$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/588ccf06-d6dc-3550-9884-cc3594283815.roa File: 588ccf06-d6dc-3550-9884-cc3594283815.roa (raw, json) Hash identifier: 9Cav1UDfsqqIlxjPM0TojAs6lnCBQFl6Fu0HWvvqZ8E= Subject key identifier: FE:FF:A3:F3:CF:C1:AB:0C:AD:8B:15:B9:34:43:31:35:78:E7:D9:01 Certificate issuer: /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483 Certificate serial: 010D0C9F4328584B7F5261D1E2420501E3B14E80 Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/588ccf06-d6dc-3550-9884-cc3594283815.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 30456 IP address blocks: 216.39.241.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:61:d1:e2:42:05:01:e3:b1:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=3f740070-5f91-40ba-8839-1d4f3a0aacad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:83:d3:16:63:c2:c7:5d:cc:8e:88:c2:ea:f9: f9:90:4b:b3:00:99:29:60:2d:b7:ba:2f:1d:b4:5c: 03:7b:5f:59:c0:70:2d:22:9c:00:d5:e8:7b:5e:f0: ce:3b:8f:56:4d:3a:44:08:8b:ed:40:0f:2a:e0:66: ee:18:37:02:cb:4c:f5:8c:d8:d3:88:42:d1:50:0a: 46:85:b3:2f:34:fc:7a:40:51:62:6b:a4:5e:73:ed: 62:d3:95:ef:03:ca:ff:26:bf:12:a3:c6:52:3a:34: 48:1b:71:77:fc:6a:54:38:f6:2b:b5:2f:c4:fe:09: 68:a9:95:d0:8a:38:c5:90:1c:be:8b:25:87:0f:31: 7b:9a:27:a0:7e:8c:72:36:eb:be:87:1a:22:ae:e6: 4e:d0:86:29:91:a8:50:16:75:08:9b:2d:20:67:9a: 14:8e:eb:25:cc:6c:2a:a3:17:c9:8b:a2:2a:1a:cd: d6:2d:8a:2b:e9:cc:57:3e:98:49:60:03:3e:e6:24: 65:38:ae:ad:20:d7:cd:4e:cf:52:12:26:58:fa:c0: e9:d8:b1:d3:48:1a:49:ad:2d:61:3f:68:d7:c2:8d: d7:08:e3:ba:93:83:91:1b:8a:5b:f8:a2:a4:a9:60: 22:a0:03:7b:ba:28:59:a7:53:b0:17:0e:e5:b7:ea: 73:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FF:A3:F3:CF:C1:AB:0C:AD:8B:15:B9:34:43:31:35:78:E7:D9:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/588ccf06-d6dc-3550-9884-cc3594283815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl X509v3 Authority Key Identifier: keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer sbgp-ipAddrBlock: critical IPv4: 216.39.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9f:e0:28:9d:85:56:47:75:85:ee:e3:91:dc:14:5e:64:4a: 66:a3:a3:61:09:9f:10:07:e6:a3:50:9b:35:10:8d:5c:32:7a: b7:fc:1e:36:4b:e0:5b:71:1c:4c:90:a0:74:7e:81:f2:a4:66: ec:58:82:11:af:5d:9a:04:81:89:be:61:33:1f:02:8d:2c:f8: 88:da:5d:6c:a6:26:80:9d:cc:13:e3:b2:c6:84:b4:98:4d:96: cd:b3:10:96:f4:75:4e:19:dc:d5:d4:29:8e:19:79:0d:a8:7c: b6:11:f7:21:d1:55:8f:ea:2e:e0:c2:a1:57:8a:3c:24:f7:e9: 12:21:e0:99:d0:42:9c:09:e8:d1:fd:70:e8:61:b9:2f:03:f4: ff:03:22:78:5c:9e:e6:8f:a0:71:97:e7:94:ed:58:ed:81:41: 32:87:45:4f:e1:bc:b8:0f:f9:bd:f4:04:5d:07:e7:d5:6b:60: 87:50:4b:34:cd:00:d6:db:dd:24:17:3a:de:a9:bd:5b:b7:38: bf:6d:11:68:5f:f6:75:52:ce:27:95:80:70:3f:50:ee:5f:f3: 54:d1:cc:1b:2b:35:48:78:39:f8:52:7f:d7:c6:cd:d1:6b:00: 00:d6:78:31:c5:73:1a:f8:d8:21:5c:9c:53:59:72:7f:73:8c: 90:eb:ee:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmHR4kIFAeOxToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFjMTllNTctYTZmNS00YzQ4LWI0ZGYtYjhkNDJkN2I3 NDgzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk M2Y3NDAwNzAtNWY5MS00MGJhLTg4MzktMWQ0ZjNhMGFhY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYPTFmPCx13MjojC6vn5kEuzAJkpYC23ui8d tFwDe19ZwHAtIpwA1eh7XvDOO49WTTpECIvtQA8q4GbuGDcCy0z1jNjTiELRUApG hbMvNPx6QFFia6Rec+1i05XvA8r/Jr8So8ZSOjRIG3F3/GpUOPYrtS/E/gloqZXQ ijjFkBy+iyWHDzF7miegfoxyNuu+hxoiruZO0IYpkahQFnUImy0gZ5oUjuslzGwq oxfJi6IqGs3WLYor6cxXPphJYAM+5iRlOK6tINfNTs9SEiZY+sDp2LHTSBpJrS1h P2jXwo3XCOO6k4ORG4pb+KKkqWAioAN7uihZp1OwFw7lt+pzkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7/o/PPwasMrYsVuTRDMTV459kBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMx OWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0MmQ3Yjc0ODMvNTg4Y2NmMDYtZDZkYy0z NTUwLTk4ODQtY2MzNTk0MjgzODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzFjMTllNTctYTZmNS00YzQ4LWI0 ZGYtYjhkNDJkN2I3NDgzLzMxYzE5ZTU3LWE2ZjUtNGM0OC1iNGRmLWI4ZDQyZDdi NzQ4My5jcmwwHwYDVR0jBBgwFoAU/pJi5eJ2pwPKSRroNOSF02JXoFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMxOWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0 MmQ3Yjc0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmf4CidhVZHdYXu45HcFF5kSmajo2EJnxAH5qNQmzUQjVwyerf8HjZL 4FtxHEyQoHR+gfKkZuxYghGvXZoEgYm+YTMfAo0s+IjaXWymJoCdzBPjssaEtJhN ls2zEJb0dU4Z3NXUKY4ZeQ2ofLYR9yHRVY/qLuDCoVeKPCT36RIh4JnQQpwJ6NH9 cOhhuS8D9P8DInhcnuaPoHGX55TtWO2BQTKHRU/hvLgP+b30BF0H59VrYIdQSzTN ANbb3SQXOt6pvVu3OL9tEWhf9nVSzieVgHA/UO5f81TRzBsrNUh4OfhSf9fGzdFr AADWeDHFcxr42CFcnFNZcn9zjJDr7gY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:22:48 2025 by rpki-client