$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/3c51508c-e229-3495-972e-46feecd4c139.roa File: 3c51508c-e229-3495-972e-46feecd4c139.roa (raw, json) Hash identifier: AbkQmNxZZNTKhZPGFJgerdBgGtA8z9lQmai/A4g6FoY= Subject key identifier: E4:3C:CF:E2:41:F6:76:2F:3A:CB:57:43:D3:0F:29:1F:BA:C1:F6:1D Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584BA667AF08BC52CA00355171C0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/3c51508c-e229-3495-972e-46feecd4c139.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13536 IP address blocks: 216.114.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:af:08:bc:52:ca:00:35:51:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=659b0a59-5258-44d8-9db0-9305a70793f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:e0:ff:64:f7:2f:2e:51:cc:d4:7c:39:00: 27:20:e9:bd:0a:df:a3:e1:e9:5f:b9:06:e9:b6:4e: 14:4a:0d:9b:09:ae:4c:48:59:dc:6a:b0:75:f2:e0: e5:c9:a9:42:a3:d2:74:00:c4:5b:c6:d9:84:ca:de: d4:90:5f:ba:2d:f2:94:4a:80:ab:ae:7c:78:69:e4: da:a9:fd:0b:fa:48:52:50:eb:b1:53:ee:88:72:be: 27:ad:7c:bb:ff:c0:aa:d1:c4:f0:0e:7f:16:7a:c8: 45:2b:6e:b2:61:d1:86:d7:80:30:46:7a:a6:88:83: 5d:7a:7b:68:b9:03:0a:86:ec:8d:86:65:5c:11:bb: 4c:12:ef:bc:5e:f7:fd:6f:04:81:94:53:7c:93:4f: 63:56:8b:c6:23:9e:db:dc:99:23:a9:cb:d0:d6:b8: dd:9e:13:1f:64:9d:a2:71:ec:6a:76:46:85:dc:1c: 46:78:b8:b2:f3:9f:5e:eb:8a:53:c2:ad:eb:eb:66: 9c:02:35:83:fd:8c:d6:29:c5:9f:5b:47:64:00:3c: eb:a0:33:2b:6a:d7:8d:57:ef:ad:3e:5d:b7:a3:61: c2:d8:5c:2b:ac:0e:64:76:16:10:31:59:3b:e4:52: ea:3c:98:54:cc:62:77:62:df:c5:23:bb:44:1b:4d: 01:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3C:CF:E2:41:F6:76:2F:3A:CB:57:43:D3:0F:29:1F:BA:C1:F6:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/3c51508c-e229-3495-972e-46feecd4c139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.114.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:71:2d:ae:a8:f8:e8:02:8d:03:34:7d:18:ef:26:43:61:f9: 40:19:ae:ce:8c:6c:fd:93:1b:88:cd:bc:68:42:13:70:92:fa: d1:57:f3:e5:9c:96:67:b4:8a:1c:04:7c:ad:fd:46:bc:a0:31: 7d:cf:6c:67:6f:2a:c8:5a:a9:f7:78:38:38:7f:38:da:90:c6: 3c:46:44:d9:4c:26:a8:42:88:57:29:2b:d8:1c:4a:d3:1e:ed: f8:31:20:c0:90:02:cf:ec:7c:1e:a3:a0:df:ee:e4:07:6e:cd: db:14:87:93:43:31:7c:0c:54:8f:56:52:23:b6:6a:3d:94:76: 28:31:f6:85:e0:c3:4e:39:92:95:6b:5b:bd:e8:b8:bd:94:bd: e4:41:f9:7a:d7:11:20:08:91:7b:65:6e:57:cd:b6:9c:57:1c: 35:2a:0a:79:25:42:55:d2:2b:71:fe:5d:78:3b:99:be:97:9e: fe:f7:5c:e1:6c:e2:a5:44:cb:9d:40:f4:2b:14:f0:81:37:09: 12:d8:fc:6f:f7:67:08:3a:3f:f5:d9:ad:7e:40:38:41:af:e8: 77:3d:4d:66:4b:a0:5f:fa:22:e9:ab:b7:cc:96:11:0f:73:52: af:63:b9:59:14:76:6b:2e:b8:f5:10:50:af:69:2b:89:73:fa: f5:02:1f:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ68IvFLKADVRccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NjU5YjBhNTktNTI1OC00NGQ4LTlkYjAtOTMwNWE3MDc5M2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmjg/2T3Ly5RzNR8OQAnIOm9Ct+j4elfuQbp tk4USg2bCa5MSFncarB18uDlyalCo9J0AMRbxtmEyt7UkF+6LfKUSoCrrnx4aeTa qf0L+khSUOuxU+6Icr4nrXy7/8Cq0cTwDn8WeshFK26yYdGG14AwRnqmiINdento uQMKhuyNhmVcEbtMEu+8Xvf9bwSBlFN8k09jVovGI57b3JkjqcvQ1rjdnhMfZJ2i cexqdkaF3BxGeLiy859e64pTwq3r62acAjWD/YzWKcWfW0dkADzroDMrateNV++t Pl23o2HC2FwrrA5kdhYQMVk75FLqPJhUzGJ3Yt/FI7tEG00B6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQ8z+JB9nYvOstXQ9MPKR+6wfYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvM2M1MTUwOGMtZTIyOS0z NDk1LTk3MmUtNDZmZWVjZDRjMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhxLa6o+OgCjQM0fRjvJkNh+UAZrs6MbP2TG4jNvGhCE3CS+tFX8+Wc lme0ihwEfK39RrygMX3PbGdvKshaqfd4ODh/ONqQxjxGRNlMJqhCiFcpK9gcStMe 7fgxIMCQAs/sfB6joN/u5AduzdsUh5NDMXwMVI9WUiO2aj2Udigx9oXgw045kpVr W73ouL2UveRB+XrXESAIkXtlblfNtpxXHDUqCnklQlXSK3H+XXg7mb6Xnv73XOFs 4qVEy51A9CsU8IE3CRLY/G/3Zwg6P/XZrX5AOEGv6Hc9TWZLoF/6Iumrt8yWEQ9z Uq9juVkUdmsuuPUQUK9pK4lz+vUCH6w= -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:17 2025 by rpki-client