$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa File: ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa (raw, json) Hash identifier: gWUhkSg2TAARrcJqhgJtqrVdJoSmhXALWxWMaskEv2I= Subject key identifier: F7:F9:A3:09:10:EE:FE:5D:E2:FF:8C:A2:0A:FE:5A:B9:DE:BB:CA:3F Certificate issuer: /CN=41025fc8-e6c8-4422-acea-8126840c20bb Certificate serial: 010D0C9F4328584B9E07A093283E127173CC1F00 Authority key identifier: C0:34:EA:77:A6:A5:DF:C1:6A:A0:D9:2B:83:12:84:40:E0:38:E7:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 14574 IP address blocks: 216.176.96.0/19 maxlen: 24 2607:a700::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a0:93:28:3e:12:71:73:cc:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41025fc8-e6c8-4422-acea-8126840c20bb Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=be3fe631-7f0e-41a0-af38-78140172d2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fd:fb:94:33:09:55:0b:bb:9a:cd:f2:f2:6d: ec:5f:66:61:a7:e8:80:a8:2f:a4:02:b8:27:9c:0d: 87:5f:08:40:c0:03:84:ca:78:3b:44:e4:0e:6f:54: ae:65:ab:45:2b:11:08:eb:c1:c5:c0:09:fb:5a:f0: 90:a4:78:76:70:31:62:4a:05:df:55:1d:85:aa:dd: 7c:64:49:b2:48:85:45:9b:45:12:aa:59:d3:74:59: 03:f6:f4:72:a7:56:d4:f7:9d:05:ad:bd:91:dc:b7: 20:cc:84:d1:d3:e3:f4:eb:2a:ce:f2:ee:7e:c2:7e: d5:f3:37:8f:00:5d:2d:1c:f3:a9:c6:45:40:76:a9: 0b:ce:df:42:d6:eb:26:86:d2:0e:f8:ab:c3:9b:2b: 19:31:50:a6:8a:52:9c:ea:88:66:1e:fd:fd:0a:22: 35:ea:e1:1e:09:dd:ee:90:36:ca:25:1e:6c:88:f7: 1b:be:0c:95:87:a5:10:7b:b7:85:e2:81:08:14:84: 8b:7b:1b:5c:d3:33:c8:fc:59:a7:f7:01:6c:91:40: c1:9a:2c:3c:d7:7f:bf:8f:6d:de:2d:89:71:a3:73: eb:74:33:e1:f6:5e:3c:84:e3:ab:db:00:f9:7f:27: d4:2e:3a:ed:30:c5:b1:80:bd:3e:4a:db:1c:d5:f2: ca:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F9:A3:09:10:EE:FE:5D:E2:FF:8C:A2:0A:FE:5A:B9:DE:BB:CA:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.crl X509v3 Authority Key Identifier: keyid:C0:34:EA:77:A6:A5:DF:C1:6A:A0:D9:2B:83:12:84:40:E0:38:E7:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer sbgp-ipAddrBlock: critical IPv4: 216.176.96.0/19 IPv6: 2607:a700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:21:32:22:c5:18:ae:e9:29:3d:26:cf:25:92:83:f2:f0:7b: ba:21:a8:e5:0e:78:dc:74:5d:fc:fa:28:08:17:34:a7:55:cc: ba:67:a5:13:e6:b5:9e:95:fb:27:d3:a2:bb:28:3d:0b:51:1b: 3e:15:cb:ef:bf:9d:c9:03:a0:81:a1:95:40:c3:8b:ba:88:54: 2c:69:9f:1e:63:4a:f8:b4:23:fc:94:c4:54:07:b3:fd:3c:b9: 98:2c:53:be:09:d8:7a:92:01:14:2e:8d:2e:f7:46:89:e6:48: 35:f6:65:ee:7d:2a:40:5a:d7:88:67:83:eb:96:39:e8:f2:40: 8b:a3:ad:d5:59:dd:36:c6:30:78:a2:3d:08:bc:47:f8:21:47: b7:ef:37:09:9d:79:6c:80:9e:5f:08:00:95:fa:2c:27:02:48: dd:e1:e6:22:86:e7:05:fe:92:22:a6:4d:61:a7:35:c9:af:90: d1:eb:6a:70:df:ef:bc:ae:5b:ae:d8:e5:ca:76:51:25:df:b7: a4:71:89:23:ff:4e:be:ca:ec:5f:c6:1d:b3:4e:47:21:24:83: 8b:54:b1:46:3f:c4:73:64:0b:58:4a:ab:70:7c:ae:5f:7a:29: ee:05:c1:f8:d4:5d:89:0d:ff:9d:15:9a:5d:b0:32:24:d8:ff: c5:6c:20:05 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEueB6CTKD4ScXPMHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDEwMjVmYzgtZTZjOC00NDIyLWFjZWEtODEyNjg0MGMy MGJiMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YmUzZmU2MzEtN2YwZS00MWEwLWFmMzgtNzgxNDAxNzJkMmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv37lDMJVQu7ms3y8m3sX2Zhp+iAqC+kArgn nA2HXwhAwAOEyng7ROQOb1SuZatFKxEI68HFwAn7WvCQpHh2cDFiSgXfVR2Fqt18 ZEmySIVFm0USqlnTdFkD9vRyp1bU950Frb2R3LcgzITR0+P06yrO8u5+wn7V8zeP AF0tHPOpxkVAdqkLzt9C1usmhtIO+KvDmysZMVCmilKc6ohmHv39CiI16uEeCd3u kDbKJR5siPcbvgyVh6UQe7eF4oEIFISLextc0zPI/Fmn9wFskUDBmiw813+/j23e LYlxo3PrdDPh9l48hOOr2wD5fyfULjrtMMWxgL0+Stsc1fLK3wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFPf5owkQ7v5d4v+Mogr+Wrneu8o/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTAy NWZjOC1lNmM4LTQ0MjItYWNlYS04MTI2ODQwYzIwYmIvY2E4MTBjNjAtYTA4MC0z MDA2LWIyY2YtM2Q5NjBiNmQ5ZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDEwMjVmYzgtZTZjOC00NDIyLWFj ZWEtODEyNjg0MGMyMGJiLzQxMDI1ZmM4LWU2YzgtNDQyMi1hY2VhLTgxMjY4NDBj MjBiYi5jcmwwHwYDVR0jBBgwFoAUwDTqd6al38FqoNkrgxKEQOA456QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MTAyNWZjOC1lNmM4LTQ0MjItYWNlYS04MTI2 ODQwYzIwYmIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF2LBgMA0E AgACMAcDBQAmB6cAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADghMiLFGK7pKT0mzyWSg/Lwe7ohqOUOeNx0 Xfz6KAgXNKdVzLpnpRPmtZ6V+yfTorsoPQtRGz4Vy++/nckDoIGhlUDDi7qIVCxp nx5jSvi0I/yUxFQHs/08uZgsU74J2HqSARQujS73RonmSDX2Ze59KkBa14hng+uW OejyQIujrdVZ3TbGMHiiPQi8R/ghR7fvNwmdeWyAnl8IAJX6LCcCSN3h5iKG5wX+ kiKmTWGnNcmvkNHranDf77yuW67Y5cp2USXft6RxiSP/Tr7K7F/GHbNORyEkg4tU sUY/xHNkC1hKq3B8rl96Ke4FwfjUXYkN/50Vml2wMiTY/8VsIAU= -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:23 2025 by rpki-client