$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa File: ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa (raw, json) Hash identifier: IZIKHEDILqBweHTAg0XDo0UEegpeLKXq4wS453cFXeg= Subject key identifier: 98:C9:2D:8C:DF:BC:8F:6F:04:89:69:47:D7:F1:7C:01:3C:6C:FE:73 Certificate issuer: /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Certificate serial: 010D0C9F4328584AECC1259A01AFB982281AB5C0 Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 10439 IP address blocks: 216.98.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:25:9a:01:af:b9:82:28:1a:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3c4ea4db-43c4-4fd9-875e-db34902923c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:13:d3:cd:e1:e2:b4:98:65:ed:d5:70:5c: 6f:71:35:8e:db:c9:cd:83:f1:c1:85:0d:ca:27:19: 46:a2:28:94:31:f3:8b:0a:0d:07:cd:c1:e2:24:4a: e1:23:59:6b:b5:d7:63:81:c0:93:33:2b:05:a3:3b: 28:2e:06:2a:43:18:c0:c1:28:52:18:87:9d:7a:7e: 91:6c:71:ae:0f:59:be:2a:19:cc:d6:6d:8a:95:bc: 93:0a:19:ba:fc:d4:85:c2:6c:c0:7d:a3:eb:1a:db: 5a:b2:38:33:07:0b:33:2b:c2:bf:af:ee:37:59:cf: 79:c9:c2:a9:9f:82:af:5c:9f:79:d2:92:46:c3:98: d3:2a:5c:33:53:1c:c8:c2:e2:9c:7a:43:28:69:fa: 16:59:3d:e9:09:55:d8:91:5c:c0:dd:67:79:22:14: 03:d6:27:a9:b5:a1:7d:8b:29:1f:4d:56:8c:d6:20: ad:cb:8d:3f:cd:73:ec:26:b9:b0:1c:00:b6:e5:8d: 5c:86:4d:4c:67:d6:8a:6b:9e:fe:01:c6:ab:d6:1a: 49:49:15:7b:6c:6b:23:3e:da:6b:43:e7:9e:0c:52: c1:44:fb:b9:0a:f4:e4:8a:5a:d1:e0:3f:8f:00:9c: 1e:91:37:c7:8e:28:c8:25:7f:d8:e2:fc:d7:be:f8: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C9:2D:8C:DF:BC:8F:6F:04:89:69:47:D7:F1:7C:01:3C:6C:FE:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl X509v3 Authority Key Identifier: keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer sbgp-ipAddrBlock: critical IPv4: 216.98.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0d:16:6b:5e:d5:c6:14:46:33:bd:5d:71:50:30:6e:88:c4: 27:45:d6:78:55:d3:07:30:3d:8f:57:18:ca:8d:ae:8d:82:4c: 2d:62:70:f4:67:68:15:f1:b2:6c:71:4e:51:ce:f9:e1:1c:7a: d6:5c:06:6e:c7:37:af:a3:86:1e:20:1f:e7:8b:9b:cc:18:b7: 21:e5:d3:c3:78:5a:41:21:65:03:db:47:34:d2:1c:15:a1:05: 10:03:fa:e4:52:0e:60:84:2f:80:5f:e9:8d:c8:8a:f5:e3:b3: 78:fc:67:e8:2a:f6:58:67:e4:41:cd:85:ed:db:6a:a3:30:b8: 46:c6:db:19:dd:27:38:93:96:11:86:ed:0f:be:8e:c3:ec:50: 6f:3a:16:91:da:0f:b3:9c:7b:5a:58:2a:1e:34:db:26:1b:bd: 66:bd:06:d6:8a:6c:9d:76:0c:57:0f:23:bb:55:c0:55:0a:3e: 56:08:a1:ad:68:34:63:72:0f:67:7b:c7:69:a2:70:78:a6:ec: 7e:6c:43:56:2a:29:0f:54:1e:66:13:80:bf:0d:d4:d3:cd:f2: 8c:07:5c:04:61:3f:3e:17:76:c5:7f:b4:a1:cf:4d:24:c7:ad: 0a:c2:25:90:76:32:8a:a0:ea:88:b7:f5:c3:fd:79:7d:91:74: d3:a3:b0:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSWaAa+5gigatcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYyZWQ4N2UtMjdmOS00MTRjLWE3YWYtMmI1YjVmZmEz ZjY1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2M0ZWE0ZGItNDNjNC00ZmQ5LTg3NWUtZGIzNDkwMjkyM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk0T083h4rSYZe3VcFxvcTWO28nNg/HBhQ3K JxlGoiiUMfOLCg0HzcHiJErhI1lrtddjgcCTMysFozsoLgYqQxjAwShSGIeden6R bHGuD1m+KhnM1m2KlbyTChm6/NSFwmzAfaPrGttasjgzBwszK8K/r+43Wc95ycKp n4KvXJ950pJGw5jTKlwzUxzIwuKcekMoafoWWT3pCVXYkVzA3Wd5IhQD1ieptaF9 iykfTVaM1iCty40/zXPsJrmwHAC25Y1chk1MZ9aKa57+Acar1hpJSRV7bGsjPtpr Q+eeDFLBRPu5CvTkilrR4D+PAJwekTfHjijIJX/Y4vzXvvgBcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjJLYzfvI9vBIlpR9fxfAE8bP5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJl ZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZmYTNmNjUvZWM3ZmY2MzctNDgxZC0z ZGFlLWJmY2YtMzg2ZmEwNmIxYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmYyZWQ4N2UtMjdmOS00MTRjLWE3 YWYtMmI1YjVmZmEzZjY1LzJmMmVkODdlLTI3ZjktNDE0Yy1hN2FmLTJiNWI1ZmZh M2Y2NS5jcmwwHwYDVR0jBBgwFoAU/vz7pQfj5FlRiYJFDoOE89rVKHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjVi NWZmYTNmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2GKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIINFmte1cYURjO9XXFQMG6IxCdF1nhV0wcwPY9XGMqNro2CTC1icPRn aBXxsmxxTlHO+eEcetZcBm7HN6+jhh4gH+eLm8wYtyHl08N4WkEhZQPbRzTSHBWh BRAD+uRSDmCEL4Bf6Y3IivXjs3j8Z+gq9lhn5EHNhe3baqMwuEbG2xndJziTlhGG 7Q++jsPsUG86FpHaD7Oce1pYKh402yYbvWa9BtaKbJ12DFcPI7tVwFUKPlYIoa1o NGNyD2d7x2micHim7H5sQ1YqKQ9UHmYTgL8N1NPN8owHXARhPz4XdsV/tKHPTSTH rQrCJZB2Moqg6oi39cP9eX2RdNOjsFY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:34:41 2025 by rpki-client