$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/e4cd9f6a-da68-327b-989c-5eb9e7e19a4c.roa File: e4cd9f6a-da68-327b-989c-5eb9e7e19a4c.roa (raw, json) Hash identifier: PrBCEAmwQ1uCmUp6FiM7VKPAx3dI3pyTS/Xpb55Ltso= Subject key identifier: 75:2B:03:BB:E9:90:F4:A1:24:6B:B6:75:6D:32:6A:0E:AC:5A:8B:76 Certificate issuer: /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb Certificate serial: 010D0C9F4328584BB2F82F871A1035656E7AA130 Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/e4cd9f6a-da68-327b-989c-5eb9e7e19a4c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 14041 IP address blocks: 216.38.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:2f:87:1a:10:35:65:6e:7a:a1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=1d3fd9d2-1d57-4c24-98d0-7184ada753c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a5:99:8b:51:d3:e3:dc:b6:76:11:7d:b9:a0: c2:71:5a:ed:7e:c2:b6:0a:02:9a:87:63:b3:21:12: c9:18:0e:c4:4f:ba:24:18:ac:cb:5f:22:c3:47:7a: 01:9e:91:74:ef:a7:6e:d6:37:b3:6e:a0:be:ef:00: 03:9a:36:eb:6a:e7:cd:b8:59:a7:74:d4:32:e3:72: 65:09:63:5f:a2:7c:75:f5:89:d6:5a:f3:93:23:dd: 9a:af:2a:36:9a:80:e2:9d:ba:b4:49:40:de:d2:d8: a2:26:b7:66:31:e3:3b:6b:db:e4:74:7f:95:d4:78: fe:70:c2:de:0e:10:2f:0d:88:bd:ac:ed:13:0c:ab: 00:22:6b:be:a1:d6:c1:3d:0b:83:d6:cb:2a:bb:f2: 77:5b:51:2b:bf:1b:2f:c9:1f:18:41:24:61:c7:f2: 68:d7:55:b4:ae:a5:72:57:6a:e9:29:e6:d6:4d:71: 69:f7:90:c4:88:22:92:d1:47:2f:73:9f:92:3e:4a: fb:1b:53:b8:f1:57:d0:69:73:c9:a1:b4:c3:b3:9e: cb:e6:b4:dc:c6:39:b7:c9:29:d9:e6:16:05:05:08: 55:28:f1:c9:6a:96:f8:e3:77:77:b8:d2:31:84:24: 2e:60:bc:14:d6:03:17:fc:ae:3a:34:9a:cf:63:e5: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2B:03:BB:E9:90:F4:A1:24:6B:B6:75:6D:32:6A:0E:AC:5A:8B:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/e4cd9f6a-da68-327b-989c-5eb9e7e19a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl X509v3 Authority Key Identifier: keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer sbgp-ipAddrBlock: critical IPv4: 216.38.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:93:18:ea:f0:03:f9:71:14:88:12:01:ac:5e:e9:e6:d4:b5: 62:2a:ef:05:31:e5:d4:0b:c4:65:6b:57:5a:e3:e9:5a:da:ad: 7e:36:2c:ee:e8:7d:ed:07:3f:8b:34:79:6a:55:96:35:47:37: 60:43:c3:bd:45:77:d1:3f:02:b9:eb:4d:2a:8b:74:ad:6a:6d: 95:a4:bb:fd:5e:3b:ff:c2:d0:8c:0d:10:94:34:a9:6b:98:4a: 32:9f:c0:3d:fc:b0:cf:16:7e:a5:d8:ef:95:4d:93:03:74:f5: b5:29:d3:69:aa:e9:c9:28:15:38:bd:8d:b5:b0:a6:a1:42:14: 65:ea:b7:62:c8:72:40:16:4e:b1:02:71:03:a8:c9:62:0d:73: 84:8e:19:7b:6d:07:18:af:7d:f9:b9:07:cc:de:57:e7:32:71: 01:18:ae:85:1e:40:a9:35:4a:2b:2d:e5:14:33:6f:7c:f5:94: c9:54:b1:db:80:60:4e:11:aa:79:0c:ee:79:38:80:e2:b9:14: f9:1f:52:e2:47:56:ab:f7:e0:d8:4e:94:4f:76:b1:ad:d6:c6: f8:c4:e4:d1:a8:84:93:c7:a8:03:55:2f:a6:f1:41:38:3d:5e: 9c:74:94:2e:53:09:f3:9a:cd:3d:65:17:91:7a:aa:3f:34:21: 61:c7:76:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+C+HGhA1ZW56oTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjgyODFhMGEtMDBmMi00YWFjLWIzMTEtZTk2MWE3Y2Nl ZGZiMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MWQzZmQ5ZDItMWQ1Ny00YzI0LTk4ZDAtNzE4NGFkYTc1M2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KWZi1HT49y2dhF9uaDCcVrtfsK2CgKah2Oz IRLJGA7ET7okGKzLXyLDR3oBnpF076du1jezbqC+7wADmjbraufNuFmndNQy43Jl CWNfonx19YnWWvOTI92aryo2moDinbq0SUDe0tiiJrdmMeM7a9vkdH+V1Hj+cMLe DhAvDYi9rO0TDKsAImu+odbBPQuD1ssqu/J3W1ErvxsvyR8YQSRhx/Jo11W0rqVy V2rpKebWTXFp95DEiCKS0Ucvc5+SPkr7G1O48VfQaXPJobTDs57L5rTcxjm3ySnZ 5hYFBQhVKPHJapb443d3uNIxhCQuYLwU1gMX/K46NJrPY+WAOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUrA7vpkPShJGu2dW0yag6sWot2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4 MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYxYTdjY2VkZmIvZTRjZDlmNmEtZGE2OC0z MjdiLTk4OWMtNWViOWU3ZTE5YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjgyODFhMGEtMDBmMi00YWFjLWIz MTEtZTk2MWE3Y2NlZGZiL2I4MjgxYTBhLTAwZjItNGFhYy1iMzExLWU5NjFhN2Nj ZWRmYi5jcmwwHwYDVR0jBBgwFoAUNfABs7MMIwjruQt82C4ceWMKjxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYx YTdjY2VkZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CZVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyTGOrwA/lxFIgSAaxe6ebUtWIq7wUx5dQLxGVrV1rj6VrarX42LO7o fe0HP4s0eWpVljVHN2BDw71Fd9E/ArnrTSqLdK1qbZWku/1eO//C0IwNEJQ0qWuY SjKfwD38sM8WfqXY75VNkwN09bUp02mq6ckoFTi9jbWwpqFCFGXqt2LIckAWTrEC cQOoyWINc4SOGXttBxivffm5B8zeV+cycQEYroUeQKk1Sist5RQzb3z1lMlUsduA YE4RqnkM7nk4gOK5FPkfUuJHVqv34NhOlE92sa3WxvjE5NGohJPHqANVL6bxQTg9 Xpx0lC5TCfOazT1lF5F6qj80IWHHdpA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:29:25 2025 by rpki-client