$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f0b96ca-620a-3bb2-9bbd-af2144137209.roa File: 0f0b96ca-620a-3bb2-9bbd-af2144137209.roa (raw, json) Hash identifier: 4+osj0yoziaTHjQnlyJylfwxz0PYIZOUdSqlzAmyacs= Subject key identifier: 16:7B:30:5D:55:21:24:21:A9:48:90:44:C2:98:F6:8D:3D:2F:FE:98 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B970CE05396840001718ABA80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f0b96ca-620a-3bb2-9bbd-af2144137209.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16904 IP address blocks: 216.133.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e0:53:96:84:00:01:71:8a:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=d31bba4b-b3a2-4369-86b4-45c78b2228f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:7c:70:f8:e9:63:e1:af:cc:5b:3c:98:99: 3b:19:d8:91:ea:6a:e0:8e:f1:ee:8b:51:6a:18:08: c0:4c:95:0e:f4:8b:41:36:a6:c6:45:e3:7c:56:61: bd:f3:60:53:ad:68:64:bc:a5:3c:63:d3:cf:3c:39: d8:bc:ee:6a:2a:4a:32:dd:e5:75:d3:dc:88:37:95: d4:41:f7:79:c1:ed:04:d1:d4:86:6b:eb:31:b0:82: db:a6:78:2b:17:7a:60:bb:d9:41:63:d5:72:11:60: 95:da:11:6a:59:a5:56:7a:08:9d:a5:df:81:d7:5c: 29:0b:3a:05:bb:d7:b8:9e:ac:bf:65:f0:29:5c:c9: 5d:e6:41:81:45:e0:29:0e:0f:73:df:93:f4:9d:f4: cd:7f:ec:1e:d8:19:e0:f7:70:53:f1:6f:ac:de:39: c2:97:ea:ed:57:83:29:14:f5:1b:8b:dc:48:54:af: 90:0a:2b:c2:6d:f4:f9:f1:96:a0:1e:96:17:74:7d: fc:05:47:63:1b:1c:21:8e:6c:f9:e2:df:3e:70:d9: 01:4b:75:d5:3e:c2:1d:7f:72:27:2e:22:39:7c:bd: 23:b6:d9:6a:fb:04:2d:fc:b3:54:74:c5:5b:a5:e3: 8a:e2:cf:e3:3c:4c:cc:4a:5f:a5:fd:b6:ee:1c:6d: 2f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7B:30:5D:55:21:24:21:A9:48:90:44:C2:98:F6:8D:3D:2F:FE:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f0b96ca-620a-3bb2-9bbd-af2144137209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.133.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:eb:b0:d1:95:4b:b5:f3:dd:8e:a5:05:8b:26:46:d7:a1:eb: e9:9e:1a:03:a4:24:ca:2e:85:b7:39:1f:76:22:7d:a4:4c:2c: 5b:ee:0c:cf:a9:56:21:f0:f5:9d:8d:ea:71:6a:b3:4f:90:88: 6e:72:90:c0:dd:e2:21:e7:3a:09:37:fe:10:e5:18:66:b7:43: fd:87:e4:05:9a:1c:74:a3:f3:1d:42:34:76:f6:4c:5f:c8:73: b1:a5:21:52:01:46:1c:80:b5:58:88:9b:b9:85:7b:bd:14:b8: 28:02:de:2b:e6:f7:4a:b8:41:87:36:31:bb:f8:ca:cf:5e:c9: 4a:ed:8c:9d:5d:ce:ac:ac:3e:a7:93:95:5a:d7:85:14:7a:16: 17:25:96:d8:b7:76:cb:76:32:3c:b9:d0:9d:ca:08:b8:98:ad: 5c:f1:b6:e0:70:e7:46:8d:bb:50:b3:33:6f:98:fb:28:c0:03: 0c:3b:68:ba:67:92:f8:ea:56:53:42:9e:9a:3d:3c:68:53:29: 83:c0:82:d9:74:79:e2:dc:0b:b1:d2:32:73:04:9d:cc:06:fa: f0:74:d8:4b:2e:86:b5:33:1e:c9:78:16:2d:d1:23:db:26:81: f2:a6:98:24:4c:50:d6:9e:93:e5:9c:ef:81:1f:f4:d3:4d:85: e1:ed:62:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOBTloQAAXGKuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZDMxYmJhNGItYjNhMi00MzY5LTg2YjQtNDVjNzhiMjIyOGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtB8cPjpY+GvzFs8mJk7GdiR6mrgjvHui1Fq GAjATJUO9ItBNqbGReN8VmG982BTrWhkvKU8Y9PPPDnYvO5qKkoy3eV109yIN5XU Qfd5we0E0dSGa+sxsILbpngrF3pgu9lBY9VyEWCV2hFqWaVWegidpd+B11wpCzoF u9e4nqy/ZfApXMld5kGBReApDg9z35P0nfTNf+we2Bng93BT8W+s3jnCl+rtV4Mp FPUbi9xIVK+QCivCbfT58ZagHpYXdH38BUdjGxwhjmz54t8+cNkBS3XVPsIdf3In LiI5fL0jttlq+wQt/LNUdMVbpeOK4s/jPEzMSl+l/bbuHG0vCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZ7MF1VISQhqUiQRMKY9o09L/6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGYwYjk2Y2EtNjIwYS0z YmIyLTliYmQtYWYyMTQ0MTM3MjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrrsNGVS7Xz3Y6lBYsmRteh6+meGgOkJMouhbc5H3YifaRMLFvuDM+p ViHw9Z2N6nFqs0+QiG5ykMDd4iHnOgk3/hDlGGa3Q/2H5AWaHHSj8x1CNHb2TF/I c7GlIVIBRhyAtViIm7mFe70UuCgC3ivm90q4QYc2Mbv4ys9eyUrtjJ1dzqysPqeT lVrXhRR6Fhcllti3dst2Mjy50J3KCLiYrVzxtuBw50aNu1CzM2+Y+yjAAww7aLpn kvjqVlNCnpo9PGhTKYPAgtl0eeLcC7HSMnMEncwG+vB02EsuhrUzHsl4Fi3RI9sm gfKmmCRMUNaek+Wc74Ef9NNNheHtYmA= -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:54 2025 by rpki-client