$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa File: 2c9098e1-8590-3ce4-a313-bf25729c2190.roa (raw, json) Hash identifier: 1LzEui/8xERO+UqmBL9Qn8/5qq+/qxC8n7yahnovVzc= Subject key identifier: 5F:1E:A5:84:EF:F4:E8:50:56:E5:57:DE:A2:81:74:78:42:DD:25:38 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584B398705924392F02604AA1780 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 398420 IP address blocks: 216.246.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:05:92:43:92:f0:26:04:aa:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=2317c5ec-403c-47a3-a196-6da8937fc440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:31:98:b3:61:5b:71:5b:ab:a7:86:8c:95:a5: 29:40:52:67:3b:5b:2e:de:29:45:3e:9d:48:6d:78: 65:f4:c0:09:48:5c:b4:85:b9:bb:59:0b:1d:ba:41: 3d:e1:f7:2c:ad:09:a4:16:e3:34:05:74:ea:fb:e0: 9a:ec:ef:36:62:71:a7:df:c9:f1:a1:ea:3e:d7:3b: be:ea:63:9c:ed:1c:94:eb:bb:c8:e5:e0:c5:8f:61: 25:b2:8a:75:29:79:52:e8:ee:e6:fe:46:54:03:10: 61:38:be:7f:21:0d:ca:d3:d4:d8:13:e2:b5:47:68: 38:ee:5e:2f:fb:9c:cc:bb:cd:19:d1:76:87:d9:f3: b6:64:2d:f9:e7:b4:87:3b:62:ef:0f:2d:83:d8:6d: bf:b2:5b:d6:6f:c5:05:0b:b5:9b:df:5d:5b:dc:7b: 72:ac:1d:a5:41:78:df:dd:3c:c9:07:4b:b7:72:de: 64:06:85:a5:7e:e4:2e:d1:7e:54:ff:c0:5c:e0:a2: d8:7c:b9:ea:4b:cf:3e:86:0d:b4:f7:8e:12:9e:85: b6:dc:3d:3a:a5:7b:34:d3:85:35:4a:09:8b:1c:22: a5:a8:1c:bf:02:1a:b4:02:9b:e2:a7:4e:6b:0c:8a: 20:aa:08:e2:8b:82:07:23:ef:09:fc:15:65:be:45: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1E:A5:84:EF:F4:E8:50:56:E5:57:DE:A2:81:74:78:42:DD:25:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:79:8f:09:08:d8:cb:a3:42:11:f2:63:0b:8c:59:5b:38:a6: db:06:d0:13:a7:f2:c7:71:2c:95:11:ac:44:92:27:bf:92:ef: 57:5d:f2:fb:92:16:bc:e4:f2:a0:ea:f8:0b:8d:bf:ac:88:2c: 97:57:8e:c3:56:53:f7:45:75:3e:e8:51:48:b1:e8:ac:fc:53: 54:23:e8:8a:ed:1f:32:31:dd:74:96:36:0f:5b:7b:19:9c:53: 89:1d:1f:8a:20:32:58:68:6a:f5:b4:d4:db:84:c7:8e:da:40: de:bd:30:be:6b:50:fa:d3:9a:6f:3d:29:c7:38:8f:24:e0:73: 5a:4b:60:ee:bf:38:71:6a:fb:78:82:12:a8:8a:29:a0:7e:7d: d0:df:9b:db:e6:af:9c:bf:16:0a:4e:22:0e:e4:d3:08:93:32: 1a:6b:32:5a:10:e5:db:43:99:57:e0:58:47:fc:ba:1a:f7:3d: f3:82:42:5d:d0:f2:d7:c9:00:be:ce:65:56:39:4c:c6:c7:b9: e1:b2:9f:fa:61:f5:0b:23:0e:f0:36:78:14:2a:d3:b8:8a:13: 5c:f1:f2:9b:d5:07:75:38:a8:ff:03:29:6f:f7:88:97:69:8e: c1:6f:30:f8:90:92:6f:f6:d9:fb:e9:3b:34:52:b2:69:3b:d8: d9:d0:34:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwWSQ5LwJgSqF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk MjMxN2M1ZWMtNDAzYy00N2EzLWExOTYtNmRhODkzN2ZjNDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDGYs2FbcVurp4aMlaUpQFJnO1su3ilFPp1I bXhl9MAJSFy0hbm7WQsdukE94fcsrQmkFuM0BXTq++Ca7O82YnGn38nxoeo+1zu+ 6mOc7RyU67vI5eDFj2Elsop1KXlS6O7m/kZUAxBhOL5/IQ3K09TYE+K1R2g47l4v +5zMu80Z0XaH2fO2ZC3557SHO2LvDy2D2G2/slvWb8UFC7Wb311b3HtyrB2lQXjf 3TzJB0u3ct5kBoWlfuQu0X5U/8Bc4KLYfLnqS88+hg20944SnoW23D06pXs004U1 SgmLHCKlqBy/Ahq0Apvip05rDIogqgjii4IHI+8J/BVlvkXoiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8epYTv9OhQVuVX3qKBdHhC3SU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMmM5MDk4ZTEtODU5MC0z Y2U0LWEzMTMtYmYyNTcyOWMyMTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ5jwkI2MujQhHyYwuMWVs4ptsG0BOn8sdxLJURrESSJ7+S71dd8vuS Frzk8qDq+AuNv6yILJdXjsNWU/dFdT7oUUix6Kz8U1Qj6IrtHzIx3XSWNg9bexmc U4kdH4ogMlhoavW01NuEx47aQN69ML5rUPrTmm89Kcc4jyTgc1pLYO6/OHFq+3iC EqiKKaB+fdDfm9vmr5y/FgpOIg7k0wiTMhprMloQ5dtDmVfgWEf8uhr3PfOCQl3Q 8tfJAL7OZVY5TMbHueGyn/ph9QsjDvA2eBQq07iKE1zx8pvVB3U4qP8DKW/3iJdp jsFvMPiQkm/22fvpOzRSsmk72NnQNHs= -----END CERTIFICATE-----Generated at Wed Nov 5 19:15:58 2025 by rpki-client