$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa File: b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa (raw, json) Hash identifier: xwOJ7rghoZuePNIx5E3lHeUYXZgcwZOdIvIM8suJpWs= Subject key identifier: 4A:B0:4B:01:F9:C3:8C:B4:11:E0:28:0F:11:54:26:2B:04:92:58:0B Certificate issuer: /CN=04c216c1-5924-4a66-9346-a1f215800ceb Certificate serial: 010D0C9F4328584B5141BA64574953A00F17C020 Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 399889 IP address blocks: 216.170.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ba:64:57:49:53:a0:0f:17:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=ccef2a25-657d-4b7f-91a1-37e0ec20641d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:57:35:96:51:da:2a:fa:3a:0c:4c:72:75:71: ed:bb:db:24:b2:89:c8:90:a1:4c:32:05:96:dd:16: 66:35:ba:86:fb:b4:65:3f:9d:e3:0b:8b:bb:2a:09: 45:15:a5:47:ac:5e:42:66:84:51:ac:a3:67:0a:fd: 29:a3:4d:b2:59:fc:5e:69:84:bd:d5:a3:11:23:c6: 12:44:9b:88:ec:1a:63:3a:fb:93:30:8b:ad:e2:4f: ae:10:c0:0a:1c:ac:4a:47:6c:b4:03:6b:5d:40:e4: 94:e4:ac:d2:8d:61:77:89:22:5b:4b:11:8d:aa:8b: 1c:0b:65:fa:db:0e:a0:f2:38:48:e4:dd:0e:e1:a6: 9f:fe:01:5a:22:9f:62:2c:68:c7:36:bd:9a:45:32: 48:4c:b6:8a:37:ae:7f:fc:f2:f4:29:12:bd:bd:d0: d0:75:8d:ef:c3:b5:b3:9c:97:15:4b:3f:89:0c:e6: 2c:e5:5b:31:40:9e:73:96:cf:7a:e0:cd:f3:e3:e3: b9:47:a5:01:a6:f7:1f:64:73:f6:91:74:57:12:61: 20:33:93:01:1e:99:2b:35:d4:b2:6a:c9:60:03:a5: e2:40:64:93:77:38:70:bd:bf:4b:99:01:a3:b8:cb: c8:2d:7a:60:56:af:72:24:b3:55:cd:34:c0:ed:8e: f0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B0:4B:01:F9:C3:8C:B4:11:E0:28:0F:11:54:26:2B:04:92:58:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl X509v3 Authority Key Identifier: keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer sbgp-ipAddrBlock: critical IPv4: 216.170.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:83:da:22:0e:e7:6d:29:3a:a4:a0:03:29:82:d6:71:21:63: 10:6b:ee:f4:fd:48:57:96:d5:86:d6:56:cf:19:72:cb:58:77: 82:d7:c7:48:86:98:f8:a4:4e:16:c3:1a:75:61:18:e3:4e:89: 80:3b:f4:cc:55:2e:3f:81:a3:65:c5:77:92:6a:99:e3:da:c8: 40:f8:4a:de:eb:44:b4:18:e6:69:a4:fa:37:a9:e6:91:92:bc: c1:42:10:29:3a:0a:27:83:e6:1c:7e:56:94:61:20:d7:08:d5: a6:ad:01:35:37:6e:7e:dc:a9:09:4c:42:8b:a1:cf:85:98:19: 94:58:5a:f1:4d:8e:90:62:37:61:ac:93:0a:ba:7e:29:ef:14: 2f:80:d1:44:03:a0:4a:39:02:cd:a3:42:5f:2a:50:41:69:f8: 83:17:eb:cf:94:fd:ce:9c:9b:f0:d0:24:d0:8e:20:3c:df:f1: 83:0d:a7:28:af:6b:ce:26:4b:0f:b3:fc:55:06:45:f8:02:4b: a0:f9:b9:29:4e:7d:48:35:fd:85:69:3b:73:6f:98:cc:9d:d1: 5c:9b:be:96:df:2a:5d:86:a2:86:a7:37:f0:c1:54:9f:bc:dc: a6:21:28:b6:0d:b0:0b:40:c7:50:05:f8:fa:3f:d5:90:51:fe: 56:16:6a:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQbpkV0lToA8XwCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMjE2YzEtNTkyNC00YTY2LTkzNDYtYTFmMjE1ODAw Y2ViMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk Y2NlZjJhMjUtNjU3ZC00YjdmLTkxYTEtMzdlMGVjMjA2NDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1c1llHaKvo6DExydXHtu9sksonIkKFMMgWW 3RZmNbqG+7RlP53jC4u7KglFFaVHrF5CZoRRrKNnCv0po02yWfxeaYS91aMRI8YS RJuI7BpjOvuTMIut4k+uEMAKHKxKR2y0A2tdQOSU5KzSjWF3iSJbSxGNqoscC2X6 2w6g8jhI5N0O4aaf/gFaIp9iLGjHNr2aRTJITLaKN65//PL0KRK9vdDQdY3vw7Wz nJcVSz+JDOYs5VsxQJ5zls964M3z4+O5R6UBpvcfZHP2kXRXEmEgM5MBHpkrNdSy aslgA6XiQGSTdzhwvb9LmQGjuMvILXpgVq9yJLNVzTTA7Y7wbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqwSwH5w4y0EeAoDxFUJisEklgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGMy MTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYyMTU4MDBjZWIvYjRhYmFmNTEtNDJlMi0z OTRkLTgwZTEtYmM2M2Y1NGMwZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRjMjE2YzEtNTkyNC00YTY2LTkz NDYtYTFmMjE1ODAwY2ViLzA0YzIxNmMxLTU5MjQtNGE2Ni05MzQ2LWExZjIxNTgw MGNlYi5jcmwwHwYDVR0jBBgwFoAUmLhMbN09mwrXBph9YXSVqxVUBDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGMyMTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYy MTU4MDBjZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2D2iIO520pOqSgAymC1nEhYxBr7vT9SFeW1YbWVs8ZcstYd4LXx0iG mPikThbDGnVhGONOiYA79MxVLj+Bo2XFd5JqmePayED4St7rRLQY5mmk+jep5pGS vMFCECk6CieD5hx+VpRhINcI1aatATU3bn7cqQlMQouhz4WYGZRYWvFNjpBiN2Gs kwq6finvFC+A0UQDoEo5As2jQl8qUEFp+IMX68+U/c6cm/DQJNCOIDzf8YMNpyiv a84mSw+z/FUGRfgCS6D5uSlOfUg1/YVpO3NvmMyd0VybvpbfKl2GooanN/DBVJ+8 3KYhKLYNsAtAx1AF+Po/1ZBR/lYWak8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:16 2025 by rpki-client