$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa File: c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa (raw, json) Hash identifier: gn9/eN4mmysXqamj7kb11QiqoDSeIX08kOvkUZ0pSc4= Subject key identifier: B3:A6:3E:6F:07:24:99:0D:51:39:CE:2E:47:62:4C:97:7D:61:C9:61 Certificate issuer: /CN=67d0730c-5dbd-466b-a70c-5267ec1b7359 Certificate serial: 010D0C9F4328584B9E07AB2D719303AC1F760280 Authority key identifier: 1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 33132 IP address blocks: 216.99.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ab:2d:71:93:03:ac:1f:76:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d0730c-5dbd-466b-a70c-5267ec1b7359 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=76466710-a3ed-42c9-bbad-88fff5a532b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:44:47:74:42:fd:68:e4:26:71:69:12:d3: c8:c8:3a:81:e6:d8:ac:0a:2b:0b:52:d9:86:88:ed: 4c:08:f4:86:9d:e5:ea:1c:64:19:75:b0:11:4e:57: 5a:26:c3:1c:43:a1:c8:79:4e:79:13:89:1a:87:3d: 8e:c0:7a:5a:33:00:9e:eb:ce:a5:5c:eb:3b:1a:0b: 29:c3:ca:dc:a5:77:d8:7f:43:2b:dd:a4:59:a1:c2: 64:17:bd:6b:b0:e9:92:18:7a:e0:d8:26:ea:33:4a: ce:85:e3:a6:c2:8a:3d:0d:65:c3:ab:46:36:f5:d6: bf:3c:e2:ac:fb:9e:ae:8b:ce:3e:ee:52:b4:99:19: 23:4b:37:ee:da:29:95:ed:35:ce:82:44:a0:3c:9a: d1:65:cd:4c:16:55:53:76:c8:12:2c:69:ea:66:de: 77:ee:b3:1e:fe:42:e5:75:3f:94:44:21:1f:c7:2e: c9:34:75:b3:c6:4d:7f:de:a2:fa:04:b7:82:c3:4a: aa:b4:ea:7a:bd:be:bc:01:40:cf:61:8b:d1:20:50: c2:d9:5f:c3:b0:45:3c:5a:34:31:15:e1:89:2a:0f: 45:e7:ef:90:f6:df:fe:87:a9:d6:18:67:24:08:db: 5d:8f:4a:ae:d2:ad:1e:56:18:f3:43:18:d2:d1:62: f2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A6:3E:6F:07:24:99:0D:51:39:CE:2E:47:62:4C:97:7D:61:C9:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl X509v3 Authority Key Identifier: keyid:1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer sbgp-ipAddrBlock: critical IPv4: 216.99.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ff:e7:50:75:c5:ec:c2:43:51:ad:b2:cc:54:26:e0:cc:d0: e1:53:41:7c:8b:86:ae:55:b8:09:e1:4f:25:d6:5f:34:a8:ec: 49:58:24:f8:cb:83:41:a0:4d:16:29:b5:92:0f:6f:b1:4b:49: 4a:9b:19:a9:bd:39:d5:55:6b:0e:f3:7c:37:f4:54:3f:40:c4: 0e:73:f2:2f:36:99:43:e6:23:91:22:83:1b:c9:f3:cc:58:e7: ea:22:df:d4:8f:7e:77:07:fa:50:f5:b4:32:c2:35:02:28:f2: 42:e0:18:0f:77:56:87:cd:9e:d3:13:79:af:49:bc:17:ec:e2: b4:1e:c7:0b:5c:f2:6e:e5:ba:ba:c4:7c:9d:09:41:e2:5d:3b: b0:7b:9b:5b:f2:11:f2:1b:77:b4:5c:33:d9:42:e8:80:10:a6: 60:79:7f:13:28:6f:20:4a:d0:c5:16:5d:4b:21:e2:c1:6c:e2: 63:31:89:6f:54:44:31:42:c4:d9:ae:92:f3:f9:b7:18:12:49: 3d:02:36:19:5a:6f:9d:f5:1a:49:43:bc:76:f7:1d:39:e6:a3: 44:d4:ad:38:1b:d8:a9:a7:54:b7:37:e9:1b:87:96:ab:cc:9d: 10:89:29:eb:43:e2:dc:c1:0e:71:4d:3f:3d:6c:f7:31:58:b2: b9:89:f8:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6stcZMDrB92AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdkMDczMGMtNWRiZC00NjZiLWE3MGMtNTI2N2VjMWI3 MzU5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NzY0NjY3MTAtYTNlZC00MmM5LWJiYWQtODhmZmY1YTUzMmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqZER3RC/WjkJnFpEtPIyDqB5tisCisLUtmG iO1MCPSGneXqHGQZdbARTldaJsMcQ6HIeU55E4kahz2OwHpaMwCe686lXOs7Ggsp w8rcpXfYf0Mr3aRZocJkF71rsOmSGHrg2CbqM0rOheOmwoo9DWXDq0Y29da/POKs +56ui84+7lK0mRkjSzfu2imV7TXOgkSgPJrRZc1MFlVTdsgSLGnqZt537rMe/kLl dT+URCEfxy7JNHWzxk1/3qL6BLeCw0qqtOp6vb68AUDPYYvRIFDC2V/DsEU8WjQx FeGJKg9F5++Q9t/+h6nWGGckCNtdj0qu0q0eVhjzQxjS0WLyCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOmPm8HJJkNUTnOLkdiTJd9YclhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2Qw NzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3ZWMxYjczNTkvYzNiNzgwNWMtNmUzYi0z ZmQ3LTk2ZDctNGNkZDI3YTI3OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjdkMDczMGMtNWRiZC00NjZiLWE3 MGMtNTI2N2VjMWI3MzU5LzY3ZDA3MzBjLTVkYmQtNDY2Yi1hNzBjLTUyNjdlYzFi NzM1OS5jcmwwHwYDVR0jBBgwFoAUHceCUo4eRCKZkgNOX319zKG3rlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2QwNzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3 ZWMxYjczNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GPdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX/51B1xezCQ1GtssxUJuDM0OFTQXyLhq5VuAnhTyXWXzSo7ElYJPjL g0GgTRYptZIPb7FLSUqbGam9OdVVaw7zfDf0VD9AxA5z8i82mUPmI5EigxvJ88xY 5+oi39SPfncH+lD1tDLCNQIo8kLgGA93VofNntMTea9JvBfs4rQexwtc8m7lurrE fJ0JQeJdO7B7m1vyEfIbd7RcM9lC6IAQpmB5fxMobyBK0MUWXUsh4sFs4mMxiW9U RDFCxNmukvP5txgSST0CNhlab531GklDvHb3HTnmo0TUrTgb2KmnVLc36RuHlqvM nRCJKetD4tzBDnFNPz1s9zFYsrmJ+B4= -----END CERTIFICATE-----Generated at Wed Nov 5 08:35:56 2025 by rpki-client