$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa File: 2366321d-3327-3eb1-aa83-61a80aefd3f4.roa (raw, json) Hash identifier: C1pDqpFpfM1g1hbLe6z+zefrDRGqQDn9600jl+Ux+HI= Subject key identifier: 6B:D9:AA:1E:B6:92:7A:E2:5E:7D:08:1A:81:74:E0:63:C8:26:A7:D6 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584A9E961F85FC77359DB03E4380 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 216.150.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:1f:85:fc:77:35:9d:b0:3e:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=633cf5a7-e2fd-49de-aafb-3d5315148897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:64:3c:46:36:e4:10:0d:18:9a:b3:9c:7c:8c: 21:89:21:b4:ce:b0:92:94:79:a5:d7:ed:bf:5d:d7: 0e:c4:02:29:a0:a1:00:e8:1c:83:d7:be:8b:b4:39: 48:5e:1e:89:01:8a:ec:59:72:da:e7:f5:c6:b9:0a: f7:15:af:be:26:c4:9b:f1:e8:c5:1c:bf:fd:e0:75: 2b:45:c0:98:aa:b2:91:cb:f2:c5:ef:43:60:85:cc: 11:66:41:f5:7f:6b:1f:a8:d4:65:eb:80:2b:6f:59: 86:1a:4e:6f:f8:e5:02:03:bb:d0:88:e0:be:a0:3d: 44:55:ae:91:b3:2d:cf:a0:13:61:a2:b7:43:2f:8e: 94:05:2f:67:89:be:4e:10:da:11:92:75:23:3b:bc: 03:07:9e:bb:f2:1f:4c:b6:75:74:aa:0e:81:bf:de: 4f:39:96:70:e4:0c:35:85:6f:1b:5a:76:d8:52:a0: d4:dc:33:57:f8:4e:df:04:85:89:6f:5d:25:37:5b: fb:67:32:1d:73:ed:9e:5c:05:42:fb:95:42:c0:34: c0:71:f4:43:14:11:58:ea:7b:93:c8:18:86:7a:70: 99:cc:8d:2e:fe:ed:0c:6f:f5:d4:44:7e:7c:f4:18: 1b:8e:f5:87:35:b2:26:13:4f:e5:84:0a:c7:a9:06: bf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D9:AA:1E:B6:92:7A:E2:5E:7D:08:1A:81:74:E0:63:C8:26:A7:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 216.150.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:12:11:35:5e:e0:dc:7d:3f:f2:97:b9:34:a5:14:89:00:c8: bf:4f:11:bb:5f:77:8e:f4:41:29:9f:36:7d:13:d5:3f:9a:89: 73:61:d5:42:d9:fb:78:87:b2:a8:93:c0:9c:7e:22:6f:f1:68: f7:82:74:70:ab:79:e9:c6:15:51:96:35:c0:67:0a:ee:0f:a5: cb:92:23:11:f1:da:e1:99:21:15:25:3e:53:93:ec:2b:64:c5: 86:d1:a4:be:dc:0a:38:b8:9f:ef:35:d4:0c:67:b6:72:33:ac: ef:98:e6:0f:83:34:2a:f2:92:4b:9b:a9:1b:92:40:53:f1:35: aa:b0:56:94:c0:b4:a5:cd:24:ae:cc:8d:d7:9e:50:76:ea:62: 38:7e:7c:bf:24:f4:e8:dc:42:0c:24:f9:51:c4:bf:f6:a8:a4: 5d:39:0b:25:95:6c:d4:b1:19:46:68:45:05:fb:3a:ef:09:0b: 26:6d:47:57:10:5f:bd:68:1c:83:51:d6:e5:3f:dd:ad:8c:23: 2a:65:da:57:0d:66:5c:6c:5b:f3:38:6f:cd:d9:a4:ee:7d:c8: ff:c2:94:c5:71:d6:99:10:0f:2a:6e:4f:eb:e2:0d:94:5b:fc: c5:b5:15:ed:27:4e:8e:05:d7:fb:33:ef:b5:1e:ed:a0:79:6a: fa:9c:45:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelh+F/Hc1nbA+Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NjMzY2Y1YTctZTJmZC00OWRlLWFhZmItM2Q1MzE1MTQ4ODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmQ8RjbkEA0YmrOcfIwhiSG0zrCSlHml1+2/ XdcOxAIpoKEA6ByD176LtDlIXh6JAYrsWXLa5/XGuQr3Fa++JsSb8ejFHL/94HUr RcCYqrKRy/LF70NghcwRZkH1f2sfqNRl64Arb1mGGk5v+OUCA7vQiOC+oD1EVa6R sy3PoBNhordDL46UBS9nib5OENoRknUjO7wDB5678h9MtnV0qg6Bv95POZZw5Aw1 hW8bWnbYUqDU3DNX+E7fBIWJb10lN1v7ZzIdc+2eXAVC+5VCwDTAcfRDFBFY6nuT yBiGenCZzI0u/u0Mb/XURH589BgbjvWHNbImE0/lhArHqQa/dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvZqh62knriXn0IGoF04GPIJqfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvMjM2NjMyMWQtMzMyNy0z ZWIxLWFhODMtNjFhODBhZWZkM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwSETVe4Nx9P/KXuTSlFIkAyL9PEbtfd470QSmfNn0T1T+aiXNh1ULZ +3iHsqiTwJx+Im/xaPeCdHCreenGFVGWNcBnCu4PpcuSIxHx2uGZIRUlPlOT7Ctk xYbRpL7cCji4n+811AxntnIzrO+Y5g+DNCrykkubqRuSQFPxNaqwVpTAtKXNJK7M jdeeUHbqYjh+fL8k9OjcQgwk+VHEv/aopF05CyWVbNSxGUZoRQX7Ou8JCyZtR1cQ X71oHINR1uU/3a2MIypl2lcNZlxsW/M4b83ZpO59yP/ClMVx1pkQDypuT+viDZRb /MW1Fe0nTo4F1/sz77Ue7aB5avqcRcY= -----END CERTIFICATE-----Generated at Wed Aug 6 10:09:38 2025 by rpki-client