8:ea:91:ec: 32:39:b5:13:aa:f7:3a:06:1d:9a:c6:12:b4:24:eb:36:05:ef: a4:a7:76:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZnk1oI9MaJx7eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YTAwZDE1ZjQtM2U0ZC00NzAxLTgzNDQtMTIzOThjNjQwNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdvdCBa1Z6Eg2wM4JN8kzOxKWmZrMcpnaYxa oMBCTlwRZfh26hIUPrT2CRNtlL9y2z24IU8RGFs02dmO/erJin4CMm3BB0tq4ZkW JWuSX+aAgxw7SaHjSSRBRELChMQgqGYswdq0sFWpXbFrF2Dav5OgcwyzZtoFUy63 MUDbQDHN4esqep0zmljg8st0MKQ9jAFjB3vnQ+afngxKNz09qti5s3OGbBrINQm+ PtBRga+aCnJRUo0sJ3ArWC6T7CJJUAsh++2o55FtTo77yOKQI4XTkU6cQbHyF4A3 sEbb4c3bTNqlW9bRyKT6knyYc0TUkjdqUxzG98GMomKpcb01HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfSKobo59j38DjYJo2kMo/b6zy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNDEzOGE3MWYtYTE0ZS0z ZjJmLTlmNWItZTg2MDNhMDczNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdhTVZYYHc0/Lkm5gQP2gIrhwRbug+Lc+WZjfc5Oinq85mwqFn+tPEd bdPbPax/yeX3WY2nEvDsytJpKU9GNgchKUBm/qnXpH+c9sZQcUuRWQjvj0pvnjLM mteE7UJCDnpNSafvZkT5ypk0zpMLVPCPmuYWeB+CN5ABzvwgiBFXMv5pNyf7bCh3 ekeIU5S+RB4llE5yu/DxnQE/qD7BAHROj8R65Ka2oPqvS2MntSFl8GBp+/4J3hC9 p4XJsOO+J0mxO+Z2jdHpaFE+x8Pd4es60qz4MTJSw8AarWRRHv0ZgZI+3wFoqOqR 7DI5tROq9zoGHZrGErQk6zYF76Sndvs= -----END CERTIFICATE-----Generated at Sun Aug 24 04:51:43 2025 by rpki-client