$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa File: 21c05a3b-e062-3862-8df9-24b08a6621aa.roa (raw, json) Hash identifier: 5Y9CJyDuMoVaue+ogMw852qcpmMdJ3pS/KWYXtKnTKY= Subject key identifier: 06:88:B3:0D:7F:B1:FC:72:2B:F8:FE:8F:6D:05:80:D7:B2:F7:B4:FD Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5DD1F24C9B9B83875C465C00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 11090 IP address blocks: 216.152.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f2:4c:9b:9b:83:87:5c:46:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=706ee242-be63-4552-aa97-15f880de85dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:09:90:87:36:54:35:a5:26:cf:28:96:bd: 6b:f4:7f:9c:33:f0:19:09:6e:ba:ff:26:aa:1b:e8: 26:3a:44:63:dc:d9:fa:7a:67:09:00:33:05:15:1c: 62:d0:fc:ae:e7:8d:ff:fd:09:c2:ef:5c:3c:b8:2d: b9:a3:6e:ca:75:fc:c0:bc:0c:24:98:10:f9:fa:2e: 2e:8c:67:de:40:0b:5e:c2:54:a9:ab:63:aa:4f:df: b7:06:54:d3:b4:ae:7a:61:37:36:ed:3d:b6:4a:cc: 93:ac:fc:b7:3c:0c:26:f9:d8:33:d6:4d:29:41:a8: 53:08:75:36:3d:fb:16:b6:17:92:65:a0:6d:0a:e6: 31:7b:32:1a:db:64:50:e5:12:90:95:9e:0b:56:18: de:0e:df:71:ee:9a:e5:66:6f:61:bd:0b:56:ae:75: fb:cd:c7:f3:6b:14:6b:40:c8:b0:55:a6:ca:f2:fd: e3:fb:7b:3c:a2:a9:ba:cf:da:53:33:a7:3d:7a:47: 5d:a4:9f:30:da:54:d2:d6:dd:a4:19:22:d6:98:ad: 54:2c:88:5e:9d:4c:8b:16:32:7b:95:b8:c3:33:12: 78:7d:84:1b:21:eb:ca:23:fd:75:e5:df:45:4b:91: 47:7f:14:c7:b2:06:2e:a6:39:80:75:31:0b:bc:ac: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:88:B3:0D:7F:B1:FC:72:2B:F8:FE:8F:6D:05:80:D7:B2:F7:B4:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6a:46:aa:52:53:c7:9c:c0:23:e4:87:c3:87:70:26:dc:da: 95:29:5c:48:ec:1c:eb:97:5e:c7:50:93:00:0b:70:f8:12:8c: 19:76:75:b0:a9:7c:b4:f9:7d:83:1f:ec:a9:29:40:d9:77:e5: 74:6f:6b:21:48:cf:89:fd:2f:a8:c0:39:c9:03:14:d3:4a:07: 06:ef:37:eb:45:0b:3e:5e:a1:89:2b:5b:09:8c:03:91:00:94: f5:b1:e7:00:f9:54:21:cd:70:e1:11:d7:12:e6:c6:7f:0f:3c: c5:71:7b:19:59:ff:2e:b1:2f:77:81:d6:14:e2:6e:ab:93:d3: af:03:1a:04:30:61:b5:e9:f7:8a:ee:8e:e2:c5:cf:a9:97:78: 12:a7:18:ec:5a:f6:84:6a:ba:cf:d1:37:85:ba:01:19:b5:1d: 8a:8c:1b:b7:57:8f:ef:45:b9:c1:be:8a:d4:6b:18:92:21:b0: b3:66:fd:b4:71:4f:70:8c:bc:dc:03:4f:79:b8:98:51:12:58: cb:43:5a:20:d8:df:3a:f9:98:de:3b:f4:e8:77:1c:ee:c1:56: d8:04:c5:03:b1:ee:6a:16:c2:a6:62:03:40:02:21:a4:01:17: e7:d1:9c:5b:c4:a5:e6:24:f8:e5:f2:3a:9f:23:f8:39:a4:99: 56:ea:db:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fJMm5uDh1xGXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NzA2ZWUyNDItYmU2My00NTUyLWFhOTctMTVmODgwZGU4NWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthoJkIc2VDWlJs8olr1r9H+cM/AZCW66/yaq G+gmOkRj3Nn6emcJADMFFRxi0Pyu543//QnC71w8uC25o27KdfzAvAwkmBD5+i4u jGfeQAtewlSpq2OqT9+3BlTTtK56YTc27T22SsyTrPy3PAwm+dgz1k0pQahTCHU2 PfsWtheSZaBtCuYxezIa22RQ5RKQlZ4LVhjeDt9x7prlZm9hvQtWrnX7zcfzaxRr QMiwVabK8v3j+3s8oqm6z9pTM6c9ekddpJ8w2lTS1t2kGSLWmK1ULIhenUyLFjJ7 lbjDMxJ4fYQbIevKI/115d9FS5FHfxTHsgYupjmAdTELvKx79wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaIsw1/sfxyK/j+j20FgNey97T9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMjFjMDVhM2ItZTA2Mi0z ODYyLThkZjktMjRiMDhhNjYyMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2JiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZqRqpSU8ecwCPkh8OHcCbc2pUpXEjsHOuXXsdQkwALcPgSjBl2dbCp fLT5fYMf7KkpQNl35XRvayFIz4n9L6jAOckDFNNKBwbvN+tFCz5eoYkrWwmMA5EA lPWx5wD5VCHNcOER1xLmxn8PPMVxexlZ/y6xL3eB1hTibquT068DGgQwYbXp94ru juLFz6mXeBKnGOxa9oRqus/RN4W6ARm1HYqMG7dXj+9FucG+itRrGJIhsLNm/bRx T3CMvNwDT3m4mFESWMtDWiDY3zr5mN479Oh3HO7BVtgExQOx7moWwqZiA0ACIaQB F+fRnFvEpeYk+OXyOp8j+DmkmVbq29Q= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:32 2025 by rpki-client