$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/d42882c0-5c2a-3fe0-ab27-0a539be66b5f.roa File: d42882c0-5c2a-3fe0-ab27-0a539be66b5f.roa (raw, json) Hash identifier: 4r6qul0FqX3gXovyuooWd/7drbyRxtpvXJ2kzRISkoM= Subject key identifier: 6F:E7:FD:4A:43:1D:DB:3F:19:1A:97:31:9B:B0:6B:3D:8D:41:7C:33 Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584AD76D4E98CDB0BD07D14AB000 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/d42882c0-5c2a-3fe0-ab27-0a539be66b5f.roa Signing time: Wed 13 Aug 2025 09:39:48 +0000 ROA not before: Wed 13 Aug 2025 09:39:48 +0000 ROA not after: Tue 11 Nov 2025 10:39:48 +0000 asID: 216138 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:6d:4e:98:cd:b0:bd:07:d1:4a:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Aug 13 09:39:48 2025 GMT Not After : Nov 11 10:39:48 2025 GMT Subject: CN=2ca2b010-4c73-4bcd-b22f-b7eda1f4af9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:fc:d2:45:ed:02:e3:27:58:f3:af:e8:19: bb:bd:1f:58:cb:9f:a0:d6:b2:81:48:5b:fc:05:b9: 8c:26:8f:a1:46:65:ae:cb:a8:e5:98:4c:d6:0d:7b: 3c:97:40:a2:0d:47:65:14:2c:27:41:ad:8a:22:ea: ab:7a:cd:ad:b2:63:73:cb:29:7b:22:71:b5:a2:53: 8d:35:cc:83:bc:0d:d2:84:02:ad:a5:27:37:57:87: b4:9a:ea:58:c7:f8:3a:ee:79:93:ff:e9:5b:f4:c4: 30:f8:72:36:d2:d0:8e:c9:f5:71:a8:de:40:61:26: 34:4d:69:fb:61:be:02:2c:92:ed:f5:9a:8a:70:3d: 43:47:2a:44:bc:60:f0:71:bb:46:64:60:4f:73:3b: f8:5f:80:ec:ae:37:f6:98:d0:4f:42:05:21:68:28: 23:47:c5:c0:08:88:3c:9e:00:0e:e0:8a:ac:0d:9e: 6c:d7:98:a4:76:b7:d3:57:71:d5:20:fc:0c:e0:43: 16:36:45:3c:b6:8b:0c:a9:c1:62:ab:9a:56:78:7a: ec:51:af:a8:e4:0f:de:a3:fe:d2:ee:be:77:af:88: b5:e1:e5:78:31:ee:2d:a7:09:50:24:3d:13:15:2c: 53:33:48:23:c7:5b:76:10:9a:ce:93:36:e5:12:16: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E7:FD:4A:43:1D:DB:3F:19:1A:97:31:9B:B0:6B:3D:8D:41:7C:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/d42882c0-5c2a-3fe0-ab27-0a539be66b5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:0a:d4:54:03:52:59:c1:89:12:f4:24:84:7f:55:84:fc:d6: 92:86:b7:9b:9b:e3:c1:f7:a7:8b:f6:20:cc:24:08:78:48:1f: ee:f1:08:47:ec:f8:86:54:14:85:03:b0:6f:a9:54:eb:e9:83: 26:d9:27:fe:e0:51:ff:da:9b:9a:90:6b:3b:86:00:5c:a0:14: 61:81:00:47:c0:43:70:2f:ba:7b:ec:a9:94:05:b7:a3:2c:70: 30:86:5b:f1:a5:e6:b4:4a:7a:ac:50:dc:26:08:88:c8:6e:9c: b7:c5:d5:64:98:29:4e:7d:9b:10:d3:3f:a3:ad:f0:0c:01:87: ce:91:41:50:a8:c5:3c:cc:6d:8e:47:e3:f5:52:43:08:8c:03: 77:93:7b:75:57:8f:f6:18:d9:a9:28:61:6c:d3:c2:72:16:29: ec:6c:21:0a:cd:78:b0:77:27:ee:20:7e:81:ae:b5:ac:bb:51: d9:80:56:6e:88:5c:84:9a:4e:c1:93:e7:69:34:03:8f:88:bd: cc:0a:45:5d:70:bc:5f:81:b9:5e:3f:a3:e2:cf:2c:ec:37:cf: 89:58:b1:8b:9a:19:89:13:03:3a:85:6e:04:5c:54:ba:4c:0f: 98:f8:33:f9:35:17:81:c6:92:b0:b2:65:ca:95:a3:1e:52:20: 56:e3:d7:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErXbU6YzbC9B9FKsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MDgxMzA5Mzk0OFoXDTI1MTExMTEwMzk0OFowLzEtMCsGA1UEAxMk MmNhMmIwMTAtNGM3My00YmNkLWIyMmYtYjdlZGExZjRhZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF780kXtAuMnWPOv6Bm7vR9Yy5+g1rKBSFv8 BbmMJo+hRmWuy6jlmEzWDXs8l0CiDUdlFCwnQa2KIuqres2tsmNzyyl7InG1olON NcyDvA3ShAKtpSc3V4e0mupYx/g67nmT/+lb9MQw+HI20tCOyfVxqN5AYSY0TWn7 Yb4CLJLt9ZqKcD1DRypEvGDwcbtGZGBPczv4X4Dsrjf2mNBPQgUhaCgjR8XACIg8 ngAO4IqsDZ5s15ikdrfTV3HVIPwM4EMWNkU8tosMqcFiq5pWeHrsUa+o5A/eo/7S 7r53r4i14eV4Me4tpwlQJD0TFSxTM0gjx1t2EJrOkzblEhaAWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/n/UpDHds/GRqXMZuwaz2NQXwzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvZDQyODgyYzAtNWMyYS0z ZmUwLWFiMjctMGE1MzliZTY2YjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8K1FQDUlnBiRL0JIR/VYT81pKGt5ub48H3p4v2IMwkCHhIH+7xCEfs +IZUFIUDsG+pVOvpgybZJ/7gUf/am5qQazuGAFygFGGBAEfAQ3AvunvsqZQFt6Ms cDCGW/Gl5rRKeqxQ3CYIiMhunLfF1WSYKU59mxDTP6Ot8AwBh86RQVCoxTzMbY5H 4/VSQwiMA3eTe3VXj/YY2akoYWzTwnIWKexsIQrNeLB3J+4gfoGutay7UdmAVm6I XISaTsGT52k0A4+IvcwKRV1wvF+BuV4/o+LPLOw3z4lYsYuaGYkTAzqFbgRcVLpM D5j4M/k1F4HGkrCyZcqVox5SIFbj1+c= -----END CERTIFICATE-----Generated at Sat Aug 23 19:48:27 2025 by rpki-client