$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/a40d3bd1-55fe-3d2d-9718-22326d30b380.roa File: a40d3bd1-55fe-3d2d-9718-22326d30b380.roa (raw, json) Hash identifier: prUJ6RoHyUyp++Hpm4CBFGAArO+KXjiaLbNV70H5F9I= Subject key identifier: F5:93:65:5D:42:19:10:0C:DA:67:14:B3:D8:8F:C4:73:E0:3D:38:3A Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584B8917724D53773300500DFE80 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/a40d3bd1-55fe-3d2d-9718-22326d30b380.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 394391 IP address blocks: 216.210.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:72:4d:53:77:33:00:50:0d:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=42faf1d2-f598-47aa-b7c1-bc128b97db97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:1f:a5:3d:e8:41:1a:cd:c7:ee:45:28:40: e9:ca:cc:cf:2c:a2:87:36:3b:80:16:ee:0c:a5:df: ff:e0:1c:52:78:2e:2b:17:96:a9:76:71:65:20:a0: 34:3b:e6:e8:aa:ae:df:d4:45:26:ad:74:61:2c:9b: b1:74:db:31:8b:b8:6f:dc:9f:45:3c:81:5c:0b:86: 5c:12:66:43:40:d5:68:d2:3e:9f:85:a6:69:01:08: 61:04:6a:a3:ca:2a:4e:5f:f3:e5:a1:83:41:74:e9: 75:1b:83:80:4e:78:f8:33:d0:de:43:62:7b:1d:ef: fb:25:e8:14:4b:3b:94:24:6d:c7:2c:43:04:b5:0c: 39:8c:a8:30:2c:39:d1:01:f7:ed:74:ad:e9:b7:db: 90:db:17:fd:fc:5e:1d:cd:06:b2:b8:e5:a8:42:8f: b8:73:b7:d6:9f:60:df:71:ac:9b:42:bb:9e:1e:fa: fe:ed:07:26:4d:cb:8f:44:8e:10:95:fb:61:24:6f: 10:c2:0b:5d:f0:fc:bf:3b:6b:47:7a:a9:df:2c:dc: 51:3a:47:6a:c3:3f:fb:55:54:e6:4e:ed:47:d8:e1: 9e:67:62:d6:78:2e:ff:b5:c1:4d:f4:1b:6e:d7:5b: 34:5d:6e:61:65:76:4f:9e:df:25:fa:b2:9b:60:60: e9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:93:65:5D:42:19:10:0C:DA:67:14:B3:D8:8F:C4:73:E0:3D:38:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/a40d3bd1-55fe-3d2d-9718-22326d30b380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 216.210.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:fb:99:fa:93:ef:59:4e:81:05:fa:bd:07:03:ee:7f:9c:d8: 38:cf:13:11:40:02:3f:5e:14:6e:ba:a6:fa:a6:fc:64:23:d8: c5:c6:61:fc:3c:80:76:c0:df:dd:2e:6b:e4:5c:bc:b6:13:8d: bf:17:9e:7c:1d:60:c3:ef:0f:e7:54:fc:2b:82:11:d9:55:c3: e4:8d:d1:33:d0:a3:3a:57:bf:d6:65:1f:d8:38:8f:27:bf:26: 41:af:13:85:6a:a0:33:60:4b:fa:66:3c:88:30:fb:f9:11:fc: 66:7f:93:95:c2:03:35:b4:44:21:82:35:76:31:7c:eb:3d:1b: ec:fc:88:85:d6:be:a9:ff:4a:fa:95:01:f2:27:5e:a9:f2:b6: 89:f4:64:89:4a:3d:b4:3d:8a:2f:36:03:2c:33:9c:29:04:a7: 51:33:14:71:bb:37:d2:b0:35:13:ed:96:01:1b:9f:4a:4a:97: f9:26:fb:2b:48:ae:42:e9:ec:2d:00:dc:16:78:cd:7e:73:ff: 75:6b:4d:7d:85:f2:47:37:48:97:bd:fb:58:5d:fd:ba:1a:42: ad:a7:27:32:54:cd:c4:b6:d9:c4:89:e3:01:29:a2:41:d9:82: 81:d9:51:93:d7:bd:4f:7e:53:6a:be:dd:5b:72:93:4f:48:42: 96:d9:20:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3JNU3czAFAN/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NDJmYWYxZDItZjU5OC00N2FhLWI3YzEtYmMxMjhiOTdkYjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodkfpT3oQRrNx+5FKEDpyszPLKKHNjuAFu4M pd//4BxSeC4rF5apdnFlIKA0O+boqq7f1EUmrXRhLJuxdNsxi7hv3J9FPIFcC4Zc EmZDQNVo0j6fhaZpAQhhBGqjyipOX/PloYNBdOl1G4OATnj4M9DeQ2J7He/7JegU SzuUJG3HLEMEtQw5jKgwLDnRAfftdK3pt9uQ2xf9/F4dzQayuOWoQo+4c7fWn2Df caybQrueHvr+7QcmTcuPRI4QlfthJG8Qwgtd8Py/O2tHeqnfLNxROkdqwz/7VVTm Tu1H2OGeZ2LWeC7/tcFN9Btu11s0XW5hZXZPnt8l+rKbYGDp2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWTZV1CGRAM2mcUs9iPxHPgPTg6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvYTQwZDNiZDEtNTVmZS0z ZDJkLTk3MTgtMjIzMjZkMzBiMzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2NIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn7mfqT71lOgQX6vQcD7n+c2DjPExFAAj9eFG66pvqm/GQj2MXGYfw8 gHbA390ua+RcvLYTjb8XnnwdYMPvD+dU/CuCEdlVw+SN0TPQozpXv9ZlH9g4jye/ JkGvE4VqoDNgS/pmPIgw+/kR/GZ/k5XCAzW0RCGCNXYxfOs9G+z8iIXWvqn/SvqV AfInXqnyton0ZIlKPbQ9ii82AywznCkEp1EzFHG7N9KwNRPtlgEbn0pKl/km+ytI rkLp7C0A3BZ4zX5z/3VrTX2F8kc3SJe9+1hd/boaQq2nJzJUzcS22cSJ4wEpokHZ goHZUZPXvU9+U2q+3Vtyk09IQpbZIKU= -----END CERTIFICATE-----Generated at Tue Oct 21 08:18:04 2025 by rpki-client