$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0858602b-0f0d-3b4f-b29d-162ebc5157f4.roa File: 0858602b-0f0d-3b4f-b29d-162ebc5157f4.roa (raw, json) Hash identifier: zHISlr7oc/bvywhPPkE7OgRrpZBiHWIltGoXV9jWXi0= Subject key identifier: 64:A9:19:46:61:3A:8E:20:10:15:D0:7C:AE:BE:CC:7A:23:DE:BD:12 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584AC2070F43A98DC8A6A1D24E00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0858602b-0f0d-3b4f-b29d-162ebc5157f4.roa Signing time: Tue 05 Aug 2025 17:41:48 +0000 ROA not before: Tue 05 Aug 2025 17:41:48 +0000 ROA not after: Mon 03 Nov 2025 18:41:48 +0000 asID: 23473 IP address blocks: 216.171.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:07:0f:43:a9:8d:c8:a6:a1:d2:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 5 17:41:48 2025 GMT Not After : Nov 3 18:41:48 2025 GMT Subject: CN=d98516fb-6fab-4359-a490-b97d5d17938a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:3f:55:d7:23:92:3f:b5:e8:20:b0:20:56: e8:11:58:f2:ef:b0:77:1b:39:12:f0:6a:b3:e7:d8: ab:61:ba:12:68:0e:49:4b:5c:47:6e:71:10:1e:16: 38:8f:1b:d9:27:05:aa:c0:2a:6c:08:33:9f:bb:81: cd:a8:2a:b0:25:34:98:bb:89:95:8e:4d:90:29:98: c1:b9:85:45:99:3d:67:5e:37:3a:f5:1a:0c:7d:77: 33:85:43:de:57:0a:fa:d9:ec:70:99:b6:48:69:3c: a3:c6:a9:59:f1:ab:12:ce:fe:18:ed:ec:d8:c3:d3: c2:ec:48:5c:d3:79:33:c6:7e:30:85:07:d0:39:7d: 67:ce:74:26:49:23:55:0b:95:aa:9d:9d:c9:e9:1a: cb:b0:f6:ce:5c:f0:b2:32:8a:ab:e7:e9:88:cc:1b: 43:e3:90:08:41:1a:d4:b5:55:5d:8e:e7:c6:92:c3: 53:80:59:9b:74:0d:86:fb:f3:b7:17:71:5e:16:cb: f4:e4:3f:78:bf:57:06:61:12:1b:78:75:9c:26:3b: ed:61:b3:7d:99:88:a2:29:e4:47:f1:1d:0f:8d:d4: 3b:d3:48:34:96:2e:54:1b:e1:a0:a1:e4:d1:41:28: b8:1c:53:e5:94:17:c4:b9:41:92:25:ac:e1:2d:02: a8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A9:19:46:61:3A:8E:20:10:15:D0:7C:AE:BE:CC:7A:23:DE:BD:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0858602b-0f0d-3b4f-b29d-162ebc5157f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:09:f6:f2:5a:8c:95:a5:9f:eb:f2:9b:f6:a4:2d:66:78:4f: 8b:3b:be:84:83:fd:e0:74:0f:d0:36:4d:0d:e0:31:8c:dd:2c: ac:63:bd:dd:20:88:4f:58:a9:fd:f9:31:a8:10:9f:db:4c:12: e0:42:39:26:0a:5d:9a:83:d2:5e:83:4e:2b:8d:b4:dc:4b:fd: da:d3:cf:ae:06:c9:8a:ea:01:25:30:1d:76:6e:55:30:52:94: 0f:29:09:4e:1f:6e:10:db:1f:d0:9c:ce:b5:36:db:eb:a3:cb: db:bd:e4:ca:2f:8c:f4:18:cc:60:3c:78:86:94:ea:a7:28:a8: fa:a6:8f:bc:c8:39:d4:42:6c:3a:6a:d3:6f:0e:52:32:12:81: 45:ae:43:4b:db:51:42:14:9f:d5:1f:0e:ab:d8:12:d1:73:ef: b3:12:c8:86:94:f8:3a:6a:b6:41:d6:e6:c5:33:54:03:5f:51: 14:c7:91:61:cf:7d:42:e5:21:25:ac:b5:37:c1:99:d0:f2:b7: b4:54:4d:ae:a6:ac:e0:3a:98:61:3d:6e:c5:4d:c1:3f:34:77: d1:1e:ea:ff:cb:61:8b:ba:0c:3e:38:c2:6d:af:79:00:91:14: 75:4f:0e:13:d8:01:87:4d:3b:09:e2:43:46:59:dd:37:c6:c4: 2a:a3:a4:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErCBw9DqY3IpqHSTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDgwNTE3NDE0OFoXDTI1MTEwMzE4NDE0OFowLzEtMCsGA1UEAxMk ZDk4NTE2ZmItNmZhYi00MzU5LWE0OTAtYjk3ZDVkMTc5MzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTM/Vdcjkj+16CCwIFboEVjy77B3GzkS8Gqz 59irYboSaA5JS1xHbnEQHhY4jxvZJwWqwCpsCDOfu4HNqCqwJTSYu4mVjk2QKZjB uYVFmT1nXjc69RoMfXczhUPeVwr62exwmbZIaTyjxqlZ8asSzv4Y7ezYw9PC7Ehc 03kzxn4whQfQOX1nznQmSSNVC5WqnZ3J6RrLsPbOXPCyMoqr5+mIzBtD45AIQRrU tVVdjufGksNTgFmbdA2G+/O3F3FeFsv05D94v1cGYRIbeHWcJjvtYbN9mYiiKeRH 8R0PjdQ700g0li5UG+GgoeTRQSi4HFPllBfEuUGSJazhLQKoMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSpGUZhOo4gEBXQfK6+zHoj3r0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMDg1ODYwMmItMGYwZC0z YjRmLWIyOWQtMTYyZWJjNTE1N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkJ9vJajJWln+vym/akLWZ4T4s7voSD/eB0D9A2TQ3gMYzdLKxjvd0g iE9Yqf35MagQn9tMEuBCOSYKXZqD0l6DTiuNtNxL/drTz64GyYrqASUwHXZuVTBS lA8pCU4fbhDbH9CczrU22+ujy9u95MovjPQYzGA8eIaU6qcoqPqmj7zIOdRCbDpq 028OUjISgUWuQ0vbUUIUn9UfDqvYEtFz77MSyIaU+DpqtkHW5sUzVANfURTHkWHP fULlISWstTfBmdDyt7RUTa6mrOA6mGE9bsVNwT80d9Ee6v/LYYu6DD44wm2veQCR FHVPDhPYAYdNOwniQ0ZZ3TfGxCqjpJk= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:05 2025 by rpki-client