$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/726d2601-d90e-3525-b3c0-20a59786df1f.roa File: 726d2601-d90e-3525-b3c0-20a59786df1f.roa (raw, json) Hash identifier: kwOJ2SzbhG1xYtLcNkHvs6s56nRx3HoIfXqnuSNNYCc= Subject key identifier: 33:79:DF:C0:92:88:37:80:6E:AB:02:D8:06:F1:AE:7F:3A:94:EA:60 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584BBB75917927DD96EA92438980 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/726d2601-d90e-3525-b3c0-20a59786df1f.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 394708 IP address blocks: 216.255.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:91:79:27:dd:96:ea:92:43:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=e92c04c6-dcd3-4f9a-a42a-64bca0cf8949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:59:4c:26:39:f8:4e:11:cc:60:7c:96:b5: bc:14:19:cb:7e:de:ba:ce:72:9a:54:af:59:3f:56: 11:0d:f4:aa:84:aa:dc:6e:f6:a4:31:af:eb:b9:a2: 3d:76:4a:6b:58:90:fa:8e:6c:13:08:ea:86:06:97: 97:ad:12:69:ae:5e:4c:9b:59:53:5f:35:42:e0:b3: fc:0e:81:3d:de:da:c6:c4:4c:eb:94:65:11:e0:0c: 0e:98:8e:92:af:0b:b6:a0:3b:86:91:55:e9:16:a1: e7:ec:c4:d6:98:0d:dc:98:de:1b:51:09:85:a9:eb: 48:54:ca:8e:99:90:b9:24:56:f9:cc:f4:f9:a3:e1: e7:b4:5b:44:0b:0f:c3:fe:6b:ed:72:1c:5b:f2:b2: a2:3e:59:c7:90:21:c9:97:8c:1b:67:ec:49:7b:23: 50:91:08:fd:5b:74:fd:20:db:07:1f:31:24:5b:52: 3f:04:cd:38:9f:66:c5:93:c2:19:5c:d9:4d:50:e7: 02:c2:b7:d2:e5:5e:b9:99:04:8c:82:d9:6e:1a:41: 5c:8d:be:69:f9:77:22:3c:f5:e3:74:15:02:b2:ab: fa:c5:23:2b:de:d1:6e:94:ee:03:27:bf:73:f2:3a: 6e:cd:e1:83:99:4b:e0:76:89:0e:f1:69:c4:9b:9e: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:79:DF:C0:92:88:37:80:6E:AB:02:D8:06:F1:AE:7F:3A:94:EA:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/726d2601-d90e-3525-b3c0-20a59786df1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:e6:64:12:18:1d:3c:0b:9d:99:38:f8:17:ed:b1:59:7e:60: ad:38:f4:86:15:d6:1e:ca:1d:71:9e:12:b2:28:f5:66:c4:31: 7f:a5:14:9b:b3:d3:e0:8e:06:fa:e9:91:62:b4:7e:c9:67:d5: ea:0a:f3:e1:fe:a0:bf:ac:71:97:11:a7:78:e0:a8:9b:c4:93: c8:4e:32:29:0b:ec:1a:94:4c:0c:61:65:60:47:aa:aa:7c:2b: e3:99:82:3b:ef:98:3b:d1:40:39:a4:6b:f6:e7:d4:75:2e:26: 8e:24:6b:0c:b8:ec:49:c3:49:d7:c1:09:1c:b1:91:cb:5d:02: 54:5b:09:4d:f5:d8:46:ad:48:c5:fd:be:0b:cf:57:c4:3a:22: 0f:3c:21:f9:b8:e9:da:2c:85:a7:fe:19:11:04:64:74:d0:6f: a7:1a:bb:01:6e:4b:04:56:21:9e:1d:ce:26:a7:e6:08:67:73: 48:da:a8:16:c4:8a:8f:88:84:8d:36:ce:8a:6f:e5:cc:c1:34: e5:02:73:52:c8:f8:70:0d:91:43:cd:e9:3f:5f:97:ca:e8:14: dd:3d:fb:35:b1:3f:6a:db:2d:be:04:72:de:a5:9c:34:eb:d3: 56:52:08:dc:d6:9d:d9:3e:b7:1f:64:1f:07:a4:4b:72:8c:16: 12:16:68:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZF5J92W6pJDiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTkyYzA0YzYtZGNkMy00ZjlhLWE0MmEtNjRiY2EwY2Y4OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumtZTCY5+E4RzGB8lrW8FBnLft66znKaVK9Z P1YRDfSqhKrcbvakMa/ruaI9dkprWJD6jmwTCOqGBpeXrRJprl5Mm1lTXzVC4LP8 DoE93trGxEzrlGUR4AwOmI6Srwu2oDuGkVXpFqHn7MTWmA3cmN4bUQmFqetIVMqO mZC5JFb5zPT5o+HntFtECw/D/mvtchxb8rKiPlnHkCHJl4wbZ+xJeyNQkQj9W3T9 INsHHzEkW1I/BM04n2bFk8IZXNlNUOcCwrfS5V65mQSMgtluGkFcjb5p+XciPPXj dBUCsqv6xSMr3tFulO4DJ79z8jpuzeGDmUvgdokO8WnEm56/gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDN538CSiDeAbqsC2Abxrn86lOpgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNzI2ZDI2MDEtZDkwZS0z NTI1LWIzYzAtMjBhNTk3ODZkZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2P8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXmZBIYHTwLnZk4+BftsVl+YK049IYV1h7KHXGeErIo9WbEMX+lFJuz 0+COBvrpkWK0fsln1eoK8+H+oL+scZcRp3jgqJvEk8hOMikL7BqUTAxhZWBHqqp8 K+OZgjvvmDvRQDmka/bn1HUuJo4kawy47EnDSdfBCRyxkctdAlRbCU312EatSMX9 vgvPV8Q6Ig88Ifm46doshaf+GREEZHTQb6cauwFuSwRWIZ4dzian5ghnc0jaqBbE io+IhI02zopv5czBNOUCc1LI+HANkUPN6T9fl8roFN09+zWxP2rbLb4Ect6lnDTr 01ZSCNzWndk+tx9kHwekS3KMFhIWaEU= -----END CERTIFICATE-----Generated at Wed Nov 5 01:37:13 2025 by rpki-client