$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa File: d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa (raw, json) Hash identifier: 2gm5qFwliFofZXOBIWNJ1Vdm9oLmBxRs430Ov88aCUI= Subject key identifier: 4F:32:68:0C:EC:61:4A:8A:9F:1D:F0:18:89:43:1B:44:1D:33:0B:67 Certificate issuer: /CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25 Certificate serial: 010D0C9F4328584AE9F66BAA9159B3C116102E80 Authority key identifier: AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 216.24.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6b:aa:91:59:b3:c1:16:10:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=6fbbf5c6-afc0-48b1-81a3-ced60d99aef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:06:89:c9:87:a2:2c:9e:70:5c:0a:63:7a:53: 0d:93:02:72:5e:b9:b8:71:11:99:10:ac:d1:c4:1b: f9:6b:f2:89:7a:4c:b9:9a:9c:de:e3:80:24:41:7e: fa:8a:77:88:22:5b:df:a8:a1:68:86:d4:21:42:77: f1:63:89:3a:b1:40:d6:ef:8d:71:60:67:de:30:aa: d5:82:08:19:e8:f8:ee:57:7d:61:a0:2a:84:e8:f4: d7:26:d6:05:7d:15:3d:89:80:de:4e:26:30:bb:52: f1:a5:17:71:4a:cf:e7:73:de:c8:02:37:ab:c6:5b: 53:81:3c:66:ba:0a:22:32:db:80:b3:8f:45:5e:6f: 62:ef:39:a2:5d:81:a9:85:86:51:3d:16:3e:b4:d9: 44:9b:b2:62:b7:42:00:81:7b:ac:0e:d1:af:7d:e7: 8f:88:07:74:7c:d5:d2:46:f8:b6:85:c5:35:d4:ab: eb:78:4a:7d:4b:da:38:dc:2e:28:a4:01:ff:73:a6: 64:f1:3d:88:5c:67:4e:6f:44:9c:cc:ac:df:7e:66: 71:aa:3b:44:3e:5c:d7:0f:1e:a9:32:05:17:da:74: ac:f8:37:9b:e9:1b:a2:b3:fc:4a:be:ec:e3:90:3d: a2:6d:c3:63:17:77:41:e0:90:f5:e6:98:68:72:51: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:32:68:0C:EC:61:4A:8A:9F:1D:F0:18:89:43:1B:44:1D:33:0B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl X509v3 Authority Key Identifier: keyid:AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer sbgp-ipAddrBlock: critical IPv4: 216.24.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d5:06:96:d4:92:4a:95:36:4c:d5:ac:e7:8b:5c:23:2c:2f: b4:04:b6:05:84:df:03:5e:11:0d:0f:9a:13:09:61:79:36:79: 24:72:0c:13:e5:42:22:79:66:bb:d0:42:8e:c1:e0:da:71:17: 2f:66:1b:b7:9f:28:dc:d2:8e:ac:bc:bf:51:91:10:17:f9:27: 6b:a3:c1:22:54:2a:c7:23:2a:f0:ef:89:6c:cf:43:93:27:89: 25:99:74:da:8b:6a:ca:45:18:5d:44:fb:03:df:70:20:ad:de: f6:74:6d:03:81:73:89:d9:52:c4:71:f4:b5:6e:14:e7:92:76: c0:8b:68:a9:08:56:5b:a7:8a:83:e6:99:43:f3:71:87:5f:59: 18:e0:2b:45:de:b8:35:7e:6d:23:05:8d:aa:d7:91:65:d5:95: c8:c2:fc:08:76:b7:4d:8a:f5:b0:28:86:4b:e8:10:c4:19:c7: 11:19:c6:97:ad:79:23:e4:d2:93:49:67:3f:23:f6:c9:17:95: bb:0b:58:0d:63:a7:88:d6:30:88:2f:1e:5b:25:62:77:28:09: 09:21:84:1a:65:25:01:13:7f:e5:fd:5f:2f:a8:85:09:ab:3c: 43:ba:15:8c:cc:d4:48:2e:42:e1:6a:3e:39:99:f8:47:9b:e9: f5:a6:c3:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9muqkVmzwRYQLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2MWVmMjgtZmUwMy00NWJiLWEzOGYtMTdlNDcyNWI2 YzI1MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NmZiYmY1YzYtYWZjMC00OGIxLTgxYTMtY2VkNjBkOTlhZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gaJyYeiLJ5wXApjelMNkwJyXrm4cRGZEKzR xBv5a/KJeky5mpze44AkQX76ineIIlvfqKFohtQhQnfxY4k6sUDW741xYGfeMKrV gggZ6PjuV31hoCqE6PTXJtYFfRU9iYDeTiYwu1LxpRdxSs/nc97IAjerxltTgTxm ugoiMtuAs49FXm9i7zmiXYGphYZRPRY+tNlEm7Jit0IAgXusDtGvfeePiAd0fNXS Rvi2hcU11KvreEp9S9o43C4opAH/c6Zk8T2IXGdOb0SczKzffmZxqjtEPlzXDx6p MgUX2nSs+Deb6Ruis/xKvuzjkD2ibcNjF3dB4JD15phoclFZMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8yaAzsYUqKnx3wGIlDG0QdMwtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZTYx ZWYyOC1mZTAzLTQ1YmItYTM4Zi0xN2U0NzI1YjZjMjUvZDZmZDEwNmUtZTljZi0z MzMxLThhYjgtNTdmZTAyNWE3ZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU2MWVmMjgtZmUwMy00NWJiLWEz OGYtMTdlNDcyNWI2YzI1L2FlNjFlZjI4LWZlMDMtNDViYi1hMzhmLTE3ZTQ3MjVi NmMyNS5jcmwwHwYDVR0jBBgwFoAUrJzdGWT6kVB3yp/f4VMWa1NaLLYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZTYxZWYyOC1mZTAzLTQ1YmItYTM4Zi0xN2U0 NzI1YjZjMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Bg8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjVBpbUkkqVNkzVrOeLXCMsL7QEtgWE3wNeEQ0PmhMJYXk2eSRyDBPl QiJ5ZrvQQo7B4NpxFy9mG7efKNzSjqy8v1GREBf5J2ujwSJUKscjKvDviWzPQ5Mn iSWZdNqLaspFGF1E+wPfcCCt3vZ0bQOBc4nZUsRx9LVuFOeSdsCLaKkIVlunioPm mUPzcYdfWRjgK0XeuDV+bSMFjarXkWXVlcjC/Ah2t02K9bAohkvoEMQZxxEZxpet eSPk0pNJZz8j9skXlbsLWA1jp4jWMIgvHlslYncoCQkhhBplJQETf+X9Xy+ohQmr PEO6FYzM1EguQuFqPjmZ+Eeb6fWmw54= -----END CERTIFICATE-----Generated at Sat Aug 23 10:09:29 2025 by rpki-client