$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfb642ee-a14a-3d63-9166-9af9383d0765.roa File: dfb642ee-a14a-3d63-9166-9af9383d0765.roa (raw, json) Hash identifier: gDz7Sq1r7XytB24p2YuccpvLXrNc32tXZU4qWWSzERc= Subject key identifier: F4:CB:C2:F6:97:06:AD:BE:74:58:1D:E6:D4:2B:3C:B9:46:A0:CD:4F Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B477C6FA12F473498E64A3EE0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfb642ee-a14a-3d63-9166-9af9383d0765.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 14618 IP address blocks: 216.115.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:6f:a1:2f:47:34:98:e6:4a:3e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=0aa2bf48-3eb3-48ff-aa94-d48c25cc3d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:2c:cb:9b:6a:ab:fe:fa:98:37:93:7c:d2: ab:d7:d3:16:b2:ec:3c:87:1b:19:f4:02:cf:2f:10: aa:9d:c8:00:5f:65:14:1b:96:53:5c:a8:5b:da:86: 5f:27:c3:7e:2c:5a:e4:ce:5b:c8:55:6c:25:7d:24: 29:cf:b6:cb:ab:94:ca:61:96:d3:46:52:3f:d2:75: 16:bc:c3:b9:15:1e:5b:d4:8d:e1:74:7e:e5:08:28: f3:40:34:08:8c:3c:7e:05:24:6f:9c:cd:3b:4b:ac: 2c:d9:49:dc:0f:25:7b:8a:9e:0b:d4:08:12:97:a0: 8a:1c:b0:2b:c3:66:c1:0a:8e:44:4b:10:b9:ce:24: 8c:cc:00:2f:c8:25:32:82:80:0a:9a:8f:77:38:82: 8e:7a:54:09:13:0c:8a:b2:17:08:c5:e8:2f:26:37: ef:e7:c3:99:f0:09:4f:c3:0d:6d:77:8a:58:74:bb: b7:39:c4:04:b4:25:09:c5:e4:23:1d:45:78:de:99: 3d:17:3b:c1:66:17:be:33:ca:63:48:e1:a3:24:4a: 2c:1f:89:ec:b1:e7:3a:54:cf:6b:23:9f:4d:a7:e4: 13:a9:d0:cd:c2:8e:b2:c6:11:59:bc:bf:e2:db:f0: 3c:a3:ae:ee:d4:c0:b7:b5:41:73:88:55:00:78:6f: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CB:C2:F6:97:06:AD:BE:74:58:1D:E6:D4:2B:3C:B9:46:A0:CD:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfb642ee-a14a-3d63-9166-9af9383d0765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 216.115.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e3:a1:68:97:b4:3b:f2:7d:2e:02:80:e3:db:0b:7a:23:17:24: 2f:4c:b3:e2:72:fa:5a:e3:94:6b:9a:55:e6:f2:c4:8f:ee:72: a8:28:e1:65:30:4c:af:11:79:b9:f2:da:5a:98:6c:99:e9:bf: 3c:cc:e5:a3:10:f0:22:60:b2:a4:33:ac:c9:9a:bb:40:59:41: 9c:55:5c:4b:f3:1a:21:ba:dc:8b:28:a1:43:f6:e0:20:30:2d: 04:a6:b2:4d:e7:67:d7:02:e5:74:12:05:cf:26:09:1f:ba:36: 80:c4:92:02:b7:04:f4:cc:9f:80:17:60:9e:b3:bc:38:2b:4d: 65:51:c5:87:90:8d:0b:2b:9e:63:95:d7:59:f6:0f:49:e8:39: 23:a9:14:76:b6:09:3c:db:d8:dd:98:18:8c:7c:19:9a:46:d9: b3:da:4e:85:d3:13:84:07:36:16:e8:eb:a3:c3:bf:2b:eb:5d: b8:11:d4:67:ab:00:fc:ab:2c:bd:6c:86:52:50:6e:37:f4:5e: 85:72:c9:7b:56:56:ce:e2:87:1a:70:68:3c:61:1d:ac:0e:85: 4b:4e:f9:68:c6:4d:d3:60:47:8d:14:d1:a2:be:33:33:b9:84: 53:2d:4b:ac:50:5c:8c:ba:b1:b2:7d:35:0b:c7:f1:fc:56:fb: 9f:5e:ae:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfG+hL0c0mOZKPuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MGFhMmJmNDgtM2ViMy00OGZmLWFhOTQtZDQ4YzI1Y2MzZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiAsy5tqq/76mDeTfNKr19MWsuw8hxsZ9ALP LxCqncgAX2UUG5ZTXKhb2oZfJ8N+LFrkzlvIVWwlfSQpz7bLq5TKYZbTRlI/0nUW vMO5FR5b1I3hdH7lCCjzQDQIjDx+BSRvnM07S6ws2UncDyV7ip4L1AgSl6CKHLAr w2bBCo5ESxC5ziSMzAAvyCUygoAKmo93OIKOelQJEwyKshcIxegvJjfv58OZ8AlP ww1td4pYdLu3OcQEtCUJxeQjHUV43pk9FzvBZhe+M8pjSOGjJEosH4nssec6VM9r I59Np+QTqdDNwo6yxhFZvL/i2/A8o67u1MC3tUFziFUAeG8u+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTLwvaXBq2+dFgd5tQrPLlGoM1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGZiNjQyZWUtYTE0YS0z ZDYzLTkxNjYtOWFmOTM4M2QwNzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOOhaJe0O/J9LgKA49sLeiMXJC9Ms+Jy+lrjlGuaVebyxI/ucqgo4WUw TK8Rebny2lqYbJnpvzzM5aMQ8CJgsqQzrMmau0BZQZxVXEvzGiG63IsooUP24CAw LQSmsk3nZ9cC5XQSBc8mCR+6NoDEkgK3BPTMn4AXYJ6zvDgrTWVRxYeQjQsrnmOV 11n2D0noOSOpFHa2CTzb2N2YGIx8GZpG2bPaToXTE4QHNhbo66PDvyvrXbgR1Ger APyrLL1shlJQbjf0XoVyyXtWVs7ihxpwaDxhHawOhUtO+WjGTdNgR40U0aK+MzO5 hFMtS6xQXIy6sbJ9NQvH8fxW+59erm0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:22:26 2025 by rpki-client