$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa File: 423c23a3-fd63-3040-9f8b-286fc8843cee.roa (raw, json) Hash identifier: fOT4Edp9e5cl9f6kXyM0R3lAU41VmgBDt1Gol3nGYuI= Subject key identifier: 48:EA:D7:DA:15:00:1D:FF:E4:F5:A6:50:24:E3:03:D3:3B:88:72:8F Certificate issuer: /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Certificate serial: 010D0C9F4328584B1AD170373767BB0B4B4DC8C0 Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 7057 IP address blocks: 216.8.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:70:37:37:67:bb:0b:4b:4d:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=b7f09931-5238-452f-88fc-966542c47b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:9d:83:68:5f:5a:b7:17:7a:99:5a:b2:19: 06:5e:98:f1:59:45:4a:d8:0c:8d:53:67:a6:0b:0c: a5:7d:8c:33:db:ff:f8:0d:a2:88:60:a7:7e:06:83: 42:d5:a2:d5:b2:e9:10:41:7d:6d:cf:43:7a:1e:c2: a1:ad:2c:fb:a3:d2:66:78:bd:e7:b3:5c:24:4b:e6: 95:c0:5e:82:b7:45:61:b7:b2:d3:8b:38:e2:19:06: b2:03:16:70:b3:f4:3a:e0:ee:73:d9:60:d1:86:d6: 64:76:0a:6b:86:7f:15:82:ec:69:eb:34:29:73:e9: 35:40:c9:b1:d3:d4:a1:3c:c5:b9:04:43:78:e6:80: 03:0c:a0:6b:33:d0:7f:98:84:69:94:2f:86:c0:31: 4f:83:4d:69:56:33:90:7c:20:89:2a:f0:e3:f0:25: 0d:b4:64:96:72:bc:85:9b:16:ed:cc:2e:56:f8:d2: 91:6b:83:df:b9:a2:b0:e0:8e:54:93:48:a4:18:f4: 3e:49:f5:00:97:b4:7a:1f:fa:b7:bd:63:4c:0f:c3: b4:3b:60:b0:c4:7e:cf:1c:f6:a3:aa:44:28:d6:35: 10:dd:9e:b8:74:bd:97:d7:99:e6:3e:ce:13:42:5c: c8:6b:89:41:df:22:2b:8d:6c:d8:06:c0:a8:f2:79: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EA:D7:DA:15:00:1D:FF:E4:F5:A6:50:24:E3:03:D3:3B:88:72:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl X509v3 Authority Key Identifier: keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer sbgp-ipAddrBlock: critical IPv4: 216.8.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ab:1e:63:0d:57:94:72:66:40:56:c5:79:7b:0b:32:75:8f: 88:3e:31:63:e6:fd:44:34:48:14:96:2b:14:45:92:d9:c3:fc: 19:49:88:17:26:b3:1e:85:93:13:dc:28:09:34:c7:71:2a:bd: 6e:55:4c:d6:a5:f1:a8:fb:ed:b6:d8:3f:cc:6c:29:76:34:d7: 4b:0d:67:0d:93:c4:30:d8:75:0c:5d:8e:cb:7e:1a:d8:92:c3: 76:d3:df:45:74:df:46:59:95:e6:28:1c:80:10:07:d4:9b:a9: bf:bc:78:82:b3:b4:36:b4:f1:57:a0:11:6e:a5:c4:b6:1c:d7: d9:30:76:a2:a5:68:e1:86:7e:27:68:ae:3f:77:5f:1c:7b:7b: ef:0d:dd:a1:22:91:bd:54:24:3c:56:8b:58:67:0d:37:d9:92: d3:a5:b6:32:54:db:8a:4e:5b:c4:b5:88:91:27:d0:74:0e:fb: 5c:45:de:40:48:28:ed:5f:bc:36:8b:4e:be:0b:94:89:01:44: 4b:b4:be:7e:a2:a1:7c:e5:f3:e8:8c:7d:27:0f:be:fd:ef:35: 37:7f:19:6f:35:9a:b0:49:af:dc:9d:8c:f5:1c:1b:ac:c8:4d: d7:af:ef:bf:ed:37:c2:9f:2f:af:d3:d5:db:5e:46:07:c6:97: ef:b8:69:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XA3N2e7C0tNyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIz OWM4MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YjdmMDk5MzEtNTIzOC00NTJmLTg4ZmMtOTY2NTQyYzQ3YjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs++dg2hfWrcXeplashkGXpjxWUVK2AyNU2em CwylfYwz2//4DaKIYKd+BoNC1aLVsukQQX1tz0N6HsKhrSz7o9JmeL3ns1wkS+aV wF6Ct0Vht7LTizjiGQayAxZws/Q64O5z2WDRhtZkdgprhn8Vguxp6zQpc+k1QMmx 09ShPMW5BEN45oADDKBrM9B/mIRplC+GwDFPg01pVjOQfCCJKvDj8CUNtGSWcryF mxbtzC5W+NKRa4PfuaKw4I5Uk0ikGPQ+SfUAl7R6H/q3vWNMD8O0O2CwxH7PHPaj qkQo1jUQ3Z64dL2X15nmPs4TQlzIa4lB3yIrjWzYBsCo8nlxnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjq19oVAB3/5PWmUCTjA9M7iHKPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdi YzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvNDIzYzIzYTMtZmQ2My0z MDQwLTlmOGItMjg2ZmM4ODQzY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0 ZDQtODQzMWRjOTIzOWM4LzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzky MzljOC5jcmwwHwYDVR0jBBgwFoAUT2hGCOzA/DWcXU1xd+vJ0MqBG1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMx ZGM5MjM5YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2AiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWrHmMNV5RyZkBWxXl7CzJ1j4g+MWPm/UQ0SBSWKxRFktnD/BlJiBcm sx6FkxPcKAk0x3EqvW5VTNal8aj77bbYP8xsKXY010sNZw2TxDDYdQxdjst+GtiS w3bT30V030ZZleYoHIAQB9Sbqb+8eIKztDa08VegEW6lxLYc19kwdqKlaOGGfido rj93Xxx7e+8N3aEikb1UJDxWi1hnDTfZktOltjJU24pOW8S1iJEn0HQO+1xF3kBI KO1fvDaLTr4LlIkBREu0vn6ioXzl8+iMfScPvv3vNTd/GW81mrBJr9ydjPUcG6zI Tdev77/tN8KfL6/T1dteRgfGl++4adg= -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:07 2025 by rpki-client