$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e12ed91d-35cb-3699-9ab6-1ebc85962407.roa File: e12ed91d-35cb-3699-9ab6-1ebc85962407.roa (raw, json) Hash identifier: hSRU4hV8iLs81CJ+MvRfZUSNUduKY7A1auzaxBC0CEE= Subject key identifier: AD:52:05:A6:DA:37:63:99:A8:2D:9D:B4:07:59:9C:C5:B5:51:0A:A1 Certificate issuer: /CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Certificate serial: 010D0C9F4328584B636741A6668107A1544D7900 Authority key identifier: 8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e12ed91d-35cb-3699-9ab6-1ebc85962407.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 401427 IP address blocks: 216.152.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:41:a6:66:81:07:a1:54:4d:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=bfd1000e-40d4-4496-8d57-4cf7b90b901c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:57:8a:49:04:82:af:03:a8:f6:28:08:2a:72: 90:6f:a8:7b:db:c7:ff:50:ac:ad:25:9d:a1:74:d1: 51:cc:44:48:ce:fd:3c:27:be:25:4e:a7:f0:89:7d: dd:50:f7:8d:fd:00:22:56:6b:c4:50:c9:68:41:e0: a8:37:0b:9d:43:0d:3b:e2:90:7c:5b:59:d4:fd:10: e7:1f:6a:3e:5c:90:32:7a:10:a8:c0:a6:97:9a:11: 75:ee:3f:c5:f4:72:44:b9:92:d0:26:a8:23:85:49: 5b:ea:9f:21:fc:2e:53:5d:cf:5f:da:24:43:29:1a: 89:49:3a:22:4e:7b:a3:01:4a:7b:3d:b9:c9:23:66: 65:22:21:4c:62:a9:99:98:e6:ec:2c:cd:78:35:df: b1:a4:75:f5:14:a7:8d:04:31:38:03:d2:cd:c4:af: e3:86:e1:bf:fb:19:64:54:d7:83:5d:c8:4a:50:cb: a7:12:24:d3:cb:d0:88:c3:a0:f5:f4:aa:10:5b:89: 1c:d9:34:4c:cb:d5:a5:13:92:1a:62:80:1f:56:0f: b9:02:d7:79:7d:f0:a7:4b:3f:65:81:98:49:18:5c: 2b:7c:27:42:99:47:4f:2f:f1:2c:33:20:82:c2:64: c2:62:05:69:cc:09:a0:c2:8f:39:80:7b:47:aa:e6: 80:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:52:05:A6:DA:37:63:99:A8:2D:9D:B4:07:59:9C:C5:B5:51:0A:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e12ed91d-35cb-3699-9ab6-1ebc85962407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl X509v3 Authority Key Identifier: keyid:8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer sbgp-ipAddrBlock: critical IPv4: 216.152.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:0d:60:45:fa:e0:03:d2:a5:54:87:85:27:d0:9a:71:34:55: 4a:ce:df:18:d2:67:ef:a0:f0:ac:94:3a:17:b5:41:1b:a8:13: af:cc:12:64:0e:a8:7b:4f:71:de:ae:f2:f2:46:e9:87:22:0f: 2f:22:3f:39:3e:29:26:df:c8:bc:8d:f0:93:1e:4e:f2:53:09: f6:2e:5f:b0:28:84:71:1a:83:fd:fe:79:90:8c:c8:76:09:0c: ce:27:57:66:7d:ba:b8:26:0e:37:ed:54:8e:75:91:74:fc:a9: a3:1d:b0:dd:fa:7f:7c:20:17:fd:13:01:4c:5f:52:18:3b:d6: 25:67:4c:ae:ed:12:d5:13:02:e0:7e:a8:0f:c4:3f:fc:44:e6: 31:d3:4c:14:d3:30:b4:f6:19:0b:56:5c:95:cd:a4:6d:f6:06: 34:0c:ed:53:b5:0f:db:fe:a4:fc:0d:7c:08:6e:ff:93:10:87: fd:c8:90:77:58:5d:d8:e3:63:94:7e:d1:a4:be:66:5a:b0:a8: 09:c1:56:42:ea:31:f0:57:ae:99:cd:6c:3f:82:46:61:9c:d6: c0:c6:f2:72:a8:a9:23:92:e5:61:64:0b:6c:36:ad:d9:7c:33: 5f:8f:1a:42:fa:e5:08:ba:8c:75:db:45:af:e8:a1:ef:96:3b: 7c:46:48:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0GmZoEHoVRNeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNlNWY4ZjgtN2Q2Zi00ZDQzLWExY2EtNDc3ZWM5MGE1 YTNjMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YmZkMTAwMGUtNDBkNC00NDk2LThkNTctNGNmN2I5MGI5MDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmleKSQSCrwOo9igIKnKQb6h728f/UKytJZ2h dNFRzERIzv08J74lTqfwiX3dUPeN/QAiVmvEUMloQeCoNwudQw074pB8W1nU/RDn H2o+XJAyehCowKaXmhF17j/F9HJEuZLQJqgjhUlb6p8h/C5TXc9f2iRDKRqJSToi TnujAUp7PbnJI2ZlIiFMYqmZmObsLM14Nd+xpHX1FKeNBDE4A9LNxK/jhuG/+xlk VNeDXchKUMunEiTTy9CIw6D19KoQW4kc2TRMy9WlE5IaYoAfVg+5Atd5ffCnSz9l gZhJGFwrfCdCmUdPL/EsMyCCwmTCYgVpzAmgwo85gHtHquaACwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1SBabaN2OZqC2dtAdZnMW1UQqhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1 ZjhmOC03ZDZmLTRkNDMtYTFjYS00NzdlYzkwYTVhM2MvZTEyZWQ5MWQtMzVjYi0z Njk5LTlhYjYtMWViYzg1OTYyNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNlNWY4ZjgtN2Q2Zi00ZDQzLWEx Y2EtNDc3ZWM5MGE1YTNjL2UzZTVmOGY4LTdkNmYtNGQ0My1hMWNhLTQ3N2VjOTBh NWEzYy5jcmwwHwYDVR0jBBgwFoAUjjXzWJ01FAK9y0jrYzm4j/XCZ8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1ZjhmOC03ZDZmLTRkNDMtYTFjYS00Nzdl YzkwYTVhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2JhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQNYEX64APSpVSHhSfQmnE0VUrO3xjSZ++g8KyUOhe1QRuoE6/MEmQO qHtPcd6u8vJG6YciDy8iPzk+KSbfyLyN8JMeTvJTCfYuX7AohHEag/3+eZCMyHYJ DM4nV2Z9urgmDjftVI51kXT8qaMdsN36f3wgF/0TAUxfUhg71iVnTK7tEtUTAuB+ qA/EP/xE5jHTTBTTMLT2GQtWXJXNpG32BjQM7VO1D9v+pPwNfAhu/5MQh/3IkHdY XdjjY5R+0aS+ZlqwqAnBVkLqMfBXrpnNbD+CRmGc1sDG8nKoqSOS5WFkC2w2rdl8 M1+PGkL65Qi6jHXbRa/ooe+WO3xGSKA= -----END CERTIFICATE-----Generated at Mon Oct 20 11:06:53 2025 by rpki-client