$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d23431fa-eb7b-3a56-9a21-1f53c85bcf82.roa File: d23431fa-eb7b-3a56-9a21-1f53c85bcf82.roa (raw, json) Hash identifier: fSjyA+nBscKDw4FNUuHzIGXeEFOqGnnwyyEEGJvxpB0= Subject key identifier: C3:23:20:6D:0B:61:51:69:30:36:68:7A:32:35:D4:98:22:70:7D:13 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B87B216DE5DED30E63D48AD80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d23431fa-eb7b-3a56-9a21-1f53c85bcf82.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 199527 IP address blocks: 216.132.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:16:de:5d:ed:30:e6:3d:48:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=00b87526-f24b-4037-9a7c-e62be97e78e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:92:cd:3d:c8:b1:a1:42:61:42:dd:ea:67:12: db:45:af:19:3b:dc:40:68:a3:f7:b6:6c:1d:77:48: fc:b3:e1:3e:47:29:fa:32:af:95:74:e1:3c:4b:62: 13:14:7c:a2:84:e7:24:64:40:94:e4:0a:74:22:39: c2:c6:d3:f2:eb:58:dc:c3:e9:81:96:31:8d:a4:c1: 24:5d:f0:23:11:48:57:02:9c:eb:e9:6a:5d:ba:50: 45:46:e7:bd:14:ac:7d:07:46:88:86:a9:c5:3d:d1: 5a:6c:38:0a:ee:34:9b:f7:2c:06:72:bb:85:fd:78: e7:0f:c1:74:2f:8c:f3:54:1a:4e:be:a7:88:1c:73: aa:82:75:64:44:0e:90:60:16:94:0a:95:13:75:7a: a3:fe:36:6b:49:ff:ea:1e:a8:80:54:06:a4:31:05: 7b:cf:5b:b8:c7:98:ef:af:a9:41:a8:c4:17:2e:d5: 75:b6:61:68:f0:ad:86:31:9f:28:28:c0:ee:cf:cf: a7:4f:78:40:eb:e9:52:45:7f:77:b5:52:17:0b:8a: b6:c8:8b:df:d9:ad:f5:7c:86:79:02:ad:fd:ad:d3: c9:ca:65:30:75:9b:85:94:df:ec:4c:b8:f9:d0:af: b5:02:ed:a4:5f:13:92:cc:86:d2:be:10:7d:ae:03: 8c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:23:20:6D:0B:61:51:69:30:36:68:7A:32:35:D4:98:22:70:7D:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d23431fa-eb7b-3a56-9a21-1f53c85bcf82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:7d:7f:5d:53:27:e0:89:c5:04:9a:16:52:06:f5:43:44:2a: 6a:c6:9b:d8:0d:67:43:fc:be:c3:ca:d0:16:1a:82:45:b8:79: 68:cc:46:ef:2e:95:c1:d1:aa:e9:5e:a6:20:4c:0a:72:b5:40: 0e:4e:e8:3a:8c:ad:3b:99:1a:72:bb:8e:95:0a:21:41:52:fc: f7:53:4f:d7:3f:88:b5:1b:eb:71:90:d2:ac:23:8e:59:b9:da: e8:f4:0c:0b:70:3f:65:71:64:c2:b0:1e:98:7c:9c:1f:de:60: 45:7a:12:49:63:e2:98:e0:d2:94:b8:42:5c:9d:34:a0:54:51: 99:fb:93:e1:6f:a4:2a:65:ed:0e:6e:39:8c:dd:5b:56:2e:33: e1:ef:ec:2e:cd:c6:1b:75:33:e7:15:7e:a4:a8:3f:9b:dc:4f: a8:1d:07:70:30:ca:f7:f6:70:15:f8:5a:60:1f:67:06:94:7b: 5a:0f:3c:88:48:d2:cb:74:69:67:1e:6b:70:09:ea:22:70:b5: 66:26:42:c7:8e:c4:88:32:81:2e:fa:f4:30:bb:26:34:5d:ce: fa:b1:b3:b3:74:f0:2b:5f:e0:c2:2a:e2:6b:84:7e:8d:9b:46: 2a:7d:69:9a:90:cd:64:38:da:43:ae:b5:df:5b:0d:c2:eb:88: 18:f6:f0:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHshbeXe0w5j1IrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MDBiODc1MjYtZjI0Yi00MDM3LTlhN2MtZTYyYmU5N2U3OGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZLNPcixoUJhQt3qZxLbRa8ZO9xAaKP3tmwd d0j8s+E+Ryn6Mq+VdOE8S2ITFHyihOckZECU5Ap0IjnCxtPy61jcw+mBljGNpMEk XfAjEUhXApzr6WpdulBFRue9FKx9B0aIhqnFPdFabDgK7jSb9ywGcruF/XjnD8F0 L4zzVBpOvqeIHHOqgnVkRA6QYBaUCpUTdXqj/jZrSf/qHqiAVAakMQV7z1u4x5jv r6lBqMQXLtV1tmFo8K2GMZ8oKMDuz8+nT3hA6+lSRX93tVIXC4q2yIvf2a31fIZ5 Aq39rdPJymUwdZuFlN/sTLj50K+1Au2kXxOSzIbSvhB9rgOMkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMjIG0LYVFpMDZoejI11JgicH0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDIzNDMxZmEtZWI3Yi0z YTU2LTlhMjEtMWY1M2M4NWJjZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ITgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMF9f11TJ+CJxQSaFlIG9UNEKmrGm9gNZ0P8vsPK0BYagkW4eWjMRu8u lcHRqulepiBMCnK1QA5O6DqMrTuZGnK7jpUKIUFS/PdTT9c/iLUb63GQ0qwjjlm5 2uj0DAtwP2VxZMKwHph8nB/eYEV6Eklj4pjg0pS4QlydNKBUUZn7k+FvpCpl7Q5u OYzdW1YuM+Hv7C7Nxht1M+cVfqSoP5vcT6gdB3Awyvf2cBX4WmAfZwaUe1oPPIhI 0st0aWcea3AJ6iJwtWYmQseOxIgygS769DC7JjRdzvqxs7N08Ctf4MIq4muEfo2b Rip9aZqQzWQ42kOutd9bDcLriBj28Ck= -----END CERTIFICATE-----Generated at Mon Oct 20 12:43:43 2025 by rpki-client