$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/970cd30d-74be-33f9-a710-baa0ae6de29e.roa File: 970cd30d-74be-33f9-a710-baa0ae6de29e.roa (raw, json) Hash identifier: gmR9TJV3c/NlLUc5QG2M00NQLRFswiC04hfMxTNk4M8= Subject key identifier: 17:06:2F:F6:91:07:74:D7:A2:CC:C0:FA:83:6A:2E:AE:2E:A2:AF:C1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9CA22C979AFCEA58F7138180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/970cd30d-74be-33f9-a710-baa0ae6de29e.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 21859 IP address blocks: 216.132.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2c:97:9a:fc:ea:58:f7:13:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=1749629f-35f7-4948-a43b-43e408be20e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:97:ab:10:0c:e0:82:ad:8a:8b:f3:97:c2:22: a8:42:91:68:4c:28:84:3c:95:24:60:3d:3f:a8:77: c9:57:0f:27:8a:f7:53:45:32:91:f5:2c:59:77:ec: 5d:bf:a5:cb:90:6e:5a:d5:14:4d:d8:bc:e7:21:d4: 6d:22:24:cc:85:8a:05:73:d2:a9:18:5a:ec:1f:c8: 78:78:b2:80:f4:fd:c4:ac:fd:2d:5a:49:6a:b9:d6: d3:d8:98:2f:3f:28:e5:67:7c:54:4a:e6:ee:a6:ad: da:30:90:14:0c:a9:b0:46:b9:a0:fe:d5:18:a9:45: fe:97:9c:42:33:40:7e:54:62:d3:ee:32:3b:1f:36: 56:ed:a6:28:7d:4b:94:81:2e:6c:cc:7c:5b:2d:ad: df:15:0b:77:56:32:28:04:51:c3:49:9b:9c:52:76: 4a:6e:2e:98:44:b2:2e:7b:b3:2c:ce:4d:fc:4a:62: 92:92:80:96:68:32:e4:7b:9b:d6:7d:cf:2f:0d:73: 22:bc:75:f5:b5:0c:73:02:7e:80:7c:20:6c:14:16: cb:af:ca:ad:12:9f:5e:3c:2b:2f:ed:19:28:fe:8c: 4c:57:fb:c9:7a:44:66:c5:ec:7e:c1:6d:22:62:9a: e6:da:e5:40:ae:f8:c9:fc:8a:a2:c9:d2:d1:61:c1: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:06:2F:F6:91:07:74:D7:A2:CC:C0:FA:83:6A:2E:AE:2E:A2:AF:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/970cd30d-74be-33f9-a710-baa0ae6de29e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3f:9b:a1:c5:fa:6d:94:fa:65:d0:46:f1:e5:9f:20:1d:b0: f0:73:bb:4c:2b:2e:c4:6c:c8:86:19:4e:58:6d:1b:90:61:c0: 70:2c:d1:61:a3:4a:6f:09:1a:0d:a2:41:a6:62:ff:9a:db:c2: 84:cf:f2:78:8e:f7:e0:79:d8:11:0d:6b:d4:21:00:6b:76:38: 42:92:fc:bd:2c:81:1f:2f:37:7b:01:4c:7c:1a:f6:a6:51:90: b9:b4:38:44:6f:fa:93:24:59:e1:54:ea:0d:89:1f:ff:17:b7: 1d:ae:aa:a6:4f:96:c0:91:5c:49:bd:94:be:e3:39:1e:dc:b4: 07:83:50:16:f1:1a:1f:b1:15:1b:24:27:c5:f9:33:51:a8:e1: a6:41:75:86:e8:ca:9b:e4:37:bb:d6:fc:c6:34:1b:09:de:db: 7c:f3:e5:36:8e:3c:fa:de:d8:22:d2:78:f6:57:0e:a7:39:53: 9e:02:5e:99:cf:21:d2:00:ea:0f:7d:19:c9:61:4b:3d:27:a2: 12:13:06:bc:0e:3f:6a:04:5a:bb:41:6d:dc:3c:4a:de:76:29: e5:44:48:c6:c6:1d:25:ce:0d:26:3a:07:b0:83:79:70:de:07: 3c:1b:fc:54:b8:e4:37:86:14:e3:e6:41:17:b5:7e:78:4f:54: 08:a5:ea:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucoiyXmvzqWPcTgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk MTc0OTYyOWYtMzVmNy00OTQ4LWE0M2ItNDNlNDA4YmUyMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJerEAzggq2Ki/OXwiKoQpFoTCiEPJUkYD0/ qHfJVw8nivdTRTKR9SxZd+xdv6XLkG5a1RRN2LznIdRtIiTMhYoFc9KpGFrsH8h4 eLKA9P3ErP0tWklqudbT2JgvPyjlZ3xUSubupq3aMJAUDKmwRrmg/tUYqUX+l5xC M0B+VGLT7jI7HzZW7aYofUuUgS5szHxbLa3fFQt3VjIoBFHDSZucUnZKbi6YRLIu e7Mszk38SmKSkoCWaDLke5vWfc8vDXMivHX1tQxzAn6AfCBsFBbLr8qtEp9ePCsv 7Rko/oxMV/vJekRmxex+wW0iYprm2uVArvjJ/IqiydLRYcFBRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcGL/aRB3TXoszA+oNqLq4uoq/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTcwY2QzMGQtNzRiZS0z M2Y5LWE3MTAtYmFhMGFlNmRlMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IRlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ/m6HF+m2U+mXQRvHlnyAdsPBzu0wrLsRsyIYZTlhtG5BhwHAs0WGj Sm8JGg2iQaZi/5rbwoTP8niO9+B52BENa9QhAGt2OEKS/L0sgR8vN3sBTHwa9qZR kLm0OERv+pMkWeFU6g2JH/8Xtx2uqqZPlsCRXEm9lL7jOR7ctAeDUBbxGh+xFRsk J8X5M1Go4aZBdYboypvkN7vW/MY0Gwne23zz5TaOPPre2CLSePZXDqc5U54CXpnP IdIA6g99GclhSz0nohITBrwOP2oEWrtBbdw8St52KeVESMbGHSXODSY6B7CDeXDe Bzwb/FS45DeGFOPmQRe1fnhPVAil6qg= -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:40 2025 by rpki-client