$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/abde8327-a024-37e8-84e6-7eabcfdf1c4b.roa File: abde8327-a024-37e8-84e6-7eabcfdf1c4b.roa (raw, json) Hash identifier: PWBPYWU631ws1SY7cN9anPgRDT+JbYK0gUMMw4kBFhw= Subject key identifier: 6A:09:EE:F8:B4:C7:28:BC:D8:2E:57:FC:2A:6F:88:58:9C:23:32:3A Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584AC2E0FB945D4C552253F6A100 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/abde8327-a024-37e8-84e6-7eabcfdf1c4b.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 32181 IP address blocks: 216.38.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:fb:94:5d:4c:55:22:53:f6:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=42676e06-19c3-4a94-ac47-1a80a2ad8255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5f:36:c6:d4:c1:96:92:0b:7c:95:8e:f8:f3: 46:4e:4f:c8:88:c5:d6:45:50:cb:be:91:df:ec:7f: 29:e7:cd:a9:9b:9a:67:fb:d1:50:4b:1b:0b:41:b1: e6:e8:cf:b3:cc:28:7f:8f:96:28:ee:b5:85:0d:9d: 18:f6:e6:ca:91:de:e5:32:0b:3b:5b:43:cc:e7:ad: 10:eb:85:31:bb:d7:0a:1f:26:82:86:83:74:87:21: 39:37:60:6d:0b:a5:c2:7f:76:a9:68:c3:28:ba:ec: 4e:9a:c0:66:0e:c4:d9:29:44:f6:db:0c:66:24:08: 79:6b:d4:dc:b2:b6:e8:c4:09:bb:58:e9:cd:62:76: 18:de:f5:54:85:82:6b:ab:b3:69:ee:46:64:65:d4: ef:d0:01:46:b1:3b:ad:ec:67:46:9e:9a:b2:5e:0a: dc:c5:96:fa:91:6b:66:55:dc:e9:8e:0f:a7:7b:f5: 6e:56:21:71:e8:97:99:61:77:5c:fc:a5:8c:30:3b: 80:ca:48:5c:8d:3c:58:64:a4:2f:13:8f:9c:fc:08: 16:2b:f0:4d:8e:51:e2:a6:93:cc:f5:45:c0:da:c4: 33:72:af:82:18:5a:f9:5b:18:14:ce:c7:15:d1:9c: 77:58:35:44:45:99:df:fb:a2:98:e8:e8:95:2b:63: 82:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:09:EE:F8:B4:C7:28:BC:D8:2E:57:FC:2A:6F:88:58:9C:23:32:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/abde8327-a024-37e8-84e6-7eabcfdf1c4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 216.38.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:50:06:73:40:6e:fc:b7:e5:33:3f:84:8a:7c:ae:2a:bc:82: 5c:e6:81:80:78:1b:15:2b:9e:29:fe:d8:37:07:9f:ef:ff:b8: 86:e0:49:c2:bb:57:eb:46:e1:58:94:35:26:fc:17:1c:d8:3b: ce:b7:a2:80:fa:4f:a9:35:8a:72:1e:a9:67:bf:08:45:7e:62: a7:24:15:84:12:40:9c:a2:b1:99:70:0f:c8:18:05:97:0f:99: 72:86:91:3f:fd:e0:60:1e:1d:6d:97:51:ba:90:ad:b9:4d:6e: 14:ca:c9:89:9a:db:7e:b8:71:ad:a5:f4:0b:48:95:f5:a2:b0: 3a:86:55:3a:58:3f:23:21:a0:13:f4:4a:d3:a7:79:e7:7f:6a: 41:63:18:d8:56:01:d2:6b:5d:a1:af:ec:5d:b0:0c:ac:36:2d: c3:04:77:80:d2:ed:42:47:55:68:26:44:72:cc:1a:ef:48:30: 7a:0f:be:6c:83:fe:b6:41:de:c0:c8:b2:ee:c3:89:a6:b6:f4: c8:17:ed:8e:87:b8:b3:56:fb:32:67:70:f7:ed:7d:33:ea:58: 12:9f:ab:e8:b5:20:2f:82:2e:b2:fc:43:42:d5:47:5b:10:b4: b6:95:29:52:08:ad:77:d5:e8:a3:cd:ea:92:23:55:12:e4:8e: 22:8a:82:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PuUXUxVIlP2oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NDI2NzZlMDYtMTljMy00YTk0LWFjNDctMWE4MGEyYWQ4MjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj182xtTBlpILfJWO+PNGTk/IiMXWRVDLvpHf 7H8p582pm5pn+9FQSxsLQbHm6M+zzCh/j5Yo7rWFDZ0Y9ubKkd7lMgs7W0PM560Q 64Uxu9cKHyaChoN0hyE5N2BtC6XCf3apaMMouuxOmsBmDsTZKUT22wxmJAh5a9Tc srboxAm7WOnNYnYY3vVUhYJrq7Np7kZkZdTv0AFGsTut7GdGnpqyXgrcxZb6kWtm Vdzpjg+ne/VuViFx6JeZYXdc/KWMMDuAykhcjTxYZKQvE4+c/AgWK/BNjlHippPM 9UXA2sQzcq+CGFr5WxgUzscV0Zx3WDVERZnf+6KY6OiVK2OCrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoJ7vi0xyi82C5X/CpviFicIzI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvYWJkZTgzMjctYTAyNC0z N2U4LTg0ZTYtN2VhYmNmZGYxYzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2CYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFQBnNAbvy35TM/hIp8riq8glzmgYB4GxUrnin+2DcHn+//uIbgScK7 V+tG4ViUNSb8FxzYO863ooD6T6k1inIeqWe/CEV+YqckFYQSQJyisZlwD8gYBZcP mXKGkT/94GAeHW2XUbqQrblNbhTKyYma2364ca2l9AtIlfWisDqGVTpYPyMhoBP0 StOneed/akFjGNhWAdJrXaGv7F2wDKw2LcMEd4DS7UJHVWgmRHLMGu9IMHoPvmyD /rZB3sDIsu7Diaa29MgX7Y6HuLNW+zJncPftfTPqWBKfq+i1IC+CLrL8Q0LVR1sQ tLaVKVIIrXfV6KPN6pIjVRLkjiKKgmQ= -----END CERTIFICATE-----Generated at Sun Aug 24 03:44:50 2025 by rpki-client