$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/6df9d2bc-6498-37f6-aa60-f89bdf80a4aa.roa File: 6df9d2bc-6498-37f6-aa60-f89bdf80a4aa.roa (raw, json) Hash identifier: +bmFP9hvTr1HWZEsSdoDGApSdCOGOhLbkXJukWeLB0o= Subject key identifier: EF:D5:43:14:CE:B8:47:27:02:40:0D:93:1B:60:43:8F:80:13:3F:99 Certificate issuer: /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb Certificate serial: 010D0C9F4328584BB2F82FE93CF6732C3106D700 Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/6df9d2bc-6498-37f6-aa60-f89bdf80a4aa.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 30687 IP address blocks: 216.38.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:2f:e9:3c:f6:73:2c:31:06:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=c8a355c1-53e5-469f-9d58-bba5b7fa8e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:00:46:2a:32:e2:cb:2b:77:95:e4:7d:cc:02: bc:b4:ac:51:40:3e:41:28:e2:ae:45:63:de:43:90: 77:45:c3:3f:e6:17:47:85:52:f3:0e:cd:e6:b3:a2: 0f:09:5b:6b:38:1c:69:0c:68:a1:58:a1:29:9b:00: 58:fa:f7:54:0c:8e:cb:da:7d:b3:87:58:cc:a3:3c: 07:85:ec:d3:01:13:9f:c3:88:75:6e:e0:84:92:e5: 5e:97:31:57:85:06:25:7f:00:ac:df:bc:c0:ba:67: a8:fa:88:e5:90:f5:1d:33:af:56:e5:e1:4f:13:79: 1f:a9:a1:34:54:99:45:92:ee:2e:91:52:f7:23:7b: 72:aa:fc:f2:ce:c3:7a:a3:24:33:43:63:14:e8:27: 31:5f:d8:30:2f:23:be:1d:14:a8:21:fc:4f:78:80: 59:54:6b:0f:84:26:f7:bb:43:2c:16:91:63:4b:72: 79:e8:50:06:5d:2e:f2:5a:0a:61:d3:13:4a:2b:e2: c1:49:1f:1f:88:f7:7a:84:dc:62:8f:38:92:52:3c: 9e:e8:d7:0c:a2:24:fc:3c:f8:13:ee:eb:e4:94:63: 95:5f:35:f8:22:78:68:ef:ac:dc:2b:b5:19:fd:ec: bc:f5:6d:77:5e:14:f9:1a:d7:ce:ea:2a:b4:e7:81: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D5:43:14:CE:B8:47:27:02:40:0D:93:1B:60:43:8F:80:13:3F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/6df9d2bc-6498-37f6-aa60-f89bdf80a4aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl X509v3 Authority Key Identifier: keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer sbgp-ipAddrBlock: critical IPv4: 216.38.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:30:64:36:56:f5:c5:25:d6:2f:e6:18:5f:e8:7c:c1:43:14: c5:1e:8d:c5:5f:60:23:8b:83:f9:1f:e3:96:85:60:eb:46:96: d8:12:54:8f:d3:a2:ee:ce:3e:78:f4:f2:59:9b:e9:ed:da:14: 29:55:78:23:aa:80:9f:f4:18:cb:a6:8d:9f:72:2e:5f:ab:aa: 3d:2e:2b:dc:79:6e:f7:28:02:5e:cf:d1:e9:cf:5c:af:ef:21: 74:be:a1:59:2a:d6:2a:7f:bf:80:6f:4c:48:c1:83:e5:68:de: 77:37:6d:ed:c3:7b:aa:47:2e:e9:f4:0c:fc:02:15:c2:cc:43: d5:3c:a4:d0:83:b4:65:53:03:6c:75:3c:0d:69:f1:0c:5b:ca: 8b:0e:37:c7:8a:22:cc:53:3b:79:f1:88:d3:26:42:61:a1:a2: b3:3f:ea:b3:41:9d:86:29:d5:9e:65:59:0c:5e:61:cc:38:e2: cc:e0:e4:e5:3c:06:8b:5c:c4:bf:f0:d7:1b:07:92:20:a5:59: 96:1f:f7:48:a6:27:26:51:b8:27:14:60:1d:01:cf:74:e9:3b: 38:b3:72:62:28:0f:cb:4d:79:51:e1:ea:ca:0f:cc:34:5b:f5: ec:4d:70:ca:5d:82:4d:1d:f4:4c:37:05:50:d0:30:d5:c0:5e: 01:46:59:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+C/pPPZzLDEG1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjgyODFhMGEtMDBmMi00YWFjLWIzMTEtZTk2MWE3Y2Nl ZGZiMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YzhhMzU1YzEtNTNlNS00NjlmLTlkNTgtYmJhNWI3ZmE4ZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiABGKjLiyyt3leR9zAK8tKxRQD5BKOKuRWPe Q5B3RcM/5hdHhVLzDs3ms6IPCVtrOBxpDGihWKEpmwBY+vdUDI7L2n2zh1jMozwH hezTAROfw4h1buCEkuVelzFXhQYlfwCs37zAumeo+ojlkPUdM69W5eFPE3kfqaE0 VJlFku4ukVL3I3tyqvzyzsN6oyQzQ2MU6CcxX9gwLyO+HRSoIfxPeIBZVGsPhCb3 u0MsFpFjS3J56FAGXS7yWgph0xNKK+LBSR8fiPd6hNxijziSUjye6NcMoiT8PPgT 7uvklGOVXzX4Inho76zcK7UZ/ey89W13XhT5GtfO6iq054GugwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/VQxTOuEcnAkANkxtgQ4+AEz+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4 MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYxYTdjY2VkZmIvNmRmOWQyYmMtNjQ5OC0z N2Y2LWFhNjAtZjg5YmRmODBhNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjgyODFhMGEtMDBmMi00YWFjLWIz MTEtZTk2MWE3Y2NlZGZiL2I4MjgxYTBhLTAwZjItNGFhYy1iMzExLWU5NjFhN2Nj ZWRmYi5jcmwwHwYDVR0jBBgwFoAUNfABs7MMIwjruQt82C4ceWMKjxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYx YTdjY2VkZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CZVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEwZDZW9cUl1i/mGF/ofMFDFMUejcVfYCOLg/kf45aFYOtGltgSVI/T ou7OPnj08lmb6e3aFClVeCOqgJ/0GMumjZ9yLl+rqj0uK9x5bvcoAl7P0enPXK/v IXS+oVkq1ip/v4BvTEjBg+Vo3nc3be3De6pHLun0DPwCFcLMQ9U8pNCDtGVTA2x1 PA1p8QxbyosON8eKIsxTO3nxiNMmQmGhorM/6rNBnYYp1Z5lWQxeYcw44szg5OU8 BotcxL/w1xsHkiClWZYf90imJyZRuCcUYB0Bz3TpOzizcmIoD8tNeVHh6soPzDRb 9exNcMpdgk0d9Ew3BVDQMNXAXgFGWQM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:30:54 2025 by rpki-client