$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8016cad1-9d76-383b-9183-d778f2e3c76c.roa File: 8016cad1-9d76-383b-9183-d778f2e3c76c.roa (raw, json) Hash identifier: uBHDIkZ/VXCLDhrEL3dSf0b5Ohm5tiRbISHENPUgdYk= Subject key identifier: 40:2A:03:BD:17:BD:8D:A8:A9:45:65:39:D5:82:6D:8B:EB:7B:DA:57 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BBEEC4AFED63444841CC39780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8016cad1-9d76-383b-9183-d778f2e3c76c.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 199527 IP address blocks: 204.147.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:ec:4a:fe:d6:34:44:84:1c:c3:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=0c470232-7df5-4f13-a403-a566f4a432d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3a:cd:2a:24:b8:13:53:93:9d:0e:bc:93:30: 89:7e:0d:65:bc:65:68:ad:8b:f3:88:16:25:83:c2: f5:45:00:c7:1b:e9:41:d7:9f:60:31:f8:8d:b6:71: 0f:44:c7:24:b4:8c:d6:9a:1a:f6:b5:a1:19:bd:1a: 17:5f:88:bf:d0:73:f0:d5:25:55:63:ac:f4:6c:68: a6:6f:c3:7c:04:9c:05:ff:1a:73:c4:e5:00:6b:eb: e6:5d:5a:58:f8:48:b2:c2:4e:f3:31:fe:8c:0f:eb: 56:d8:a7:4b:d3:f1:e9:0d:32:d5:d5:b5:c8:f4:aa: 50:0c:63:d9:a1:0f:26:59:b3:ae:23:70:dc:4e:a9: 9c:33:ec:72:b1:3b:f3:67:b4:95:c0:b7:bb:e6:a6: e1:21:f9:26:ce:c0:ad:2f:a6:b7:84:fb:9f:a6:c0: 79:0e:f6:02:af:20:a6:55:ea:78:20:4a:4e:80:5c: 2d:72:a2:9c:c9:e7:9c:4e:d9:54:b1:ac:42:c9:73: 84:c6:c8:25:61:5e:bf:68:25:2b:88:8e:8a:9c:12: 1e:97:93:c1:e5:26:34:7c:ff:25:78:19:2a:71:e0: 4a:53:01:75:d2:c3:d7:d9:0d:d4:29:f8:67:ed:9c: 38:30:70:06:8b:e1:df:8a:3f:b4:66:3e:c8:4d:39: de:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2A:03:BD:17:BD:8D:A8:A9:45:65:39:D5:82:6D:8B:EB:7B:DA:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8016cad1-9d76-383b-9183-d778f2e3c76c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 204.147.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:9f:37:3f:43:83:a0:6e:64:d3:c2:cc:25:f7:0a:27:3d:38: de:f1:b8:8f:5b:d7:ef:3d:3c:4f:e1:60:a5:0f:9d:72:5f:76: c0:ba:02:1d:2e:34:92:27:ac:a4:7b:ea:88:9b:2c:cc:0d:66: 88:86:33:dd:40:94:06:64:9f:70:5a:7f:90:38:37:15:45:49: 01:d7:1c:09:55:d8:4e:a7:59:41:1c:bd:01:73:63:cb:db:99: e8:44:6e:fd:27:8d:56:57:60:b4:7c:7e:c5:13:36:87:17:29: e3:e3:39:1c:0b:70:b7:b6:f8:0e:2b:50:c2:d4:97:c2:2c:5d: d6:8c:5e:d0:e9:94:4e:7f:57:87:4d:07:68:ed:bd:59:6f:12: f1:4e:00:b9:1c:b5:3b:4c:99:77:85:4c:91:cd:2a:29:8d:0b: 63:01:fb:da:d6:bd:c9:d6:66:d6:7f:b2:35:d6:d3:65:25:fc: 2c:aa:52:b0:0e:9a:fd:0b:db:1e:0b:d0:90:83:83:c3:ba:04: 9e:3b:9b:2b:df:e5:61:b9:56:d3:a5:bc:ce:32:c2:6e:78:d1: f2:eb:ac:9d:4c:6c:7a:57:45:9d:6e:c7:23:fb:03:a3:ae:fb: 54:d9:34:89:19:59:ce:5e:cc:e8:04:49:ab:b5:04:d9:16:9c: e1:5a:48:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+7Er+1jREhBzDl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MGM0NzAyMzItN2RmNS00ZjEzLWE0MDMtYTU2NmY0YTQzMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTrNKiS4E1OTnQ68kzCJfg1lvGVorYvziBYl g8L1RQDHG+lB159gMfiNtnEPRMcktIzWmhr2taEZvRoXX4i/0HPw1SVVY6z0bGim b8N8BJwF/xpzxOUAa+vmXVpY+Eiywk7zMf6MD+tW2KdL0/HpDTLV1bXI9KpQDGPZ oQ8mWbOuI3DcTqmcM+xysTvzZ7SVwLe75qbhIfkmzsCtL6a3hPufpsB5DvYCryCm Vep4IEpOgFwtcqKcyeecTtlUsaxCyXOExsglYV6/aCUriI6KnBIel5PB5SY0fP8l eBkqceBKUwF10sPX2Q3UKfhn7Zw4MHAGi+Hfij+0Zj7ITTneMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAqA70XvY2oqUVlOdWCbYvre9pXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODAxNmNhZDEtOWQ3Ni0z ODNiLTkxODMtZDc3OGYyZTNjNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzJPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+fNz9Dg6BuZNPCzCX3Cic9ON7xuI9b1+89PE/hYKUPnXJfdsC6Ah0u NJInrKR76oibLMwNZoiGM91AlAZkn3Baf5A4NxVFSQHXHAlV2E6nWUEcvQFzY8vb mehEbv0njVZXYLR8fsUTNocXKePjORwLcLe2+A4rUMLUl8IsXdaMXtDplE5/V4dN B2jtvVlvEvFOALkctTtMmXeFTJHNKimNC2MB+9rWvcnWZtZ/sjXW02Ul/CyqUrAO mv0L2x4L0JCDg8O6BJ47myvf5WG5VtOlvM4ywm540fLrrJ1MbHpXRZ1uxyP7A6Ou +1TZNIkZWc5ezOgESau1BNkWnOFaSP8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:02:46 2025 by rpki-client