$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa File: ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa (raw, json) Hash identifier: e1k4q8Iy+fqqTUVgPEghHbjSPcaQhk6po3MsytTiEz0= Subject key identifier: 1C:6C:D5:74:FC:BB:D7:A6:BF:0A:A3:8C:1B:C7:D8:2D:67:A8:5C:18 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584B79BCBC6F8EDE4DBF7CB612C0 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 33724 IP address blocks: 216.230.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:bc:6f:8e:de:4d:bf:7c:b6:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=40cd8b1a-954b-407d-af40-9cc66b087980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ef:36:c6:ed:d3:d0:64:43:1b:d7:7b:f4:61: e2:ef:c2:da:89:a4:c3:b6:4f:fa:52:4a:b6:de:24: ee:93:17:bb:c4:f0:97:22:6b:0e:f7:ab:ae:2a:f0: e7:6b:50:ce:8f:7e:93:45:65:6e:bc:f4:99:85:20: 37:ef:97:4f:c6:a8:86:22:40:28:16:1e:01:6d:15: 70:7e:e6:2b:d2:35:58:68:64:80:30:fb:6c:23:27: b9:53:53:01:92:76:c7:13:f6:93:eb:be:d8:c4:b6: 5d:65:59:6b:60:49:54:f9:f4:93:54:9d:95:48:78: b2:15:47:65:fc:f3:45:e3:bb:2c:97:e7:4a:ff:49: e6:29:dd:6a:a6:13:b2:44:9e:67:c5:2c:83:35:20: d7:64:3f:7d:c1:14:af:2c:dd:60:cb:4d:eb:7b:d4: 6b:1d:f8:e1:6c:5d:35:1b:a9:f1:23:44:0d:d0:5d: 5d:af:bb:d4:f1:6a:b8:2c:a0:02:af:1d:47:0e:f4: dc:d7:fa:f8:57:e9:f4:2c:97:fe:51:a0:cd:18:a3: c9:f1:9c:64:24:d5:66:81:ce:76:87:67:d3:a5:c8: 56:57:fb:f3:46:83:83:5a:bc:06:d0:65:3c:9f:2f: 88:6d:d1:58:90:e8:81:96:03:e6:bd:22:99:4b:80: 40:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6C:D5:74:FC:BB:D7:A6:BF:0A:A3:8C:1B:C7:D8:2D:67:A8:5C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 216.230.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:95:76:67:c5:a5:b8:d7:74:5d:43:ab:83:0a:27:ed:61:13: e1:c1:c1:38:c0:22:d1:05:6d:61:95:bf:20:3e:1b:dd:ef:f9: e5:c4:74:7a:f7:50:98:c1:a1:5b:2e:ba:5c:c8:d3:82:2d:d3: 0f:f7:0b:b8:c5:c5:53:45:da:7c:cf:ce:8a:99:bc:36:e6:9c: a5:d3:6e:00:9e:f6:53:61:69:35:b9:49:27:c4:fd:fa:e3:0f: a5:35:44:f1:ea:8f:f0:b6:4b:e8:6d:af:72:53:9c:d7:b1:dc: 5a:fa:ae:8d:4a:f0:73:2e:71:74:28:b4:41:17:73:b1:0b:82: cb:aa:11:2c:d6:e2:5e:27:25:82:75:24:13:4e:42:1b:90:45: c1:4a:2c:29:0e:cc:17:c1:af:83:81:95:09:49:e6:6a:93:2a: d3:15:f3:04:1e:c9:6d:bc:b1:b2:ea:46:74:36:bd:5f:61:48: 11:72:c5:b8:b1:cd:b6:4d:a9:50:04:1d:9e:c8:4d:0f:f5:f6: 71:b7:75:a7:e3:1a:fe:de:52:7f:3c:c4:1e:b3:a2:ea:cc:f3: 53:cd:8d:c7:aa:79:bf:27:9a:86:32:69:6f:6d:9b:c9:e7:98: 98:53:4f:e6:06:1e:ee:81:c8:7c:ff:37:28:8d:83:94:18:ad: 94:90:c0:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLxvjt5Nv3y2EsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NDBjZDhiMWEtOTU0Yi00MDdkLWFmNDAtOWNjNjZiMDg3OTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu82xu3T0GRDG9d79GHi78LaiaTDtk/6Ukq2 3iTukxe7xPCXImsO96uuKvDna1DOj36TRWVuvPSZhSA375dPxqiGIkAoFh4BbRVw fuYr0jVYaGSAMPtsIye5U1MBknbHE/aT677YxLZdZVlrYElU+fSTVJ2VSHiyFUdl /PNF47ssl+dK/0nmKd1qphOyRJ5nxSyDNSDXZD99wRSvLN1gy03re9RrHfjhbF01 G6nxI0QN0F1dr7vU8Wq4LKACrx1HDvTc1/r4V+n0LJf+UaDNGKPJ8ZxkJNVmgc52 h2fTpchWV/vzRoODWrwG0GU8ny+IbdFYkOiBlgPmvSKZS4BAiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxs1XT8u9emvwqjjBvH2C1nqFwYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvY2U1YTEyMTQtZWQ0Yi0z OTdmLTkxZWQtNDk2MWMwOWI3YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaVdmfFpbjXdF1Dq4MKJ+1hE+HBwTjAItEFbWGVvyA+G93v+eXEdHr3 UJjBoVsuulzI04It0w/3C7jFxVNF2nzPzoqZvDbmnKXTbgCe9lNhaTW5SSfE/frj D6U1RPHqj/C2S+htr3JTnNex3Fr6ro1K8HMucXQotEEXc7ELgsuqESzW4l4nJYJ1 JBNOQhuQRcFKLCkOzBfBr4OBlQlJ5mqTKtMV8wQeyW28sbLqRnQ2vV9hSBFyxbix zbZNqVAEHZ7ITQ/19nG3dafjGv7eUn88xB6zourM81PNjceqeb8nmoYyaW9tm8nn mJhTT+YGHu6ByHz/NyiNg5QYrZSQwPo= -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:50 2025 by rpki-client