$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2de5309f-2941-3cb8-9d7b-3d214fc87564.roa File: 2de5309f-2941-3cb8-9d7b-3d214fc87564.roa (raw, json) Hash identifier: 7yRYv6YpCOddRjP3rt6S5HCYtQThziak8k+ZRwJScRQ= Subject key identifier: 8E:95:E6:1F:65:53:91:FE:0C:BB:6C:CE:C3:E2:C7:A6:EC:BE:B7:C7 Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F4328584B89177ABF33C05C82FF315440 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2de5309f-2941-3cb8-9d7b-3d214fc87564.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 27203 IP address blocks: 216.68.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7a:bf:33:c0:5c:82:ff:31:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=c60bd7fe-e22d-4ea3-9b54-081c93ce9eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:e5:83:61:43:96:99:1f:26:2f:a6:01:30: 35:41:e0:f4:cb:54:c3:00:61:19:2c:93:9a:d2:1a: b6:6e:00:2b:5c:b5:8f:a0:cc:a9:b8:bf:2e:89:65: 22:4d:77:95:22:71:e9:4c:6d:09:41:28:60:bd:08: 4a:ef:95:29:64:ab:c1:b6:07:c2:a6:b0:52:64:19: f4:d5:d3:9f:61:4d:f7:53:33:0a:89:5a:ab:ab:51: 31:4e:fc:b4:d4:7a:3e:fe:04:fa:24:94:6b:6d:50: 74:a4:41:65:88:c5:61:65:df:ac:e0:f9:90:7b:f7: de:b0:51:a6:15:3c:3b:59:06:7d:39:4d:6c:ad:94: 03:5d:36:62:ff:4e:e7:17:44:74:0d:7a:ef:02:7f: 4d:a6:6d:a2:94:32:7f:ec:70:0c:1c:6b:96:fc:83: df:7e:8b:8e:8d:99:ca:4e:50:91:3e:a7:d9:99:7a: 9a:70:06:58:76:71:fe:8b:a7:9c:38:13:90:59:69: 0e:e5:cf:a3:99:2c:1d:b9:60:a5:9e:de:bb:85:b7: bd:2a:b7:26:af:a4:ee:cb:33:81:db:8c:70:8f:8e: 3e:a8:82:a7:3a:60:a3:3c:79:bb:ba:cb:a7:c5:84: 0d:18:12:5b:03:c4:7a:e6:95:8d:bb:a8:b0:86:e0: 91:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:95:E6:1F:65:53:91:FE:0C:BB:6C:CE:C3:E2:C7:A6:EC:BE:B7:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2de5309f-2941-3cb8-9d7b-3d214fc87564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv4: 216.68.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:70:f5:3f:18:b1:37:9c:5c:4c:6d:c6:ae:73:af:85:95:d8: 38:9d:dc:f6:4a:88:bd:69:08:74:8a:51:40:e3:b6:82:e4:3e: 76:62:74:85:bd:60:6c:66:49:d3:6b:7e:7a:cc:70:7a:f2:91: 85:7b:c2:60:79:1b:0a:1a:11:96:2d:bb:8b:49:1e:64:9e:8c: 17:e3:07:0c:78:11:eb:b8:09:60:81:b6:86:8b:fe:6b:fd:d8: bf:ac:5f:79:5a:9f:c9:77:a7:04:bf:50:46:21:85:b4:11:26: 45:33:5d:23:cd:9e:53:29:11:ba:f4:f9:68:1b:d3:c0:68:5a: d7:b3:ec:10:a7:84:8c:44:af:24:8d:80:f1:ad:4a:f5:70:17: 7b:24:3d:a2:ca:9e:71:88:b2:2b:8f:e3:26:60:e4:b8:22:5d: af:b7:0a:97:72:32:21:e6:57:29:a6:a0:f9:ae:1c:f3:08:e8: 61:79:ef:e8:47:8d:ec:42:23:c8:ca:2f:fe:98:b9:89:8e:dc: 81:cb:51:1c:04:1e:5d:1d:2a:65:9b:3a:91:f6:56:5d:9e:d3: 89:7f:5b:f8:eb:5f:e7:c3:b5:5a:da:d1:44:4f:b7:ca:36:b8: ea:1f:40:35:fc:a6:23:67:9b:0c:51:cc:80:bc:c1:71:2f:22: ae:8a:26:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3q/M8Bcgv8xVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk YzYwYmQ3ZmUtZTIyZC00ZWEzLTliNTQtMDgxYzkzY2U5ZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztnlg2FDlpkfJi+mATA1QeD0y1TDAGEZLJOa 0hq2bgArXLWPoMypuL8uiWUiTXeVInHpTG0JQShgvQhK75UpZKvBtgfCprBSZBn0 1dOfYU33UzMKiVqrq1ExTvy01Ho+/gT6JJRrbVB0pEFliMVhZd+s4PmQe/fesFGm FTw7WQZ9OU1srZQDXTZi/07nF0R0DXrvAn9Npm2ilDJ/7HAMHGuW/IPffouOjZnK TlCRPqfZmXqacAZYdnH+i6ecOBOQWWkO5c+jmSwduWClnt67hbe9Krcmr6TuyzOB 24xwj44+qIKnOmCjPHm7usunxYQNGBJbA8R65pWNu6iwhuCRowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6V5h9lU5H+DLtszsPix6bsvrfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMmRlNTMwOWYtMjk0MS0z Y2I4LTlkN2ItM2QyMTRmYzg3NTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENw9T8YsTecXExtxq5zr4WV2Did3PZKiL1pCHSKUUDjtoLkPnZidIW9 YGxmSdNrfnrMcHrykYV7wmB5GwoaEZYtu4tJHmSejBfjBwx4Eeu4CWCBtoaL/mv9 2L+sX3lan8l3pwS/UEYhhbQRJkUzXSPNnlMpEbr0+Wgb08BoWtez7BCnhIxErySN gPGtSvVwF3skPaLKnnGIsiuP4yZg5LgiXa+3CpdyMiHmVymmoPmuHPMI6GF57+hH jexCI8jKL/6YuYmO3IHLURwEHl0dKmWbOpH2Vl2e04l/W/jrX+fDtVra0URPt8o2 uOofQDX8piNnmwxRzIC8wXEvIq6KJtA= -----END CERTIFICATE-----Generated at Mon Oct 20 22:46:39 2025 by rpki-client