$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa File: ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa (raw, json) Hash identifier: s/b2jxMfHcjgWW8961q8bQAh8jKfhMffq3MWqoe+hro= Subject key identifier: F8:49:F9:3B:83:0A:A5:8B:BB:A0:C8:A4:1A:EB:F7:F6:D1:10:B1:0B Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584ABD4B7E1E4A73C2410D47F880 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 21821 IP address blocks: 216.255.100.0/24 maxlen: 24 216.255.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:7e:1e:4a:73:c2:41:0d:47:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=f3cba4f5-e5fa-44e6-9957-d321c895e793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:08:75:80:85:72:5d:cc:bc:5f:50:76:6e: 52:08:68:a4:56:ad:8f:c2:a7:7f:bb:83:c4:ed:55: 76:89:5b:41:78:f8:a4:f2:1c:21:6a:dd:d9:53:23: 27:dd:fe:71:8d:92:8a:55:61:39:f3:78:00:83:54: 87:bf:1d:6e:e9:23:57:58:66:2c:52:1f:c6:ce:76: e1:ec:73:b6:83:48:32:55:24:98:58:be:34:a7:9a: 5a:1d:66:cf:99:08:66:36:e5:c3:d6:02:7f:30:05: 4f:df:1f:08:7e:ff:ef:41:d8:7d:29:8f:7f:cb:32: c2:3f:9d:7a:93:c0:5d:df:3a:a1:e2:e2:8f:29:cf: d5:cd:43:f1:63:d1:8d:91:cf:18:96:73:f3:49:db: e9:1a:d7:7f:2b:29:f4:60:00:19:dc:51:b0:53:ef: 21:d1:a5:72:48:33:46:c7:18:0a:5b:ad:16:82:12: 46:20:42:5c:5e:c8:53:4c:b5:dc:29:71:66:cd:f5: 98:40:c6:7e:94:44:a8:1c:8f:5e:cd:40:93:28:da: a8:f2:95:6d:41:3d:d8:01:e2:65:13:32:2e:6d:53: a2:9d:da:8f:9c:94:e0:2c:cb:93:f9:b5:6e:4b:47: 5d:71:2a:71:b3:1f:be:2d:db:78:04:0f:1b:c2:5b: ff:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:49:F9:3B:83:0A:A5:8B:BB:A0:C8:A4:1A:EB:F7:F6:D1:10:B1:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 216.255.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:32:be:f3:ab:4a:3d:ee:00:6d:2c:24:87:31:c3:ef:a4:85: cc:0b:fd:b6:9c:b2:29:e8:55:c1:5e:04:85:cd:ab:5d:f8:eb: f1:5e:6b:87:16:d8:ac:7e:5a:3a:0a:65:a4:fe:74:ed:cf:9a: 43:ad:81:ca:01:cf:ec:85:bc:7d:bf:f7:80:25:f1:f2:ec:98: 5d:3e:d1:36:b1:ee:4d:d7:ac:27:aa:e1:23:62:a7:80:77:8b: f2:e5:1a:57:70:c8:39:5c:c9:3e:f4:06:5b:84:27:ef:49:bd: 7f:8a:19:0a:73:d2:4c:c4:d9:a9:38:4e:52:be:fb:dd:3d:44: 87:c2:df:c3:a7:ef:02:d1:3e:a4:7a:83:5b:f7:e5:0c:7d:94: cf:29:a5:93:06:b6:db:fd:3c:fa:4a:94:b5:55:a1:12:52:09: 18:b6:bd:78:21:7e:56:10:2d:d2:47:f5:52:e3:32:73:5a:2b: fc:83:4f:6b:e3:17:82:31:80:72:70:71:5d:fc:5f:da:ec:f2: 9a:b4:14:29:1f:85:db:01:53:d0:41:6d:2c:1f:8d:08:42:32: 80:dc:9c:0e:96:c6:ca:56:d0:83:30:14:7e:ba:a1:dc:1c:70: 2e:c0:40:26:c1:03:8d:b9:4e:b9:e7:b5:bd:ce:94:59:bf:a1: 3b:fe:40:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S34eSnPCQQ1H+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZjNjYmE0ZjUtZTVmYS00NGU2LTk5NTctZDMyMWM4OTVlNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzAIdYCFcl3MvF9Qdm5SCGikVq2Pwqd/u4PE 7VV2iVtBePik8hwhat3ZUyMn3f5xjZKKVWE583gAg1SHvx1u6SNXWGYsUh/Gznbh 7HO2g0gyVSSYWL40p5paHWbPmQhmNuXD1gJ/MAVP3x8Ifv/vQdh9KY9/yzLCP516 k8Bd3zqh4uKPKc/VzUPxY9GNkc8YlnPzSdvpGtd/Kyn0YAAZ3FGwU+8h0aVySDNG xxgKW60WghJGIEJcXshTTLXcKXFmzfWYQMZ+lESoHI9ezUCTKNqo8pVtQT3YAeJl EzIubVOindqPnJTgLMuT+bVuS0ddcSpxsx++Ldt4BA8bwlv/OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhJ+TuDCqWLu6DIpBrr9/bRELELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvZmYzMWI3YTItNTcwNS0z ZDczLTllZjktM2UwNjQ1MTRiZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2P9kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMyvvOrSj3uAG0sJIcxw++khcwL/bacsinoVcFeBIXNq1346/Fea4cW 2Kx+WjoKZaT+dO3PmkOtgcoBz+yFvH2/94Al8fLsmF0+0Tax7k3XrCeq4SNip4B3 i/LlGldwyDlcyT70BluEJ+9JvX+KGQpz0kzE2ak4TlK++909RIfC38On7wLRPqR6 g1v35Qx9lM8ppZMGttv9PPpKlLVVoRJSCRi2vXghflYQLdJH9VLjMnNaK/yDT2vj F4IxgHJwcV38X9rs8pq0FCkfhdsBU9BBbSwfjQhCMoDcnA6WxspW0IMwFH66odwc cC7AQCbBA425Trnntb3OlFm/oTv+QLE= -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:40 2025 by rpki-client