$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b6fff14-b094-3713-a051-4308275fdb21.roa File: 8b6fff14-b094-3713-a051-4308275fdb21.roa (raw, json) Hash identifier: xZvPjI8BZKmZusrGemE9IthiYWQ5dIwkhXgM1yenTnk= Subject key identifier: BE:4F:53:D3:F0:A7:8F:48:37:77:FB:DA:B3:46:F7:73:15:54:59:D0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B87B2407D5CB8B63CDB763380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b6fff14-b094-3713-a051-4308275fdb21.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 5065 IP address blocks: 216.132.124.0/24 maxlen: 24 216.132.125.0/24 maxlen: 24 216.132.132.0/24 maxlen: 24 216.132.133.0/24 maxlen: 24 216.132.134.0/24 maxlen: 24 216.132.135.0/24 maxlen: 24 216.132.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:40:7d:5c:b8:b6:3c:db:76:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=826e6bcc-a916-4389-810f-fe742b5cc9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:51:e5:c8:a7:b4:1d:b3:10:fc:22:c0:dd: 89:34:1e:e8:54:6a:2e:8d:5c:ef:12:35:5e:14:e5: c6:53:90:cc:d2:d0:09:df:21:50:62:bd:a6:f7:23: c1:e0:25:01:62:05:7e:20:81:fc:ad:db:54:8a:24: ed:84:02:db:be:54:95:96:05:9d:7c:ef:18:a9:ad: 8f:b5:52:cf:da:f8:9a:f5:b7:ca:70:28:bd:89:46: 7e:7c:c8:ff:b5:6e:d0:22:e1:01:96:48:aa:fd:e3: b3:24:13:34:83:1a:63:6d:d6:ee:04:37:bb:66:c0: b0:8f:dd:8c:bf:c6:bb:02:dc:de:5a:a8:40:83:fc: a2:b7:11:01:38:db:a4:a1:94:e4:40:72:75:66:84: cb:a5:29:24:b4:14:40:32:ce:eb:25:8a:3b:d4:5e: 0d:8f:4e:a6:15:f6:58:20:82:d7:77:fc:46:71:70: e6:98:90:7f:27:20:57:dc:05:56:f2:f9:1b:7c:0b: c0:34:20:74:f4:4c:14:2a:33:39:25:72:04:6b:9f: 78:f0:da:f8:9a:40:34:e9:23:5c:11:4c:fd:30:4c: 56:97:a7:65:2b:a2:49:38:3f:41:54:b6:77:d8:09: e3:ce:cc:8e:37:17:e9:aa:c3:f2:1a:00:f8:39:a0: 40:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4F:53:D3:F0:A7:8F:48:37:77:FB:DA:B3:46:F7:73:15:54:59:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b6fff14-b094-3713-a051-4308275fdb21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.124.0/23 216.132.132.0/22 216.132.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:66:f5:65:25:ba:a7:e2:af:f9:bb:0a:80:27:fb:06:7e:54: 87:12:e2:24:70:2e:3c:07:4f:f4:99:e1:0b:d9:da:e9:74:7f: 3a:e7:ea:c6:94:74:d7:45:58:3b:d5:4c:02:f5:b2:17:e1:e9: 91:a2:eb:f5:a0:6b:fc:6c:85:3d:7b:82:98:70:85:0e:72:4b: 9f:e7:41:ec:ca:f1:86:70:39:79:5b:f3:4b:58:db:c5:5f:b6: 4d:56:42:8b:dc:ad:e2:a3:42:3d:2a:05:04:00:34:5e:79:20: 80:90:f8:6d:e7:10:91:d7:ff:a8:fc:df:92:46:81:46:83:49: db:12:3e:0b:de:ed:eb:14:32:a5:87:fb:ba:96:10:45:e7:fc: d5:d7:19:d5:99:45:c5:02:9b:61:7e:d5:6a:97:33:57:7f:aa: 3f:a7:90:4e:7c:dc:b8:68:49:0b:88:3d:12:cf:34:7f:d8:e7: 71:1b:e1:c9:b8:9e:9b:11:6b:80:1b:cf:b4:df:71:d0:5c:68: 16:32:27:fb:b6:09:83:20:70:6e:7f:1c:46:f6:3a:02:69:16: d0:be:0a:3d:44:5f:62:ea:df:ac:43:94:e7:3a:67:4e:b2:15: 10:14:c4:dd:32:39:f9:1e:c7:93:2a:e2:39:cf:6c:f7:e0:a7: 01:f9:d2:82 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEuHskB9XLi2PNt2M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ODI2ZTZiY2MtYTkxNi00Mzg5LTgxMGYtZmU3NDJiNWNjOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4NR5cintB2zEPwiwN2JNB7oVGoujVzvEjVe FOXGU5DM0tAJ3yFQYr2m9yPB4CUBYgV+IIH8rdtUiiTthALbvlSVlgWdfO8Yqa2P tVLP2via9bfKcCi9iUZ+fMj/tW7QIuEBlkiq/eOzJBM0gxpjbdbuBDe7ZsCwj92M v8a7AtzeWqhAg/yitxEBONukoZTkQHJ1ZoTLpSkktBRAMs7rJYo71F4Nj06mFfZY IILXd/xGcXDmmJB/JyBX3AVW8vkbfAvANCB09EwUKjM5JXIEa5948Nr4mkA06SNc EUz9MExWl6dlK6JJOD9BVLZ32AnjzsyONxfpqsPyGgD4OaBAWwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFL5PU9Pwp49IN3f72rNG93MVVFnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGI2ZmZmMTQtYjA5NC0z NzEzLWEwNTEtNDMwODI3NWZkYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQB2IR8AwQC 2ISEAwQA2ISUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAMhm9WUluqfir/m7CoAn+wZ+VIcS4iRwLjwHT/SZ 4QvZ2ul0fzrn6saUdNdFWDvVTAL1shfh6ZGi6/Wga/xshT17gphwhQ5yS5/nQezK 8YZwOXlb80tY28Vftk1WQovcreKjQj0qBQQANF55IICQ+G3nEJHX/6j835JGgUaD SdsSPgve7esUMqWH+7qWEEXn/NXXGdWZRcUCm2F+1WqXM1d/qj+nkE583LhoSQuI PRLPNH/Y53Eb4cm4npsRa4Abz7TfcdBcaBYyJ/u2CYMgcG5/HEb2OgJpFtC+Cj1E X2Lq36xDlOc6Z06yFRAUxN0yOfkex5Mq4jnPbPfgpwH50oI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:52:08 2025 by rpki-client