$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa File: ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa (raw, json) Hash identifier: J79pVxrXggy3VXr/SHOyZTggYS1R2ewdw7D/2+ohhJg= Subject key identifier: EB:AB:72:A1:24:D0:AA:05:29:EC:B0:D8:83:00:C6:9B:10:E1:A3:AF Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Certificate serial: 010D0C9F4328584B7F5210765B4027C17433AC80 Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 216.24.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:10:76:5b:40:27:c1:74:33:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=d51d112a-d30a-486a-b005-bf34f3cff8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ee:da:3f:79:d5:9f:e3:5d:9b:a8:35:66:7d: 19:33:be:00:29:a8:7b:cf:67:53:4e:f3:0b:b6:9e: ea:b9:a9:da:27:27:e1:04:3c:d7:49:93:8f:9b:cb: 3d:b8:8e:9a:49:5d:5e:65:10:4d:db:2d:17:6e:9d: 0a:b5:25:22:83:3e:c0:db:92:15:cd:3e:df:56:e1: c8:32:a9:5e:f9:da:97:2b:23:e3:d9:85:6f:2c:f5: 69:1f:f9:69:f5:47:31:e4:7b:5b:f5:26:15:e3:a5: cd:b1:5a:c0:c6:5f:8f:7f:f4:80:68:4c:89:1e:6b: f7:67:70:d9:b4:b4:8c:89:1f:60:92:32:43:50:41: 41:59:f5:92:98:3e:2a:1d:6e:ac:15:82:f9:09:ad: 56:86:e3:a3:8b:8a:59:a3:5a:c6:d8:c8:82:5b:d1: c4:3c:2b:b7:92:e9:6e:35:e7:6b:9d:de:06:70:f8: 88:ea:07:5a:ec:d6:77:ef:27:90:12:65:2d:46:3c: ae:d6:2d:3d:81:b4:32:b6:0c:09:43:89:f2:70:a7: a6:95:ea:21:50:b7:21:f2:91:4c:05:27:b1:b4:87: 71:80:3f:8a:f0:20:e8:1c:d2:4c:91:a8:1f:39:ef: f1:51:59:74:e7:82:1a:38:01:0e:b2:fc:ea:21:ae: a5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AB:72:A1:24:D0:AA:05:29:EC:B0:D8:83:00:C6:9B:10:E1:A3:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl X509v3 Authority Key Identifier: keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer sbgp-ipAddrBlock: critical IPv4: 216.24.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:11:d4:88:c9:96:0d:4f:76:a2:4a:08:6d:4f:c3:46:fc:74: 19:0e:3e:40:92:95:57:ad:64:b2:4b:02:dc:79:5e:3b:c4:d5: 4c:5f:eb:41:98:7b:f6:ee:ff:b0:e1:fa:36:f1:06:90:00:1c: 69:bb:a7:0d:0f:18:0a:cb:da:54:30:4f:11:b1:c3:46:61:86: 23:d8:5c:c2:25:7c:1a:0e:3d:93:dc:d4:5f:2e:fd:51:73:43: d5:4c:5a:ef:4b:04:09:13:04:a2:dd:92:94:72:d2:3b:77:00: dc:14:54:f9:0f:e1:cd:b5:ff:88:26:62:9b:82:e9:39:9c:da: b2:e9:bd:f6:f1:af:8f:8a:ba:56:0f:26:b4:55:4b:79:5f:63: 51:07:29:5c:cd:c1:c7:ed:20:95:41:7c:0d:6a:e8:01:69:79: 63:da:cf:23:40:88:57:ee:11:94:92:68:dc:5f:b3:8a:8a:df: 76:6b:ab:9e:e9:d3:8e:89:44:48:7d:10:9f:8c:bf:ce:14:42: f6:de:31:64:3d:0a:0d:3f:a4:7a:1a:9a:b5:9e:b8:35:88:8f: ac:36:ff:65:7a:7f:84:79:02:ff:92:f4:16:08:f9:ac:aa:5e: 06:ee:bc:0f:36:d9:07:44:25:e0:91:d1:dd:df:e6:6b:6b:49: 02:fd:61:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhB2W0AnwXQzrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5 NWM5MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZDUxZDExMmEtZDMwYS00ODZhLWIwMDUtYmYzNGYzY2ZmOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu7aP3nVn+Ndm6g1Zn0ZM74AKah7z2dTTvML tp7quanaJyfhBDzXSZOPm8s9uI6aSV1eZRBN2y0Xbp0KtSUigz7A25IVzT7fVuHI Mqle+dqXKyPj2YVvLPVpH/lp9Ucx5Htb9SYV46XNsVrAxl+Pf/SAaEyJHmv3Z3DZ tLSMiR9gkjJDUEFBWfWSmD4qHW6sFYL5Ca1WhuOji4pZo1rG2MiCW9HEPCu3kulu Nedrnd4GcPiI6gda7NZ37yeQEmUtRjyu1i09gbQytgwJQ4nycKemleohULch8pFM BSextIdxgD+K8CDoHNJMkagfOe/xUVl054IaOAEOsvzqIa6lvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOurcqEk0KoFKeyw2IMAxpsQ4aOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvZWMzMGZiZDctMmU5MS0z YzhjLThkYjAtMzY3Mzc4N2UxOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1 YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0 OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm ZDc0NDk1YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUR1IjJlg1PdqJKCG1Pw0b8dBkOPkCSlVetZLJLAtx5XjvE1Uxf60GY e/bu/7Dh+jbxBpAAHGm7pw0PGArL2lQwTxGxw0ZhhiPYXMIlfBoOPZPc1F8u/VFz Q9VMWu9LBAkTBKLdkpRy0jt3ANwUVPkP4c21/4gmYpuC6Tmc2rLpvfbxr4+KulYP JrRVS3lfY1EHKVzNwcftIJVBfA1q6AFpeWPazyNAiFfuEZSSaNxfs4qK33Zrq57p 046JREh9EJ+Mv84UQvbeMWQ9Cg0/pHoamrWeuDWIj6w2/2V6f4R5Av+S9BYI+ayq XgbuvA822QdEJeCR0d3f5mtrSQL9YXY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:05:06 2025 by rpki-client