$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d216a5a1-373b-3c8c-ac74-27d304a60803.roa File: d216a5a1-373b-3c8c-ac74-27d304a60803.roa (raw, json) Hash identifier: zTqqPkqbDMW8i3LCFxk5PKPBAjzq2EKrbRgSd78xcMY= Subject key identifier: 96:50:9B:DA:21:FA:2E:2E:42:9A:8E:9E:9F:E1:76:0C:84:AC:F6:F5 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584B6F085C75265F5CB795B5F280 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d216a5a1-373b-3c8c-ac74-27d304a60803.roa Signing time: Mon 06 Oct 2025 16:59:16 +0000 ROA not before: Mon 06 Oct 2025 16:59:16 +0000 ROA not after: Sun 04 Jan 2026 17:59:16 +0000 asID: 29802 IP address blocks: 216.75.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:08:5c:75:26:5f:5c:b7:95:b5:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Oct 6 16:59:16 2025 GMT Not After : Jan 4 17:59:16 2026 GMT Subject: CN=6d31a094-3093-4849-9bb7-0eaf28a88817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:7f:25:a2:4d:04:73:8b:7a:de:20:0b:a7: d6:c5:58:a1:14:67:2e:24:d1:cd:ea:81:0e:1d:23: 51:35:81:dc:ff:10:c1:15:f9:ca:bf:ac:6c:64:96: 45:24:d8:d0:3c:5e:a8:2b:6e:23:e5:e3:1f:d8:6f: bf:86:8f:0e:a5:3d:ad:ee:12:56:db:e5:6c:e3:37: 8e:6e:01:68:1a:cd:f1:9d:6b:1e:26:66:9e:ed:40: 39:bd:7e:40:dd:3a:04:56:65:0e:84:68:fa:9e:99: e3:6d:2c:f4:05:d0:3e:29:a2:e2:26:45:94:7f:47: 48:a6:9e:61:19:0d:88:97:0e:65:5c:a7:52:ed:20: 20:31:b6:96:d9:c4:c7:27:bc:09:4f:45:e3:b7:8b: 7f:62:76:45:14:f1:c7:0e:92:e9:9b:50:71:6a:7a: a6:a0:a1:8c:d5:cc:c7:b9:c7:cf:d4:68:55:ef:21: 32:40:ab:81:78:47:3c:23:b4:06:e4:52:58:5d:33: 91:6c:75:44:69:ef:df:db:48:e8:d4:c5:cd:1d:c2: a1:cb:d4:98:54:fa:7c:db:a0:2c:91:5e:79:17:18: 1d:87:28:5b:35:f1:c1:95:4d:eb:6c:84:b6:51:6d: 5f:a0:32:5f:7a:8d:90:eb:04:55:6b:1b:98:45:9f: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:50:9B:DA:21:FA:2E:2E:42:9A:8E:9E:9F:E1:76:0C:84:AC:F6:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d216a5a1-373b-3c8c-ac74-27d304a60803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a4:5f:22:da:7c:aa:9f:f7:8a:66:9d:2e:d4:09:62:85:0b: 22:a3:a3:6d:5e:fc:36:72:00:b3:91:dc:79:4d:fb:79:19:f2: 1b:23:e8:72:73:e7:94:da:b5:b5:43:72:f6:57:3a:9a:08:d0: a2:02:3d:f9:13:22:26:af:8b:97:ab:70:25:1a:46:ed:ce:b3: 94:51:5e:6d:73:f3:62:e7:0b:81:db:2c:e0:48:a3:b9:f5:67: fa:ce:8c:64:56:3a:c8:d0:a0:85:99:67:c0:5c:de:04:39:b6: 32:d1:76:ae:74:5d:20:57:c9:54:66:0d:90:6e:38:ad:8f:85: 44:e2:e7:1b:b4:99:e5:f1:d4:96:08:3a:95:e3:89:71:f3:5c: 20:ba:41:2e:c8:84:51:73:19:74:07:36:62:f3:dc:53:cc:ce: 87:6c:c3:9d:0e:ea:be:c2:a1:5b:9d:89:e9:0e:f5:77:e2:2e: 64:a0:ae:56:09:4b:08:b6:f7:7f:ff:55:97:09:ec:e5:ac:eb: b5:70:ce:1c:0f:aa:09:e0:88:b1:21:01:55:26:1b:a5:e9:65: 1a:e1:a4:ed:dc:59:11:ae:6a:7d:af:2e:04:78:03:d6:f4:6a: 65:c0:ec:dd:32:41:b1:60:fc:10:35:0b:4c:d8:bc:54:5b:20: 0a:27:ad:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtvCFx1Jl9ct5W18oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MTAwNjE2NTkxNloXDTI2MDEwNDE3NTkxNlowLzEtMCsGA1UEAxMk NmQzMWEwOTQtMzA5My00ODQ5LTliYjctMGVhZjI4YTg4ODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFR/JaJNBHOLet4gC6fWxVihFGcuJNHN6oEO HSNRNYHc/xDBFfnKv6xsZJZFJNjQPF6oK24j5eMf2G+/ho8OpT2t7hJW2+Vs4zeO bgFoGs3xnWseJmae7UA5vX5A3ToEVmUOhGj6npnjbSz0BdA+KaLiJkWUf0dIpp5h GQ2Ilw5lXKdS7SAgMbaW2cTHJ7wJT0Xjt4t/YnZFFPHHDpLpm1BxanqmoKGM1czH ucfP1GhV7yEyQKuBeEc8I7QG5FJYXTORbHVEae/f20jo1MXNHcKhy9SYVPp826As kV55FxgdhyhbNfHBlU3rbIS2UW1foDJfeo2Q6wRVaxuYRZ+TpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZQm9oh+i4uQpqOnp/hdgyErPb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvZDIxNmE1YTEtMzczYi0z YzhjLWFjNzQtMjdkMzA0YTYwODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EuGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCkXyLafKqf94pmnS7UCWKFCyKjo21e/DZyALOR3HlN+3kZ8hsj6HJz 55TatbVDcvZXOpoI0KICPfkTIiavi5ercCUaRu3Os5RRXm1z82LnC4HbLOBIo7n1 Z/rOjGRWOsjQoIWZZ8Bc3gQ5tjLRdq50XSBXyVRmDZBuOK2PhUTi5xu0meXx1JYI OpXjiXHzXCC6QS7IhFFzGXQHNmLz3FPMzodsw50O6r7CoVudiekO9XfiLmSgrlYJ Swi293//VZcJ7OWs67VwzhwPqgngiLEhAVUmG6XpZRrhpO3cWRGuan2vLgR4A9b0 amXA7N0yQbFg/BA1C0zYvFRbIAonrYs= -----END CERTIFICATE-----Generated at Mon Oct 20 09:58:47 2025 by rpki-client