$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/654420ad-2cd4-344f-8fc5-b9688fcc1160.roa File: 654420ad-2cd4-344f-8fc5-b9688fcc1160.roa (raw, json) Hash identifier: 2FD3McIJpEArHAEJb4DVkfKmJkcszioTVGCepa0gjkw= Subject key identifier: 09:53:9D:35:CF:59:5C:A8:37:58:B9:11:C8:BD:12:0E:1E:D0:74:9D Certificate issuer: /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086 Certificate serial: 010D0C9F4328584AE5C670D27C60523AF32D36A0 Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/654420ad-2cd4-344f-8fc5-b9688fcc1160.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 174 IP address blocks: 216.98.249.0/24 maxlen: 24 216.98.250.0/24 maxlen: 24 216.98.251.0/24 maxlen: 24 216.98.252.0/24 maxlen: 24 216.98.253.0/24 maxlen: 24 216.98.254.0/24 maxlen: 24 216.98.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:70:d2:7c:60:52:3a:f3:2d:36:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086 Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=f61acf92-06f9-42e6-bffc-08d37cf56101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:6d:76:92:24:ce:d4:6f:59:35:95:84:d3: be:40:fc:a5:96:cd:d0:67:9a:cc:96:94:28:19:52: 09:d0:ad:87:1e:ee:25:36:e6:25:b3:ed:42:6c:0b: 7b:6d:25:a2:63:42:cd:d8:8b:e8:19:c6:a0:f6:6c: 4a:4f:67:9f:d5:e3:be:9d:43:00:63:c0:83:6b:78: ce:37:a6:76:74:cd:09:9f:90:dc:62:f8:9d:7d:86: 6f:81:25:20:5c:e4:ae:4a:02:36:bc:3d:47:48:9d: e3:9b:2b:6b:06:a1:e0:b0:6b:a3:f7:0a:bf:36:cc: cf:f9:1e:87:31:31:65:3f:68:ef:02:3b:da:90:1d: de:41:a0:ac:f2:11:7f:89:22:ac:9c:bb:dd:e1:78: 0e:d3:a6:75:34:2d:65:b2:5d:9b:8d:7d:c8:ec:5d: d7:40:c5:7b:3b:c2:1f:8b:8c:3b:56:69:70:e5:c6: dd:de:07:64:19:67:5c:5b:b8:26:ad:3a:80:2f:f6: 31:47:e4:be:a1:2b:00:e3:52:8f:30:b1:99:a1:08: a3:65:0a:9c:4c:cd:91:6f:33:66:9e:a2:7f:c1:9c: 8d:4d:7f:39:b8:d6:7a:e3:cb:9e:cc:c5:4c:3f:aa: 86:21:82:79:fc:54:24:3a:86:a0:4e:4c:60:d0:11: 11:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:53:9D:35:CF:59:5C:A8:37:58:B9:11:C8:BD:12:0E:1E:D0:74:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/654420ad-2cd4-344f-8fc5-b9688fcc1160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl X509v3 Authority Key Identifier: keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer sbgp-ipAddrBlock: critical IPv4: 216.98.249.0-216.98.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e5:0f:76:b0:8d:0f:64:f6:b1:e9:65:66:dc:16:78:63:2c: e1:5e:d7:87:22:59:6d:0b:c2:7a:76:8b:d8:8f:06:05:87:0a: d3:86:58:ae:fa:63:9d:0e:00:f1:ef:87:c6:5a:5a:30:01:07: 8a:f4:86:a2:59:16:a9:ce:61:da:3f:a4:7c:f3:b7:d0:86:0f: 9c:33:26:ea:58:e7:bb:29:8b:fc:85:d1:0f:23:d0:7e:c5:19: ce:c1:dc:e3:ce:ec:17:1c:21:10:53:92:81:95:ec:c8:6e:db: 60:10:35:47:15:7d:34:76:ce:a0:c1:3c:d2:be:f7:01:b9:e0: 79:19:12:09:21:df:6b:5e:4d:ce:38:3e:0e:f0:50:6c:6d:d8: 15:23:9c:eb:b8:45:fd:cc:3a:ec:48:14:ae:eb:75:4c:35:b1: 43:62:64:5f:b4:a1:1e:cc:44:d0:f2:dc:66:4c:29:63:a5:ed: 14:70:cb:c9:01:28:de:22:70:cb:81:ff:16:4d:76:de:0d:6d: 04:25:86:9e:7e:82:8f:e9:88:6e:8d:a1:ad:00:c6:34:77:47: 1d:97:6f:0b:76:1e:c8:75:cd:e9:4f:aa:36:49:da:58:0a:8b: e3:87:89:4a:0d:99:5e:07:3c:f3:3c:f3:14:04:73:5d:d0:76: f9:ed:65:2f -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWErlxnDSfGBSOvMtNqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmYmRjOGMtMmY0Yy00ZGVhLWI0MjAtNTJlNTgyOTky MDg2MB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk ZjYxYWNmOTItMDZmOS00MmU2LWJmZmMtMDhkMzdjZjU2MTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE5tdpIkztRvWTWVhNO+QPylls3QZ5rMlpQo GVIJ0K2HHu4lNuYls+1CbAt7bSWiY0LN2IvoGcag9mxKT2ef1eO+nUMAY8CDa3jO N6Z2dM0Jn5DcYvidfYZvgSUgXOSuSgI2vD1HSJ3jmytrBqHgsGuj9wq/NszP+R6H MTFlP2jvAjvakB3eQaCs8hF/iSKsnLvd4XgO06Z1NC1lsl2bjX3I7F3XQMV7O8If i4w7Vmlw5cbd3gdkGWdcW7gmrTqAL/YxR+S+oSsA41KPMLGZoQijZQqcTM2RbzNm nqJ/wZyNTX85uNZ648uezMVMP6qGIYJ5/FQkOoagTkxg0BERxQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFAlTnTXPWVyoN1i5Eci9Eg4e0HSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jM2Zi ZGM4Yy0yZjRjLTRkZWEtYjQyMC01MmU1ODI5OTIwODYvNjU0NDIwYWQtMmNkNC0z NDRmLThmYzUtYjk2ODhmY2MxMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzNmYmRjOGMtMmY0Yy00ZGVhLWI0 MjAtNTJlNTgyOTkyMDg2L2MzZmJkYzhjLTJmNGMtNGRlYS1iNDIwLTUyZTU4Mjk5 MjA4Ni5jcmwwHwYDVR0jBBgwFoAUiOwb7qIMU7OZOKQmjF6x7lYs5PAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jM2ZiZGM4Yy0yZjRjLTRkZWEtYjQyMC01MmU1 ODI5OTIwODYuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBADYYvkD AwDYYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAL5Q92sI0PZPax6WVm3BZ4YyzhXteHIlltC8J6dovYjwYF hwrThliu+mOdDgDx74fGWlowAQeK9IaiWRapzmHaP6R887fQhg+cMybqWOe7KYv8 hdEPI9B+xRnOwdzjzuwXHCEQU5KBlezIbttgEDVHFX00ds6gwTzSvvcBueB5GRIJ Id9rXk3OOD4O8FBsbdgVI5zruEX9zDrsSBSu63VMNbFDYmRftKEezETQ8txmTClj pe0UcMvJASjeInDLgf8WTXbeDW0EJYaefoKP6YhujaGtAMY0d0cdl28Ldh7Idc3p T6o2SdpYCovjh4lKDZleBzzzPPMUBHNd0Hb57WUv -----END CERTIFICATE-----Generated at Tue Nov 4 22:43:48 2025 by rpki-client