$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/b898b21d-9c3f-3841-a02a-e48a7ba02c88.roa File: b898b21d-9c3f-3841-a02a-e48a7ba02c88.roa (raw, json) Hash identifier: EJbkCsfSpthL60f5aAe+FTIVINEyZSNpxdgL0X3Cr+M= Subject key identifier: 86:98:6D:AA:96:43:69:E9:8D:D3:A6:DE:CF:39:C6:79:65:D4:41:1A Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F4328584AE03114BB6DD9AB83686B2400 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/b898b21d-9c3f-3841-a02a-e48a7ba02c88.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 400238 IP address blocks: 216.87.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:14:bb:6d:d9:ab:83:68:6b:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=98ba692e-c355-4154-84cb-5018794d61cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:42:e9:62:3d:18:be:85:3e:6a:15:eb:26: 86:e3:dc:0c:93:98:c4:47:39:2f:ec:f1:22:72:a9: 91:b1:11:1a:1d:f9:32:01:42:98:30:34:b1:f9:b8: 51:12:51:23:25:12:cc:76:ad:cd:98:bf:da:0c:6e: 1a:9c:0d:dc:a8:78:93:be:f2:6b:8b:13:9d:55:a1: 08:52:44:10:1e:b1:9c:67:32:b4:53:fa:85:25:81: c2:38:0b:dd:87:1a:ec:b1:3c:6a:98:e3:9f:e2:16: 63:de:cd:78:bf:d7:55:29:4e:7c:ac:8e:e5:c1:47: 99:d9:d2:b7:e4:82:a3:28:a8:23:99:af:2b:04:6a: ad:7f:fd:29:5c:58:42:6f:7a:e9:9e:17:00:04:e5: f5:b9:9f:21:fb:61:e2:ff:cc:c1:5c:c9:07:56:9d: ac:59:0d:05:03:68:1a:a6:c2:4b:17:27:c3:7c:9f: 7d:51:f5:68:64:a1:22:6a:06:fe:09:35:36:d5:37: b0:95:74:d2:9a:bf:40:88:c6:e8:e1:91:40:98:b8: 47:03:30:0a:f8:be:a4:0c:d3:13:30:aa:a0:de:9a: 1f:3a:11:42:80:25:49:5b:0b:f8:2d:d7:0a:19:2b: 63:31:48:e4:bf:74:d3:1e:e8:93:f2:db:e0:fb:c7: 09:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:98:6D:AA:96:43:69:E9:8D:D3:A6:DE:CF:39:C6:79:65:D4:41:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/b898b21d-9c3f-3841-a02a-e48a7ba02c88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 216.87.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:32:9d:34:7c:19:a8:2f:c1:fb:f3:fe:b7:79:ac:18:73:a2: ae:b3:eb:c1:9a:9e:eb:3c:14:73:cf:3f:ef:9d:7d:51:bf:50: 29:e8:98:73:85:fd:04:3a:26:57:5f:f7:67:23:25:4a:5d:d4: e8:16:56:96:cf:97:3c:a6:b3:98:c6:ef:a7:cb:5e:2a:10:5a: 42:1c:89:b6:e5:8e:27:5e:70:2e:59:05:87:54:a7:5b:ab:1d: a7:cc:2d:b3:61:e8:1b:91:af:96:c3:c3:a2:59:54:cd:f5:ef: 50:6e:9b:45:64:6a:4f:f2:86:fa:60:6c:ce:2a:aa:98:54:4f: c6:4b:08:0d:89:2f:73:0f:4b:27:6d:d8:19:7c:6b:ae:ae:2f: 0b:97:8e:97:cf:17:53:1a:b4:5d:19:41:a2:52:b7:f5:32:0b: 48:c3:b0:da:5b:5a:2f:6d:e1:45:11:92:79:96:bb:af:d5:a1: 94:8c:dd:7c:a9:55:42:81:6f:d6:83:e3:e9:ba:29:ae:cd:3b: 42:fe:4f:8e:b6:6b:91:b3:b3:b0:52:5c:93:ce:f6:34:14:8c: 2f:84:9b:24:83:8e:36:75:7f:41:42:de:d1:8b:5c:f5:54:e2: e7:2d:c9:cc:46:b4:2a:21:70:1a:23:51:ef:9f:3b:ce:ef:ff: d2:70:6f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMRS7bdmrg2hrJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk OThiYTY5MmUtYzM1NS00MTU0LTg0Y2ItNTAxODc5NGQ2MWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou5C6WI9GL6FPmoV6yaG49wMk5jERzkv7PEi cqmRsREaHfkyAUKYMDSx+bhRElEjJRLMdq3NmL/aDG4anA3cqHiTvvJrixOdVaEI UkQQHrGcZzK0U/qFJYHCOAvdhxrssTxqmOOf4hZj3s14v9dVKU58rI7lwUeZ2dK3 5IKjKKgjma8rBGqtf/0pXFhCb3rpnhcABOX1uZ8h+2Hi/8zBXMkHVp2sWQ0FA2ga psJLFyfDfJ99UfVoZKEiagb+CTU21TewlXTSmr9AiMbo4ZFAmLhHAzAK+L6kDNMT MKqg3pofOhFCgCVJWwv4LdcKGStjMUjkv3TTHuiT8tvg+8cJZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaYbaqWQ2npjdOm3s85xnll1EEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvYjg5OGIyMWQtOWMzZi0z ODQxLWEwMmEtZTQ4YTdiYTAyYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FcjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIynTR8Gagvwfvz/rd5rBhzoq6z68Ganus8FHPPP++dfVG/UCnomHOF /QQ6Jldf92cjJUpd1OgWVpbPlzyms5jG76fLXioQWkIcibbljidecC5ZBYdUp1ur HafMLbNh6BuRr5bDw6JZVM3171Bum0Vkak/yhvpgbM4qqphUT8ZLCA2JL3MPSydt 2Bl8a66uLwuXjpfPF1MatF0ZQaJSt/UyC0jDsNpbWi9t4UURknmWu6/VoZSM3Xyp VUKBb9aD4+m6Ka7NO0L+T462a5Gzs7BSXJPO9jQUjC+EmySDjjZ1f0FC3tGLXPVU 4uctycxGtCohcBojUe+fO87v/9Jwb+Q= -----END CERTIFICATE-----Generated at Sun Aug 24 03:55:52 2025 by rpki-client