$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/d402ec43-9e08-3318-b9b6-cce578a54cb9.roa File: d402ec43-9e08-3318-b9b6-cce578a54cb9.roa (raw, json) Hash identifier: 12VwkwKG1e6vmvkCN5y7WTrwH1r9ilJ1RZ0pkpneKCo= Subject key identifier: 24:4F:6A:78:A5:E4:CE:66:21:EE:6E:54:CE:8E:EA:43:75:D9:14:74 Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Certificate serial: 010D0C9F4328584AE46129D3E4DB4BF60E454700 Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/d402ec43-9e08-3318-b9b6-cce578a54cb9.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 216.24.225.0/24 maxlen: 24 216.24.226.0/24 maxlen: 24 216.24.227.0/24 maxlen: 24 216.24.228.0/24 maxlen: 24 216.24.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:29:d3:e4:db:4b:f6:0e:45:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=fd55e511-38d9-4bf8-b8a4-7b69d398d469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:37:46:48:75:e7:80:bf:f9:18:9a:e0:17:4f: 17:9a:26:80:af:84:ee:d8:62:ea:19:df:e0:97:7b: 9c:b2:58:84:3e:f7:3a:0f:a6:33:9f:49:82:be:48: d3:c7:9f:4e:ec:05:cc:74:89:9f:64:c7:e9:20:15: 34:8a:e0:78:86:90:1b:67:3a:60:18:8a:4b:d1:38: 00:37:ba:f0:e4:c6:9c:66:6f:3f:10:2c:56:b1:69: 1a:b3:8c:f2:40:a6:2a:97:b1:ff:96:f9:7a:f4:9c: 0b:03:b2:9e:f9:7e:14:47:26:cd:3f:52:70:b6:9a: 5c:89:5f:58:bc:0c:bb:65:ed:3d:8d:c3:80:b8:38: 34:1a:f2:6b:f2:64:6e:8b:4b:bd:18:79:a8:36:04: 93:c1:9d:63:10:0b:ba:4a:1f:57:48:56:d5:2b:60: 08:52:79:24:b0:64:bd:94:b6:45:5f:3b:de:98:bf: f0:b1:8b:90:d1:6b:07:06:52:9b:65:cd:9b:24:eb: db:51:94:7c:b4:22:95:be:27:1f:87:ce:d0:43:15: 99:c7:6e:17:2d:d7:10:63:67:76:e8:ea:91:ba:13: 97:3d:90:23:ed:fe:f0:07:b1:0b:93:dd:38:f8:51: 3f:8a:39:4f:f1:76:0d:ca:82:94:ad:15:bb:d2:0f: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4F:6A:78:A5:E4:CE:66:21:EE:6E:54:CE:8E:EA:43:75:D9:14:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/d402ec43-9e08-3318-b9b6-cce578a54cb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl X509v3 Authority Key Identifier: keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer sbgp-ipAddrBlock: critical IPv4: 216.24.225.0-216.24.229.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e2:2f:52:e2:1a:19:34:f0:11:0d:e8:82:5e:cc:89:00:14: 85:9e:4d:c1:f2:3e:6e:e0:cf:49:9d:7c:a4:71:f4:79:4c:86: 0c:56:5f:19:e1:90:05:3e:5d:81:f8:7a:87:09:c3:9d:6a:c3: 9d:19:52:55:4c:15:91:3a:8c:e8:e0:fb:56:86:af:bb:ce:f9: f4:5a:4d:07:0d:9b:1a:36:ae:fe:01:68:0e:9f:06:60:35:9f: 2f:e4:e9:d6:d2:f7:d0:de:96:c5:14:2a:44:23:2e:d8:0a:40: cf:de:9a:e1:c3:70:7b:cb:a6:07:0d:05:86:0b:2e:ee:80:7c: dc:76:17:a8:f4:25:65:e4:a4:48:2d:d0:03:9a:ca:68:32:d7: d4:b5:de:de:e9:bb:34:ac:a9:a0:37:87:14:28:9b:db:aa:ff: 12:5f:b6:fe:bb:61:e5:00:d0:bc:f6:1a:cf:e8:cb:c1:c8:00: 88:e4:60:14:a2:72:f6:69:55:9c:0d:5f:83:40:9b:1a:30:2d: c0:7e:44:2f:2d:a9:42:87:7d:a4:e9:5c:c2:0d:5b:07:98:1e: 8d:94:b8:4a:ee:e5:bf:06:7d:72:84:fa:f6:eb:e5:69:7d:05: dd:4d:8e:9f:bc:9d:b4:0a:10:d7:8e:a9:b3:fe:c2:93:0f:56: 3c:e6:81:27 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErkYSnT5NtL9g5FRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5 NWM5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmQ1NWU1MTEtMzhkOS00YmY4LWI4YTQtN2I2OWQzOThkNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzdGSHXngL/5GJrgF08XmiaAr4Tu2GLqGd/g l3ucsliEPvc6D6Yzn0mCvkjTx59O7AXMdImfZMfpIBU0iuB4hpAbZzpgGIpL0TgA N7rw5MacZm8/ECxWsWkas4zyQKYql7H/lvl69JwLA7Ke+X4URybNP1JwtppciV9Y vAy7Ze09jcOAuDg0GvJr8mRui0u9GHmoNgSTwZ1jEAu6Sh9XSFbVK2AIUnkksGS9 lLZFXzvemL/wsYuQ0WsHBlKbZc2bJOvbUZR8tCKVvicfh87QQxWZx24XLdcQY2d2 6OqRuhOXPZAj7f7wB7ELk904+FE/ijlP8XYNyoKUrRW70g+WIwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCRPanil5M5mIe5uVM6O6kN12RR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvZDQwMmVjNDMtOWUwOC0z MzE4LWI5YjYtY2NlNTc4YTU0Y2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1 YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0 OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm ZDc0NDk1YzkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYGOED BAHYGOQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAG+IvUuIaGTTwEQ3ogl7MiQAUhZ5NwfI+buDPSZ18pHH0 eUyGDFZfGeGQBT5dgfh6hwnDnWrDnRlSVUwVkTqM6OD7Voavu8759FpNBw2bGjau /gFoDp8GYDWfL+Tp1tL30N6WxRQqRCMu2ApAz96a4cNwe8umBw0Fhgsu7oB83HYX qPQlZeSkSC3QA5rKaDLX1LXe3um7NKypoDeHFCib26r/El+2/rth5QDQvPYaz+jL wcgAiORgFKJy9mlVnA1fg0CbGjAtwH5ELy2pQod9pOlcwg1bB5gejZS4Su7lvwZ9 coT69uvlaX0F3U2On7ydtAoQ146ps/7Ckw9WPOaBJw== -----END CERTIFICATE-----Generated at Sat Aug 23 06:51:14 2025 by rpki-client