$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/806d23d8-c66d-37f4-8690-3d333fee3c39.roa File: 806d23d8-c66d-37f4-8690-3d333fee3c39.roa (raw, json) Hash identifier: ZL2TpEy5eLUCv++pO5iK5OFvgN1OlMa8D2tds2hNE1Y= Subject key identifier: 3C:80:9D:94:DC:29:5F:BC:7D:D5:38:D0:01:55:8C:B0:1B:31:74:09 Certificate issuer: /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418 Certificate serial: 010D0C9F4328584B609CA9E0B26D153A9D74FD80 Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/806d23d8-c66d-37f4-8690-3d333fee3c39.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 396982 IP address blocks: 216.71.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:a9:e0:b2:6d:15:3a:9d:74:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=11cdf454-a21a-43e9-9468-f510579e009c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:eb:e0:c4:a2:8d:93:be:2f:0f:d1:0c:73: fc:6a:54:17:6a:0b:0c:4a:09:7a:d5:4f:92:ad:05: 97:f1:b1:8c:2a:68:78:41:02:9a:c5:4f:38:79:70: 25:8c:16:e9:1e:bb:4c:9e:dc:ce:34:d5:7a:f1:2a: 24:7b:45:b3:db:6b:49:47:4b:0b:e1:35:b8:5e:57: ca:74:f1:1a:57:6b:01:d3:3a:5d:83:96:37:10:86: 87:2f:15:7c:d5:88:ea:55:d0:ac:00:a6:d2:94:a8: 5a:ab:17:b6:38:b8:14:2c:88:cd:2d:bb:f9:46:4a: 56:ce:17:99:fa:99:88:12:6e:28:f3:bb:35:21:87: 34:d0:61:7b:ff:b2:6b:78:c6:37:fb:9c:3a:02:f8: b3:0a:0a:98:e8:e0:28:64:23:88:96:6d:e1:fa:39: 3d:9e:7c:1c:76:4b:00:4a:23:ca:d5:40:72:11:0d: 6e:0a:d1:ae:8c:62:38:3c:15:0f:bc:ee:b0:4b:aa: 3b:9c:65:1e:df:43:e6:de:0d:f2:3b:d2:90:a6:6f: fd:31:96:4e:d6:e3:47:29:bf:c0:9b:d6:76:4f:08: ea:61:b6:36:43:0e:82:5d:3f:8d:0e:4f:50:7b:4e: 1e:e8:7d:3d:43:d7:b3:ad:0b:ca:5a:30:3f:3e:d1: 44:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:80:9D:94:DC:29:5F:BC:7D:D5:38:D0:01:55:8C:B0:1B:31:74:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/806d23d8-c66d-37f4-8690-3d333fee3c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl X509v3 Authority Key Identifier: keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer sbgp-ipAddrBlock: critical IPv4: 216.71.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:c0:a5:fe:5a:db:e3:b4:98:6f:f4:65:2b:d3:dd:65:3b:cc: ad:02:ea:e3:f2:d3:9c:ce:3c:ac:2c:59:5d:44:30:46:db:85: b2:53:24:fb:14:b6:d9:0e:6e:99:3e:57:d3:f0:c6:1b:23:49: fd:fa:e7:f2:96:b8:bb:a1:f8:a9:3b:cc:b0:ff:58:b0:0f:ab: 45:ab:fa:23:02:a5:b5:72:17:33:cd:17:b1:18:3e:f4:91:7c: 60:e3:92:26:99:19:f7:27:8a:11:f1:00:18:d6:d6:6a:66:c3: 40:23:55:b9:31:a0:65:e3:5b:94:92:91:6e:c7:47:be:34:52: 31:25:fa:c2:7c:7d:a0:2e:e3:7b:12:f2:f6:64:ea:98:b7:77: 83:e7:c8:a4:b0:6c:5f:9d:b9:f4:66:61:b8:1d:5d:2a:a9:9d: 62:9b:f1:97:ec:c2:8c:a3:6b:40:1c:ab:46:47:3c:b7:f3:db: d4:75:e3:b9:e9:3a:61:0e:89:da:90:df:3d:64:9c:31:7a:43: c2:54:de:c2:4c:82:ad:6b:b1:e9:18:a6:13:0d:11:b3:4d:ca: 80:05:5d:2f:55:b0:3e:48:7a:18:ff:72:31:e9:6f:d4:23:65: 19:e5:b2:bd:e7:eb:1d:6c:82:ff:7f:89:97:63:a4:75:11:a2: c5:5a:2b:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnKngsm0VOp10/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzNTVhYTMtY2YyOC00YTUzLTk2YzUtZGRmM2JiODAw NDE4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk MTFjZGY0NTQtYTIxYS00M2U5LTk0NjgtZjUxMDU3OWUwMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOzr4MSijZO+Lw/RDHP8alQXagsMSgl61U+S rQWX8bGMKmh4QQKaxU84eXAljBbpHrtMntzONNV68Soke0Wz22tJR0sL4TW4XlfK dPEaV2sB0zpdg5Y3EIaHLxV81YjqVdCsAKbSlKhaqxe2OLgULIjNLbv5RkpWzheZ +pmIEm4o87s1IYc00GF7/7JreMY3+5w6AvizCgqY6OAoZCOIlm3h+jk9nnwcdksA SiPK1UByEQ1uCtGujGI4PBUPvO6wS6o7nGUe30Pm3g3yO9KQpm/9MZZO1uNHKb/A m9Z2TwjqYbY2Qw6CXT+NDk9Qe04e6H09Q9ezrQvKWjA/PtFEqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyAnZTcKV+8fdU40AFVjLAbMXQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjM1 NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYzYmI4MDA0MTgvODA2ZDIzZDgtYzY2ZC0z N2Y0LTg2OTAtM2QzMzNmZWUzYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGIzNTVhYTMtY2YyOC00YTUzLTk2 YzUtZGRmM2JiODAwNDE4LzhiMzU1YWEzLWNmMjgtNGE1My05NmM1LWRkZjNiYjgw MDQxOC5jcmwwHwYDVR0jBBgwFoAUy1Kokcx0j44ypXPtDxqDz0H1JHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjM1NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYz YmI4MDA0MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTApf5a2+O0mG/0ZSvT3WU7zK0C6uPy05zOPKwsWV1EMEbbhbJTJPsU ttkObpk+V9PwxhsjSf365/KWuLuh+Kk7zLD/WLAPq0Wr+iMCpbVyFzPNF7EYPvSR fGDjkiaZGfcnihHxABjW1mpmw0AjVbkxoGXjW5SSkW7HR740UjEl+sJ8faAu43sS 8vZk6pi3d4PnyKSwbF+dufRmYbgdXSqpnWKb8Zfswoyja0Acq0ZHPLfz29R147np OmEOidqQ3z1knDF6Q8JU3sJMgq1rsekYphMNEbNNyoAFXS9VsD5Iehj/cjHpb9Qj ZRnlsr3n6x1sgv9/iZdjpHURosVaK1c= -----END CERTIFICATE-----Generated at Wed Nov 5 13:18:04 2025 by rpki-client