$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa File: cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa (raw, json) Hash identifier: b8uzzoXsaxhL2TZsp9YbWkbTpHAvUw3puEMQkkVxBLg= Subject key identifier: 0A:D7:F8:2C:73:F1:26:4D:FE:99:A6:41:C3:0A:EC:1B:A5:1F:5A:AA Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC75BF85777606DA34D1300 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 216.137.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5b:f8:57:77:60:6d:a3:4d:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=40682c03-e317-4893-bb60-66273be7175c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:66:01:b6:b8:32:52:fa:e8:96:91:29:b7: 8d:a4:08:e9:94:a1:c1:a5:cb:f5:9a:52:50:ff:84: 97:c4:bd:70:cf:7c:3c:91:d2:4b:ba:cc:fc:2a:70: 2d:b1:bc:b8:e7:7c:45:2f:db:f4:1b:85:ea:e1:45: 71:3e:58:a9:6f:bd:ed:82:24:e2:f7:ed:5e:c3:a8: c0:34:f4:dc:d8:84:dc:ab:b8:27:8e:8f:59:b1:e6: 5b:c7:1f:95:c0:15:37:ba:a6:82:08:69:99:1f:c3: 99:af:03:9a:b8:27:72:01:25:b3:dc:09:f6:ae:36: 5b:6a:32:56:e6:ae:53:a8:c0:af:6e:48:ff:9c:a1: 0b:a2:0f:fa:f8:a6:5d:32:66:d7:c4:d9:13:4b:92: ca:4a:08:df:52:3c:85:bc:9d:e7:81:ef:50:88:e3: a2:c5:b7:ae:ba:24:73:b6:b8:2b:60:e1:cc:ed:22: 64:eb:93:99:5b:57:d7:18:6c:80:30:4b:18:c8:5d: 34:b9:69:f9:8b:29:9f:07:3f:5b:e7:b5:9a:96:3a: 7e:54:52:08:2b:38:1e:d1:cc:58:20:d5:41:4f:e9: 82:f6:50:e6:c4:bf:8e:83:6d:9d:e0:16:48:18:26: 28:5c:c4:1f:83:d9:f8:48:c1:d5:23:50:cc:eb:e6: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D7:F8:2C:73:F1:26:4D:FE:99:A6:41:C3:0A:EC:1B:A5:1F:5A:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c6:6d:03:89:c1:66:33:42:03:16:b1:d9:d7:f9:d1:03:77: 72:bf:30:23:07:3c:78:f7:f4:32:b9:99:b2:e3:94:f3:01:03: b0:f8:f4:2f:b7:f8:e7:f7:ea:43:bd:ff:bf:c7:3d:11:d5:7e: 8e:4e:58:75:b4:78:7d:c9:6c:64:d0:cb:d8:b6:8d:ff:dc:96: 11:35:3a:3c:65:35:cf:d0:45:d7:22:9c:20:af:47:35:33:49: c9:dc:6c:97:f3:df:cc:ed:bb:d4:c5:a2:1b:6f:20:76:bb:16: 2a:75:24:5f:2e:84:ca:63:09:e5:64:a5:ad:67:36:1b:07:eb: ad:3d:63:48:58:f2:08:3d:94:5c:50:40:6a:c1:ad:d3:43:32: 78:78:2e:8f:72:97:7e:a5:82:68:1c:63:1d:81:1d:31:f0:0b: 84:6a:dc:77:9f:67:a2:97:23:90:ba:b6:78:bc:02:1d:02:0a: 54:42:94:b3:38:86:bd:26:94:b9:8b:ed:55:32:9c:e3:17:ca: 62:68:32:f4:e5:5a:d6:c6:7a:46:a1:35:6b:f8:98:29:3a:f2: 85:0f:dc:97:46:c2:51:0d:f4:a6:47:39:a9:0d:99:e3:5e:5e: 3f:be:71:7d:e1:7f:a5:95:8d:75:3d:78:d3:60:e7:95:08:59: 4f:9c:22:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1v4V3dgbaNNEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NDA2ODJjMDMtZTMxNy00ODkzLWJiNjAtNjYyNzNiZTcxNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArClmAba4MlL66JaRKbeNpAjplKHBpcv1mlJQ /4SXxL1wz3w8kdJLusz8KnAtsby453xFL9v0G4Xq4UVxPlipb73tgiTi9+1ew6jA NPTc2ITcq7gnjo9ZseZbxx+VwBU3uqaCCGmZH8OZrwOauCdyASWz3An2rjZbajJW 5q5TqMCvbkj/nKELog/6+KZdMmbXxNkTS5LKSgjfUjyFvJ3nge9QiOOixbeuuiRz trgrYOHM7SJk65OZW1fXGGyAMEsYyF00uWn5iymfBz9b57Waljp+VFIIKzge0cxY INVBT+mC9lDmxL+Og22d4BZIGCYoXMQfg9n4SMHVI1DM6+b1IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArX+Cxz8SZN/pmmQcMK7BulH1qqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvY2IyMzEzZjAtMjk4YS0z ZTE0LTk3NmUtOGYyMGRmYjZjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2InQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvGbQOJwWYzQgMWsdnX+dEDd3K/MCMHPHj39DK5mbLjlPMBA7D49C+3 +Of36kO9/7/HPRHVfo5OWHW0eH3JbGTQy9i2jf/clhE1OjxlNc/QRdcinCCvRzUz ScncbJfz38ztu9TFohtvIHa7Fip1JF8uhMpjCeVkpa1nNhsH6609Y0hY8gg9lFxQ QGrBrdNDMnh4Lo9yl36lgmgcYx2BHTHwC4Rq3HefZ6KXI5C6tni8Ah0CClRClLM4 hr0mlLmL7VUynOMXymJoMvTlWtbGekahNWv4mCk68oUP3JdGwlEN9KZHOakNmeNe Xj++cX3hf6WVjXU9eNNg55UIWU+cIv0= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:07 2025 by rpki-client