$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/894271a5-6122-33fb-9751-fa39952c5cb2.roa File: 894271a5-6122-33fb-9751-fa39952c5cb2.roa (raw, json) Hash identifier: hkycX1F7Uc3wHCSTBapaL8H2gN+KL+IJh00JSiL/dUs= Subject key identifier: AC:62:15:A3:5B:0D:73:6A:4C:C1:88:89:70:E6:A9:06:A1:CD:52:F5 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AF521452BCC903728C8F578C0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/894271a5-6122-33fb-9751-fa39952c5cb2.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 13576 IP address blocks: 216.249.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:45:2b:cc:90:37:28:c8:f5:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=75d0b7c0-8c47-45f0-96c7-245552533776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:57:78:e0:63:a2:64:be:34:70:a6:cf:97:df: a5:92:76:a9:bb:28:fa:f5:80:e7:cf:ff:56:c0:9f: ab:43:a1:12:c6:a4:d8:b0:d9:a0:d1:cd:dc:3a:a6: 6a:4e:37:1c:63:19:24:6b:f5:65:65:84:1b:60:6e: f3:8f:fe:ea:31:bd:0e:06:3d:0f:41:b7:a9:f7:b3: 9a:6d:68:28:5e:a3:6f:41:2d:68:eb:ba:9e:35:23: bc:fb:6c:e8:60:a6:16:49:de:8a:ad:0c:2e:fd:78: 8c:5b:8d:76:4f:72:b0:28:71:29:8e:87:53:ec:47: cd:32:fb:07:4c:86:92:b5:83:98:db:5b:41:c3:c3: 72:64:05:29:22:85:78:78:21:49:e8:ce:fb:98:55: 8c:1f:83:cf:96:06:36:19:16:81:ca:60:91:2f:d4: 60:78:72:cb:f9:fd:12:0e:6b:fe:28:e1:3d:5c:01: 1b:20:50:07:46:1b:ee:a3:a8:c7:91:02:45:b2:0b: ac:48:f2:4d:73:3e:87:83:d3:a4:2f:81:2b:c0:48: 10:bd:63:cf:31:98:26:01:fa:c9:4a:33:10:9b:da: 7f:25:08:4b:5e:fb:95:ae:17:18:56:7b:22:16:1c: 7d:fc:61:c0:5a:0c:c1:f3:20:61:c0:4d:59:23:aa: c4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:62:15:A3:5B:0D:73:6A:4C:C1:88:89:70:E6:A9:06:A1:CD:52:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/894271a5-6122-33fb-9751-fa39952c5cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:1b:d0:b8:5a:16:a1:29:c1:9a:bb:d2:0b:98:e7:29:d6:a8: ad:15:d3:ed:25:fa:b5:2c:03:4e:73:c9:cc:03:c2:df:d1:c7: 78:39:02:15:da:cf:52:64:82:00:d6:8c:04:58:44:e3:8f:5b: d5:e7:5b:2e:1f:a6:81:db:cf:f5:48:6e:09:da:27:ce:fa:7b: 36:c8:66:32:62:d1:8e:92:dd:1a:30:e6:93:10:c7:24:98:94: 11:ce:50:2e:75:4a:d4:3a:76:22:e6:ef:53:ed:25:bc:88:15: c8:8a:18:2f:2c:e1:ec:0f:10:71:90:4a:c2:60:67:1e:e9:07: af:c3:64:73:d4:7d:66:ca:52:f1:e0:14:d8:9d:87:35:b2:53: bb:18:f0:15:0b:4a:27:51:87:ec:1a:5e:a5:8e:48:eb:80:00: cb:a8:27:9d:2c:66:f1:00:f8:0c:b0:00:7d:b9:79:8d:67:2f: 60:ff:99:34:49:2c:83:ba:68:a3:0f:25:24:29:23:9d:e1:e1: a5:7b:db:bc:74:35:f4:63:a3:ab:72:8b:8d:ca:7b:40:40:5d: 72:aa:46:86:c8:a9:d2:92:f7:82:ab:52:96:2c:a5:c9:7a:30: 0c:1f:fe:ec:b2:4f:5d:59:2d:b0:4c:2b:55:f9:fc:db:77:82: b3:a3:7b:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUUrzJA3KMj1eMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NzVkMGI3YzAtOGM0Ny00NWYwLTk2YzctMjQ1NTUyNTMzNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1d44GOiZL40cKbPl9+lknapuyj69YDnz/9W wJ+rQ6ESxqTYsNmg0c3cOqZqTjccYxkka/VlZYQbYG7zj/7qMb0OBj0PQbep97Oa bWgoXqNvQS1o67qeNSO8+2zoYKYWSd6KrQwu/XiMW412T3KwKHEpjodT7EfNMvsH TIaStYOY21tBw8NyZAUpIoV4eCFJ6M77mFWMH4PPlgY2GRaBymCRL9RgeHLL+f0S Dmv+KOE9XAEbIFAHRhvuo6jHkQJFsgusSPJNcz6Hg9OkL4ErwEgQvWPPMZgmAfrJ SjMQm9p/JQhLXvuVrhcYVnsiFhx9/GHAWgzB8yBhwE1ZI6rEwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxiFaNbDXNqTMGIiXDmqQahzVL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODk0MjcxYTUtNjEyMi0z M2ZiLTk3NTEtZmEzOTk1MmM1Y2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANkb0LhaFqEpwZq70guY5ynWqK0V0+0l+rUsA05zycwDwt/Rx3g5AhXa z1JkggDWjARYROOPW9XnWy4fpoHbz/VIbgnaJ876ezbIZjJi0Y6S3Row5pMQxySY lBHOUC51StQ6diLm71PtJbyIFciKGC8s4ewPEHGQSsJgZx7pB6/DZHPUfWbKUvHg FNidhzWyU7sY8BULSidRh+waXqWOSOuAAMuoJ50sZvEA+AywAH25eY1nL2D/mTRJ LIO6aKMPJSQpI53h4aV727x0NfRjo6tyi43Ke0BAXXKqRobIqdKS94KrUpYspcl6 MAwf/uyyT11ZLbBMK1X5/Nt3grOje9U= -----END CERTIFICATE-----Generated at Wed Nov 5 08:35:55 2025 by rpki-client