$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/0f5eb37d-0715-3678-aaf1-023715a24565.roa File: 0f5eb37d-0715-3678-aaf1-023715a24565.roa (raw, json) Hash identifier: zUFCB3VumHXdhKr8BsSIU3CjWS25itNxGEcDuNb+a7o= Subject key identifier: E2:00:6A:CA:1E:37:59:87:8F:DA:15:64:7B:DA:7F:41:F4:6D:15:CB Certificate issuer: /CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72 Certificate serial: 010D0C9F4328584B382036882030826D1B7FF500 Authority key identifier: 82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/0f5eb37d-0715-3678-aaf1-023715a24565.roa Signing time: Wed 17 Sep 2025 00:57:52 +0000 ROA not before: Wed 17 Sep 2025 00:57:52 +0000 ROA not after: Tue 16 Dec 2025 01:57:52 +0000 asID: 18108 IP address blocks: 216.14.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:20:36:88:20:30:82:6d:1b:7f:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72 Validity Not Before: Sep 17 00:57:52 2025 GMT Not After : Dec 16 01:57:52 2025 GMT Subject: CN=e473217a-6423-407a-a8f8-f734981b8916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b1:6f:cf:17:c2:6c:af:4a:d1:9e:56:a8:11: d2:60:38:ab:b4:1b:9f:b0:5e:43:65:7a:b2:73:d2: 3f:bd:67:e0:af:5d:93:4c:2d:b2:28:43:93:79:cc: 7c:88:7f:ed:3b:8c:1c:63:8e:3f:39:73:13:e9:c5: 0f:c4:5d:a8:cf:d2:e5:7b:75:be:95:f6:ff:04:05: 0e:5b:e8:af:62:d9:12:ce:8f:a7:6b:08:af:24:b6: bc:28:fe:6f:19:e2:51:9a:b1:b9:0d:a8:14:ff:a6: b1:03:6e:3b:31:b1:f9:41:95:b2:eb:00:d8:23:c8: 53:32:f1:c7:0b:a4:3e:c3:75:fd:70:8e:44:65:d8: 8d:17:3a:5a:06:5e:65:6d:32:a5:f4:24:9f:9f:e2: 1f:74:81:f6:f3:60:ff:69:8b:c8:8c:f2:68:49:7c: 93:50:41:e0:45:fd:cf:80:0a:01:23:80:56:c1:84: e1:a2:ef:11:0e:51:29:07:73:d7:4d:52:6a:3c:86: e6:dd:94:61:09:b1:38:13:6e:01:7c:bf:ab:80:9a: 83:f7:ed:d0:ad:ea:45:0c:66:9f:1a:91:08:c4:4a: d0:fe:ca:60:7b:84:51:d2:6f:b3:86:fa:c8:8f:37: ea:7a:ac:57:f8:8c:34:cd:30:c7:5e:bd:bf:9d:ac: 2d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:00:6A:CA:1E:37:59:87:8F:DA:15:64:7B:DA:7F:41:F4:6D:15:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/0f5eb37d-0715-3678-aaf1-023715a24565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl X509v3 Authority Key Identifier: keyid:82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer sbgp-ipAddrBlock: critical IPv4: 216.14.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8d:8e:d0:03:c9:f0:dd:01:f0:5a:e5:1d:87:67:45:68:12: af:64:97:13:05:45:f1:9c:45:7c:07:bf:1c:41:7e:a2:e9:fb: 9e:a6:10:b2:21:75:b5:71:6f:bd:e4:df:46:7d:6a:1e:0c:28: 5d:3e:f0:91:d4:aa:50:bc:1e:5f:5e:9e:93:78:6a:82:93:4f: ea:e2:a1:6b:d1:57:0d:e1:e5:3a:90:7b:44:fd:f7:9b:7d:9a: fb:b8:88:53:ed:58:24:8e:5b:06:a9:c8:bf:29:56:f2:dc:56: e4:7a:0f:10:43:00:b9:ae:4f:c4:df:d3:b2:6f:6a:34:c7:4d: cb:3b:46:64:ce:0d:3b:b4:ef:9f:c3:63:bd:da:cf:62:21:a6: 1b:2c:24:9d:bb:c8:ab:2d:b3:41:50:fd:2c:73:8b:1d:92:cb: 74:7e:9b:65:bf:eb:f2:dc:37:bb:ff:ef:b3:c5:ab:59:67:73: 97:90:d2:26:c8:99:39:92:d9:f6:4f:99:1b:76:5f:20:d0:79: 7c:0e:42:02:87:6a:92:f7:2d:56:68:bb:6b:6a:d0:ed:1f:c4: 97:ac:85:38:e4:ed:72:db:ab:b9:ea:29:46:f8:85:3d:4c:54: 89:1a:a5:dd:cc:43:2a:24:1d:0b:6e:a8:b7:44:17:18:37:4d: 48:49:fc:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IDaIIDCCbRt/9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxYzBlYzgtNjRhOS00YzUxLWJkNzctYjI4ZTY5M2Ez ZTcyMB4XDTI1MDkxNzAwNTc1MloXDTI1MTIxNjAxNTc1MlowLzEtMCsGA1UEAxMk ZTQ3MzIxN2EtNjQyMy00MDdhLWE4ZjgtZjczNDk4MWI4OTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLFvzxfCbK9K0Z5WqBHSYDirtBufsF5DZXqy c9I/vWfgr12TTC2yKEOTecx8iH/tO4wcY44/OXMT6cUPxF2oz9Lle3W+lfb/BAUO W+ivYtkSzo+nawivJLa8KP5vGeJRmrG5DagU/6axA247MbH5QZWy6wDYI8hTMvHH C6Q+w3X9cI5EZdiNFzpaBl5lbTKl9CSfn+IfdIH282D/aYvIjPJoSXyTUEHgRf3P gAoBI4BWwYThou8RDlEpB3PXTVJqPIbm3ZRhCbE4E24BfL+rgJqD9+3QrepFDGaf GpEIxErQ/spge4RR0m+zhvrIjzfqeqxX+Iw0zTDHXr2/nawt6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIAasoeN1mHj9oVZHvaf0H0bRXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NjFj MGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhlNjkzYTNlNzIvMGY1ZWIzN2QtMDcxNS0z Njc4LWFhZjEtMDIzNzE1YTI0NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTYxYzBlYzgtNjRhOS00YzUxLWJk NzctYjI4ZTY5M2EzZTcyLzk2MWMwZWM4LTY0YTktNGM1MS1iZDc3LWIyOGU2OTNh M2U3Mi5jcmwwHwYDVR0jBBgwFoAUgr/tJi5XV5QT3YvMVzRT2EbNguQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85NjFjMGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhl NjkzYTNlNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2A7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaNjtADyfDdAfBa5R2HZ0VoEq9klxMFRfGcRXwHvxxBfqLp+56mELIh dbVxb73k30Z9ah4MKF0+8JHUqlC8Hl9enpN4aoKTT+rioWvRVw3h5TqQe0T995t9 mvu4iFPtWCSOWwapyL8pVvLcVuR6DxBDALmuT8Tf07JvajTHTcs7RmTODTu075/D Y73az2IhphssJJ27yKsts0FQ/Sxzix2Sy3R+m2W/6/LcN7v/77PFq1lnc5eQ0ibI mTmS2fZPmRt2XyDQeXwOQgKHapL3LVZou2tq0O0fxJeshTjk7XLbq7nqKUb4hT1M VIkapd3MQyokHQtuqLdEFxg3TUhJ/IU= -----END CERTIFICATE-----Generated at Wed Nov 5 15:29:20 2025 by rpki-client