$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/b923e55a-93cc-35be-bb9a-bf18235d65a9.roa File: b923e55a-93cc-35be-bb9a-bf18235d65a9.roa (raw, json) Hash identifier: BoOzAW03M5dohaV51SQ6WjS6WtVvsXXSsj5ObKlHvUI= Subject key identifier: 73:07:01:0B:35:F2:7C:D0:E2:69:68:72:18:55:9F:41:61:CE:88:E6 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584A4DA042415A7929A2CE1BC750 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/b923e55a-93cc-35be-bb9a-bf18235d65a9.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 14618 IP address blocks: 216.87.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:42:41:5a:79:29:a2:ce:1b:c7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=923dc3ec-ca1c-4d18-a386-d4b98d87b175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:bb:94:65:be:0f:c6:ca:13:f3:01:03:86: e1:4e:6f:e6:64:07:11:ef:6d:ce:26:83:96:7f:f5: ec:85:c1:48:95:3f:a0:b1:18:29:cd:20:87:da:19: a2:46:6a:0c:4e:df:08:78:6a:e7:ae:53:55:0b:89: b0:06:c0:1c:17:82:c2:20:49:0f:26:30:0d:a2:20: 4e:9f:bd:8b:6b:9b:9f:7f:c9:22:dc:52:e6:66:a8: b1:e5:a8:52:46:92:c5:46:d8:6b:f4:bc:f4:38:65: 43:71:ab:f9:c4:b3:7e:5c:6c:ac:d3:5c:f9:cf:75: cc:0b:44:27:4e:4e:ff:8d:ae:21:1e:05:aa:b4:25: 29:1d:ea:8e:38:86:c8:34:3b:44:ee:2f:af:55:6b: c6:d5:e8:7c:4a:ab:3d:38:77:a0:29:b8:de:e8:c2: 81:ad:f1:9c:1f:98:f0:c9:c8:72:25:7c:a4:d9:eb: b3:c0:a9:41:7e:dc:2c:69:47:3c:dc:ab:b2:73:4d: 9d:8d:50:25:99:78:e1:ec:7e:b7:05:42:0d:56:e2: cb:ba:0d:f9:46:42:31:9a:6b:24:8e:c1:3d:6d:1b: 8c:27:ca:d3:35:34:db:03:a1:6d:02:a9:af:41:ca: 8e:ae:4b:ba:e2:f4:6b:99:cf:80:ea:99:2d:b0:f6: 47:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:07:01:0B:35:F2:7C:D0:E2:69:68:72:18:55:9F:41:61:CE:88:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/b923e55a-93cc-35be-bb9a-bf18235d65a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 216.87.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:85:f5:27:23:b9:fa:8a:2c:65:3f:ff:14:3a:89:1f:99:09: 17:f6:07:ed:43:53:5d:41:6c:63:c9:b2:a6:bf:f5:60:7c:2a: a8:f0:c9:15:5a:db:8c:11:a4:0b:ad:0c:35:5a:20:e0:f7:c9: 08:da:95:1a:6b:b5:37:34:39:ec:f3:f5:a9:66:4e:ac:2a:f2: 81:69:72:67:7f:e2:00:61:bc:49:5c:7e:7b:25:c9:dd:a9:be: 1c:b3:2a:5b:5b:8d:13:0c:6c:83:56:de:09:2c:7b:12:85:11: a0:1e:aa:de:5d:b9:4d:c0:89:4b:6a:5d:5d:b2:71:5a:95:c5: 7b:7f:c7:ad:f8:96:c6:99:db:28:cb:34:ef:8e:1f:67:52:e5: c6:3e:8f:17:15:d3:b5:04:e5:cc:fc:5c:e5:59:40:32:fc:de: f5:9a:02:41:56:71:51:8f:35:5b:fb:ed:2d:3a:73:10:03:4b: dd:33:7d:f0:8b:04:86:1d:c3:29:b2:ff:96:3b:b2:4b:9f:21: 77:49:77:43:b5:0a:2a:df:a2:c6:4e:5d:f7:45:f3:29:50:a9: 5a:ff:13:ca:85:41:b1:e3:e3:f0:2e:01:3e:cd:81:fa:79:36: 6a:74:4b:83:87:36:10:35:5a:b7:dc:8a:d9:9e:18:46:af:dc: ca:ca:8c:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoEJBWnkpos4bx1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk OTIzZGMzZWMtY2ExYy00ZDE4LWEzODYtZDRiOThkODdiMTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5+7lGW+D8bKE/MBA4bhTm/mZAcR723OJoOW f/XshcFIlT+gsRgpzSCH2hmiRmoMTt8IeGrnrlNVC4mwBsAcF4LCIEkPJjANoiBO n72La5uff8ki3FLmZqix5ahSRpLFRthr9Lz0OGVDcav5xLN+XGys01z5z3XMC0Qn Tk7/ja4hHgWqtCUpHeqOOIbINDtE7i+vVWvG1eh8Sqs9OHegKbje6MKBrfGcH5jw ychyJXyk2euzwKlBftwsaUc83Kuyc02djVAlmXjh7H63BUINVuLLug35RkIxmmsk jsE9bRuMJ8rTNTTbA6FtAqmvQcqOrku64vRrmc+A6pktsPZHFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMHAQs18nzQ4mlochhVn0FhzojmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYjkyM2U1NWEtOTNjYy0z NWJlLWJiOWEtYmYxODIzNWQ2NWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FcrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKF9ScjufqKLGU//xQ6iR+ZCRf2B+1DU11BbGPJsqa/9WB8KqjwyRVa 24wRpAutDDVaIOD3yQjalRprtTc0Oezz9almTqwq8oFpcmd/4gBhvElcfnslyd2p vhyzKltbjRMMbINW3gksexKFEaAeqt5duU3AiUtqXV2ycVqVxXt/x634lsaZ2yjL NO+OH2dS5cY+jxcV07UE5cz8XOVZQDL83vWaAkFWcVGPNVv77S06cxADS90zffCL BIYdwymy/5Y7skufIXdJd0O1CirfosZOXfdF8ylQqVr/E8qFQbHj4/AuAT7Ngfp5 Nmp0S4OHNhA1WrfcitmeGEav3MrKjGI= -----END CERTIFICATE-----Generated at Sun Jun 29 02:00:40 2025 by rpki-client