$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa File: 15302cbf-57f0-373f-96de-03dd65f8b849.roa (raw, json) Hash identifier: C3I2Y2T24OAhivo7CrsNz/wT55+uNHXxgoUa6oRPgVs= Subject key identifier: 67:84:B0:DF:B3:8C:28:78:2B:39:35:8F:70:72:8F:17:23:34:CF:2D Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AF52155A1891CDC42BEEEE240 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 13576 IP address blocks: 216.106.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:55:a1:89:1c:dc:42:be:ee:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=360d1178-7b63-404c-9a4b-48f204847a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0a:86:f8:24:8e:b9:00:f7:f6:30:63:a4:86: e5:30:73:b0:3c:fd:4a:20:17:32:59:e8:ce:a5:02: 0c:17:83:f0:bd:22:2c:71:08:50:e7:06:7f:26:71: 07:85:c6:cf:ac:92:39:9a:00:27:cb:10:77:f0:16: 68:66:3c:c5:48:49:21:60:26:40:4d:47:84:24:b6: eb:55:f0:80:b9:33:d2:de:04:d1:30:b5:a6:ff:29: 26:39:2a:d2:3c:b8:b1:d8:00:b4:d1:06:af:1e:4d: 28:26:13:82:b4:91:80:1b:49:4e:5d:46:1f:7c:41: 37:45:bc:14:d6:63:ef:bc:03:9a:89:e1:6a:54:b0: fa:97:18:7d:f0:6f:9d:9c:c2:cd:41:3f:13:e4:d1: 77:45:4a:15:6e:d3:b1:a4:c2:c2:67:81:e5:a1:d6: 1b:ac:c9:fd:5b:72:23:47:44:19:17:bd:cc:5b:7b: 7f:2e:b5:e1:8b:d9:2e:57:ca:19:c2:9c:ba:96:4c: 92:26:83:de:96:9f:e6:ae:a4:30:f6:50:5c:c2:a9: d9:24:c8:fc:17:a4:be:a0:58:4f:92:1c:0c:33:a6: a6:2d:a5:62:72:94:f7:c2:8a:21:a1:7b:1f:22:ff: d5:01:77:b4:60:b9:58:48:c7:7c:c6:68:c0:57:bf: 59:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:84:B0:DF:B3:8C:28:78:2B:39:35:8F:70:72:8F:17:23:34:CF:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5a:1a:62:c7:46:1d:eb:58:a8:ed:fb:28:f7:35:bb:a9:68: 90:98:26:40:5a:0d:bb:5c:ae:e5:60:e3:e7:1a:f8:a8:7c:eb: 8b:27:d6:bf:99:6c:9e:ff:0d:d4:b5:f9:94:5f:2c:c0:eb:c9: 3d:4c:c4:c6:38:64:44:e5:11:e1:37:e4:21:71:68:43:d9:f9: 39:52:fa:a0:3e:17:92:33:51:57:89:81:ed:43:19:69:c6:de: bc:73:fc:84:28:3e:e3:ff:13:bf:3a:a5:d2:52:45:72:f2:da: 92:3c:7d:63:fe:85:d7:3e:73:45:39:17:fb:83:11:0f:b5:40: bf:aa:fa:d2:9c:ff:d3:50:0a:73:85:d6:3c:e3:ec:43:b0:07: 94:f2:ce:ac:99:ae:e3:ac:73:33:c1:c2:96:30:9e:23:54:94: eb:72:ca:a9:dd:24:d3:8b:4c:80:40:a7:2d:b7:2b:2b:93:82: b4:6a:2e:2c:82:df:a9:6b:49:aa:45:b4:2a:aa:28:ac:63:f7: c0:4b:6f:c1:e4:6a:46:16:4f:c6:50:6c:50:7a:1e:1c:b6:ea: 5a:61:1c:56:6d:92:9b:31:c9:cc:27:54:4a:97:3c:46:59:4f: 59:ac:7a:d6:57:f7:4b:01:3f:5b:c0:13:52:e9:d4:42:87:2e: 94:1f:8b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVWhiRzcQr7u4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzYwZDExNzgtN2I2My00MDRjLTlhNGItNDhmMjA0ODQ3YTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAqG+CSOuQD39jBjpIblMHOwPP1KIBcyWejO pQIMF4PwvSIscQhQ5wZ/JnEHhcbPrJI5mgAnyxB38BZoZjzFSEkhYCZATUeEJLbr VfCAuTPS3gTRMLWm/ykmOSrSPLix2AC00QavHk0oJhOCtJGAG0lOXUYffEE3RbwU 1mPvvAOaieFqVLD6lxh98G+dnMLNQT8T5NF3RUoVbtOxpMLCZ4HlodYbrMn9W3Ij R0QZF73MW3t/LrXhi9kuV8oZwpy6lkySJoPelp/mrqQw9lBcwqnZJMj8F6S+oFhP khwMM6amLaVicpT3woohoXsfIv/VAXe0YLlYSMd8xmjAV79ZLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeEsN+zjCh4Kzk1j3ByjxcjNM8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMTUzMDJjYmYtNTdmMC0z NzNmLTk2ZGUtMDNkZDY1ZjhiODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZaGmLHRh3rWKjt+yj3NbupaJCYJkBaDbtcruVg4+ca+Kh864sn1r+Z bJ7/DdS1+ZRfLMDryT1MxMY4ZETlEeE35CFxaEPZ+TlS+qA+F5IzUVeJge1DGWnG 3rxz/IQoPuP/E786pdJSRXLy2pI8fWP+hdc+c0U5F/uDEQ+1QL+q+tKc/9NQCnOF 1jzj7EOwB5TyzqyZruOsczPBwpYwniNUlOtyyqndJNOLTIBApy23KyuTgrRqLiyC 36lrSapFtCqqKKxj98BLb8HkakYWT8ZQbFB6Hhy26lphHFZtkpsxycwnVEqXPEZZ T1msetZX90sBP1vAE1Lp1EKHLpQfi1I= -----END CERTIFICATE-----Generated at Sun Aug 24 03:46:41 2025 by rpki-client