$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/d42882c0-5c2a-3fe0-ab27-0a539be66b5f.roa File: d42882c0-5c2a-3fe0-ab27-0a539be66b5f.roa (raw, json) Hash identifier: R55kZlSJ73pypeAbUqrWEZZs65Usol3wzuXKy+qrsDo= Subject key identifier: 3F:22:C1:E3:F4:E8:6A:90:98:13:B6:10:8C:B0:D1:50:7D:B2:D7:E1 Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584BB727BC8BA81C4F99EA6F0500 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/d42882c0-5c2a-3fe0-ab27-0a539be66b5f.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 216138 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:bc:8b:a8:1c:4f:99:ea:6f:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=3a250712-d91c-4c14-9a24-55f9058624d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:f6:be:83:95:da:8f:a5:ca:d9:87:e5:cf: ca:98:c8:cd:bf:82:01:5b:36:e6:14:74:ab:10:e1: 22:cc:70:06:4e:bc:8e:8e:37:2f:d7:21:3b:66:6b: 24:b4:96:2c:62:8f:d1:b9:ca:77:3a:1c:38:82:09: f5:cc:8a:67:12:1c:e3:84:fc:57:1f:ba:ab:b4:fe: 81:d5:11:4b:4e:6d:59:8c:5f:07:4e:c0:0d:5f:40: 45:36:69:41:f0:e6:7d:52:f8:3e:cc:d3:5d:2f:4e: ae:83:74:3d:28:ca:95:de:17:58:df:b5:9f:8b:c1: e5:e2:76:9c:da:c3:56:72:86:21:af:b6:67:db:ad: a0:e7:a2:ac:4a:9b:c2:ed:bf:4c:c2:d0:7b:09:97: c2:7b:1e:47:83:34:bd:ba:76:f1:d4:66:8e:f5:83: 54:40:5e:b3:d8:8f:4f:ec:a5:8e:37:26:69:9b:0b: b1:d3:b6:03:d7:95:1d:60:de:91:6f:23:5f:2a:50: c1:27:aa:44:82:ad:5a:83:8f:6b:d8:4c:96:7c:f6: 73:e8:00:a8:57:f6:1d:18:fe:bb:e0:2c:7f:0c:74: 61:be:64:b0:19:2b:1e:1e:67:f9:99:ae:52:2b:03: 41:bc:52:15:95:1e:07:b2:af:4b:c8:a5:22:9c:fc: f5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:22:C1:E3:F4:E8:6A:90:98:13:B6:10:8C:B0:D1:50:7D:B2:D7:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/d42882c0-5c2a-3fe0-ab27-0a539be66b5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:2b:50:36:8c:1e:f8:af:74:de:b4:09:44:23:5a:b0:34:0b: 04:c3:c1:e4:da:2a:70:c1:26:c9:28:77:35:2f:fe:89:26:4e: 59:6a:4a:79:04:89:81:80:4a:7d:ce:27:75:ad:45:6f:4d:ca: 14:e0:fb:fd:f4:c5:a3:49:cc:d4:67:32:0a:13:2e:26:a3:94: 43:8f:b1:ee:a7:d9:2c:16:97:fe:b5:0a:57:a9:c9:ec:ca:28: 87:ee:fd:e9:0c:9d:ac:67:ca:e6:9f:9c:8d:d4:28:d1:e4:77: cb:5c:5c:7c:84:04:90:b8:e7:32:74:71:86:2f:33:63:1f:40: 7c:0b:82:52:70:53:46:4a:ec:b5:7e:a6:13:67:34:24:97:fb: 58:86:19:bc:c4:0c:a7:2c:53:44:9f:db:33:5a:f4:11:ca:24: 34:c3:b6:ad:41:9d:31:11:5f:95:77:eb:a8:67:36:13:37:4c: c7:d4:72:7a:6e:7c:69:bd:90:4b:1d:b5:cf:12:e4:1b:69:4a: 52:97:d2:54:89:3a:12:7d:2d:5b:e5:4b:19:00:44:00:4b:5d: 4b:cc:d8:56:e0:6e:78:8b:23:2b:61:0d:f7:ff:e5:6c:af:ec: d6:dd:cc:be:50:5e:d7:d8:53:19:22:88:92:98:80:56:04:79: 87:aa:18:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7yLqBxPmepvBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk M2EyNTA3MTItZDkxYy00YzE0LTlhMjQtNTVmOTA1ODYyNGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoST2voOV2o+lytmH5c/KmMjNv4IBWzbmFHSr EOEizHAGTryOjjcv1yE7ZmsktJYsYo/Rucp3Ohw4ggn1zIpnEhzjhPxXH7qrtP6B 1RFLTm1ZjF8HTsANX0BFNmlB8OZ9Uvg+zNNdL06ug3Q9KMqV3hdY37Wfi8Hl4nac 2sNWcoYhr7Zn262g56KsSpvC7b9MwtB7CZfCex5HgzS9unbx1GaO9YNUQF6z2I9P 7KWONyZpmwux07YD15UdYN6RbyNfKlDBJ6pEgq1ag49r2EyWfPZz6ACoV/YdGP67 4Cx/DHRhvmSwGSseHmf5ma5SKwNBvFIVlR4Hsq9LyKUinPz1KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8iweP06GqQmBO2EIyw0VB9stfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvZDQyODgyYzAtNWMyYS0z ZmUwLWFiMjctMGE1MzliZTY2YjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMrUDaMHvivdN60CUQjWrA0CwTDweTaKnDBJskodzUv/okmTllqSnkE iYGASn3OJ3WtRW9NyhTg+/30xaNJzNRnMgoTLiajlEOPse6n2SwWl/61ClepyezK KIfu/ekMnaxnyuafnI3UKNHkd8tcXHyEBJC45zJ0cYYvM2MfQHwLglJwU0ZK7LV+ phNnNCSX+1iGGbzEDKcsU0Sf2zNa9BHKJDTDtq1BnTERX5V366hnNhM3TMfUcnpu fGm9kEsdtc8S5BtpSlKX0lSJOhJ9LVvlSxkARABLXUvM2FbgbniLIythDff/5Wyv 7NbdzL5QXtfYUxkiiJKYgFYEeYeqGEc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:05:26 2025 by rpki-client