$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa File: 6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa (raw, json) Hash identifier: 6427cVufjFClA78b1X5pe55AYBybUHSjD2t/AjHvrd0= Subject key identifier: 19:7F:6A:EF:3C:84:C3:73:BE:BD:52:E2:19:26:B9:45:5C:8D:79:E1 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC75BAB58913462902141C0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 216.137.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5b:ab:58:91:34:62:90:21:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=62c1a9cc-05ea-4ccb-8ec7-d57b05c1f0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:bb:81:ed:8d:d7:a2:5f:18:be:2e:67:87: 98:3e:53:13:1a:dd:aa:09:3a:c6:19:4a:19:50:b1: f6:12:5a:1e:9a:cd:d1:58:b2:1c:33:b7:3e:e3:ff: 4a:83:cf:37:19:68:fb:64:ec:34:a4:39:34:ee:ef: 95:19:d2:a0:26:23:80:fb:1e:80:62:5e:fb:49:d4: 4f:d6:b8:57:f4:65:cd:a8:57:35:98:af:ea:22:b1: ef:dd:07:24:b1:2c:07:26:d5:ef:59:3d:52:20:28: b1:d7:6e:e6:02:46:6b:e4:47:a9:6b:e1:0b:3a:6e: 9e:67:97:ff:e3:2d:87:1d:ec:5a:0d:fa:3f:40:e4: af:db:fd:71:0e:d2:e5:c5:37:c6:26:e2:8b:92:b3: a1:da:39:08:4a:d7:e7:81:a9:16:80:71:e2:e9:1b: b2:05:17:60:b1:0b:6c:dc:3b:c5:b0:35:56:d9:75: dc:9f:4b:fa:37:bd:d2:53:2f:ea:4e:9b:1f:48:9a: 80:42:ab:2f:e0:ce:e3:e7:00:c2:89:4b:30:bb:b1: bb:58:a6:21:47:09:02:4e:e7:fa:37:8f:f4:87:de: 40:7b:86:f2:08:6d:9b:bb:a1:82:53:50:0c:39:82: 19:72:de:05:a4:9b:4e:27:37:94:3f:3b:a2:11:50: 8c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7F:6A:EF:3C:84:C3:73:BE:BD:52:E2:19:26:B9:45:5C:8D:79:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:42:ec:e5:f5:85:09:f1:f7:5d:b8:d0:7f:79:d2:2b:8e:df: e9:0a:01:92:c0:c6:ca:88:87:66:d1:cb:6f:45:a6:ef:5a:35: 1f:86:7c:a6:74:13:6d:4d:92:05:68:65:8c:0c:ad:94:34:fe: 1a:1c:9a:6b:b9:eb:75:46:f2:ca:d7:0e:b5:b8:b3:47:8d:24: 52:6c:56:db:26:e2:2a:07:ff:36:d7:01:c9:5c:be:cd:f4:2a: 25:09:97:2c:d9:f4:e5:2a:31:8b:d7:02:b1:bb:99:6a:f6:ca: 5a:e7:8c:b6:ce:2d:24:f3:4a:45:4a:c3:44:6c:94:81:2f:ee: d5:9b:7a:35:f7:d8:cb:5c:07:89:67:ec:90:70:a9:be:43:65: 83:3f:6f:ce:b1:2b:81:0e:62:6a:f2:c8:e3:18:53:32:f6:43: d1:a9:4b:95:44:f8:c2:a3:12:44:fc:9a:8d:d4:cf:3b:16:da: 92:f4:31:59:fe:61:d7:1a:a1:26:c1:62:bb:b8:dc:4b:3b:6a: 11:a8:12:95:7a:17:d6:2c:dc:80:21:61:07:a6:e3:4b:5c:11: be:94:1b:2e:30:41:17:6a:25:0f:6f:11:fb:14:85:e2:2d:d2: 5e:85:13:88:7b:48:d0:50:7a:93:59:de:2a:13:89:7d:e8:3d: 5f:10:a8:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1urWJE0YpAhQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NjJjMWE5Y2MtMDVlYS00Y2NiLThlYzctZDU3YjA1YzFmMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBO7ge2N16JfGL4uZ4eYPlMTGt2qCTrGGUoZ ULH2Eloems3RWLIcM7c+4/9Kg883GWj7ZOw0pDk07u+VGdKgJiOA+x6AYl77SdRP 1rhX9GXNqFc1mK/qIrHv3QcksSwHJtXvWT1SICix127mAkZr5Eepa+ELOm6eZ5f/ 4y2HHexaDfo/QOSv2/1xDtLlxTfGJuKLkrOh2jkIStfngakWgHHi6RuyBRdgsQts 3DvFsDVW2XXcn0v6N73SUy/qTpsfSJqAQqsv4M7j5wDCiUswu7G7WKYhRwkCTuf6 N4/0h95Ae4byCG2bu6GCU1AMOYIZct4FpJtOJzeUPzuiEVCMHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBl/au88hMNzvr1S4hkmuUVcjXnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNmJkOWY5OTMtOGU3NC0z ZGE5LWJjMzMtMzNlMzc4ODNlNGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2InkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlC7OX1hQnx91240H950iuO3+kKAZLAxsqIh2bRy29Fpu9aNR+GfKZ0 E21NkgVoZYwMrZQ0/hocmmu563VG8srXDrW4s0eNJFJsVtsm4ioH/zbXAclcvs30 KiUJlyzZ9OUqMYvXArG7mWr2ylrnjLbOLSTzSkVKw0RslIEv7tWbejX32MtcB4ln 7JBwqb5DZYM/b86xK4EOYmryyOMYUzL2Q9GpS5VE+MKjEkT8mo3UzzsW2pL0MVn+ YdcaoSbBYru43Es7ahGoEpV6F9Ys3IAhYQem40tcEb6UGy4wQRdqJQ9vEfsUheIt 0l6FE4h7SNBQepNZ3ioTiX3oPV8QqBE= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:07 2025 by rpki-client