$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa File: 2366321d-3327-3eb1-aa83-61a80aefd3f4.roa (raw, json) Hash identifier: X+aYfhgyr6SPwpsqbb0B/ffsXnuuFHWpa0J6zkRTU9A= Subject key identifier: D5:04:8E:74:6E:0B:B0:8F:E7:19:2E:84:1E:6E:4E:C6:69:B7:A0:D0 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584B7F52141D72F96B02E941B780 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 216.150.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:14:1d:72:f9:6b:02:e9:41:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=abce4ea6-3692-42c3-a625-46452246c076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1e:0d:5d:f9:2c:80:31:83:4e:cc:fe:dd:e3: 5f:e4:d3:01:43:c4:f7:09:e6:b3:cd:10:56:19:af: ce:70:5e:84:5b:e3:db:0c:57:09:71:8f:9c:83:ec: aa:45:0f:2b:7e:62:d5:1c:0b:94:63:e0:4a:77:46: 61:86:ae:c4:83:38:fb:d6:62:08:84:55:5f:d9:71: a7:21:a5:1f:86:87:40:7d:a0:c6:82:47:a1:e2:93: 0c:c5:46:72:16:49:93:f3:e6:eb:da:ab:fa:63:d2: 6c:9a:3c:9c:49:d6:0c:7c:41:5d:37:cd:95:86:0f: db:a4:19:99:9d:2f:7c:8f:b7:e5:12:a5:b9:09:9e: 71:ad:cd:39:78:9e:b2:36:c1:fc:b2:27:84:50:cc: f7:ec:63:95:1d:16:0e:5d:44:d1:bf:fe:ed:04:cd: 3a:ce:02:51:92:96:29:3d:bf:14:0c:d2:7d:0e:07: 09:8d:94:5b:5c:b5:40:31:3d:a7:6e:ec:51:ce:7d: 7f:28:46:b7:f3:27:ae:71:67:ee:08:5f:1d:59:80: db:21:b2:da:a3:93:5a:94:17:da:9f:ed:a8:5d:7e: 27:1a:e1:6c:28:f1:4f:74:b0:c4:d1:c4:f8:04:d3: 80:23:11:b0:3f:47:53:b9:74:bb:07:72:40:04:52: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:04:8E:74:6E:0B:B0:8F:E7:19:2E:84:1E:6E:4E:C6:69:B7:A0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 216.150.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:25:a8:c6:20:25:59:cf:f8:dd:42:0a:da:58:d0:f4:4c:ec: 79:42:a7:7c:8f:25:c8:80:3f:7c:90:b2:95:e2:95:eb:1e:eb: a0:6c:dd:2a:25:68:50:ea:59:72:cc:1c:92:83:4f:e6:28:74: ef:27:89:01:04:a7:0a:52:e1:8f:41:d8:fd:a0:21:8d:ae:75: 8a:b0:29:df:7d:a6:50:41:72:e5:c8:f4:af:69:b3:07:f3:90: 73:2b:62:c4:0d:27:15:64:80:b8:dd:90:45:94:2f:56:08:18: ff:78:2d:89:cc:09:66:30:92:9f:9e:6e:e3:9f:e9:01:fb:c7: 36:df:b5:9f:8c:99:79:c2:fd:fe:5f:c0:f7:a4:7a:d7:c0:74: ac:9c:32:c3:26:48:f5:19:01:de:9d:b4:d6:fc:3d:97:9f:70: 8a:90:af:34:91:67:59:28:a4:d6:e9:c0:d7:4c:99:33:6e:88: 50:62:32:78:52:79:99:76:f8:f4:74:4e:2e:e1:24:f1:0b:bd: 60:bd:a1:4b:0b:94:29:ae:bc:48:cd:e2:fc:9d:06:9e:2b:9c: 82:b3:e6:ac:9e:c3:16:da:77:42:f1:dc:ce:0e:39:f3:4b:93: 30:d2:8a:88:b5:50:a2:e6:38:a9:af:a7:e4:31:19:8c:68:08: b6:d6:cb:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhQdcvlrAulBt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YWJjZTRlYTYtMzY5Mi00MmMzLWE2MjUtNDY0NTIyNDZjMDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB4NXfksgDGDTsz+3eNf5NMBQ8T3CeazzRBW Ga/OcF6EW+PbDFcJcY+cg+yqRQ8rfmLVHAuUY+BKd0Zhhq7Egzj71mIIhFVf2XGn IaUfhodAfaDGgkeh4pMMxUZyFkmT8+br2qv6Y9JsmjycSdYMfEFdN82Vhg/bpBmZ nS98j7flEqW5CZ5xrc05eJ6yNsH8sieEUMz37GOVHRYOXUTRv/7tBM06zgJRkpYp Pb8UDNJ9DgcJjZRbXLVAMT2nbuxRzn1/KEa38yeucWfuCF8dWYDbIbLao5NalBfa n+2oXX4nGuFsKPFPdLDE0cT4BNOAIxGwP0dTuXS7B3JABFJ40wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUEjnRuC7CP5xkuhB5uTsZpt6DQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvMjM2NjMyMWQtMzMyNy0z ZWIxLWFhODMtNjFhODBhZWZkM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAlqMYgJVnP+N1CCtpY0PRM7HlCp3yPJciAP3yQspXilese66Bs3Sol aFDqWXLMHJKDT+YodO8niQEEpwpS4Y9B2P2gIY2udYqwKd99plBBcuXI9K9pswfz kHMrYsQNJxVkgLjdkEWUL1YIGP94LYnMCWYwkp+ebuOf6QH7xzbftZ+MmXnC/f5f wPeketfAdKycMsMmSPUZAd6dtNb8PZefcIqQrzSRZ1kopNbpwNdMmTNuiFBiMnhS eZl2+PR0Ti7hJPELvWC9oUsLlCmuvEjN4vydBp4rnIKz5qyewxbad0Lx3M4OOfNL kzDSioi1UKLmOKmvp+QxGYxoCLbWyzg= -----END CERTIFICATE-----Generated at Mon Oct 20 11:15:06 2025 by rpki-client