$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/21ed06dc-3a8a-39a6-8098-04f68740e07c.roa File: 21ed06dc-3a8a-39a6-8098-04f68740e07c.roa (raw, json) Hash identifier: 33luAEuXQi5CwXchVQ87a4Ux3SC5CBLQwvc7FhGdZqM= Subject key identifier: D7:7E:B0:65:8A:14:7A:F8:CB:7F:F4:88:2C:9A:F7:E9:D9:85:D0:59 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584BBFA5A70A87ACF337224B7080 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/21ed06dc-3a8a-39a6-8098-04f68740e07c.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 11548 IP address blocks: 216.186.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a7:0a:87:ac:f3:37:22:4b:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=20c36c58-00ca-40ad-bced-80d6a9d928da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:5b:8e:0b:94:65:94:d9:09:50:54:f0:37: 1e:33:c7:a1:cf:f5:ee:d0:e0:32:f7:4d:b4:a5:e5: e5:17:ac:d9:32:f4:19:7b:b0:44:97:ff:73:dc:ec: 5a:18:7e:c2:7e:c8:44:3d:f8:3c:ae:22:24:ec:c0: 8d:7b:d4:b8:ca:1c:b9:55:e1:21:33:00:c6:12:c1: 56:d7:1d:77:c3:8d:e7:ec:43:34:42:22:68:07:68: bb:ea:fc:df:7f:33:ac:88:23:f5:38:01:89:46:e8: 34:8d:b2:c3:8a:97:99:e3:e2:e1:49:e9:63:ae:55: c0:b7:bc:5b:27:2c:ea:e9:6f:d4:9a:ce:89:15:bb: 0e:ed:e6:16:f5:21:4f:38:0f:5b:f2:07:0a:05:31: 64:32:06:ed:32:2d:7b:f9:28:3b:5c:a7:ce:48:a5: ea:b8:7a:a4:6e:cc:ab:11:06:2f:31:b6:49:50:a7: 94:78:f7:71:27:2b:53:c9:cd:25:94:8e:b6:f5:4f: 8a:04:02:60:a2:e6:e2:9b:9f:72:c2:65:a8:41:bf: 4e:56:0d:77:b2:d6:9c:ed:5b:c8:6c:43:65:dc:1f: 1f:ce:0c:27:d3:86:30:d2:f9:df:f0:e4:6e:f5:a5: 1d:92:88:6b:6c:d7:a8:ee:ae:6f:ca:c8:a6:38:2a: cf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7E:B0:65:8A:14:7A:F8:CB:7F:F4:88:2C:9A:F7:E9:D9:85:D0:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/21ed06dc-3a8a-39a6-8098-04f68740e07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 216.186.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:61:c1:ae:65:45:5c:55:27:bf:49:3b:f5:80:a7:d1:cc:66: 0b:72:5d:70:ba:50:27:fc:97:3d:a5:9f:5b:67:dc:90:ab:8f: 27:69:95:cf:07:f0:05:df:40:6d:e1:db:6c:a9:e9:02:d0:d5: 91:a5:cc:73:38:bd:b0:0d:01:7c:93:05:63:67:f4:ce:29:7c: 2b:29:fc:2d:a8:67:3a:eb:99:82:59:db:c5:f8:1b:a5:25:66: d6:fe:8c:92:ec:36:36:67:b1:44:42:0f:ef:63:db:91:f7:02: 21:f9:1a:97:f2:a1:bc:42:fa:eb:bf:2b:14:9a:e6:ef:b4:45: 2d:72:cf:5a:ba:a7:54:36:08:99:f9:13:28:c6:3f:fa:7f:c2: 69:1d:04:d7:d7:77:fc:3b:d3:d6:01:0a:73:24:e3:ae:9d:25: 18:4b:7b:b1:b3:80:b6:9a:42:8a:62:d0:cf:27:c0:c0:71:ba: 21:14:ae:af:38:74:5b:a7:24:3a:ea:eb:d9:e7:90:d5:16:d4: 40:99:19:cd:94:af:08:44:09:1b:36:07:16:39:f1:34:73:ac: 15:70:de:b9:0a:55:06:70:eb:a4:1e:f3:46:2e:cf:e2:95:c4: 19:ea:27:2f:de:c2:47:4b:8e:00:3b:b6:c8:e7:bc:3c:e4:79: af:6b:b3:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pacKh6zzNyJLcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MjBjMzZjNTgtMDBjYS00MGFkLWJjZWQtODBkNmE5ZDkyOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAFbjguUZZTZCVBU8DceM8ehz/Xu0OAy9020 peXlF6zZMvQZe7BEl/9z3OxaGH7CfshEPfg8riIk7MCNe9S4yhy5VeEhMwDGEsFW 1x13w43n7EM0QiJoB2i76vzffzOsiCP1OAGJRug0jbLDipeZ4+LhSeljrlXAt7xb Jyzq6W/Ums6JFbsO7eYW9SFPOA9b8gcKBTFkMgbtMi17+Sg7XKfOSKXquHqkbsyr EQYvMbZJUKeUePdxJytTyc0llI629U+KBAJgoubim59ywmWoQb9OVg13stac7VvI bENl3B8fzgwn04Yw0vnf8ORu9aUdkohrbNeo7q5vysimOCrPnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNd+sGWKFHr4y3/0iCya9+nZhdBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMjFlZDA2ZGMtM2E4YS0z OWE2LTgwOTgtMDRmNjg3NDBlMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LpiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJhwa5lRVxVJ79JO/WAp9HMZgtyXXC6UCf8lz2ln1tn3JCrjydplc8H 8AXfQG3h22yp6QLQ1ZGlzHM4vbANAXyTBWNn9M4pfCsp/C2oZzrrmYJZ28X4G6Ul Ztb+jJLsNjZnsURCD+9j25H3AiH5GpfyobxC+uu/KxSa5u+0RS1yz1q6p1Q2CJn5 EyjGP/p/wmkdBNfXd/w709YBCnMk466dJRhLe7GzgLaaQopi0M8nwMBxuiEUrq84 dFunJDrq69nnkNUW1ECZGc2UrwhECRs2BxY58TRzrBVw3rkKVQZw66Qe80Yuz+KV xBnqJy/ewkdLjgA7tsjnvDzkea9rs8w= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:31 2025 by rpki-client