$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/e33adce2-ea1b-326c-96e6-2ec411936560.roa File: e33adce2-ea1b-326c-96e6-2ec411936560.roa (raw, json) Hash identifier: v6kom7sDVyVdybOApLFHzzEhr043SYUqNFa8//T3NkE= Subject key identifier: 4D:99:B7:9F:64:11:6C:BE:62:A6:E1:C1:8E:1F:39:F5:FF:22:CF:97 Certificate issuer: /CN=34592396-ac3d-4a48-97f1-caed65436525 Certificate serial: 010D0C9F4328584BB45D1BE8AD673ACB76848CC0 Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/e33adce2-ea1b-326c-96e6-2ec411936560.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 40818 IP address blocks: 216.38.168.0/24 maxlen: 24 216.38.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:1b:e8:ad:67:3a:cb:76:84:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=ac2b5359-0d99-4e36-86df-fb983075d0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5a:29:01:f2:26:39:4d:75:ef:2b:8a:a5:0e: 96:df:71:d4:fc:71:d7:28:63:de:5a:9f:47:61:9f: ee:b7:2f:4a:02:5d:4c:1a:65:ab:c7:7e:da:f1:37: 32:f7:99:a3:f1:62:ee:3c:65:47:98:92:38:47:26: f2:99:4f:f8:ac:13:d6:ae:31:32:7b:64:ee:54:93: 31:12:60:12:8c:46:2f:df:35:dd:c4:ac:75:6f:2b: d1:8d:bc:f2:5f:cc:2f:05:77:16:39:31:aa:6c:a9: f7:25:27:08:3e:79:e0:d8:92:41:75:42:2d:cf:7f: f1:d4:9a:53:9b:21:91:e7:fe:2b:7d:e3:b8:66:75: 59:45:64:8d:21:14:79:06:3d:ef:39:02:db:0b:22: 69:e3:2b:8a:e3:69:63:cf:a0:9e:ec:d8:39:16:20: 87:db:d7:b1:35:8e:bb:aa:31:79:d5:91:10:fb:c3: 53:2e:16:6b:0d:5c:17:b7:d2:68:53:3c:ab:59:79: 07:b5:94:a7:3e:4c:4f:2f:8a:c4:34:8f:f7:fc:00: 77:64:a6:38:2d:99:63:61:d4:a9:c6:87:01:07:7e: ea:3f:68:2c:81:d5:08:87:5e:d9:45:94:ec:dd:e6: 5d:16:b8:e9:1c:b1:3f:2f:9e:90:b5:cf:cc:eb:6e: 1b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:99:B7:9F:64:11:6C:BE:62:A6:E1:C1:8E:1F:39:F5:FF:22:CF:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/e33adce2-ea1b-326c-96e6-2ec411936560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl X509v3 Authority Key Identifier: keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer sbgp-ipAddrBlock: critical IPv4: 216.38.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:14:ad:75:b1:cc:f2:9a:eb:9b:19:a0:97:3c:11:4e:42:9e: 4f:8c:e5:89:c0:9a:a2:fe:0d:93:ae:61:79:52:b1:58:0c:73: 57:e8:06:09:9e:75:a5:26:38:77:e0:1c:86:d0:13:58:03:60: 1e:e0:b1:2c:83:74:3e:8d:8e:01:5e:76:10:27:52:77:8b:1a: 13:3e:80:5b:91:30:1f:f3:a5:da:ed:8c:48:08:8e:f5:f9:4f: 52:6d:cf:1e:22:3d:e7:b9:5a:0e:67:41:7f:49:3b:04:38:20: c8:2d:fb:5c:7e:e2:9e:dd:af:d5:75:0a:36:36:59:4e:5c:5f: 9d:2c:24:ab:f6:3a:05:51:6a:08:9b:fc:7e:ec:df:5f:6a:5a: 3a:77:cb:a3:b7:f6:37:05:3a:2d:82:8a:84:16:7e:57:5f:f7: a5:e6:e5:f2:09:d3:30:27:0b:a3:e9:d7:7a:2b:ad:7b:73:3a: 88:64:a6:08:cf:e3:aa:33:f1:7f:7f:0b:70:85:7d:e2:65:99: b0:dd:f2:bc:a7:54:33:2b:6f:66:5b:79:ab:44:26:c3:e8:c5: 63:30:32:20:c4:12:4e:b4:5e:eb:b9:61:3f:03:79:a0:c5:b2: 1d:ef:5a:15:ce:2a:b8:49:73:fd:a0:37:64:4e:40:a5:15:9a: e0:ca:5e:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRvorWc6y3aEjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ1OTIzOTYtYWMzZC00YTQ4LTk3ZjEtY2FlZDY1NDM2 NTI1MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YWMyYjUzNTktMGQ5OS00ZTM2LTg2ZGYtZmI5ODMwNzVkMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lopAfImOU117yuKpQ6W33HU/HHXKGPeWp9H YZ/uty9KAl1MGmWrx37a8Tcy95mj8WLuPGVHmJI4RybymU/4rBPWrjEye2TuVJMx EmASjEYv3zXdxKx1byvRjbzyX8wvBXcWOTGqbKn3JScIPnng2JJBdUItz3/x1JpT myGR5/4rfeO4ZnVZRWSNIRR5Bj3vOQLbCyJp4yuK42ljz6Ce7Ng5FiCH29exNY67 qjF51ZEQ+8NTLhZrDVwXt9JoUzyrWXkHtZSnPkxPL4rENI/3/AB3ZKY4LZljYdSp xocBB37qP2gsgdUIh17ZRZTs3eZdFrjpHLE/L56Qtc/M624brQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2Zt59kEWy+YqbhwY4fOfX/Is+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5 MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVkNjU0MzY1MjUvZTMzYWRjZTItZWExYi0z MjZjLTk2ZTYtMmVjNDExOTM2NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQ1OTIzOTYtYWMzZC00YTQ4LTk3 ZjEtY2FlZDY1NDM2NTI1LzM0NTkyMzk2LWFjM2QtNGE0OC05N2YxLWNhZWQ2NTQz NjUyNS5jcmwwHwYDVR0jBBgwFoAU4Pkf4Q9Z7oe8umGKzul0yYPhQUEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVk NjU0MzY1MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2CaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0UrXWxzPKa65sZoJc8EU5Cnk+M5YnAmqL+DZOuYXlSsVgMc1foBgme daUmOHfgHIbQE1gDYB7gsSyDdD6NjgFedhAnUneLGhM+gFuRMB/zpdrtjEgIjvX5 T1Jtzx4iPee5Wg5nQX9JOwQ4IMgt+1x+4p7dr9V1CjY2WU5cX50sJKv2OgVRagib /H7s319qWjp3y6O39jcFOi2CioQWfldf96Xm5fIJ0zAnC6Pp13orrXtzOohkpgjP 46oz8X9/C3CFfeJlmbDd8rynVDMrb2ZbeatEJsPoxWMwMiDEEk60Xuu5YT8DeaDF sh3vWhXOKrhJc/2gN2ROQKUVmuDKXrg= -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:44 2025 by rpki-client