$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/97fc3333-5a50-3429-baed-937e5ceac752.roa File: 97fc3333-5a50-3429-baed-937e5ceac752.roa (raw, json) Hash identifier: Qs1Ayx7eFsHJ6qhOuZbhoa60vBOCnUlSB6dl17rLHBA= Subject key identifier: BF:50:57:1F:CD:FC:F9:48:EF:95:28:9E:69:21:CB:96:05:4A:48:46 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584BA39CF94A1823EE7B7D6BB11A Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/97fc3333-5a50-3429-baed-937e5ceac752.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 36445 IP address blocks: 216.21.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f9:4a:18:23:ee:7b:7d:6b:b1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=dacccaf3-2f82-453c-ab4f-a2888d56261b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:1e:ef:ef:48:b2:c7:f9:7d:86:16:2a:6a: 9b:e0:32:bf:41:40:31:72:93:1d:e3:e9:88:e6:7a: 1f:64:36:fb:c5:de:0b:80:49:07:88:87:c0:bf:86: 54:31:9a:41:bd:97:d2:30:6e:82:37:97:d5:3d:96: c5:f5:bb:20:54:82:9b:9d:b1:29:68:c8:c2:4c:54: 79:1a:66:fd:4d:fa:a2:ee:d2:b0:76:30:64:63:30: fc:c2:f3:d7:8d:f1:61:5f:5f:6d:ec:1f:9c:e4:c9: 16:66:72:64:ab:c3:ff:98:5c:c8:d0:82:db:82:31: 06:ec:f2:77:f6:32:63:37:6b:67:cc:c4:1d:b0:66: f6:5e:0c:58:15:af:1d:0d:33:02:a3:f1:38:a2:bf: 75:37:a0:79:34:81:fe:08:87:e9:94:39:5a:94:01: 00:ca:b4:fd:ce:ad:87:b8:f5:35:3b:04:e2:ea:69: b6:33:d7:8d:9c:b8:07:b5:d0:c8:42:a7:99:5b:29: 35:f2:db:95:6d:17:02:d6:18:7e:ea:17:ec:54:6d: 28:13:ca:fa:6e:28:b5:10:70:e4:97:55:ba:95:e1: ca:6d:f2:9f:68:8f:0d:38:97:ee:2f:7d:4e:49:74: 01:46:78:26:d8:fb:57:53:6a:31:15:b1:cd:4a:dc: 06:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:50:57:1F:CD:FC:F9:48:EF:95:28:9E:69:21:CB:96:05:4A:48:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/97fc3333-5a50-3429-baed-937e5ceac752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 216.21.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:db:2a:72:f0:8b:0a:c6:44:9a:ad:a9:88:73:1c:65:f2:c1: 0d:a3:4e:57:0b:ae:b0:23:74:56:4e:c8:27:b2:04:cf:76:7c: 3e:c0:d0:2e:ea:9b:ea:1a:f6:55:77:f6:94:53:bf:92:86:99: e9:5d:7a:20:88:21:a5:5e:97:3a:be:a3:11:a9:25:ae:71:eb: 77:cd:9b:6e:be:8b:d2:a8:ce:81:31:eb:65:6d:3d:e9:40:05: aa:62:ea:fa:d9:e4:19:6c:42:1f:9f:d5:df:8c:8a:c0:13:05: e6:c2:1a:9f:20:d3:db:fa:eb:85:a7:a1:2d:b3:5d:70:19:1f: 82:92:6b:68:ea:ab:df:a9:c3:42:3c:cf:db:01:87:d3:96:4e: c7:6c:33:7e:ef:dd:b7:19:60:30:a6:d0:b8:5c:f8:8a:3c:a2: f6:12:20:a5:87:16:5a:a0:93:e2:f4:be:2e:66:d5:06:95:8e: 5d:16:b0:c1:fd:62:fc:47:3d:65:16:fa:43:98:30:4d:09:d9: 9a:de:1e:16:85:8c:9f:8f:8d:56:e8:f3:41:02:aa:ff:86:9f: f0:8c:40:69:33:75:d9:99:e1:cf:56:30:70:01:52:72:45:70: 3e:b6:4e:d0:8d:b7:aa:7b:42:17:ea:c3:f7:8f:cf:3b:56:cf: d5:85:ad:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPlKGCPue31rsRowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZGFjY2NhZjMtMmY4Mi00NTNjLWFiNGYtYTI4ODhkNTYyNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd0e7+9Issf5fYYWKmqb4DK/QUAxcpMd4+mI 5nofZDb7xd4LgEkHiIfAv4ZUMZpBvZfSMG6CN5fVPZbF9bsgVIKbnbEpaMjCTFR5 Gmb9Tfqi7tKwdjBkYzD8wvPXjfFhX19t7B+c5MkWZnJkq8P/mFzI0ILbgjEG7PJ3 9jJjN2tnzMQdsGb2XgxYFa8dDTMCo/E4or91N6B5NIH+CIfplDlalAEAyrT9zq2H uPU1OwTi6mm2M9eNnLgHtdDIQqeZWyk18tuVbRcC1hh+6hfsVG0oE8r6bii1EHDk l1W6leHKbfKfaI8NOJfuL31OSXQBRngm2PtXU2oxFbHNStwGxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9QVx/N/PlI75Uonmkhy5YFSkhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvOTdmYzMzMzMtNWE1MC0z NDI5LWJhZWQtOTM3ZTVjZWFjNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BXpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnbKnLwiwrGRJqtqYhzHGXywQ2jTlcLrrAjdFZOyCeyBM92fD7A0C7q m+oa9lV39pRTv5KGmeldeiCIIaVelzq+oxGpJa5x63fNm26+i9KozoEx62VtPelA Bapi6vrZ5BlsQh+f1d+MisATBebCGp8g09v664WnoS2zXXAZH4KSa2jqq9+pw0I8 z9sBh9OWTsdsM37v3bcZYDCm0Lhc+Io8ovYSIKWHFlqgk+L0vi5m1QaVjl0WsMH9 YvxHPWUW+kOYME0J2ZreHhaFjJ+PjVbo80ECqv+Gn/CMQGkzddmZ4c9WMHABUnJF cD62TtCNt6p7Qhfqw/ePzztWz9WFrac= -----END CERTIFICATE-----Generated at Wed Nov 5 13:11:54 2025 by rpki-client