$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ffdf3816-c1ad-378b-8900-97d4ff595436.roa File: ffdf3816-c1ad-378b-8900-97d4ff595436.roa (raw, json) Hash identifier: OFOU4N7ucMNS7x8CXS6FIUpHbN4uH6xthUEwB8M8Sdo= Subject key identifier: 51:2E:60:26:42:A9:CD:B8:5D:DA:05:6A:D2:40:65:C3:3A:90:0E:D8 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B758C98ECFEC69536B25C6900 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ffdf3816-c1ad-378b-8900-97d4ff595436.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 55246 IP address blocks: 216.110.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:98:ec:fe:c6:95:36:b2:5c:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=a6e71a7e-7e57-4da7-beb3-904761c3f9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a2:d4:cb:99:96:18:ee:e4:53:81:3f:a2:95: 62:1e:60:8f:6c:fd:85:e8:54:9c:ca:1b:fa:e7:34: 2e:0b:ce:fa:90:6b:52:5c:e9:09:c5:7f:53:02:02: c4:c1:10:ce:6b:fd:1c:ae:57:7f:b8:27:4b:46:74: e4:cc:ab:86:73:c7:a4:89:dd:e8:dd:9e:cf:77:e9: e1:0e:3b:a1:39:8b:9f:d6:a7:49:51:a4:50:af:1c: bc:06:94:be:15:4d:77:56:0c:28:f6:b4:1e:09:54: e5:36:08:ed:72:67:06:72:1b:e5:3b:8f:d7:44:c6: cd:de:d6:2e:40:54:05:08:de:61:eb:ca:a5:0f:f2: 44:bd:8c:7b:92:0c:5e:75:52:bf:77:da:a6:47:d5: 3f:70:fc:e0:a1:10:32:f0:59:97:60:87:33:1d:4a: 6a:24:4c:ce:a7:0c:57:63:29:1b:7f:e3:d5:71:95: ed:29:e1:02:46:ad:c5:35:d2:0e:59:81:6e:c7:d0: ae:35:fb:c0:96:a8:e6:93:08:a5:da:02:72:3d:c4: a7:54:5f:ee:e5:f9:13:ea:3a:2c:71:fb:19:e5:ed: 89:f5:aa:c9:50:d5:a5:55:9f:83:2d:b3:67:65:37: 6b:61:04:90:e5:aa:a7:67:8e:c3:0a:af:ef:0c:02: fc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2E:60:26:42:A9:CD:B8:5D:DA:05:6A:D2:40:65:C3:3A:90:0E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ffdf3816-c1ad-378b-8900-97d4ff595436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 216.110.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:45:b3:84:bc:10:3b:db:4e:70:66:9c:d6:1c:e9:d8:92:1f: c2:bb:91:1f:84:1a:66:34:7f:ac:26:dc:48:aa:c2:eb:c2:77: f6:c3:bc:e2:7e:47:9d:f5:fb:fd:1d:ca:72:da:93:6b:d8:59: d1:ed:64:70:d2:56:a4:84:4a:f4:a6:4f:08:02:9f:5f:6a:ea: 54:94:39:84:d8:ab:bb:e7:80:e5:bd:25:05:43:0e:ff:15:d9: 78:0c:4b:fe:fd:a5:40:e0:88:ce:71:0f:7f:59:1b:68:c2:a9: 6d:25:b6:6d:a1:05:ba:24:9d:36:3a:b4:80:3d:b2:16:80:40: af:2b:a2:5b:1c:45:3d:7f:34:07:df:40:38:a0:70:7b:3f:03: c9:b1:c1:cd:f5:86:5a:51:70:2f:0d:b7:4a:ba:3d:3f:8f:bf: c2:03:d7:58:63:77:1d:91:df:ab:97:0a:39:db:9e:48:66:f3: 71:98:70:b4:e1:8b:20:4f:76:01:2d:a6:0c:49:6b:e3:90:65: c2:0e:9a:9a:82:a2:09:71:30:01:3f:14:77:dc:2f:29:df:92: bf:bc:25:37:42:5b:7f:fe:67:7a:6a:06:1d:db:e8:05:99:a5: 3f:b4:a5:0c:72:14:f1:1c:d0:eb:4f:2e:06:aa:94:a5:9a:ca: 29:c2:2e:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJjs/saVNrJcaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk YTZlNzFhN2UtN2U1Ny00ZGE3LWJlYjMtOTA0NzYxYzNmOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqLUy5mWGO7kU4E/opViHmCPbP2F6FScyhv6 5zQuC876kGtSXOkJxX9TAgLEwRDOa/0crld/uCdLRnTkzKuGc8ekid3o3Z7Pd+nh DjuhOYuf1qdJUaRQrxy8BpS+FU13Vgwo9rQeCVTlNgjtcmcGchvlO4/XRMbN3tYu QFQFCN5h68qlD/JEvYx7kgxedVK/d9qmR9U/cPzgoRAy8FmXYIczHUpqJEzOpwxX Yykbf+PVcZXtKeECRq3FNdIOWYFux9CuNfvAlqjmkwil2gJyPcSnVF/u5fkT6jos cfsZ5e2J9arJUNWlVZ+DLbNnZTdrYQSQ5aqnZ47DCq/vDAL8qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEuYCZCqc24XdoFatJAZcM6kA7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZmZkZjM4MTYtYzFhZC0z NzhiLTg5MDAtOTdkNGZmNTk1NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2G7KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFFs4S8EDvbTnBmnNYc6diSH8K7kR+EGmY0f6wm3EiqwuvCd/bDvOJ+ R531+/0dynLak2vYWdHtZHDSVqSESvSmTwgCn19q6lSUOYTYq7vngOW9JQVDDv8V 2XgMS/79pUDgiM5xD39ZG2jCqW0ltm2hBboknTY6tIA9shaAQK8rolscRT1/NAff QDigcHs/A8mxwc31hlpRcC8Nt0q6PT+Pv8ID11hjdx2R36uXCjnbnkhm83GYcLTh iyBPdgEtpgxJa+OQZcIOmpqCoglxMAE/FHfcLynfkr+8JTdCW3/+Z3pqBh3b6AWZ pT+0pQxyFPEc0OtPLgaqlKWayinCLmk= -----END CERTIFICATE-----Generated at Tue Oct 21 00:01:06 2025 by rpki-client