$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/d449ca14-5612-35c6-bb80-64b2f7a45f90.roa File: d449ca14-5612-35c6-bb80-64b2f7a45f90.roa (raw, json) Hash identifier: V7cpkpwAhRfYZHpdk81yvGqLIQfxiVpVhAOttZC5vfM= Subject key identifier: 47:65:0B:32:E5:AC:E9:02:DA:75:71:3A:E8:66:7C:91:39:05:26:5E Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584B4FDC777EB58BD0BFB2000E80 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/d449ca14-5612-35c6-bb80-64b2f7a45f90.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 62651 IP address blocks: 216.151.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:77:7e:b5:8b:d0:bf:b2:00:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=c34a5135-c803-4f1a-8136-82e8cf5d4e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:db:58:7d:52:2b:1a:11:48:e6:27:44:e4: bb:3b:c4:f2:1f:a8:66:bd:37:cb:71:3d:0d:0d:5f: 5e:4c:cd:40:3b:87:1c:8c:bb:17:1c:79:41:a3:b2: 90:de:d6:09:0d:7b:0b:58:68:24:8c:30:18:06:09: 43:10:8f:b7:28:28:08:00:2f:72:37:a5:9b:d0:f3: c7:26:c2:fb:b9:a0:9c:c5:4c:8c:85:62:12:42:15: 91:7d:f3:64:36:f3:3c:2f:f5:df:da:91:9a:e8:31: fa:2e:e3:d7:fa:ae:3a:d9:1d:77:05:26:11:07:3e: 90:9f:a9:2b:88:f3:59:da:88:bd:c8:39:79:1a:d3: 64:40:d8:d7:e8:11:cb:32:9a:98:4c:c7:de:55:57: 0d:88:21:c5:a1:c6:4c:10:1e:57:dd:29:7b:2f:76: 78:e3:e2:1a:1e:c2:21:05:7f:c1:76:41:1b:f8:02: e2:68:1a:66:1f:35:9e:4f:7f:dc:9f:b7:96:87:bc: 7b:00:a9:90:bc:7a:30:6a:a2:f2:7f:5c:58:6c:6d: 34:57:fa:7b:a3:6f:b2:3d:df:df:86:96:a0:17:6b: 55:ad:f8:b0:9c:d6:66:7b:7a:27:f7:e3:84:d1:c6: e6:16:76:af:44:1b:6b:eb:f6:27:a3:59:b3:7c:0e: 4f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:65:0B:32:E5:AC:E9:02:DA:75:71:3A:E8:66:7C:91:39:05:26:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/d449ca14-5612-35c6-bb80-64b2f7a45f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 216.151.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1b:ea:43:56:4c:99:db:6e:6b:81:64:16:ec:ab:00:aa:d6: a0:58:b6:ae:59:e1:dc:29:11:c3:18:f4:51:9d:19:62:03:58: 58:3f:70:fb:53:49:26:91:c8:9d:2e:f9:7f:23:aa:62:05:9c: df:ba:df:36:b2:01:40:db:c2:f6:93:74:d4:f0:80:25:5b:64: c0:3b:ec:17:de:df:aa:63:92:67:7b:36:db:db:ba:67:e1:f2: e3:8c:90:76:e6:cb:b6:da:fa:3b:69:1a:b0:29:80:74:91:78: be:03:64:2f:03:e2:7e:9a:cb:51:d1:2c:7a:2a:c7:f0:55:d8: 84:a8:57:c1:3c:3e:ed:8b:0f:5c:ae:67:8b:db:86:40:4f:a4: 1b:84:ad:5d:24:72:d7:f9:b6:da:d0:a6:73:d4:8e:ad:95:c3: b6:ca:72:36:e6:91:ac:f8:2a:0b:17:05:5b:1b:5b:29:21:94: 4a:1a:69:13:77:c5:91:20:66:3e:eb:0d:c0:03:c9:1d:60:b8: 04:48:86:01:a1:11:e9:12:4d:d0:28:bd:94:65:06:85:89:f9: b4:84:72:41:b5:1f:f7:2f:5b:91:e9:07:96:e1:24:aa:89:5e: 34:c3:c2:5d:9b:de:e1:f3:2b:c5:3e:2e:e7:21:eb:0c:2e:ac: 06:23:2d:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3Hd+tYvQv7IADoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YzM0YTUxMzUtYzgwMy00ZjFhLTgxMzYtODJlOGNmNWQ0ZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKPbWH1SKxoRSOYnROS7O8TyH6hmvTfLcT0N DV9eTM1AO4ccjLsXHHlBo7KQ3tYJDXsLWGgkjDAYBglDEI+3KCgIAC9yN6Wb0PPH JsL7uaCcxUyMhWISQhWRffNkNvM8L/Xf2pGa6DH6LuPX+q462R13BSYRBz6Qn6kr iPNZ2oi9yDl5GtNkQNjX6BHLMpqYTMfeVVcNiCHFocZMEB5X3Sl7L3Z44+IaHsIh BX/BdkEb+ALiaBpmHzWeT3/cn7eWh7x7AKmQvHowaqLyf1xYbG00V/p7o2+yPd/f hpagF2tVrfiwnNZme3on9+OE0cbmFnavRBtr6/Yno1mzfA5POQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdlCzLlrOkC2nVxOuhmfJE5BSZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvZDQ0OWNhMTQtNTYxMi0z NWM2LWJiODAtNjRiMmY3YTQ1ZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Je/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEb6kNWTJnbbmuBZBbsqwCq1qBYtq5Z4dwpEcMY9FGdGWIDWFg/cPtT SSaRyJ0u+X8jqmIFnN+63zayAUDbwvaTdNTwgCVbZMA77Bfe36pjkmd7Ntvbumfh 8uOMkHbmy7ba+jtpGrApgHSReL4DZC8D4n6ay1HRLHoqx/BV2ISoV8E8Pu2LD1yu Z4vbhkBPpBuErV0kctf5ttrQpnPUjq2Vw7bKcjbmkaz4KgsXBVsbWykhlEoaaRN3 xZEgZj7rDcADyR1guARIhgGhEekSTdAovZRlBoWJ+bSEckG1H/cvW5HpB5bhJKqJ XjTDwl2b3uHzK8U+Luch6wwurAYjLaE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:54 2025 by rpki-client