$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/a04f4449-a649-3911-bf78-79e06327d3a8.roa File: a04f4449-a649-3911-bf78-79e06327d3a8.roa (raw, json) Hash identifier: raZTmlrUVp0B9mxxBjKH8Ksgva4NHunLOz3LQ4YNoqk= Subject key identifier: 27:20:52:A4:44:24:A6:A8:00:0C:4F:89:CB:08:56:4A:A0:E8:3D:5A Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584B92DCEA3FD3C2C71130E99E80 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/a04f4449-a649-3911-bf78-79e06327d3a8.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 11650 IP address blocks: 216.195.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:ea:3f:d3:c2:c7:11:30:e9:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=409a99e5-9f06-47ea-aa8c-f32aeb57dc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dc:99:34:85:59:ed:76:25:53:c4:d8:b5:13: 0e:f0:f1:a9:d5:ec:41:e3:3b:b7:05:a6:1e:77:4b: d0:7c:1f:61:71:2e:41:90:2c:b9:51:e7:a9:a1:d8: 12:f7:73:ba:98:19:3e:79:84:99:c4:57:27:99:bf: 90:5e:1c:c2:df:96:d7:cf:29:31:74:fd:54:09:11: cc:33:91:0c:d0:49:5d:e7:ef:89:be:14:84:96:e3: 08:b8:77:f2:11:1f:17:c7:45:40:9d:b8:af:f7:82: d6:06:9e:01:40:3f:9a:c9:fe:b2:3c:48:e9:37:3a: 72:90:0f:f2:70:1b:f4:78:c0:22:5f:a9:b4:f5:7b: 66:c3:97:b4:d9:5d:af:7e:36:31:bc:4f:db:81:b5: f5:2b:22:8b:14:1d:65:a5:e1:9e:f4:22:30:dd:d4: ea:ef:61:b5:70:06:f3:6d:43:7b:dd:9c:b8:60:fd: 7d:09:54:a5:70:c0:46:de:c5:74:20:a4:21:e8:de: 97:fc:67:9a:7c:c5:48:d5:05:1e:3a:5e:ed:0d:d7: eb:4b:82:3f:26:74:8c:fc:6c:7a:97:5b:5e:de:78: 89:7c:4b:5f:83:3a:f2:44:e4:6f:88:89:f9:d1:36: 90:56:ab:7b:37:00:bc:08:61:21:32:a6:54:f0:c0: bc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:20:52:A4:44:24:A6:A8:00:0C:4F:89:CB:08:56:4A:A0:E8:3D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/a04f4449-a649-3911-bf78-79e06327d3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 216.195.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d7:9b:cc:52:5a:df:80:fd:15:50:3b:73:1e:41:e2:06:74: 7b:fe:9e:62:2d:3c:72:71:14:bb:90:36:da:d5:f2:6d:54:f9: 2b:4a:50:38:06:57:d5:68:66:71:77:e7:f7:f1:7a:be:19:ff: 75:9a:72:34:25:9a:9e:58:08:78:f1:3d:81:9b:dc:c0:ae:80: e7:91:62:9e:87:d9:84:ca:e8:fa:7a:d6:b5:76:63:8e:2c:5f: 0a:44:9e:33:a6:1e:93:f9:58:8c:4a:8d:65:c1:6a:32:8e:1a: cd:4f:d6:fe:d7:32:34:02:e1:9d:5c:03:48:b1:f8:de:ce:9b: ce:aa:be:15:80:b3:09:a1:55:1f:ef:83:d6:3f:88:2a:01:e6: c6:e0:fe:86:1e:35:12:9e:64:6a:28:b5:c9:26:c2:91:64:e6: b6:73:6e:8b:9a:90:7c:ad:24:dc:73:72:4f:94:0a:b0:0d:ad: 94:bd:b9:b0:0d:c9:eb:e6:be:a2:f4:2e:40:dd:9b:7e:e4:02: 41:e6:68:be:5d:c3:ad:34:f0:64:b0:36:97:4d:1b:d3:26:ab: db:13:a3:db:49:07:95:62:e7:44:61:95:88:43:e4:07:9a:b3: 8d:0e:a9:0d:86:c9:f3:e8:84:1e:7b:6e:5f:35:e6:6b:16:d3: a6:37:39:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Oo/08LHETDpnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NDA5YTk5ZTUtOWYwNi00N2VhLWFhOGMtZjMyYWViNTdkYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9yZNIVZ7XYlU8TYtRMO8PGp1exB4zu3BaYe d0vQfB9hcS5BkCy5UeepodgS93O6mBk+eYSZxFcnmb+QXhzC35bXzykxdP1UCRHM M5EM0Eld5++JvhSEluMIuHfyER8Xx0VAnbiv94LWBp4BQD+ayf6yPEjpNzpykA/y cBv0eMAiX6m09Xtmw5e02V2vfjYxvE/bgbX1KyKLFB1lpeGe9CIw3dTq72G1cAbz bUN73Zy4YP19CVSlcMBG3sV0IKQh6N6X/GeafMVI1QUeOl7tDdfrS4I/JnSM/Gx6 l1te3niJfEtfgzryRORviIn50TaQVqt7NwC8CGEhMqZU8MC82QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcgUqREJKaoAAxPicsIVkqg6D1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvYTA0ZjQ0NDktYTY0OS0z OTExLWJmNzgtNzllMDYzMjdkM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2MMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/Xm8xSWt+A/RVQO3MeQeIGdHv+nmItPHJxFLuQNtrV8m1U+StKUDgG V9VoZnF35/fxer4Z/3WacjQlmp5YCHjxPYGb3MCugOeRYp6H2YTK6Pp61rV2Y44s XwpEnjOmHpP5WIxKjWXBajKOGs1P1v7XMjQC4Z1cA0ix+N7Om86qvhWAswmhVR/v g9Y/iCoB5sbg/oYeNRKeZGootckmwpFk5rZzbouakHytJNxzck+UCrANrZS9ubAN yevmvqL0LkDdm37kAkHmaL5dw6008GSwNpdNG9Mmq9sTo9tJB5Vi50RhlYhD5Aea s40OqQ2GyfPohB57bl815msW06Y3OWU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:08 2025 by rpki-client