$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3aa7e7d9-bddd-37c8-acff-d780ef9f600b.roa File: 3aa7e7d9-bddd-37c8-acff-d780ef9f600b.roa (raw, json) Hash identifier: b9xt7O+VCJqboIqidhNGTXHe6xojIxLnzLs/wewBG98= Subject key identifier: CE:B8:D1:69:46:D4:A6:62:16:A8:3B:51:85:DF:A9:7B:4E:02:ED:D4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B87B23E1FD3E77593EA166480 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3aa7e7d9-bddd-37c8-acff-d780ef9f600b.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 5065 IP address blocks: 216.231.32.0/24 maxlen: 24 216.231.33.0/24 maxlen: 24 216.231.34.0/24 maxlen: 24 216.231.35.0/24 maxlen: 24 216.231.36.0/24 maxlen: 24 216.231.37.0/24 maxlen: 24 216.231.38.0/24 maxlen: 24 216.231.39.0/24 maxlen: 24 216.231.40.0/24 maxlen: 24 216.231.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:3e:1f:d3:e7:75:93:ea:16:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=c09c7c99-8d5a-40cd-a294-ae26b94dbd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fb:91:b1:50:8a:76:75:ef:d9:6d:52:b6:8b: 7a:b2:8a:e3:ea:c5:84:81:8f:f2:95:24:f4:de:d4: 95:a3:08:4d:e1:83:78:2f:55:d7:e4:f1:f2:5f:f2: 25:14:b9:38:2a:51:24:20:ce:1e:35:62:32:c1:3b: b0:fb:57:89:57:7d:2b:c1:cc:32:b1:f3:d9:4b:01: c9:24:9e:62:e0:c6:1e:e5:f9:40:f4:d6:69:a3:2b: 65:42:cf:2d:82:7d:b0:7f:df:df:d9:0f:a7:d9:07: 2e:e8:56:5e:20:10:bd:30:4b:0f:ad:e3:50:43:24: eb:9e:60:ec:a5:64:3a:dc:a4:60:86:0b:6f:b9:13: d1:8c:13:b7:e2:9b:82:a9:1e:f9:d7:a6:60:e4:24: 59:04:7d:42:71:0a:bd:e5:f4:90:6d:28:4b:c2:8c: 52:be:91:67:c1:a6:46:09:a8:80:e1:0d:2b:06:d6: ea:c4:ce:d9:3b:84:8d:30:51:4e:ec:97:ed:59:0e: e6:e8:3a:ca:35:b8:ef:40:3b:57:da:9a:3d:b5:1d: 46:d6:be:cd:5f:d0:13:1b:9c:95:62:4c:2b:2d:a0: 7d:fd:c1:97:51:3d:4a:39:b8:91:2d:b6:53:03:bb: 18:e8:58:13:07:17:0e:6b:87:9c:84:0d:f4:8a:55: d0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B8:D1:69:46:D4:A6:62:16:A8:3B:51:85:DF:A9:7B:4E:02:ED:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3aa7e7d9-bddd-37c8-acff-d780ef9f600b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.231.32.0-216.231.40.255 216.231.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c1:71:d9:8e:92:62:77:33:fb:87:e9:05:3e:9d:6b:be:33: 4c:b4:1f:f1:50:2f:40:cb:34:2c:b3:ca:3b:51:8c:5f:9d:f8: 04:89:27:24:d2:7c:51:22:0d:20:73:75:73:4e:74:51:f1:49: 59:5a:e6:3d:ea:86:16:97:96:f9:1a:81:52:e7:42:82:18:bf: 41:43:d6:be:fd:28:c5:af:d5:8b:aa:71:00:9d:37:5b:06:82: b4:d2:fa:5f:dd:5b:fd:1d:72:bc:56:11:c0:d9:bb:44:d9:e8: 39:09:82:c5:61:18:44:cb:05:6b:9b:d5:e4:19:05:e5:18:9d: a5:2d:19:4f:6a:09:25:ce:8c:c5:c8:5d:57:06:11:de:db:a3: 31:6b:ed:52:9c:c0:c9:0d:bd:c1:bb:82:aa:1b:3e:78:81:8f: ca:74:b2:e9:9a:aa:82:10:98:18:b0:f2:26:62:77:67:f2:4f: 72:cc:c3:c9:e1:67:4e:76:07:00:f2:f2:e1:e9:b3:ce:d6:df: 15:2b:66:ef:ea:86:0f:94:18:dd:66:f6:23:02:ad:17:6e:4e: a9:06:e7:52:5e:4b:7a:52:3b:9a:73:96:f0:ba:7b:9e:99:54: 86:2a:bf:39:21:bb:c3:b4:f1:ce:59:17:73:88:4e:9a:07:a1: 8e:17:d1:11 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEuHsj4f0+d1k+oWZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk YzA5YzdjOTktOGQ1YS00MGNkLWEyOTQtYWUyNmI5NGRiZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfuRsVCKdnXv2W1Stot6sorj6sWEgY/ylST0 3tSVowhN4YN4L1XX5PHyX/IlFLk4KlEkIM4eNWIywTuw+1eJV30rwcwysfPZSwHJ JJ5i4MYe5flA9NZpoytlQs8tgn2wf9/f2Q+n2Qcu6FZeIBC9MEsPreNQQyTrnmDs pWQ63KRghgtvuRPRjBO34puCqR7516Zg5CRZBH1CcQq95fSQbShLwoxSvpFnwaZG CaiA4Q0rBtbqxM7ZO4SNMFFO7JftWQ7m6DrKNbjvQDtX2po9tR1G1r7NX9ATG5yV YkwrLaB9/cGXUT1KObiRLbZTA7sY6FgTBxcOa4echA30ilXQmQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFM640WlG1KZiFqg7UYXfqXtOAu3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2FhN2U3ZDktYmRkZC0z N2M4LWFjZmYtZDc4MGVmOWY2MDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAXY5yAD BADY5ygDBADY5yowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEADMFx2Y6SYncz+4fpBT6da74zTLQf8VAvQMs0 LLPKO1GMX534BIknJNJ8USINIHN1c050UfFJWVrmPeqGFpeW+RqBUudCghi/QUPW vv0oxa/Vi6pxAJ03WwaCtNL6X91b/R1yvFYRwNm7RNnoOQmCxWEYRMsFa5vV5BkF 5RidpS0ZT2oJJc6MxchdVwYR3tujMWvtUpzAyQ29wbuCqhs+eIGPynSy6ZqqghCY GLDyJmJ3Z/JPcszDyeFnTnYHAPLy4emzztbfFStm7+qGD5QY3Wb2IwKtF25OqQbn Ul5LelI7mnOW8Lp7nplUhiq/OSG7w7TxzlkXc4hOmgehjhfREQ== -----END CERTIFICATE-----Generated at Mon Oct 20 13:59:55 2025 by rpki-client