$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/3658ab1e-d316-33ee-91c7-ed6a278b34ae.roa File: 3658ab1e-d316-33ee-91c7-ed6a278b34ae.roa (raw, json) Hash identifier: GQDyyfAverP4PHpiaUJrq7hJTFRA/DcIr0tqBm0FA8c= Subject key identifier: 92:30:66:96:6B:78:79:EF:1B:66:1B:05:9B:64:58:18:E6:86:F4:A6 Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Certificate serial: 010D0C9F4328584A9E961C02A6CFF8681CFD1A00 Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/3658ab1e-d316-33ee-91c7-ed6a278b34ae.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 216.24.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:1c:02:a6:cf:f8:68:1c:fd:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=d0b13147-586e-4ca0-b020-515ba7755209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2f:44:67:c5:61:29:d3:24:b6:fc:d2:49:d9: 16:ee:d5:58:a8:f1:71:5a:c5:e2:ef:42:97:59:90: 0f:a9:2c:ad:76:fc:51:6f:8f:fa:8b:45:13:fc:a2: e8:c2:df:a0:b0:42:4e:80:c1:56:0a:ed:68:70:8f: 78:1e:94:5d:db:08:48:bf:3f:70:e9:c7:bf:4e:b5: 77:5b:d2:92:2b:22:57:fd:b1:cb:76:14:40:d6:a1: 7a:a2:37:26:a3:a5:0a:6c:ca:21:20:61:4c:cc:ac: b5:1c:09:66:a3:4b:03:6c:87:92:48:6f:33:35:a7: 33:c5:1b:c2:66:95:5d:11:26:45:06:e8:d2:db:a8: 79:4a:7e:a9:87:62:21:da:2a:e1:06:cc:14:ef:80: a5:89:64:24:a8:28:49:96:31:b6:e6:5c:03:4e:8a: c1:57:b9:a3:a6:76:42:f2:61:91:36:08:2e:05:b5: e8:10:8c:c6:3b:4a:27:ca:30:86:ec:30:af:bd:a0: da:9c:85:0c:43:03:a4:35:be:59:4b:dc:b4:86:ea: f2:0a:83:56:e5:8c:57:58:86:81:84:34:df:3b:3d: d8:26:2d:1d:c8:ed:5d:86:b5:10:75:e3:6e:b6:b8: 28:f1:4f:a3:1d:1b:dc:ab:68:51:20:39:94:cd:dc: d8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:30:66:96:6B:78:79:EF:1B:66:1B:05:9B:64:58:18:E6:86:F4:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/3658ab1e-d316-33ee-91c7-ed6a278b34ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl X509v3 Authority Key Identifier: keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer sbgp-ipAddrBlock: critical IPv4: 216.24.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:be:86:8a:31:dc:96:a5:a0:3e:7f:66:59:55:3a:40:8d:8c: 0c:50:3c:26:39:63:a6:d0:38:15:13:c8:65:ca:2e:96:b9:b6: 40:43:43:09:f4:57:b6:36:d7:03:a5:d3:69:ed:3e:52:b0:3d: 50:ec:44:7f:e8:aa:90:4a:2e:0c:e5:9d:6a:63:4f:3a:a4:3d: dd:96:7a:38:0f:a4:b8:8e:cb:bc:c9:ff:33:48:84:61:08:a9: 1e:23:9a:f9:ab:90:9d:bc:2f:a7:d1:b2:c6:41:a2:3c:4f:2a: a3:83:25:0b:3f:34:d9:1e:5e:d5:ec:cc:05:7a:c1:c8:eb:ef: 2d:3d:44:d4:46:06:cc:d8:ab:24:b6:31:04:87:81:9d:af:cb: 1b:44:95:07:92:e6:9d:ae:3a:34:93:51:70:ff:a8:66:e1:37: aa:5e:3c:11:07:f0:fa:6b:eb:43:34:f0:f6:82:db:d3:fb:0b: d4:56:79:f3:25:aa:32:34:1f:48:e7:44:f4:0b:b2:82:e2:b6: c1:94:e6:10:4e:3f:54:2f:a5:4d:2a:c7:95:33:7c:8f:dc:27: 6a:72:1d:f6:7b:15:d4:75:6a:d8:54:23:7f:6b:5b:86:56:7b: bb:5a:5b:80:f4:ff:fb:8a:37:71:95:3d:65:81:83:0c:77:da: c7:a6:84:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelhwCps/4aBz9GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5 NWM5MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZDBiMTMxNDctNTg2ZS00Y2EwLWIwMjAtNTE1YmE3NzU1MjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS9EZ8VhKdMktvzSSdkW7tVYqPFxWsXi70KX WZAPqSytdvxRb4/6i0UT/KLowt+gsEJOgMFWCu1ocI94HpRd2whIvz9w6ce/TrV3 W9KSKyJX/bHLdhRA1qF6ojcmo6UKbMohIGFMzKy1HAlmo0sDbIeSSG8zNaczxRvC ZpVdESZFBujS26h5Sn6ph2Ih2irhBswU74CliWQkqChJljG25lwDTorBV7mjpnZC 8mGRNgguBbXoEIzGO0onyjCG7DCvvaDanIUMQwOkNb5ZS9y0huryCoNW5YxXWIaB hDTfOz3YJi0dyO1dhrUQdeNutrgo8U+jHRvcq2hRIDmUzdzYUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIwZpZreHnvG2YbBZtkWBjmhvSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvMzY1OGFiMWUtZDMxNi0z M2VlLTkxYzctZWQ2YTI3OGIzNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1 YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0 OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm ZDc0NDk1YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW+hoox3JaloD5/ZllVOkCNjAxQPCY5Y6bQOBUTyGXKLpa5tkBDQwn0 V7Y21wOl02ntPlKwPVDsRH/oqpBKLgzlnWpjTzqkPd2WejgPpLiOy7zJ/zNIhGEI qR4jmvmrkJ28L6fRssZBojxPKqODJQs/NNkeXtXszAV6wcjr7y09RNRGBszYqyS2 MQSHgZ2vyxtElQeS5p2uOjSTUXD/qGbhN6pePBEH8Ppr60M08PaC29P7C9RWefMl qjI0H0jnRPQLsoLitsGU5hBOP1QvpU0qx5UzfI/cJ2pyHfZ7FdR1athUI39rW4ZW e7taW4D0//uKN3GVPWWBgwx32semhEY= -----END CERTIFICATE-----Generated at Wed Aug 6 00:48:24 2025 by rpki-client