$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa File: f3485625-9688-304a-b7ce-39a5f6982850.roa (raw, json) Hash identifier: PGe9ma0JNbiEjZ7ksGffNVGEwp7WvF+xsyhn7cMIxN4= Subject key identifier: FA:F5:D3:94:0E:EB:25:4F:DE:83:AC:90:0F:7B:2B:34:45:26:91:61 Certificate issuer: /CN=1dc67402-ba21-48d8-9973-37169338b194 Certificate serial: 010D0C9F4328584BB5C255653F05FA3F50346E00 Authority key identifier: CF:E1:95:6F:E0:AD:DE:15:72:C2:1F:CF:03:85:B9:BB:87:08:1D:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 396982 IP address blocks: 216.114.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/1dc67402-ba21-48d8-9973-37169338b194.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/1dc67402-ba21-48d8-9973-37169338b194.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:55:65:3f:05:fa:3f:50:34:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc67402-ba21-48d8-9973-37169338b194 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=b71d4c65-9ea1-4462-bf86-429db502df54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2c:df:73:07:64:b2:65:67:03:ed:8b:49:4d: ca:59:25:aa:90:67:ee:30:99:85:33:cc:79:5b:a3: b5:c2:b1:8b:e2:1c:39:b9:61:ad:5d:a9:bb:ac:04: 08:94:60:78:3a:cf:8c:b3:c9:f5:2f:05:1e:2a:16: 11:c3:b2:71:35:d0:c3:5c:76:3d:16:94:ee:bf:0e: 05:a8:ff:28:ce:77:01:6c:f5:2a:62:00:80:6c:95: de:da:88:1e:67:36:32:95:c9:c5:01:0f:be:69:5b: c0:84:12:42:32:43:00:0c:87:9e:7f:a8:86:91:0a: 52:60:6b:d0:56:9a:ff:9e:ee:3f:fd:63:7b:7c:3a: d0:52:65:ea:06:34:09:8e:61:17:c8:d6:4e:e4:b9: 91:40:c9:c7:01:6e:70:46:ee:85:6f:3b:6b:89:73: da:56:0b:6d:d0:7b:ed:4b:c4:27:62:1f:e5:46:60: 01:91:1d:60:72:02:ad:b1:3d:4f:ea:18:49:10:e7: 7d:c9:95:48:5c:95:ad:1a:bf:dd:67:f2:83:ae:9a: bd:04:6c:56:59:f7:88:ed:ff:fd:f9:c1:90:3b:53: 03:b7:9c:a6:7d:37:f8:b8:3f:90:27:32:15:92:10: 74:cb:3e:78:82:c6:bd:e0:4e:b3:d8:5f:64:cd:ce: fd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F5:D3:94:0E:EB:25:4F:DE:83:AC:90:0F:7B:2B:34:45:26:91:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/1dc67402-ba21-48d8-9973-37169338b194.crl X509v3 Authority Key Identifier: keyid:CF:E1:95:6F:E0:AD:DE:15:72:C2:1F:CF:03:85:B9:BB:87:08:1D:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer sbgp-ipAddrBlock: critical IPv4: 216.114.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:fa:d2:58:26:71:ad:c0:a2:46:9c:1d:90:71:e0:ba:f1:4c: bc:0a:cd:2f:60:3a:1c:bc:04:4e:7e:36:c6:3d:43:7f:d4:61: 18:f7:d4:f8:64:1a:3d:07:00:71:1b:af:b6:d2:42:94:c3:52: c1:92:cc:c2:5d:23:39:10:b8:c1:05:19:ea:56:87:44:1d:17: 28:1b:c2:ad:4e:ae:cd:14:f7:8e:25:9c:4e:1a:a0:44:1d:de: 87:27:15:71:e2:0c:43:94:3b:4f:92:19:d6:60:6b:d0:06:f1: dc:6c:0b:62:7d:b9:48:f8:66:8a:31:85:33:d3:6e:4d:68:2d: 26:2f:60:97:6e:f2:2e:f7:57:3a:7d:25:5b:a3:29:30:45:f5: 32:30:b6:fc:49:da:3d:bf:3f:89:c5:97:87:b2:a3:b2:94:df: 9e:f2:e3:7c:0a:82:26:1d:73:43:42:d7:c0:eb:8d:f8:e0:28: a1:56:29:8d:ad:da:29:9e:04:3f:80:47:f5:80:13:58:6f:9c: ae:c6:fb:31:49:63:7d:1b:f5:03:7d:ad:47:5f:a6:2a:bf:7d: bc:07:d4:bb:48:16:2c:a8:ad:77:32:fb:fb:db:0f:67:af:0c: 68:8d:bb:91:c5:59:ff:3d:9a:9e:58:59:7e:0a:04:39:3e:55: b0:86:d4:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wlVlPwX6P1A0bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRjNjc0MDItYmEyMS00OGQ4LTk5NzMtMzcxNjkzMzhi MTk0MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk YjcxZDRjNjUtOWVhMS00NDYyLWJmODYtNDI5ZGI1MDJkZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4izfcwdksmVnA+2LSU3KWSWqkGfuMJmFM8x5 W6O1wrGL4hw5uWGtXam7rAQIlGB4Os+Ms8n1LwUeKhYRw7JxNdDDXHY9FpTuvw4F qP8ozncBbPUqYgCAbJXe2ogeZzYylcnFAQ++aVvAhBJCMkMADIeef6iGkQpSYGvQ Vpr/nu4//WN7fDrQUmXqBjQJjmEXyNZO5LmRQMnHAW5wRu6FbztriXPaVgtt0Hvt S8QnYh/lRmABkR1gcgKtsT1P6hhJEOd9yZVIXJWtGr/dZ/KDrpq9BGxWWfeI7f/9 +cGQO1MDt5ymfTf4uD+QJzIVkhB0yz54gsa94E6z2F9kzc79mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPr105QO6yVP3oOskA97KzRFJpFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZGM2 NzQwMi1iYTIxLTQ4ZDgtOTk3My0zNzE2OTMzOGIxOTQvZjM0ODU2MjUtOTY4OC0z MDRhLWI3Y2UtMzlhNWY2OTgyODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWRjNjc0MDItYmEyMS00OGQ4LTk5 NzMtMzcxNjkzMzhiMTk0LzFkYzY3NDAyLWJhMjEtNDhkOC05OTczLTM3MTY5MzM4 YjE5NC5jcmwwHwYDVR0jBBgwFoAUz+GVb+Ct3hVywh/PA4W5u4cIHcEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZGM2NzQwMi1iYTIxLTQ4ZDgtOTk3My0zNzE2 OTMzOGIxOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr60lgmca3AokacHZBx4LrxTLwKzS9gOhy8BE5+NsY9Q3/UYRj31Phk Gj0HAHEbr7bSQpTDUsGSzMJdIzkQuMEFGepWh0QdFygbwq1Ors0U944lnE4aoEQd 3ocnFXHiDEOUO0+SGdZga9AG8dxsC2J9uUj4ZooxhTPTbk1oLSYvYJdu8i73Vzp9 JVujKTBF9TIwtvxJ2j2/P4nFl4eyo7KU357y43wKgiYdc0NC18DrjfjgKKFWKY2t 2imeBD+AR/WAE1hvnK7G+zFJY30b9QN9rUdfpiq/fbwH1LtIFiyorXcy+/vbD2ev DGiNu5HFWf89mp5YWX4KBDk+VbCG1LY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:39 2025 by rpki-client