$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3da7d4a3-f3e9-33a5-8ad8-5a42dbf51b50.roa File: 3da7d4a3-f3e9-33a5-8ad8-5a42dbf51b50.roa (raw, json) Hash identifier: CXV+tc5NuoyvYzFNHNTu7G7T6rv2dmXCpexnWiWiyd4= Subject key identifier: 2D:C8:68:94:63:6A:43:AD:83:57:5C:05:2A:7E:D6:FD:FE:31:4E:70 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B87B23FA3F4348753E5FAF880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3da7d4a3-f3e9-33a5-8ad8-5a42dbf51b50.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 5065 IP address blocks: 216.132.192.0/24 maxlen: 24 216.132.193.0/24 maxlen: 24 216.132.194.0/24 maxlen: 24 216.132.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:3f:a3:f4:34:87:53:e5:fa:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=ffdf8216-3365-45a9-a317-eb407406de6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6c:55:d4:90:12:94:3f:4f:08:70:ea:28:54: 6a:38:ce:71:7a:ec:75:d4:4a:a1:a7:eb:de:6e:be: a4:c8:50:05:be:e9:2e:d0:6a:a2:8b:78:b4:18:da: 1a:fc:1e:58:58:5a:d4:53:fe:8e:e9:46:c0:2e:e5: 0c:f1:8c:33:fd:06:88:a7:2b:2f:14:e7:f7:49:f3: 65:d5:d3:09:72:d6:25:0c:67:30:e8:36:06:6b:03: cb:7d:e9:58:3f:c4:dc:43:cb:0e:85:bd:2d:34:34: 67:ea:ed:88:de:6b:2a:c5:1b:39:dc:40:ff:2a:a2: 24:25:87:36:0c:fa:08:fd:21:c4:af:79:da:83:8c: 41:b4:31:a2:f9:91:d0:aa:39:bd:20:48:0d:b7:8f: 30:c3:d5:c7:f4:dd:0e:df:fd:63:56:a1:91:d8:b3: f6:15:54:3e:d1:4e:57:03:63:26:37:d1:6f:8f:66: 76:52:ad:15:b8:4d:6f:3a:df:eb:e0:42:f9:74:ee: 31:97:c2:5b:0a:7e:94:c2:dd:53:96:64:fa:4c:00: e4:21:e1:39:4c:5a:e6:70:cc:8b:10:26:1c:ab:b1: b2:c1:fd:0d:ea:c9:d9:52:29:d4:ec:20:bb:7c:05: 71:1a:27:bd:0d:c4:d9:aa:66:bd:d4:ba:b0:21:7b: fc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C8:68:94:63:6A:43:AD:83:57:5C:05:2A:7E:D6:FD:FE:31:4E:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3da7d4a3-f3e9-33a5-8ad8-5a42dbf51b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:dd:3e:46:df:37:e1:d5:04:67:6f:1c:76:30:e1:17:53:22: d3:17:48:7d:11:00:72:25:e4:07:3e:bb:0c:52:e9:89:f8:e9: f4:6a:51:0a:87:35:cf:13:fe:9e:95:9a:d9:71:d8:00:dd:84: a9:07:a4:42:49:75:7a:f8:03:49:39:1e:5a:1f:34:bf:1e:8c: bb:f1:f6:e6:27:4b:41:4f:69:95:7e:1b:81:90:93:f1:30:bf: 8a:f5:2f:5a:90:97:03:f7:bc:91:10:47:b7:e3:57:3a:d0:49: fb:3f:fd:42:ba:55:f8:09:a6:42:ab:80:78:b9:b1:fe:ef:b7: 56:8a:b9:e9:2c:b3:af:ad:1b:06:1b:29:a7:a0:8b:4e:91:2c: 6e:04:a7:63:db:bb:b2:b9:d6:2b:0f:1f:8a:46:8e:63:88:09: b1:4f:dc:7b:16:6e:57:b1:12:8a:fa:c0:29:4a:7b:48:21:84: c0:82:e9:a2:f7:b7:ef:88:c8:ab:ba:9e:69:9b:10:62:48:39: 25:82:eb:19:70:7e:9a:2d:fc:e0:e3:18:b7:b8:68:2c:4a:98: 32:05:c2:56:19:db:8d:d0:e5:85:f7:39:4b:2c:1f:38:96:72: e4:ae:db:32:3e:85:34:a1:a2:42:e3:42:13:78:2d:14:f2:32: d0:59:ff:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsj+j9DSHU+X6+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZmZkZjgyMTYtMzM2NS00NWE5LWEzMTctZWI0MDc0MDZkZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWxV1JASlD9PCHDqKFRqOM5xeux11Eqhp+ve br6kyFAFvuku0Gqii3i0GNoa/B5YWFrUU/6O6UbALuUM8Ywz/QaIpysvFOf3SfNl 1dMJctYlDGcw6DYGawPLfelYP8TcQ8sOhb0tNDRn6u2I3msqxRs53ED/KqIkJYc2 DPoI/SHEr3nag4xBtDGi+ZHQqjm9IEgNt48ww9XH9N0O3/1jVqGR2LP2FVQ+0U5X A2MmN9Fvj2Z2Uq0VuE1vOt/r4EL5dO4xl8JbCn6Uwt1TlmT6TADkIeE5TFrmcMyL ECYcq7Gywf0N6snZUinU7CC7fAVxGie9DcTZqma91LqwIXv8KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3IaJRjakOtg1dcBSp+1v3+MU5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2RhN2Q0YTMtZjNlOS0z M2E1LThhZDgtNWE0MmRiZjUxYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ITAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3dPkbfN+HVBGdvHHYw4RdTItMXSH0RAHIl5Ac+uwxS6Yn46fRqUQqH Nc8T/p6Vmtlx2ADdhKkHpEJJdXr4A0k5HlofNL8ejLvx9uYnS0FPaZV+G4GQk/Ew v4r1L1qQlwP3vJEQR7fjVzrQSfs//UK6VfgJpkKrgHi5sf7vt1aKuekss6+tGwYb Kaegi06RLG4Ep2Pbu7K51isPH4pGjmOICbFP3HsWblexEor6wClKe0ghhMCC6aL3 t++IyKu6nmmbEGJIOSWC6xlwfpot/ODjGLe4aCxKmDIFwlYZ243Q5YX3OUssHziW cuSu2zI+hTShokLjQhN4LRTyMtBZ/9w= -----END CERTIFICATE-----Generated at Sun Oct 19 22:41:37 2025 by rpki-client