$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d7f13aa3-fb44-373c-999b-e971fd308274.roa File: d7f13aa3-fb44-373c-999b-e971fd308274.roa (raw, json) Hash identifier: +WSBl3EV2iN+F4CwqwS75JwZApiaz97dzS6Rn0sW8sE= Subject key identifier: 91:F7:58:A3:B0:58:81:B8:09:13:6C:62:F9:F6:B2:AE:AF:F3:14:18 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B8DACC099B66268BB85EB0D00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d7f13aa3-fb44-373c-999b-e971fd308274.roa Signing time: Fri 17 Oct 2025 16:24:45 +0000 ROA not before: Fri 17 Oct 2025 16:24:45 +0000 ROA not after: Thu 15 Jan 2026 17:24:45 +0000 asID: 52419 IP address blocks: 216.28.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:ac:c0:99:b6:62:68:bb:85:eb:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 17 16:24:45 2025 GMT Not After : Jan 15 17:24:45 2026 GMT Subject: CN=aa61df6d-0cd1-4b58-8438-3451617101cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ea:66:38:90:ed:12:4c:87:11:82:84:03:16: 4b:72:d2:70:22:05:b7:13:ca:c0:bc:ba:32:b1:7f: 2c:e0:5b:54:c4:30:4e:11:ae:8f:ed:49:37:ad:8b: 5b:79:8a:43:0f:e4:2a:22:9e:46:ba:f8:7b:41:ed: a7:2a:1f:42:63:b2:13:6b:db:d9:4c:23:61:bf:fd: 7b:51:0a:d2:36:96:90:af:8e:1e:a0:7f:bb:73:e3: 67:ad:71:77:8d:e2:02:e6:b1:1e:a6:82:87:fe:9c: 4d:2b:dc:59:8d:50:1f:b8:a2:5b:a5:6b:da:e9:16: 20:d8:f9:ff:73:77:d3:92:0f:24:7b:57:c8:67:05: bb:99:b8:b9:f0:2f:7d:72:88:1c:cc:69:2b:91:ec: a3:5d:88:b2:e2:02:67:93:7d:98:90:9a:85:09:60: f7:63:cd:36:ac:a1:0a:c7:d8:f1:5c:fd:f1:01:b1: 3d:73:93:3a:07:b4:14:56:3f:db:a6:d0:c3:44:c5: 86:0a:10:d5:63:ef:47:56:41:59:ac:f6:1e:0d:9d: 2c:4d:02:9f:91:f3:7d:b9:21:35:ef:45:37:15:99: 6e:45:b7:ed:1f:40:8a:f1:43:2e:c3:81:a8:91:e4: b8:68:9d:e9:79:a3:f8:c9:44:f5:d2:bc:11:d3:df: 46:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F7:58:A3:B0:58:81:B8:09:13:6C:62:F9:F6:B2:AE:AF:F3:14:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d7f13aa3-fb44-373c-999b-e971fd308274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 216.28.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b2:6a:cc:dd:07:9b:e1:d3:18:90:5a:93:0f:a7:d8:6b:a0: c8:85:c2:7f:04:ae:2e:99:d4:54:a4:8a:21:ff:15:75:85:d7: 16:a4:9e:dc:4f:b9:30:38:d6:8b:21:2f:77:d5:cb:f5:41:8f: 5d:50:c2:9e:ad:56:90:17:9c:b5:8d:b0:3d:be:fc:b7:79:be: 44:fa:58:5b:3c:3c:fb:83:02:5c:e1:b9:11:ef:a1:02:c5:a8: 89:07:ed:59:f5:58:41:28:61:20:ac:3a:b6:7a:5d:58:40:5c: be:b5:f7:52:78:bd:85:9d:4c:d8:69:01:d5:c2:f7:0f:5b:ea: 23:31:d8:c1:30:a3:8a:49:c2:6d:41:d8:8f:07:90:a2:d1:01: 15:db:fe:a1:9a:88:7a:f3:61:02:ad:e6:da:0a:77:ad:1b:ab: 86:12:fc:be:08:4f:60:f9:d3:18:46:8b:c7:f5:57:4e:66:ab: 5d:b3:7c:46:9a:18:ee:ec:2e:89:11:b9:ec:22:70:05:19:1d: c1:f3:21:bb:f2:9a:c5:88:24:13:59:f4:0e:ae:01:a5:6a:de: fb:73:9d:1f:77:a6:08:dc:ff:24:b6:31:02:68:5d:46:ff:97: ba:3c:1b:84:9c:19:9c:19:96:5d:5c:d8:93:8f:49:d4:89:02: 6f:2e:d5:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNrMCZtmJou4XrDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNzE2MjQ0NVoXDTI2MDExNTE3MjQ0NVowLzEtMCsGA1UEAxMk YWE2MWRmNmQtMGNkMS00YjU4LTg0MzgtMzQ1MTYxNzEwMWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOpmOJDtEkyHEYKEAxZLctJwIgW3E8rAvLoy sX8s4FtUxDBOEa6P7Uk3rYtbeYpDD+QqIp5Guvh7Qe2nKh9CY7ITa9vZTCNhv/17 UQrSNpaQr44eoH+7c+NnrXF3jeIC5rEepoKH/pxNK9xZjVAfuKJbpWva6RYg2Pn/ c3fTkg8ke1fIZwW7mbi58C99cogczGkrkeyjXYiy4gJnk32YkJqFCWD3Y802rKEK x9jxXP3xAbE9c5M6B7QUVj/bptDDRMWGChDVY+9HVkFZrPYeDZ0sTQKfkfN9uSE1 70U3FZluRbftH0CK8UMuw4GokeS4aJ3peaP4yUT10rwR099GSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJH3WKOwWIG4CRNsYvn2sq6v8xQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDdmMTNhYTMtZmI0NC0z NzNjLTk5OWItZTk3MWZkMzA4Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSyaszdB5vh0xiQWpMPp9hroMiFwn8Eri6Z1FSkiiH/FXWF1xakntxP uTA41oshL3fVy/VBj11Qwp6tVpAXnLWNsD2+/Ld5vkT6WFs8PPuDAlzhuRHvoQLF qIkH7Vn1WEEoYSCsOrZ6XVhAXL6191J4vYWdTNhpAdXC9w9b6iMx2MEwo4pJwm1B 2I8HkKLRARXb/qGaiHrzYQKt5toKd60bq4YS/L4IT2D50xhGi8f1V05mq12zfEaa GO7sLokRuewicAUZHcHzIbvymsWIJBNZ9A6uAaVq3vtznR93pgjc/yS2MQJoXUb/ l7o8G4ScGZwZll1c2JOPSdSJAm8u1XY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:21 2025 by rpki-client