$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa File: 211726d9-186c-32fa-9269-934166f8a1be.roa (raw, json) Hash identifier: y3Q1afv5xJM2ODL5n3VGSE3s7WGZZOl6+uMU0o4xH9g= Subject key identifier: F9:E6:FE:5D:7B:E2:1D:91:37:FC:71:D0:63:84:5F:9D:7F:01:23:3E Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584A8B0B5FF438602F15A0005C4C Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 11090 IP address blocks: 216.137.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:5f:f4:38:60:2f:15:a0:00:5c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=6063c006-9a72-4216-9f90-b2bd9a056cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1d:fd:ec:59:b0:d4:26:37:1b:da:55:6e:35: 5e:d2:15:0b:23:ae:70:31:9b:39:85:2e:56:f5:6e: 6d:53:d8:79:08:0b:ba:02:e5:38:7a:12:d4:33:ae: 02:ae:33:82:54:54:49:8a:06:42:38:94:fa:3b:20: 7e:c3:44:5a:65:6f:8f:68:2d:54:00:37:b2:9f:3c: 94:e3:32:cf:f5:37:7b:9d:be:e4:ac:6a:38:08:4d: 20:04:b6:02:2c:0f:aa:8c:f3:9d:e9:56:38:ee:47: 80:74:9c:67:67:ba:7b:ee:f5:2f:63:cf:19:44:05: fb:a1:c0:5b:38:3e:b5:50:03:56:45:db:7a:f9:0f: 40:d0:12:0a:b8:a6:d8:58:01:2c:2f:b4:15:86:39: bb:6f:76:4d:64:fa:31:15:b6:3c:0d:6b:8d:dc:b0: b6:da:c2:29:34:65:7e:7f:d5:83:e8:02:88:c0:80: c3:4f:dd:de:86:6e:7c:cb:f0:ab:64:8c:1c:62:8d: 2a:8b:aa:c4:46:d7:f9:3e:47:7f:8d:6a:fc:a6:b9: 57:b9:ed:2f:3a:7e:ff:f2:94:6e:43:58:43:27:7f: 30:15:98:3c:e8:97:25:0b:15:72:de:02:c5:45:d9: 0c:9c:f9:5c:15:e4:7c:d2:28:3c:d6:d7:dc:5e:51: 43:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E6:FE:5D:7B:E2:1D:91:37:FC:71:D0:63:84:5F:9D:7F:01:23:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:9b:db:de:7a:43:b8:06:00:2c:2d:33:80:4f:b3:f6:b3:e6: 15:4c:18:92:80:a4:70:e4:2f:32:c6:56:ce:ce:e5:47:25:22: 9a:04:d1:79:07:64:b4:54:b6:7b:b2:fc:67:e4:c2:4f:d3:87: 9b:61:6e:67:eb:a0:bb:f0:50:4e:f1:f1:9b:e4:d9:dc:09:be: ec:f7:fa:4f:de:1f:61:b8:a8:c4:47:b5:44:47:9c:55:34:38: a0:2c:98:9e:26:88:17:08:3b:ba:26:c3:4c:d4:72:ea:c3:34: 1c:57:b5:e6:2e:d8:55:b6:83:7e:0f:b5:d4:fb:69:53:a6:e9: a9:ca:14:8a:53:cb:43:a6:20:2e:6b:04:62:bb:b9:7e:a6:fd: c2:eb:9f:66:3c:1b:11:e9:97:bc:35:a0:25:18:3c:b5:5d:b1: 21:7f:e6:9e:6d:b3:dd:ee:8b:61:53:d9:98:e5:a3:24:68:fd: c8:a6:de:66:cd:64:c3:dc:42:1a:a6:04:71:02:fa:2b:d9:be: 11:46:b8:92:40:01:95:6e:5d:1c:5e:b1:2f:7f:f3:ad:df:f1: e2:21:3e:98:0e:ba:98:83:b5:dc:f6:6d:9b:79:9f:8c:db:a9: 12:1f:81:52:da:c4:06:85:1d:1c:49:13:58:2a:82:8a:f5:81: 18:bf:99:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1/0OGAvFaAAXEwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NjA2M2MwMDYtOWE3Mi00MjE2LTlmOTAtYjJiZDlhMDU2Y2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB397Fmw1CY3G9pVbjVe0hULI65wMZs5hS5W 9W5tU9h5CAu6AuU4ehLUM64CrjOCVFRJigZCOJT6OyB+w0RaZW+PaC1UADeynzyU 4zLP9Td7nb7krGo4CE0gBLYCLA+qjPOd6VY47keAdJxnZ7p77vUvY88ZRAX7ocBb OD61UANWRdt6+Q9A0BIKuKbYWAEsL7QVhjm7b3ZNZPoxFbY8DWuN3LC22sIpNGV+ f9WD6AKIwIDDT93ehm58y/CrZIwcYo0qi6rERtf5Pkd/jWr8prlXue0vOn7/8pRu Q1hDJ38wFZg86JclCxVy3gLFRdkMnPlcFeR80ig81tfcXlFDrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnm/l174h2RN/xx0GOEX51/ASM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMjExNzI2ZDktMTg2Yy0z MmZhLTkyNjktOTM0MTY2ZjhhMWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2IngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByb2956Q7gGACwtM4BPs/az5hVMGJKApHDkLzLGVs7O5UclIpoE0XkH ZLRUtnuy/Gfkwk/Th5thbmfroLvwUE7x8Zvk2dwJvuz3+k/eH2G4qMRHtURHnFU0 OKAsmJ4miBcIO7omw0zUcurDNBxXteYu2FW2g34PtdT7aVOm6anKFIpTy0OmIC5r BGK7uX6m/cLrn2Y8GxHpl7w1oCUYPLVdsSF/5p5ts93ui2FT2ZjloyRo/cim3mbN ZMPcQhqmBHEC+ivZvhFGuJJAAZVuXRxesS9/863f8eIhPpgOupiDtdz2bZt5n4zb qRIfgVLaxAaFHRxJE1gqgor1gRi/mVs= -----END CERTIFICATE-----Generated at Tue Aug 5 16:48:44 2025 by rpki-client