$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f205ab86-219a-31dd-ab9e-6b08bb875800.roa File: f205ab86-219a-31dd-ab9e-6b08bb875800.roa (raw, json) Hash identifier: xekfrrUSfK67hQZN1o7bHsns8Qto6yaFu4ESZVbV3vU= Subject key identifier: 3C:97:45:03:85:5A:CA:87:6C:0C:B7:35:CA:A3:15:08:6D:85:E4:85 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B6BC75C5E44D054996B6DE580 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f205ab86-219a-31dd-ab9e-6b08bb875800.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11090 IP address blocks: 216.137.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5c:5e:44:d0:54:99:6b:6d:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=a0a1c0d4-7fee-441c-b766-e001b4968edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:0a:58:72:53:e0:08:57:73:6f:f0:fe:21: 55:9c:f4:dd:43:ee:b5:c7:44:6a:bf:e8:92:bb:2e: 47:f4:fe:00:65:4a:3c:e0:49:03:26:39:f5:2e:22: b0:be:44:24:b0:80:60:36:98:a3:61:56:31:51:e1: 8d:21:d6:47:b1:6b:67:f9:3f:f7:1e:b4:08:ae:c4: bd:be:32:48:25:79:f2:f3:2a:e7:c1:8f:af:17:b2: 59:31:1d:ff:6c:44:ca:6e:61:53:8d:4e:b7:e7:b3: db:37:94:8d:be:07:e8:83:fe:b4:e8:1c:e6:fb:a7: 9c:be:fa:f4:f6:eb:7f:70:cb:18:f0:24:96:f5:94: 80:50:73:e3:ce:b6:11:b4:d7:98:0e:f7:71:1b:83: a6:b0:85:3f:dc:e4:02:0b:d6:c0:15:af:bf:4a:75: fc:53:5d:b1:dc:29:eb:ed:3a:e8:29:25:4b:1c:f4: 2c:b7:1b:af:2d:55:7f:6c:78:81:ca:ab:36:2d:d4: e5:21:31:ff:bb:7f:a0:50:26:51:37:8c:d9:0c:0f: 14:7c:f2:d1:c1:c1:97:f9:a5:9a:68:77:e5:c0:86: 45:dc:2b:45:eb:fe:4c:a0:be:bf:2d:0b:a3:4b:8c: c9:e7:6e:79:c0:d3:b5:32:c7:0e:ab:d6:ce:db:aa: 0b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:97:45:03:85:5A:CA:87:6C:0C:B7:35:CA:A3:15:08:6D:85:E4:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f205ab86-219a-31dd-ab9e-6b08bb875800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:41:21:4b:f8:84:54:be:27:11:3e:66:53:ca:ac:ab:00:ab: 47:02:6f:fd:66:9e:4c:68:2c:b6:9d:a4:be:2d:dd:06:b4:94: 1f:aa:66:fe:ed:cf:d8:2d:98:f2:96:9e:6f:f4:7c:75:ad:7d: 9c:df:6e:3d:8d:85:4e:25:c2:7e:e4:30:44:36:ba:3d:66:a4: 35:cd:3c:5b:b8:b0:4c:53:b1:ab:51:9a:26:2e:49:89:d0:a7: 5b:4f:e2:70:45:7e:79:09:c1:ab:ba:db:37:b3:ac:34:03:92: 82:ce:49:da:cc:50:9a:13:48:fc:81:e1:73:c2:82:32:76:66: af:ec:14:6b:3f:4a:7d:57:64:aa:1c:5e:dc:6c:57:87:8f:72: 19:90:e1:0e:70:56:20:f2:e8:c1:2f:26:77:91:f7:f6:7e:5b: 2c:4f:d9:4e:1d:94:d3:ad:6e:65:75:e9:ea:a1:e9:2e:20:6d: be:d2:19:7d:4a:86:bb:17:91:3a:f2:a5:1f:60:24:0e:61:35: 65:46:f9:a0:4a:a4:9e:13:45:7d:3d:3f:c5:54:e5:00:10:0f: 46:97:ed:69:32:28:3b:ea:01:33:f0:85:e6:ad:cb:d4:6f:6f: 2f:de:03:be:d6:e6:82:7d:9b:4f:42:15:fe:0a:52:56:9e:c9: 90:2d:9e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1xeRNBUmWtt5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YTBhMWMwZDQtN2ZlZS00NDFjLWI3NjYtZTAwMWI0OTY4ZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJwKWHJT4AhXc2/w/iFVnPTdQ+61x0Rqv+iS uy5H9P4AZUo84EkDJjn1LiKwvkQksIBgNpijYVYxUeGNIdZHsWtn+T/3HrQIrsS9 vjJIJXny8yrnwY+vF7JZMR3/bETKbmFTjU6357PbN5SNvgfog/606Bzm+6ecvvr0 9ut/cMsY8CSW9ZSAUHPjzrYRtNeYDvdxG4OmsIU/3OQCC9bAFa+/SnX8U12x3Cnr 7TroKSVLHPQstxuvLVV/bHiByqs2LdTlITH/u3+gUCZRN4zZDA8UfPLRwcGX+aWa aHflwIZF3CtF6/5MoL6/LQujS4zJ5255wNO1MscOq9bO26oLwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyXRQOFWsqHbAy3NcqjFQhtheSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZjIwNWFiODYtMjE5YS0z MWRkLWFiOWUtNmIwOGJiODc1ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2InAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1BIUv4hFS+JxE+ZlPKrKsAq0cCb/1mnkxoLLadpL4t3Qa0lB+qZv7t z9gtmPKWnm/0fHWtfZzfbj2NhU4lwn7kMEQ2uj1mpDXNPFu4sExTsatRmiYuSYnQ p1tP4nBFfnkJwau62zezrDQDkoLOSdrMUJoTSPyB4XPCgjJ2Zq/sFGs/Sn1XZKoc XtxsV4ePchmQ4Q5wViDy6MEvJneR9/Z+WyxP2U4dlNOtbmV16eqh6S4gbb7SGX1K hrsXkTrypR9gJA5hNWVG+aBKpJ4TRX09P8VU5QAQD0aX7WkyKDvqATPwheaty9Rv by/eA77W5oJ9m09CFf4KUlaeyZAtngc= -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:47 2025 by rpki-client