$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/b0f6dc5b-a71e-34fc-971b-2130a514c95e.roa File: b0f6dc5b-a71e-34fc-971b-2130a514c95e.roa (raw, json) Hash identifier: crz5W2lXz7jFjoCMGICBggJrV7pFG6CIgjU2Vn522Ek= Subject key identifier: E9:CC:10:98:97:D0:FA:79:04:59:2D:3E:46:47:F4:91:D1:98:59:AD Certificate issuer: /CN=4ef7c372-e70a-4b95-81eb-c17911a45361 Certificate serial: 010D0C9F4328584BB19427D059EAF55D1FDA1000 Authority key identifier: BD:6A:9B:E1:93:FC:46:BA:E9:7F:47:79:A4:3F:B0:F2:1A:C3:2C:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/b0f6dc5b-a71e-34fc-971b-2130a514c95e.roa Signing time: Thu 30 Oct 2025 13:04:18 +0000 ROA not before: Thu 30 Oct 2025 13:04:18 +0000 ROA not after: Wed 28 Jan 2026 14:04:18 +0000 asID: 14618 IP address blocks: 216.183.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:94:27:d0:59:ea:f5:5d:1f:da:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ef7c372-e70a-4b95-81eb-c17911a45361 Validity Not Before: Oct 30 13:04:18 2025 GMT Not After : Jan 28 14:04:18 2026 GMT Subject: CN=ada78e57-6a6f-4232-9fa7-53e3cea6a8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:77:d9:a5:79:0e:81:99:90:e3:1d:96:1c:2e: 46:bd:c7:65:73:c7:b4:f3:4e:18:f8:e5:73:8a:50: 23:4e:c4:0e:66:a1:46:6b:ea:2e:c1:33:1e:f3:f2: 8b:f4:d5:76:76:7c:9a:80:50:f2:00:33:08:5e:3b: 17:ff:85:70:35:19:78:9e:c0:2c:d0:38:14:94:c2: 2d:ab:53:71:88:51:7a:a0:c8:e8:23:b0:1b:69:dc: 84:72:29:09:1f:2b:59:d8:ba:04:dd:5b:78:63:34: 5b:cd:f3:b9:42:f2:66:86:72:b4:f4:d4:c5:08:14: 82:a0:d1:a7:f0:f8:e3:a1:87:d6:e4:48:70:27:e8: f9:c4:70:f5:3c:15:78:42:50:c7:3a:6f:bc:47:c2: 1d:6e:aa:a6:79:e7:8b:c6:1a:6a:fd:68:4f:5e:cf: 0d:79:eb:34:94:86:69:e2:d3:59:8b:7e:ad:a6:21: 70:56:db:63:70:71:87:ba:55:ea:14:24:30:ea:10: d3:99:c4:0a:14:cd:e7:ed:01:aa:61:b5:ba:17:6e: 04:35:a0:03:23:ee:4e:7a:28:15:e9:df:61:a2:2d: 31:10:20:bd:ff:d2:14:fa:9f:85:43:e7:98:b3:45: b8:eb:45:a2:86:95:fe:4e:48:9c:0f:5d:66:c4:44: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CC:10:98:97:D0:FA:79:04:59:2D:3E:46:47:F4:91:D1:98:59:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/b0f6dc5b-a71e-34fc-971b-2130a514c95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.crl X509v3 Authority Key Identifier: keyid:BD:6A:9B:E1:93:FC:46:BA:E9:7F:47:79:A4:3F:B0:F2:1A:C3:2C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361.cer sbgp-ipAddrBlock: critical IPv4: 216.183.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:fe:aa:80:0a:9f:b9:a0:00:84:5a:c9:31:9f:87:e4:b6:1a: 61:12:a9:18:3a:c8:bc:4f:c8:cf:e6:f8:3a:2d:e5:9c:e6:18: 62:22:92:72:e2:84:36:fe:80:7e:f2:ab:98:03:bd:d0:74:51: db:c6:05:f5:9e:dc:5f:0e:8f:40:ed:3a:75:02:6e:d5:56:c3: 8e:bd:f9:50:f6:2a:b0:9c:aa:4a:e4:1b:b5:ab:1f:1e:a4:88: ff:3a:ac:e2:76:47:8b:4d:f3:92:d4:35:49:71:bb:f7:34:b8: f0:94:20:02:3e:f0:47:7c:d3:e7:37:5c:47:16:ef:fe:8a:24: ed:6b:f7:8b:88:d9:3d:6a:4e:1e:fc:68:f2:4b:f2:3f:42:c4: 1c:64:73:a6:1c:b5:b4:6d:56:6e:2b:a1:b9:de:19:6d:30:3b: 23:09:bd:bd:82:0e:d3:4a:ac:e3:e9:7b:e6:4d:0e:0c:76:66: 2b:c2:c3:ba:49:fa:06:97:59:1a:18:27:37:83:12:ef:d0:12: 97:72:b1:aa:2f:90:be:fc:0f:42:15:9c:2b:bc:44:89:1e:9b: 6a:b4:8d:44:d0:83:77:36:4d:bb:6d:07:96:53:25:3a:5a:f8: 9c:2b:a2:fd:11:9b:8d:1c:a2:a2:85:ac:65:1c:61:00:65:90: 07:d7:ea:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxlCfQWer1XR/aEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVmN2MzNzItZTcwYS00Yjk1LTgxZWItYzE3OTExYTQ1 MzYxMB4XDTI1MTAzMDEzMDQxOFoXDTI2MDEyODE0MDQxOFowLzEtMCsGA1UEAxMk YWRhNzhlNTctNmE2Zi00MjMyLTlmYTctNTNlM2NlYTZhOGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHfZpXkOgZmQ4x2WHC5Gvcdlc8e0804Y+OVz ilAjTsQOZqFGa+ouwTMe8/KL9NV2dnyagFDyADMIXjsX/4VwNRl4nsAs0DgUlMIt q1NxiFF6oMjoI7AbadyEcikJHytZ2LoE3Vt4YzRbzfO5QvJmhnK09NTFCBSCoNGn 8PjjoYfW5EhwJ+j5xHD1PBV4QlDHOm+8R8IdbqqmeeeLxhpq/WhPXs8Nees0lIZp 4tNZi36tpiFwVttjcHGHulXqFCQw6hDTmcQKFM3n7QGqYbW6F24ENaADI+5OeigV 6d9hoi0xECC9/9IU+p+FQ+eYs0W460WihpX+TkicD11mxESTNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnMEJiX0Pp5BFktPkZH9JHRmFmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZWY3 YzM3Mi1lNzBhLTRiOTUtODFlYi1jMTc5MTFhNDUzNjEvYjBmNmRjNWItYTcxZS0z NGZjLTk3MWItMjEzMGE1MTRjOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGVmN2MzNzItZTcwYS00Yjk1LTgx ZWItYzE3OTExYTQ1MzYxLzRlZjdjMzcyLWU3MGEtNGI5NS04MWViLWMxNzkxMWE0 NTM2MS5jcmwwHwYDVR0jBBgwFoAUvWqb4ZP8Rrrpf0d5pD+w8hrDLHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZWY3YzM3Mi1lNzBhLTRiOTUtODFlYi1jMTc5 MTFhNDUzNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2LdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACX+qoAKn7mgAIRayTGfh+S2GmESqRg6yLxPyM/m+Dot5ZzmGGIiknLi hDb+gH7yq5gDvdB0UdvGBfWe3F8Oj0DtOnUCbtVWw469+VD2KrCcqkrkG7WrHx6k iP86rOJ2R4tN85LUNUlxu/c0uPCUIAI+8Ed80+c3XEcW7/6KJO1r94uI2T1qTh78 aPJL8j9CxBxkc6YctbRtVm4robneGW0wOyMJvb2CDtNKrOPpe+ZNDgx2ZivCw7pJ +gaXWRoYJzeDEu/QEpdysaovkL78D0IVnCu8RIkem2q0jUTQg3c2TbttB5ZTJTpa +Jwrov0Rm40coqKFrGUcYQBlkAfX6l8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:42 2025 by rpki-client