$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/a305ba8b-ba39-3ce5-bae9-b73a43f66bdc.roa File: a305ba8b-ba39-3ce5-bae9-b73a43f66bdc.roa (raw, json) Hash identifier: MHvfK/HZ/jnddZTG3BRxE7RUzo23pRp9kVicdndVVI4= Subject key identifier: 3C:7A:6C:8D:1A:58:49:97:3E:A0:8B:DA:82:D1:A5:C4:AB:78:01:D6 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584A4DA042522E7F79093D002440 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/a305ba8b-ba39-3ce5-bae9-b73a43f66bdc.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 16509 IP address blocks: 216.87.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:42:52:2e:7f:79:09:3d:00:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=8b136119-50d7-47ae-9f85-fe2d319d5666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:06:7c:21:e5:14:e8:6f:41:dd:b3:c8:a5: 6a:28:12:43:81:2f:44:7c:56:60:be:e9:48:e1:97: 3a:83:5a:fc:bd:a3:11:ee:b2:1b:ef:0b:b7:e5:9e: 3e:f4:1c:35:c8:c8:0d:ae:04:e9:ea:6c:00:50:98: 6f:eb:bc:04:f3:ce:e0:7d:45:68:ea:b5:5f:5e:25: 02:36:17:eb:2b:9f:03:69:58:63:1e:a1:9c:5b:81: a5:8e:26:ee:fb:14:1b:e8:9b:49:e2:53:cd:e4:63: d6:59:9b:a4:45:f8:a5:76:0e:46:ad:87:1a:68:26: f4:87:b4:25:1d:c9:4c:65:22:a2:d6:99:58:25:90: 50:2f:77:eb:41:89:95:24:b5:40:d5:4b:ea:45:24: dd:ea:90:5a:00:51:81:97:89:ac:d7:7e:6c:b5:63: d3:d9:52:e4:b5:28:db:07:5a:8e:6b:c6:62:f9:de: 0a:08:51:ff:79:14:36:c9:c3:f8:ff:44:65:d1:b8: be:05:80:26:fe:42:33:9e:11:fe:3a:8b:56:19:9a: 91:66:26:ce:ae:32:c4:51:b3:78:f4:1d:b5:9f:fa: 13:c7:88:15:fc:38:09:eb:3c:65:9c:0e:db:2c:55: 35:90:49:3a:fd:c5:01:0d:7b:0a:e1:65:70:02:29: 9b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7A:6C:8D:1A:58:49:97:3E:A0:8B:DA:82:D1:A5:C4:AB:78:01:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/a305ba8b-ba39-3ce5-bae9-b73a43f66bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 216.87.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:20:34:2d:cf:1a:3c:bf:c6:77:10:d7:46:a8:64:03:ba:09: 92:9b:ed:af:72:10:19:b7:50:38:a8:50:04:bc:bb:37:ce:4b: 61:9c:11:00:09:7b:04:67:1c:2f:85:d5:84:05:9e:e8:d1:42: f2:b8:a5:ec:b9:d8:5c:ea:a2:27:1d:43:bd:a7:25:30:c9:c8: f6:49:a3:d5:73:f7:58:aa:1e:ba:c8:46:0f:32:23:e5:36:73: 45:94:d5:f1:26:95:7b:d9:8c:83:b3:65:4e:54:b7:9a:2c:09: fc:7c:75:6b:5f:15:7a:c1:fa:b0:52:7a:33:85:30:bf:9a:15: 31:f8:17:61:51:29:4b:2f:69:f3:f6:dd:d4:82:b1:4e:e2:e9: aa:47:94:06:ac:d2:26:2d:92:7b:34:ff:62:6c:90:6d:6d:d8: 81:f4:99:52:a7:12:60:ce:2a:b9:b8:20:54:5e:59:28:60:17: 53:d8:33:09:59:a5:9c:9d:03:af:29:9b:60:6d:a9:1a:91:9c: 82:6e:ec:9c:bf:5b:4b:4b:0a:63:c2:0b:1d:94:ff:42:c2:f0: 4b:d4:e3:57:f4:69:e7:b3:6d:29:e9:ee:4c:ac:d2:d0:66:84: 9b:c8:6e:23:e9:31:46:ab:2b:fa:ff:ad:3d:4d:25:71:04:49: b0:f2:00:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoEJSLn95CT0AJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk OGIxMzYxMTktNTBkNy00N2FlLTlmODUtZmUyZDMxOWQ1NjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiagGfCHlFOhvQd2zyKVqKBJDgS9EfFZgvulI 4Zc6g1r8vaMR7rIb7wu35Z4+9Bw1yMgNrgTp6mwAUJhv67wE887gfUVo6rVfXiUC NhfrK58DaVhjHqGcW4Gljibu+xQb6JtJ4lPN5GPWWZukRfildg5GrYcaaCb0h7Ql HclMZSKi1plYJZBQL3frQYmVJLVA1UvqRSTd6pBaAFGBl4ms135stWPT2VLktSjb B1qOa8Zi+d4KCFH/eRQ2ycP4/0Rl0bi+BYAm/kIznhH+OotWGZqRZibOrjLEUbN4 9B21n/oTx4gV/DgJ6zxlnA7bLFU1kEk6/cUBDXsK4WVwAimbiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx6bI0aWEmXPqCL2oLRpcSreAHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYTMwNWJhOGItYmEzOS0z Y2U1LWJhZTktYjczYTQzZjY2YmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FcrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsgNC3PGjy/xncQ10aoZAO6CZKb7a9yEBm3UDioUAS8uzfOS2GcEQAJ ewRnHC+F1YQFnujRQvK4pey52FzqoicdQ72nJTDJyPZJo9Vz91iqHrrIRg8yI+U2 c0WU1fEmlXvZjIOzZU5Ut5osCfx8dWtfFXrB+rBSejOFML+aFTH4F2FRKUsvafP2 3dSCsU7i6apHlAas0iYtkns0/2JskG1t2IH0mVKnEmDOKrm4IFReWShgF1PYMwlZ pZydA68pm2BtqRqRnIJu7Jy/W0tLCmPCCx2U/0LC8EvU41f0aeezbSnp7kys0tBm hJvIbiPpMUarK/r/rT1NJXEESbDyAEE= -----END CERTIFICATE-----Generated at Sun Jun 29 04:26:28 2025 by rpki-client