$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa File: da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa (raw, json) Hash identifier: VdRcQrH42XGNNy7pTL8OzGvcpbvSvnrD2Jdjr+lUQKI= Subject key identifier: 8D:72:F1:1C:6F:47:AB:DE:57:94:73:AC:32:A1:F0:F9:57:BC:45:0E Certificate issuer: /CN=3b70bdb6-9776-4d39-8f28-b4a225eb2060 Certificate serial: 010D0C9F4328584B59A1CC023D33DA909A533FC0 Authority key identifier: E6:26:AE:76:3C:3B:91:4E:3E:1D:46:9D:BB:AD:32:FD:B3:08:3E:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 398406 IP address blocks: 216.250.226.0/23 maxlen: 23 216.250.226.0/24 maxlen: 24 216.250.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/3b70bdb6-9776-4d39-8f28-b4a225eb2060.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/3b70bdb6-9776-4d39-8f28-b4a225eb2060.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:cc:02:3d:33:da:90:9a:53:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b70bdb6-9776-4d39-8f28-b4a225eb2060 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=c35a290a-3fae-4bb1-a715-515870d25b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:5d:3b:dd:53:64:34:a0:83:ea:5f:49:89: 3b:36:64:db:36:2b:47:c0:31:55:2a:ce:be:b1:d0: 33:d3:9b:a9:9d:0c:97:f2:12:05:fb:26:c6:f4:26: d1:7e:6e:38:75:2a:4e:e9:8d:e3:54:f4:2e:6d:d4: 0d:ef:a0:34:20:fa:84:37:67:a2:b9:63:9e:c2:c4: 8a:b6:c0:e7:68:6c:ed:c4:db:30:f4:9f:3e:1b:b5: be:44:65:08:6d:4a:8f:80:e8:56:8d:19:c0:5d:e1: 35:4a:2d:79:3d:c2:dc:e3:9d:bf:b4:49:63:c4:b3: 4d:c4:65:eb:02:9a:c6:4c:21:be:95:84:ce:e5:c6: 5b:a3:d3:b2:e3:42:d8:0d:41:88:90:2b:25:4e:8f: 60:98:2f:bd:e6:13:b8:54:b1:82:a8:1c:10:bc:dd: d6:1d:6d:c6:5b:c6:36:07:79:c3:2c:2d:f5:44:1a: f2:32:93:50:91:5e:69:3b:69:04:bb:29:2e:e0:6c: dd:7f:d6:b6:4e:a9:2f:2d:80:3a:2f:ab:be:d9:f2: 29:53:b8:41:d7:75:18:d6:88:04:2f:1a:40:fd:b8: 56:cd:1c:e6:af:ae:21:ab:c6:f4:c2:9a:1d:34:44: 1b:52:5f:e7:aa:99:a6:72:56:16:4b:20:d8:ce:2d: 92:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:72:F1:1C:6F:47:AB:DE:57:94:73:AC:32:A1:F0:F9:57:BC:45:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/3b70bdb6-9776-4d39-8f28-b4a225eb2060.crl X509v3 Authority Key Identifier: keyid:E6:26:AE:76:3C:3B:91:4E:3E:1D:46:9D:BB:AD:32:FD:B3:08:3E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer sbgp-ipAddrBlock: critical IPv4: 216.250.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:1c:9d:06:32:28:62:22:55:4b:7a:ca:e5:94:75:8f:3d:be: 73:41:6a:4c:9b:10:b4:37:9e:67:a1:93:73:40:ab:56:fd:43: dd:d2:65:e5:d9:c3:41:1d:10:51:b3:35:f3:68:f2:79:33:4a: 99:d3:8f:6f:bd:b1:fb:0e:14:57:5d:34:84:2d:ed:1a:78:27: a8:0e:26:ea:54:3e:e8:bc:ea:38:52:f8:09:03:8a:ff:21:d5: 94:46:bc:20:d7:dc:38:9e:ce:d0:e9:81:cb:45:28:53:0f:9e: 87:5b:94:7b:f3:32:b2:57:0a:57:9d:38:9c:08:32:92:3a:2b: 37:08:69:d1:57:cd:b8:4d:c5:49:02:a2:ec:39:55:36:b0:05: 2f:16:6f:de:d7:73:2e:bb:63:c7:47:e6:3c:e6:8b:6e:f1:53: b3:99:8f:8d:fa:57:54:ca:27:1e:ad:ad:c3:31:3e:a8:48:e6: 87:2b:d6:41:63:16:e9:39:e2:e2:48:b4:0f:ae:de:fa:9d:86: 00:95:9b:13:ea:68:e3:4a:75:9b:de:7a:f8:74:6e:26:6d:d1: 5a:3f:d6:62:fb:1b:4c:18:ee:50:e7:a0:f3:21:09:71:75:c1: 5d:81:74:0c:45:a0:ae:f4:e5:19:52:2c:ca:4c:fd:2d:65:b7: 9b:c2:b6:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZocwCPTPakJpTP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MGJkYjYtOTc3Ni00ZDM5LThmMjgtYjRhMjI1ZWIy MDYwMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk YzM1YTI5MGEtM2ZhZS00YmIxLWE3MTUtNTE1ODcwZDI1YjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoFdO91TZDSgg+pfSYk7NmTbNitHwDFVKs6+ sdAz05upnQyX8hIF+ybG9CbRfm44dSpO6Y3jVPQubdQN76A0IPqEN2eiuWOewsSK tsDnaGztxNsw9J8+G7W+RGUIbUqPgOhWjRnAXeE1Si15PcLc452/tEljxLNNxGXr AprGTCG+lYTO5cZbo9Oy40LYDUGIkCslTo9gmC+95hO4VLGCqBwQvN3WHW3GW8Y2 B3nDLC31RBryMpNQkV5pO2kEuyku4Gzdf9a2TqkvLYA6L6u+2fIpU7hB13UY1ogE LxpA/bhWzRzmr64hq8b0wpodNEQbUl/nqpmmclYWSyDYzi2S6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1y8RxvR6veV5RzrDKh8PlXvEUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zYjcw YmRiNi05Nzc2LTRkMzktOGYyOC1iNGEyMjVlYjIwNjAvZGE4YTRiZjYtZDNjOS0z YWQzLWE4MjUtMDUxOWE4MTMzMTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2I3MGJkYjYtOTc3Ni00ZDM5LThm MjgtYjRhMjI1ZWIyMDYwLzNiNzBiZGI2LTk3NzYtNGQzOS04ZjI4LWI0YTIyNWVi MjA2MC5jcmwwHwYDVR0jBBgwFoAU5iaudjw7kU4+HUadu60y/bMIPnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zYjcwYmRiNi05Nzc2LTRkMzktOGYyOC1iNGEy MjVlYjIwNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PriMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQcnQYyKGIiVUt6yuWUdY89vnNBakybELQ3nmehk3NAq1b9Q93SZeXZ w0EdEFGzNfNo8nkzSpnTj2+9sfsOFFddNIQt7Rp4J6gOJupUPui86jhS+AkDiv8h 1ZRGvCDX3DieztDpgctFKFMPnodblHvzMrJXCledOJwIMpI6KzcIadFXzbhNxUkC ouw5VTawBS8Wb97Xcy67Y8dH5jzmi27xU7OZj436V1TKJx6trcMxPqhI5ocr1kFj Fuk54uJItA+u3vqdhgCVmxPqaONKdZveevh0biZt0Vo/1mL7G0wY7lDnoPMhCXF1 wV2BdAxFoK705RlSLMpM/S1lt5vCtjM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:12 2025 by rpki-client