$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/9682e024-c8ab-3a40-ad3c-ef8365c22b9a.roa File: 9682e024-c8ab-3a40-ad3c-ef8365c22b9a.roa (raw, json) Hash identifier: +z2n6oKAJmEpWzqanz4uzA9I4OoE37pFcUPRMjL+N/Q= Subject key identifier: 78:BE:1E:1F:61:AE:10:C1:84:FD:00:0C:AB:E9:07:64:11:1B:79:FD Certificate issuer: /CN=4638d5d1-44fb-4ecc-9e21-685a28c0b0b4 Certificate serial: 010D0C9F4328584BB45D1807031F4E10BC5C6340 Authority key identifier: AE:00:06:1A:E2:3C:4C:D1:26:F3:52:C7:6C:7A:1F:C7:BA:D2:44:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/9682e024-c8ab-3a40-ad3c-ef8365c22b9a.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 19743 IP address blocks: 216.39.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:18:07:03:1f:4e:10:bc:5c:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4638d5d1-44fb-4ecc-9e21-685a28c0b0b4 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=06cc601d-01fd-4a04-bf58-1f695dfeef17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:fd:cd:62:5f:63:b8:aa:a4:4a:5d:31:9c: 1e:d5:4f:48:e1:60:2b:0d:51:cf:a3:07:33:fc:cf: 37:47:da:a2:c2:30:22:84:65:fe:97:f0:34:ae:98: 51:83:1d:af:f6:90:3d:b6:83:08:d2:36:df:e4:40: c1:85:72:11:6a:db:f0:4b:0b:19:a2:6e:4c:cc:0a: a6:52:7c:00:16:3d:df:ac:cd:21:ae:f7:b4:2f:7d: 9f:07:54:1a:8d:94:ed:00:ac:65:72:be:fe:47:55: eb:e2:95:ce:5b:19:bb:0e:ec:04:2e:26:ad:6f:2c: d2:48:b0:c8:72:16:e0:bc:1c:fb:1e:57:41:2a:7b: 5a:c2:15:54:c7:3b:b7:f3:7c:42:3e:ff:60:66:02: 0b:23:d7:02:ba:10:1d:87:80:af:41:92:df:78:bb: be:ac:55:e8:ed:e5:78:ce:a8:78:18:68:04:50:81: 71:a0:9c:7b:c3:fe:66:ae:9f:3e:43:04:8c:a5:42: 8d:12:aa:bb:9b:1e:72:40:7b:30:98:ca:0e:94:a8: e4:57:ba:4f:52:7a:88:0b:7f:af:4f:aa:68:34:ac: f9:49:85:7a:c3:ac:2b:d7:86:79:ea:4b:d7:73:84: a5:a1:4c:f7:32:18:fb:a2:f3:4b:54:3a:1f:8d:74: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BE:1E:1F:61:AE:10:C1:84:FD:00:0C:AB:E9:07:64:11:1B:79:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/9682e024-c8ab-3a40-ad3c-ef8365c22b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.crl X509v3 Authority Key Identifier: keyid:AE:00:06:1A:E2:3C:4C:D1:26:F3:52:C7:6C:7A:1F:C7:BA:D2:44:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.cer sbgp-ipAddrBlock: critical IPv4: 216.39.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:34:5e:4d:23:eb:01:ea:17:69:20:07:34:22:a0:24:84:cf: 30:0d:46:24:e3:d5:0c:8f:70:f7:d9:59:f6:5d:d7:61:b4:12: ae:9e:dd:6e:dd:ca:f1:a7:30:be:3f:16:7d:98:2a:97:bf:80: eb:18:0c:ca:ed:5a:a7:53:1b:ea:50:3d:fd:b3:3d:3f:22:c9: 1d:c2:0a:db:b0:9d:0a:2b:f3:ce:13:61:5a:09:46:74:f6:e0: fd:b5:f9:ef:a1:d0:ef:ac:cd:56:ae:41:94:a4:73:89:7c:3c: 16:24:22:d7:f2:bc:be:06:15:bf:93:a4:8e:54:0d:b2:42:9b: ec:0f:9e:13:2b:e4:2a:41:95:b5:d8:52:00:f7:5a:06:03:76: 8d:58:04:a9:00:dc:56:ce:9a:1b:c4:43:b2:d0:f9:5b:b0:52: 72:8f:99:d8:bd:31:6f:bf:9c:54:87:20:9b:0c:c0:2d:dc:d2: 3e:24:66:da:d3:bf:79:3a:f0:5a:79:21:5b:45:2a:de:65:7e: dd:55:1c:5c:d4:b0:25:4f:86:19:97:fb:13:86:34:28:f3:08: f3:c5:c1:03:65:ff:12:02:c1:59:4f:ac:07:83:e0:17:46:d9: 6d:f2:65:69:db:0f:cd:0a:62:a9:20:3d:64:18:d3:ba:65:9d: 05:77:b2:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRgHAx9OELxcY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYzOGQ1ZDEtNDRmYi00ZWNjLTllMjEtNjg1YTI4YzBi MGI0MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MDZjYzYwMWQtMDFmZC00YTA0LWJmNTgtMWY2OTVkZmVlZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4T9zWJfY7iqpEpdMZwe1U9I4WArDVHPowcz /M83R9qiwjAihGX+l/A0rphRgx2v9pA9toMI0jbf5EDBhXIRatvwSwsZom5MzAqm UnwAFj3frM0hrve0L32fB1QajZTtAKxlcr7+R1Xr4pXOWxm7DuwELiatbyzSSLDI chbgvBz7HldBKntawhVUxzu383xCPv9gZgILI9cCuhAdh4CvQZLfeLu+rFXo7eV4 zqh4GGgEUIFxoJx7w/5mrp8+QwSMpUKNEqq7mx5yQHswmMoOlKjkV7pPUnqIC3+v T6poNKz5SYV6w6wr14Z56kvXc4SloUz3Mhj7ovNLVDofjXRAbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHi+Hh9hrhDBhP0ADKvpB2QRG3n9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NjM4 ZDVkMS00NGZiLTRlY2MtOWUyMS02ODVhMjhjMGIwYjQvOTY4MmUwMjQtYzhhYi0z YTQwLWFkM2MtZWY4MzY1YzIyYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDYzOGQ1ZDEtNDRmYi00ZWNjLTll MjEtNjg1YTI4YzBiMGI0LzQ2MzhkNWQxLTQ0ZmItNGVjYy05ZTIxLTY4NWEyOGMw YjBiNC5jcmwwHwYDVR0jBBgwFoAUrgAGGuI8TNEm81LHbHofx7rSRFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NjM4ZDVkMS00NGZiLTRlY2MtOWUyMS02ODVh MjhjMGIwYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2CfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE0Xk0j6wHqF2kgBzQioCSEzzANRiTj1QyPcPfZWfZd12G0Eq6e3W7d yvGnML4/Fn2YKpe/gOsYDMrtWqdTG+pQPf2zPT8iyR3CCtuwnQor884TYVoJRnT2 4P21+e+h0O+szVauQZSkc4l8PBYkItfyvL4GFb+TpI5UDbJCm+wPnhMr5CpBlbXY UgD3WgYDdo1YBKkA3FbOmhvEQ7LQ+VuwUnKPmdi9MW+/nFSHIJsMwC3c0j4kZtrT v3k68Fp5IVtFKt5lft1VHFzUsCVPhhmX+xOGNCjzCPPFwQNl/xICwVlPrAeD4BdG 2W3yZWnbD80KYqkgPWQY07plnQV3suo= -----END CERTIFICATE-----Generated at Wed Nov 5 16:51:51 2025 by rpki-client