$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/21ed06dc-3a8a-39a6-8098-04f68740e07c.roa File: 21ed06dc-3a8a-39a6-8098-04f68740e07c.roa (raw, json) Hash identifier: TEpzTLyqLnTFkzQkUJT2I8DeMzglOVwnNJQi5mO5zdc= Subject key identifier: EA:D6:EC:5A:B7:96:AE:A8:D7:25:9A:66:7B:B2:A3:D2:2B:1D:17:EB Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584ADECBC0F05A6AACE97FA5B580 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/21ed06dc-3a8a-39a6-8098-04f68740e07c.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 11548 IP address blocks: 216.186.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c0:f0:5a:6a:ac:e9:7f:a5:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=2cf1f0bc-9905-46e6-942a-a38e6afd5294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:df:32:a1:51:12:b3:81:ad:ff:74:6d:ff:f4: 39:93:47:24:3e:dd:ee:ad:5c:a3:50:3a:ce:0d:f2: bb:03:6b:81:8e:4f:17:38:d7:2e:c8:17:c9:df:19: b8:cc:51:53:ca:ef:67:f0:83:ae:11:e9:14:d9:86: 4d:b0:01:14:fb:5a:98:b0:9a:cc:ff:ea:59:05:bc: f2:81:fa:ab:a9:9d:24:91:17:7d:f2:69:c2:0c:5a: 76:06:c2:b8:d8:b4:e4:55:1a:c2:81:2e:86:51:ad: 52:9a:e2:bc:8b:fa:06:be:17:ab:ef:52:e0:ef:c7: 6b:6c:09:f9:80:bb:07:d4:4c:6b:8b:e5:b6:29:1b: f2:fb:9c:88:75:75:80:b2:54:72:27:b6:d3:ea:89: 4b:7a:db:62:e5:70:4e:e4:7a:c1:86:4b:dd:8b:79: 49:5e:8b:ba:d7:cc:8d:7d:bd:70:61:17:a0:e4:27: 44:d7:9b:1b:04:13:88:dc:39:12:78:2f:74:fd:4a: ca:13:d5:1d:78:7a:84:3c:d2:2f:76:2e:4f:f8:e3: fb:a7:14:e9:60:3c:93:ef:ef:17:db:ed:c7:15:cc: 90:68:22:28:eb:b2:7c:56:5a:55:dc:a2:fc:c7:23: ec:79:17:46:83:5a:1c:eb:51:1a:89:96:91:72:1e: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D6:EC:5A:B7:96:AE:A8:D7:25:9A:66:7B:B2:A3:D2:2B:1D:17:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/21ed06dc-3a8a-39a6-8098-04f68740e07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 216.186.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:bb:39:8e:2a:31:cd:a7:40:54:01:4e:f2:d3:ea:0c:44:55: d5:45:32:a4:a2:70:94:8c:b9:e7:88:2a:6e:2c:f9:cb:67:86: 85:58:66:06:3c:fa:10:28:ce:82:88:3d:d1:32:54:f3:d0:da: d4:31:34:8f:eb:1e:6b:12:32:2c:6e:e6:3e:3a:f6:82:a6:63: 56:32:6c:26:97:cc:34:83:17:33:0e:99:e9:9e:3b:c8:09:7f: 8e:16:64:16:a0:dc:96:ab:30:34:57:05:4c:9e:ff:6a:88:11: 51:36:dc:67:b6:05:c7:5b:07:1e:26:1b:91:95:80:1f:02:b5: 41:76:a8:94:4c:04:51:11:cb:34:8e:5d:92:3f:35:3b:4d:11: 14:87:34:fb:c7:56:7a:31:b4:f0:b3:b9:39:64:68:ab:74:0d: 94:9e:ef:f2:cc:6a:27:94:dd:62:1f:c7:11:ff:39:11:e4:31: fa:78:ee:cf:ec:9a:85:bd:cd:5a:67:22:9e:89:89:51:d2:4a: 74:50:4f:cc:88:bd:96:dc:8a:36:b3:46:d4:cb:45:0a:e8:a0: ae:58:8e:96:26:39:12:be:26:70:47:d9:aa:81:4d:4d:6e:e4: a6:54:40:74:6a:36:ed:a2:f3:bc:fa:da:69:f5:63:15:e6:81: ee:57:bb:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8DwWmqs6X+ltYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MmNmMWYwYmMtOTkwNS00NmU2LTk0MmEtYTM4ZTZhZmQ1Mjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN8yoVESs4Gt/3Rt//Q5k0ckPt3urVyjUDrO DfK7A2uBjk8XONcuyBfJ3xm4zFFTyu9n8IOuEekU2YZNsAEU+1qYsJrM/+pZBbzy gfqrqZ0kkRd98mnCDFp2BsK42LTkVRrCgS6GUa1SmuK8i/oGvher71Lg78drbAn5 gLsH1Exri+W2KRvy+5yIdXWAslRyJ7bT6olLetti5XBO5HrBhkvdi3lJXou618yN fb1wYReg5CdE15sbBBOI3DkSeC90/UrKE9UdeHqEPNIvdi5P+OP7pxTpYDyT7+8X 2+3HFcyQaCIo67J8VlpV3KL8xyPseRdGg1oc61EaiZaRch4QAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrW7Fq3lq6o1yWaZnuyo9IrHRfrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMjFlZDA2ZGMtM2E4YS0z OWE2LTgwOTgtMDRmNjg3NDBlMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LpiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS7OY4qMc2nQFQBTvLT6gxEVdVFMqSicJSMueeIKm4s+ctnhoVYZgY8 +hAozoKIPdEyVPPQ2tQxNI/rHmsSMixu5j469oKmY1YybCaXzDSDFzMOmemeO8gJ f44WZBag3JarMDRXBUye/2qIEVE23Ge2BcdbBx4mG5GVgB8CtUF2qJRMBFERyzSO XZI/NTtNERSHNPvHVnoxtPCzuTlkaKt0DZSe7/LMaieU3WIfxxH/ORHkMfp47s/s moW9zVpnIp6JiVHSSnRQT8yIvZbcijazRtTLRQrooK5YjpYmORK+JnBH2aqBTU1u 5KZUQHRqNu2i87z62mn1YxXmge5Xu8k= -----END CERTIFICATE-----Generated at Sun Aug 24 01:06:12 2025 by rpki-client