$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/3ee16212-ace1-3836-9f78-e67462b4a3ba.roa File: 3ee16212-ace1-3836-9f78-e67462b4a3ba.roa (raw, json) Hash identifier: vzYcILrESanjFr3ATYF3hUidR/o78D0smiDjnWv4Umo= Subject key identifier: 5F:41:26:92:BC:F8:F3:42:48:9A:96:A6:3C:D7:E1:C3:56:76:35:9E Certificate issuer: /CN=1eba12ff-c221-4ab3-9aa6-d542d0812543 Certificate serial: 010D0C9F4328584B1F0171A878271FDC5CDBAA80 Authority key identifier: 3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/3ee16212-ace1-3836-9f78-e67462b4a3ba.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 10973 IP address blocks: 216.128.96.0/20 maxlen: 20 216.128.96.0/21 maxlen: 21 216.128.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:71:a8:78:27:1f:dc:5c:db:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eba12ff-c221-4ab3-9aa6-d542d0812543 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=e406fc12-0e5a-474e-a6a3-65703d6cc7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:31:4a:62:d1:10:34:c8:04:88:ee:45:4c: cc:32:a7:cb:51:39:cb:f8:3e:00:5f:c0:58:ea:16: c4:83:d2:0a:8d:df:dd:34:f7:b5:f9:e5:45:6a:78: 46:ac:6d:62:31:0c:d7:b8:a4:88:e7:30:ab:d3:c0: 46:19:91:bd:f3:01:70:bf:ae:12:2d:83:f8:56:5b: d0:5b:b6:f5:e6:40:5e:d1:17:0e:02:50:2b:61:59: 36:39:9f:42:12:8a:4d:34:e4:fb:08:c6:11:c4:95: 2b:15:00:cb:53:47:75:48:5b:7e:ac:1f:fa:71:a4: 09:38:22:a8:2e:ce:68:a5:e2:75:47:a4:00:91:97: a1:96:2b:90:a6:9e:ff:09:f1:3d:cc:59:ea:02:09: 96:6e:d3:8c:3f:94:4b:4a:20:67:3a:77:d1:36:f7: 7e:8d:60:f2:17:7e:44:01:27:e4:8a:88:92:56:ee: bf:ff:7c:85:20:da:e3:22:55:d7:9f:e3:b9:02:d1: 43:ab:44:7c:e3:81:9f:92:82:92:0f:0e:30:88:50: e5:7b:7e:8d:1b:58:b0:a1:f2:0b:58:f8:b0:b4:58: 88:63:3c:01:7a:f2:3e:4d:7f:d3:f4:b3:ec:82:3f: 96:ea:50:dc:ef:ab:fc:56:e4:ce:ab:b3:05:df:8c: e0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:41:26:92:BC:F8:F3:42:48:9A:96:A6:3C:D7:E1:C3:56:76:35:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/3ee16212-ace1-3836-9f78-e67462b4a3ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.crl X509v3 Authority Key Identifier: keyid:3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer sbgp-ipAddrBlock: critical IPv4: 216.128.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ea:12:c0:94:57:ea:a4:f6:8e:80:2f:af:26:6d:d9:1f:b1: 09:89:6c:e3:ab:e1:7f:07:6a:80:26:6c:32:20:ed:da:5e:19: f2:21:87:be:99:a0:78:8d:42:3f:4c:2c:a2:b3:ed:39:e9:a7: af:6b:21:26:b4:00:8d:49:d9:c9:0c:1f:78:e4:84:e1:52:09: 74:fe:7c:f6:c1:cd:42:01:5d:5c:d3:c6:52:b8:db:e3:f1:32: 92:c0:b9:c7:da:d1:e7:d2:a5:c0:1e:10:dd:d9:ad:73:50:1f: eb:d8:03:0e:51:17:2b:17:91:a3:b8:48:d2:b7:26:2a:a2:23: 3e:24:9f:0f:34:53:2f:1f:24:40:89:ec:4a:0b:c9:63:9c:5d: ce:f9:28:c8:0c:c8:40:0a:fb:00:97:b1:db:e9:66:e5:df:60: 97:0c:70:a5:bf:66:ae:13:b7:47:12:1d:51:62:51:20:21:41: 6f:e8:2e:93:4d:05:d2:ca:1d:fa:ce:ef:a3:0e:6a:3d:b6:1b: c6:28:ba:13:29:21:72:c2:0d:0d:8a:8d:4f:cf:0b:3d:4c:15: ea:2b:09:4b:d7:8c:96:01:2b:c8:5b:d4:07:dd:de:f9:0a:fb: b9:2a:b0:04:d1:06:b6:0a:2f:ea:e6:78:cd:b5:72:c5:42:9a: 39:67:a9:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXGoeCcf3FzbqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWViYTEyZmYtYzIyMS00YWIzLTlhYTYtZDU0MmQwODEy NTQzMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZTQwNmZjMTItMGU1YS00NzRlLWE2YTMtNjU3MDNkNmNjN2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP4xSmLREDTIBIjuRUzMMqfLUTnL+D4AX8BY 6hbEg9IKjd/dNPe1+eVFanhGrG1iMQzXuKSI5zCr08BGGZG98wFwv64SLYP4VlvQ W7b15kBe0RcOAlArYVk2OZ9CEopNNOT7CMYRxJUrFQDLU0d1SFt+rB/6caQJOCKo Ls5opeJ1R6QAkZehliuQpp7/CfE9zFnqAgmWbtOMP5RLSiBnOnfRNvd+jWDyF35E ASfkioiSVu6//3yFINrjIlXXn+O5AtFDq0R844GfkoKSDw4wiFDle36NG1iwofIL WPiwtFiIYzwBevI+TX/T9LPsgj+W6lDc76v8VuTOq7MF34zgkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9BJpK8+PNCSJqWpjzX4cNWdjWeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZWJh MTJmZi1jMjIxLTRhYjMtOWFhNi1kNTQyZDA4MTI1NDMvM2VlMTYyMTItYWNlMS0z ODM2LTlmNzgtZTY3NDYyYjRhM2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWViYTEyZmYtYzIyMS00YWIzLTlh YTYtZDU0MmQwODEyNTQzLzFlYmExMmZmLWMyMjEtNGFiMy05YWE2LWQ1NDJkMDgx MjU0My5jcmwwHwYDVR0jBBgwFoAUO3Cbc63ymWoAZSmxQ0389dJAUgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZWJhMTJmZi1jMjIxLTRhYjMtOWFhNi1kNTQy ZDA4MTI1NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPqEsCUV+qk9o6AL68mbdkfsQmJbOOr4X8HaoAmbDIg7dpeGfIhh76Z oHiNQj9MLKKz7Tnpp69rISa0AI1J2ckMH3jkhOFSCXT+fPbBzUIBXVzTxlK42+Px MpLAucfa0efSpcAeEN3ZrXNQH+vYAw5RFysXkaO4SNK3JiqiIz4knw80Uy8fJECJ 7EoLyWOcXc75KMgMyEAK+wCXsdvpZuXfYJcMcKW/Zq4Tt0cSHVFiUSAhQW/oLpNN BdLKHfrO76MOaj22G8YouhMpIXLCDQ2KjU/PCz1MFeorCUvXjJYBK8hb1Afd3vkK +7kqsATRBrYKL+rmeM21csVCmjlnqfo= -----END CERTIFICATE-----Generated at Mon Oct 20 21:57:49 2025 by rpki-client