$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8016cad1-9d76-383b-9183-d778f2e3c76c.roa File: 8016cad1-9d76-383b-9183-d778f2e3c76c.roa (raw, json) Hash identifier: +t6dIThDxdt5gE7EGJIku+DxG1y6rMnYLls4DQwLnA8= Subject key identifier: 0B:8D:C0:9F:5B:52:69:2C:AF:EE:70:5E:D4:23:43:D5:61:2F:CB:E4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B87B217E7692BCB31432F7A80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8016cad1-9d76-383b-9183-d778f2e3c76c.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 199527 IP address blocks: 204.147.232.0/22 maxlen: 22 204.147.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:17:e7:69:2b:cb:31:43:2f:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=a66e017d-4490-4897-b00e-8a2c635be06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a7:da:4d:62:0d:5c:70:de:0e:30:3d:84:d2: 25:19:07:3a:8b:74:5c:ca:05:57:08:d5:4a:2a:17: 94:e1:d8:73:6a:16:38:4e:e9:32:2c:c9:e6:e1:16: 78:af:8d:68:f4:54:32:1f:ad:2f:07:60:73:6b:2c: 09:2c:09:31:fb:2f:3e:92:d2:16:df:1d:92:16:b7: d9:c5:45:16:48:4b:7a:a7:80:91:48:e5:05:eb:60: 30:d7:19:6c:8d:23:54:c0:94:da:30:21:c1:be:43: a6:04:ac:a1:06:12:73:7c:c4:e3:c3:1a:90:eb:c3: 2a:a7:c1:9d:2f:47:bd:4f:9e:50:93:1f:14:c0:37: f0:d7:fb:11:d8:cd:32:3c:bb:8b:f9:d5:cd:de:16: 36:62:3d:ae:74:7a:0f:58:7f:04:33:cb:2f:7a:dc: 13:77:ff:74:2d:dc:b2:25:65:78:15:94:10:87:53: 67:92:d9:40:98:a2:a7:f5:db:35:59:86:36:56:e9: 7a:82:17:00:eb:28:f4:a1:d3:6c:23:f4:87:39:8f: e3:47:1b:b0:53:d9:8b:ee:f5:f4:f4:70:94:98:27: 82:ab:cb:90:d3:87:3d:cd:c6:62:28:52:4f:bf:e0: 68:fa:ba:88:00:45:7b:49:3f:6b:11:7c:3f:73:fb: 27:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8D:C0:9F:5B:52:69:2C:AF:EE:70:5E:D4:23:43:D5:61:2F:CB:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8016cad1-9d76-383b-9183-d778f2e3c76c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 204.147.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:f5:72:77:f8:73:5e:f7:71:84:f1:2b:38:fa:d5:2e:02:3c: 8e:4d:a5:7a:06:7a:d1:66:ca:c1:f2:ec:c0:7e:12:ae:2b:50: aa:ef:4a:b8:4d:71:13:a1:77:4d:a0:84:3a:f8:0a:2a:3b:61: 4e:cc:c1:c5:85:eb:8c:07:7c:05:57:24:30:3b:14:34:21:e4: e2:b5:c0:7f:80:5b:58:a4:8f:47:d5:7e:fe:02:b0:b7:72:6b: e4:a9:74:60:cc:b9:4a:89:16:c6:46:2a:78:e9:5d:c6:e3:0a: a6:00:15:2e:d4:55:b1:73:3a:f6:7c:39:fc:d4:36:c2:79:ab: 5f:fa:e4:78:84:21:3d:43:f5:09:2f:92:14:09:e5:f3:6b:4b: a5:ba:a8:a5:86:fd:62:8d:aa:70:83:ac:98:65:34:6a:9e:1b: 3d:14:f8:5f:71:26:01:d8:d2:d0:7a:73:a0:4b:d6:c8:6a:66: 30:df:ce:ce:a1:f0:c8:ba:08:f5:87:ee:ac:e7:2f:39:3c:b0: 4f:1d:fd:39:33:53:78:77:3e:4d:ff:49:00:a0:14:72:ae:12: 91:76:f4:98:5f:92:86:8e:f8:ba:9d:e7:61:cf:87:95:2f:99: dd:51:7a:8e:32:7a:97:36:46:a0:79:16:5b:1f:25:40:47:d6: f6:fd:4f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHshfnaSvLMUMveoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk YTY2ZTAxN2QtNDQ5MC00ODk3LWIwMGUtOGEyYzYzNWJlMDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqfaTWINXHDeDjA9hNIlGQc6i3RcygVXCNVK KheU4dhzahY4TukyLMnm4RZ4r41o9FQyH60vB2BzaywJLAkx+y8+ktIW3x2SFrfZ xUUWSEt6p4CRSOUF62Aw1xlsjSNUwJTaMCHBvkOmBKyhBhJzfMTjwxqQ68Mqp8Gd L0e9T55Qkx8UwDfw1/sR2M0yPLuL+dXN3hY2Yj2udHoPWH8EM8svetwTd/90Ldyy JWV4FZQQh1NnktlAmKKn9ds1WYY2Vul6ghcA6yj0odNsI/SHOY/jRxuwU9mL7vX0 9HCUmCeCq8uQ04c9zcZiKFJPv+Bo+rqIAEV7ST9rEXw/c/snMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuNwJ9bUmksr+5wXtQjQ9VhL8vkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODAxNmNhZDEtOWQ3Ni0z ODNiLTkxODMtZDc3OGYyZTNjNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ71cnf4c173cYTxKzj61S4CPI5NpXoGetFmysHy7MB+Eq4rUKrvSrhN cROhd02ghDr4Cio7YU7MwcWF64wHfAVXJDA7FDQh5OK1wH+AW1ikj0fVfv4CsLdy a+SpdGDMuUqJFsZGKnjpXcbjCqYAFS7UVbFzOvZ8OfzUNsJ5q1/65HiEIT1D9Qkv khQJ5fNrS6W6qKWG/WKNqnCDrJhlNGqeGz0U+F9xJgHY0tB6c6BL1shqZjDfzs6h 8Mi6CPWH7qznLzk8sE8d/TkzU3h3Pk3/SQCgFHKuEpF29JhfkoaO+Lqd52HPh5Uv md1Reo4yepc2RqB5FlsfJUBH1vb9TyE= -----END CERTIFICATE-----Generated at Sun Oct 19 22:39:51 2025 by rpki-client