$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/8213878d-35dd-30b6-ac09-e612e049057a.roa File: 8213878d-35dd-30b6-ac09-e612e049057a.roa (raw, json) Hash identifier: +Yb5uROJTuMcdo3kdLGVoESSGY18y2nHM5p32P8Wj9E= Subject key identifier: B4:D6:1B:91:A2:80:BC:2C:CD:64:00:C7:4B:67:2E:D8:49:D9:ED:AE Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F4328584BBE4030C24552C1B69B831480 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/8213878d-35dd-30b6-ac09-e612e049057a.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 31875 IP address blocks: 216.21.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:30:c2:45:52:c1:b6:9b:83:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=0b4f2635-3bda-4530-8015-2870f381390d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:00:36:8d:78:67:69:db:bc:8c:73:30:54: 76:5d:c4:ee:21:d1:58:4a:e7:f0:1b:c3:4b:67:3d: e6:78:03:ee:e8:8f:44:88:4e:28:f2:a0:69:d8:65: bb:3e:5f:11:e6:0e:f7:f5:45:9b:52:9f:b5:aa:60: a3:35:e6:e6:aa:79:9f:7b:79:58:91:7e:a1:3f:69: a6:48:4c:de:f2:86:a8:9e:b5:fc:4e:24:8b:00:a5: 8c:e5:f2:ec:42:3c:ae:31:4c:e2:78:6d:5a:d9:b8: e9:02:60:79:d3:27:e7:0d:b7:dc:68:58:e7:f9:31: d8:97:ed:09:c9:8d:44:1c:95:a5:90:c8:e4:9a:1a: d6:e2:ec:33:76:79:75:84:4b:e4:82:aa:ae:64:ab: ec:5f:6a:64:81:9d:aa:bc:3d:19:4a:30:b7:aa:1a: ac:32:79:f7:c6:58:b4:c0:81:ca:c8:c2:bf:c1:0a: e3:c3:b8:12:db:85:f8:7d:ee:fb:91:a6:33:58:ae: 5c:d3:80:f5:a1:ca:d7:a3:a5:25:ce:34:d0:bb:6c: 14:b0:f7:80:95:26:8d:fc:5a:fb:05:22:4f:2b:c5: af:94:96:99:cc:0a:e9:2d:b7:e9:2b:e3:1a:e1:ca: 60:f5:d2:27:81:03:fc:ff:49:ba:1f:a0:0c:d5:4d: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D6:1B:91:A2:80:BC:2C:CD:64:00:C7:4B:67:2E:D8:49:D9:ED:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/8213878d-35dd-30b6-ac09-e612e049057a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv4: 216.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:42:9c:89:a5:d8:24:6b:1d:61:3a:b0:14:6a:70:a8:84:64: 6a:60:a1:7a:d9:a4:c0:9b:cd:8b:21:4e:62:e8:a1:b7:08:45: e1:d5:a5:6f:44:c9:b4:ad:4b:20:ac:18:ce:52:ed:b9:53:0a: 86:c8:cb:4b:3e:53:d8:7a:e8:45:cc:05:e6:83:2e:c7:0d:98: ef:a0:08:70:4b:31:b9:ca:e8:80:6a:dd:67:a9:c7:e7:6d:d2: d9:43:b9:43:cf:10:33:c9:c5:90:1d:fa:40:2c:aa:d4:77:fc: a7:c0:b7:65:42:3f:60:ce:54:82:85:20:d8:95:8a:72:e4:77: 72:f9:fd:01:64:2f:0e:4e:15:5a:84:71:7d:bf:12:96:33:93: 9c:81:eb:f4:51:c5:25:f9:57:e2:11:1d:83:a1:8c:76:2e:1c: 2b:fa:81:20:59:07:69:db:a7:e5:1f:18:44:0e:db:5c:88:6c: 2b:76:da:70:0f:36:6d:cf:ac:2e:0c:69:74:f4:e7:77:b7:8f: 40:05:e5:ab:78:d8:a6:13:0f:69:57:66:f7:0e:2a:cf:19:10: 48:40:b8:fa:f3:ee:54:b2:fa:3d:cf:54:df:c4:d8:6f:32:65: 00:f0:06:b3:51:df:49:e1:42:52:65:f7:60:33:90:09:0b:cb: 2b:6d:9f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDDCRVLBtpuDFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MGI0ZjI2MzUtM2JkYS00NTMwLTgwMTUtMjg3MGYzODEzOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQgANo14Z2nbvIxzMFR2XcTuIdFYSufwG8NL Zz3meAPu6I9EiE4o8qBp2GW7Pl8R5g739UWbUp+1qmCjNebmqnmfe3lYkX6hP2mm SEze8oaonrX8TiSLAKWM5fLsQjyuMUzieG1a2bjpAmB50yfnDbfcaFjn+THYl+0J yY1EHJWlkMjkmhrW4uwzdnl1hEvkgqquZKvsX2pkgZ2qvD0ZSjC3qhqsMnn3xli0 wIHKyMK/wQrjw7gS24X4fe77kaYzWK5c04D1ocrXo6UlzjTQu2wUsPeAlSaN/Fr7 BSJPK8WvlJaZzArpLbfpK+Ma4cpg9dIngQP8/0m6H6AM1U3gOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTWG5GigLwszWQAx0tnLthJ2e2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvODIxMzg3OGQtMzVkZC0z MGI2LWFjMDktZTYxMmUwNDkwNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2BXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFCnIml2CRrHWE6sBRqcKiEZGpgoXrZpMCbzYshTmLoobcIReHVpW9E ybStSyCsGM5S7blTCobIy0s+U9h66EXMBeaDLscNmO+gCHBLMbnK6IBq3Wepx+dt 0tlDuUPPEDPJxZAd+kAsqtR3/KfAt2VCP2DOVIKFINiVinLkd3L5/QFkLw5OFVqE cX2/EpYzk5yB6/RRxSX5V+IRHYOhjHYuHCv6gSBZB2nbp+UfGEQO21yIbCt22nAP Nm3PrC4MaXT053e3j0AF5at42KYTD2lXZvcOKs8ZEEhAuPrz7lSy+j3PVN/E2G8y ZQDwBrNR30nhQlJl92AzkAkLyyttn/Y= -----END CERTIFICATE-----Generated at Wed Nov 5 19:27:44 2025 by rpki-client