$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/6df9d2bc-6498-37f6-aa60-f89bdf80a4aa.roa File: 6df9d2bc-6498-37f6-aa60-f89bdf80a4aa.roa (raw, json) Hash identifier: uSBGUMNncOPaMn4rtg6GgRBYyL3fdC0DXWKx3oF8KM4= Subject key identifier: 6D:46:EA:DC:9C:BD:69:AC:00:EE:77:68:DB:55:32:15:F0:DC:95:FD Certificate issuer: /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb Certificate serial: 010D0C9F4328584AD29B516E38CE5B8960E5D200 Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/6df9d2bc-6498-37f6-aa60-f89bdf80a4aa.roa Signing time: Mon 11 Aug 2025 16:13:28 +0000 ROA not before: Mon 11 Aug 2025 16:13:28 +0000 ROA not after: Sun 09 Nov 2025 17:13:28 +0000 asID: 30687 IP address blocks: 216.38.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:9b:51:6e:38:ce:5b:89:60:e5:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb Validity Not Before: Aug 11 16:13:28 2025 GMT Not After : Nov 9 17:13:28 2025 GMT Subject: CN=25a3f9ab-5799-4e1a-a358-d92784c8e463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:15:fe:01:4c:bf:c6:f1:6f:76:03:ee:46: 17:32:66:aa:70:31:49:93:10:3c:d7:51:82:63:3b: c5:a0:09:19:bf:38:b7:98:5b:95:77:0f:ee:c2:ed: 74:ea:f5:8f:14:72:82:4b:f3:61:b7:df:ea:1d:58: a2:aa:e3:ab:c7:ef:2e:8a:5f:ab:f4:b9:0e:57:ef: 13:1b:fa:e4:b1:58:9b:1a:06:1e:03:bc:ab:d4:b7: 32:04:86:7f:64:4b:f0:8d:1a:d4:98:05:ee:c4:25: a4:16:7d:a6:32:a3:46:6a:e2:d7:e6:bb:03:e6:bd: 8a:bd:a1:d4:a1:ab:d6:d1:d6:0a:53:78:e7:d8:53: 68:31:ab:3e:b4:39:df:aa:b2:16:6f:af:e5:16:c0: 98:04:a8:20:bb:8a:4b:35:4d:09:34:a1:72:8f:a2: 0a:95:0c:02:d7:52:c8:ea:8b:3e:fa:d5:00:bd:70: 4c:2e:c3:16:c3:b0:61:f6:a1:f5:03:89:79:7d:80: a2:ce:a5:10:88:4b:f2:1a:8b:33:dc:70:7c:99:15: 33:75:4c:3d:04:99:34:de:6a:f4:b6:1e:eb:04:01: 79:e7:83:18:01:88:83:e3:79:7f:c0:fe:38:9b:5c: 7a:64:6e:7d:0e:33:16:fd:87:32:f6:ae:a3:34:38: ba:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:46:EA:DC:9C:BD:69:AC:00:EE:77:68:DB:55:32:15:F0:DC:95:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/6df9d2bc-6498-37f6-aa60-f89bdf80a4aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl X509v3 Authority Key Identifier: keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer sbgp-ipAddrBlock: critical IPv4: 216.38.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b4:f7:5c:e4:46:31:e4:c5:5c:94:85:61:c6:3b:e8:5d:2e: db:5d:24:6b:fe:3d:1a:7b:0d:7a:31:6c:9c:cf:30:2d:94:d2: e6:f5:40:7e:c1:7d:5d:1a:e7:8a:cd:38:aa:76:f4:3e:13:b2: 9a:2d:9e:c5:eb:29:17:c8:03:f6:0d:1d:b8:b4:46:08:2a:14: 65:0e:7d:a2:01:34:4c:2f:ad:01:00:a4:af:a6:6a:63:15:4b: cf:3b:a3:32:af:42:e7:bc:83:e9:ec:d6:01:79:46:18:0a:b1: 81:f5:c8:90:06:48:a1:6e:b3:21:8d:3b:2b:34:80:c7:2e:9d: b3:c1:75:a7:b9:74:c2:26:1b:8f:02:99:35:87:06:8f:04:ba: d7:68:b4:39:de:b6:82:a1:66:7b:76:e9:56:94:61:cc:61:a0: fb:23:49:cf:d9:2f:b0:46:68:b0:94:ac:e5:97:1d:ec:09:57: 04:fb:d8:f8:8b:fc:1e:99:fb:d4:3a:85:e3:7f:2c:ef:59:88: c1:96:fc:58:59:f4:8b:22:9e:c3:bf:ed:07:51:55:37:0f:d3: 22:ea:d5:b8:03:cb:a7:43:ce:b7:ae:1f:46:d1:19:02:41:97: 0a:4a:f3:a7:25:33:b0:64:6a:c6:c2:f6:31:c7:17:9b:22:e0: 5f:c2:0d:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSm1FuOM5biWDl0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjgyODFhMGEtMDBmMi00YWFjLWIzMTEtZTk2MWE3Y2Nl ZGZiMB4XDTI1MDgxMTE2MTMyOFoXDTI1MTEwOTE3MTMyOFowLzEtMCsGA1UEAxMk MjVhM2Y5YWItNTc5OS00ZTFhLWEzNTgtZDkyNzg0YzhlNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGYV/gFMv8bxb3YD7kYXMmaqcDFJkxA811GC YzvFoAkZvzi3mFuVdw/uwu106vWPFHKCS/Nht9/qHViiquOrx+8uil+r9LkOV+8T G/rksVibGgYeA7yr1LcyBIZ/ZEvwjRrUmAXuxCWkFn2mMqNGauLX5rsD5r2KvaHU oavW0dYKU3jn2FNoMas+tDnfqrIWb6/lFsCYBKggu4pLNU0JNKFyj6IKlQwC11LI 6os++tUAvXBMLsMWw7Bh9qH1A4l5fYCizqUQiEvyGosz3HB8mRUzdUw9BJk03mr0 th7rBAF554MYAYiD43l/wP44m1x6ZG59DjMW/Ycy9q6jNDi6hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1G6tycvWmsAO53aNtVMhXw3JX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4 MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYxYTdjY2VkZmIvNmRmOWQyYmMtNjQ5OC0z N2Y2LWFhNjAtZjg5YmRmODBhNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjgyODFhMGEtMDBmMi00YWFjLWIz MTEtZTk2MWE3Y2NlZGZiL2I4MjgxYTBhLTAwZjItNGFhYy1iMzExLWU5NjFhN2Nj ZWRmYi5jcmwwHwYDVR0jBBgwFoAUNfABs7MMIwjruQt82C4ceWMKjxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYx YTdjY2VkZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CZVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS091zkRjHkxVyUhWHGO+hdLttdJGv+PRp7DXoxbJzPMC2U0ub1QH7B fV0a54rNOKp29D4TspotnsXrKRfIA/YNHbi0RggqFGUOfaIBNEwvrQEApK+mamMV S887ozKvQue8g+ns1gF5RhgKsYH1yJAGSKFusyGNOys0gMcunbPBdae5dMImG48C mTWHBo8EutdotDnetoKhZnt26VaUYcxhoPsjSc/ZL7BGaLCUrOWXHewJVwT72PiL /B6Z+9Q6heN/LO9ZiMGW/FhZ9IsinsO/7QdRVTcP0yLq1bgDy6dDzreuH0bRGQJB lwpK86clM7BkasbC9jHHF5si4F/CDYY= -----END CERTIFICATE-----Generated at Mon Aug 25 03:02:55 2025 by rpki-client