$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/785cfc03-649d-355d-9203-8d59836186e2.roa File: 785cfc03-649d-355d-9203-8d59836186e2.roa (raw, json) Hash identifier: qf72vA8CRoa9mL91YoCcSvpOEbWXsdDuVEbQBtnYlDE= Subject key identifier: 10:5E:67:9B:18:4C:73:A9:7C:D2:E6:68:61:85:86:BA:39:E2:97:6C Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Certificate serial: 010D0C9F4328584AF5214442271486B49EBFF180 Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/785cfc03-649d-355d-9203-8d59836186e2.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 31799 IP address blocks: 216.39.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:44:42:27:14:86:b4:9e:bf:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=3658ea25-66e2-4d32-b71c-58d0866bf01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:32:7e:d6:e1:e2:fd:3e:6e:f6:c8:ba:11:18: 19:ef:d8:db:62:18:15:4d:14:31:cc:52:af:be:d5: cb:ec:a9:7f:f3:3f:40:46:9f:41:fe:a0:59:da:84: 14:2e:d9:b5:bf:94:52:d2:04:a0:2e:2d:b3:42:fc: 58:02:d2:d4:00:9a:04:c8:d7:32:00:f4:d0:85:37: cc:ea:fd:43:8c:31:d0:6a:8a:30:fe:45:13:c4:72: 01:92:ea:5c:81:8a:a1:19:03:ec:0b:eb:26:d2:ca: b0:10:91:c0:ef:cf:31:1c:5e:3e:14:80:72:49:27: 32:15:e7:5e:83:9a:2d:a2:21:b0:a0:21:37:06:b9: 9c:af:c7:e9:d9:10:6b:46:33:87:7c:cd:be:37:08: 93:f2:d1:0e:d6:58:b3:f1:e6:c4:5b:c6:2b:3f:4a: fa:5d:d6:77:da:6f:b9:fd:0b:7c:cc:75:08:37:65: 02:87:5b:8c:16:0b:0d:db:db:4c:be:c8:af:69:32: 40:8a:b6:eb:bf:13:75:d9:52:0e:09:a2:51:cd:d6: c7:4e:14:9a:78:f0:10:ac:23:3f:46:22:e9:e6:e6: 70:83:ec:c3:db:36:9d:39:21:be:4f:6f:24:84:44: d4:4d:4b:fd:c7:80:92:f2:8c:da:b3:a9:5e:0f:31: db:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5E:67:9B:18:4C:73:A9:7C:D2:E6:68:61:85:86:BA:39:E2:97:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/785cfc03-649d-355d-9203-8d59836186e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl X509v3 Authority Key Identifier: keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer sbgp-ipAddrBlock: critical IPv4: 216.39.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f7:96:28:bb:8d:a4:19:69:4b:58:f8:43:6e:a7:49:16:34: a1:3d:44:bf:9d:aa:f6:d3:9f:35:e8:a3:32:64:af:16:a8:55: df:28:bb:c4:3c:d2:2b:72:1b:03:e0:c1:13:e9:e1:5a:39:81: 9b:ce:3d:9c:24:9d:ec:f6:a2:0b:47:a3:58:94:17:b8:ec:7e: d4:4e:4f:bd:60:42:13:56:d3:cc:c7:d8:68:a6:39:75:48:02: e8:67:f9:ca:ce:80:64:ed:7f:7b:ed:8a:e5:19:1c:b4:96:ea: 45:da:9d:37:81:f1:9d:ee:19:1b:3e:6b:49:8a:e4:c5:63:be: cf:dc:2a:1b:b7:c9:4e:90:e1:e3:bc:a7:c9:52:d5:9f:0c:e1: bb:d5:5f:3b:7e:37:0a:62:3e:35:44:2a:04:82:9c:de:af:c4: 53:56:c6:78:db:9b:49:b6:3e:ea:f7:44:97:8c:17:44:65:cb: e4:c8:9b:2f:a6:49:d3:dc:1d:31:2c:a9:8d:63:8b:ab:f5:24: 3b:0f:05:b4:a6:9b:f7:f4:25:b7:cb:e7:c9:d8:12:b4:b5:b5: b9:28:b4:5a:8a:c5:4f:7d:36:48:81:ab:e9:87:41:c1:01:78: 96:92:44:3b:eb:b3:f1:99:cb:c5:45:59:e4:06:06:ff:cc:ee: b1:1c:e9:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IURCJxSGtJ6/8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlNjBiNzctMTdlMy00MjUwLTliYzgtYjVlNzY2NGEz MjBhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzY1OGVhMjUtNjZlMi00ZDMyLWI3MWMtNThkMDg2NmJmMDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzJ+1uHi/T5u9si6ERgZ79jbYhgVTRQxzFKv vtXL7Kl/8z9ARp9B/qBZ2oQULtm1v5RS0gSgLi2zQvxYAtLUAJoEyNcyAPTQhTfM 6v1DjDHQaoow/kUTxHIBkupcgYqhGQPsC+sm0sqwEJHA788xHF4+FIBySScyFede g5otoiGwoCE3Brmcr8fp2RBrRjOHfM2+NwiT8tEO1liz8ebEW8YrP0r6XdZ32m+5 /Qt8zHUIN2UCh1uMFgsN29tMvsivaTJAirbrvxN12VIOCaJRzdbHThSaePAQrCM/ RiLp5uZwg+zD2zadOSG+T28khETUTUv9x4CS8ozas6leDzHbqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBeZ5sYTHOpfNLmaGGFhro54pdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85N2U2 MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0YTMyMGEvNzg1Y2ZjMDMtNjQ5ZC0z NTVkLTkyMDMtOGQ1OTgzNjE4NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTdlNjBiNzctMTdlMy00MjUwLTli YzgtYjVlNzY2NGEzMjBhLzk3ZTYwYjc3LTE3ZTMtNDI1MC05YmM4LWI1ZTc2NjRh MzIwYS5jcmwwHwYDVR0jBBgwFoAUuDyKvqqk837fXRUqBDrtbKGEtlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3 NjY0YTMyMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Cf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf3lii7jaQZaUtY+ENup0kWNKE9RL+dqvbTnzXoozJkrxaoVd8ou8Q8 0ityGwPgwRPp4Vo5gZvOPZwknez2ogtHo1iUF7jsftROT71gQhNW08zH2GimOXVI Auhn+crOgGTtf3vtiuUZHLSW6kXanTeB8Z3uGRs+a0mK5MVjvs/cKhu3yU6Q4eO8 p8lS1Z8M4bvVXzt+NwpiPjVEKgSCnN6vxFNWxnjbm0m2Pur3RJeMF0Rly+TImy+m SdPcHTEsqY1ji6v1JDsPBbSmm/f0JbfL58nYErS1tbkotFqKxU99NkiBq+mHQcEB eJaSRDvrs/GZy8VFWeQGBv/M7rEc6Xc= -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:15 2025 by rpki-client