$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/016c48b1-08e7-3fb3-9a7d-3046a1cdc2c9.roa File: 016c48b1-08e7-3fb3-9a7d-3046a1cdc2c9.roa (raw, json) Hash identifier: US4L5D1qsMwAzhVTHwaZ6rjc5ZYJKDmQU2r+fgB1+Po= Subject key identifier: FC:DD:15:7B:96:C8:74:4F:EE:E7:28:02:21:8E:8E:B4:AC:FC:5C:CC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B970CCB4AF086CF2C16576080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/016c48b1-08e7-3fb3-9a7d-3046a1cdc2c9.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 174 IP address blocks: 209.250.114.0/24 maxlen: 24 209.250.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:cb:4a:f0:86:cf:2c:16:57:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=3bd9ab7d-3af3-4364-b4c7-7a82b8bed831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:c3:9d:ee:9b:8f:81:a7:07:d3:79:1a:f4: 01:22:20:9d:77:19:bd:d9:dd:39:44:e5:8d:56:67: 0a:6b:bc:7c:49:d1:52:41:c0:4c:24:a4:77:3d:d6: 04:97:76:9d:dd:aa:03:e2:86:21:79:1d:f5:e0:0a: ad:c5:d7:58:f4:02:96:37:93:80:c9:33:5f:24:c6: 03:dc:7b:43:8c:fb:62:aa:03:4d:ca:90:23:08:a7: df:ef:d7:eb:3c:c1:81:22:a7:e9:fd:bd:a1:d7:79: ff:7c:82:47:f2:4d:f0:cf:d2:d2:6f:a8:2c:13:71: 23:33:46:cc:4e:e6:fd:c6:6a:cf:53:74:5e:1d:58: 2f:d1:62:28:93:55:fa:8d:1d:69:6a:5c:53:92:39: 7b:e2:94:7d:00:ee:de:1f:59:38:13:8f:c7:32:01: 9e:3f:40:dd:e9:55:ff:e5:83:7d:97:4a:c2:8d:93: 8d:89:3e:a4:a2:a4:c7:02:f1:0f:ee:82:5d:63:32: 2d:ad:2d:37:2c:4d:25:9c:0f:e7:cd:88:44:d7:c0: 8d:8f:0d:7e:1e:fb:9f:91:b3:26:f6:dd:c4:5b:d6: cd:43:21:40:89:67:71:1f:8c:6a:b3:9e:1c:90:c2: 17:e4:90:46:9e:66:70:6d:1f:ca:25:3a:11:3f:db: 53:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DD:15:7B:96:C8:74:4F:EE:E7:28:02:21:8E:8E:B4:AC:FC:5C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/016c48b1-08e7-3fb3-9a7d-3046a1cdc2c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.250.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c7:8d:db:97:f9:10:3b:17:e9:a9:6f:79:84:e0:6e:d8:8b: 46:c3:37:a3:8f:6d:90:35:75:58:0d:70:4b:b5:b1:9b:8b:70: 59:95:a0:48:69:11:96:62:03:f3:69:72:17:b6:5b:92:cf:7f: 2a:28:3a:0a:42:0c:6d:91:1c:ca:26:65:7a:30:a7:e8:5a:b6: fd:4b:34:77:e0:48:d4:ee:ce:9e:2f:9e:92:c8:db:49:88:69: 53:39:74:2f:ee:6c:eb:fc:6b:08:67:f1:9a:71:8d:6f:a2:f1: 91:a8:d8:2e:24:22:37:57:97:cc:12:ca:34:95:a1:42:f2:98: ce:c9:43:d7:56:fc:57:47:04:52:08:4f:05:e2:2b:0d:47:7c: b8:1c:23:c2:9b:60:8d:50:66:98:1f:07:e3:34:25:fe:7f:de: 84:de:73:26:5e:52:ea:5a:8e:d6:9e:c8:9f:6f:8e:07:45:86: 2b:31:29:85:aa:f5:cd:8f:a4:d7:b5:ed:19:21:d4:b6:02:6c: b0:24:d6:1a:d8:8f:90:b5:c3:ee:77:86:ed:24:fb:bc:ce:fa: 69:04:30:86:02:67:31:b9:27:d8:94:bc:52:67:e1:ff:92:42: f5:a5:53:d8:8a:b7:e5:31:4f:c3:15:62:83:c3:e3:40:bb:2a: 07:2b:d8:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDMtK8IbPLBZXYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk M2JkOWFiN2QtM2FmMy00MzY0LWI0YzctN2E4MmI4YmVkODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryDDne6bj4GnB9N5GvQBIiCddxm92d05ROWN VmcKa7x8SdFSQcBMJKR3PdYEl3ad3aoD4oYheR314AqtxddY9AKWN5OAyTNfJMYD 3HtDjPtiqgNNypAjCKff79frPMGBIqfp/b2h13n/fIJH8k3wz9LSb6gsE3EjM0bM Tub9xmrPU3ReHVgv0WIok1X6jR1palxTkjl74pR9AO7eH1k4E4/HMgGeP0Dd6VX/ 5YN9l0rCjZONiT6koqTHAvEP7oJdYzItrS03LE0lnA/nzYhE18CNjw1+HvufkbMm 9t3EW9bNQyFAiWdxH4xqs54ckMIX5JBGnmZwbR/KJToRP9tTOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzdFXuWyHRP7ucoAiGOjrSs/FzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDE2YzQ4YjEtMDhlNy0z ZmIzLTlhN2QtMzA0NmExY2RjMmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0fpyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbHjduX+RA7F+mpb3mE4G7Yi0bDN6OPbZA1dVgNcEu1sZuLcFmVoEhp EZZiA/Npche2W5LPfyooOgpCDG2RHMomZXowp+hatv1LNHfgSNTuzp4vnpLI20mI aVM5dC/ubOv8awhn8ZpxjW+i8ZGo2C4kIjdXl8wSyjSVoULymM7JQ9dW/FdHBFII TwXiKw1HfLgcI8KbYI1QZpgfB+M0Jf5/3oTecyZeUupajtaeyJ9vjgdFhisxKYWq 9c2PpNe17Rkh1LYCbLAk1hrYj5C1w+53hu0k+7zO+mkEMIYCZzG5J9iUvFJn4f+S QvWlU9iKt+UxT8MVYoPD40C7Kgcr2D0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:54 2025 by rpki-client