$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa File: b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa (raw, json) Hash identifier: Ev83i3CDtRgWVnRgNGpnuAD8AH8jvqdgIICYATXpmMQ= Subject key identifier: E7:25:DB:A7:F2:57:E0:6E:0E:5B:A9:56:43:0A:90:C7:27:40:58:0C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B87B241C9A2D1A8CE75155F40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 5065 IP address blocks: 216.132.198.0/24 maxlen: 24 216.132.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:41:c9:a2:d1:a8:ce:75:15:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=198d669b-40c4-4383-a6f4-1f053f56f578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:66:9d:e8:9b:7d:fa:0c:43:fa:58:c7:57:6e: 57:e4:e1:42:e3:61:ec:30:ca:5f:e9:53:d2:ba:a0: 49:b7:5d:d5:58:37:44:99:8a:79:66:4a:b5:5b:af: 03:06:4d:a9:e6:77:a6:c5:f0:3b:dc:1d:3b:52:8d: bd:fa:3f:1a:b5:2c:73:f3:f0:01:3a:d2:82:9a:e4: f9:da:e8:e6:46:16:8d:10:d2:00:78:79:66:f5:54: ba:80:8e:e4:e5:a4:4c:b1:9d:0d:7a:13:6f:ac:f8: 0c:4c:1b:e2:7d:a3:09:8c:c9:d3:45:e1:fe:e2:3d: 75:d3:fa:85:e1:e5:08:bb:06:16:4e:0a:4a:a9:55: 24:ba:8a:e0:73:f9:1f:63:6b:4c:1d:65:fc:5f:3a: 4d:8f:92:04:47:f6:f0:f2:2d:60:cf:1a:bb:26:36: 42:47:66:1e:5d:4c:13:01:ff:30:89:61:df:d3:e0: 9b:cc:54:66:21:bc:9e:c2:d9:f2:d4:bc:1c:84:5d: c2:f7:70:ac:93:dd:38:af:a5:c8:66:cf:42:cc:5f: 59:e6:51:59:ac:54:1a:d9:e7:23:82:9c:3a:4a:5f: 07:dc:70:53:0c:04:43:60:c1:fd:43:ab:ba:80:3d: b2:62:95:6e:43:6c:a9:b7:f7:78:1a:3a:9f:4c:7e: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:25:DB:A7:F2:57:E0:6E:0E:5B:A9:56:43:0A:90:C7:27:40:58:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.198.0/24 216.132.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2f:68:2f:c9:b2:a4:b8:38:dd:eb:35:90:35:53:a3:b3:c1: b7:8e:d0:a8:5c:b9:85:44:9e:28:58:27:4a:31:ad:57:f4:2a: c1:a5:f9:b8:f4:b3:5b:8c:3c:0f:4e:ea:03:28:b2:e2:81:3a: 48:76:37:8f:ec:9f:97:2c:72:36:6f:e6:06:d0:e2:36:d0:08: ee:53:41:25:b0:52:e7:00:0d:e0:20:0b:2a:1c:43:a4:5b:72: d0:68:28:6c:20:53:d5:b8:35:8f:85:2b:49:cb:a3:44:d8:93: 83:c2:68:59:f2:9d:c5:d9:cf:04:b0:11:d3:33:84:18:14:ec: 86:53:80:13:87:b2:29:b3:14:ea:c9:c0:98:bd:20:65:52:5f: 9a:6d:ac:69:8c:cd:b7:d4:c9:24:e6:47:f8:3e:bc:d6:78:c0: cc:2f:2e:3d:55:70:e3:a0:76:b9:b6:4a:a1:30:d1:9b:7f:fe: ae:70:41:b6:b8:8f:11:6f:2f:ea:54:e6:df:4f:cc:50:de:6e: 6b:33:08:e4:1e:5f:6c:62:a0:bf:97:8e:ed:ef:49:73:ed:d6: 19:7f:52:b1:7f:17:f9:e1:d0:b5:c7:cf:d4:7b:1c:90:1b:2a: 04:d4:bf:9a:cb:ab:4f:12:03:26:e0:2a:24:67:f7:b8:e9:69: f3:5c:19:44 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuHskHJotGoznUVX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MTk4ZDY2OWItNDBjNC00MzgzLWE2ZjQtMWYwNTNmNTZmNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWad6Jt9+gxD+ljHV25X5OFC42HsMMpf6VPS uqBJt13VWDdEmYp5Zkq1W68DBk2p5nemxfA73B07Uo29+j8atSxz8/ABOtKCmuT5 2ujmRhaNENIAeHlm9VS6gI7k5aRMsZ0NehNvrPgMTBvifaMJjMnTReH+4j110/qF 4eUIuwYWTgpKqVUkuorgc/kfY2tMHWX8XzpNj5IER/bw8i1gzxq7JjZCR2YeXUwT Af8wiWHf0+CbzFRmIbyewtny1LwchF3C93Csk904r6XIZs9CzF9Z5lFZrFQa2ecj gpw6Sl8H3HBTDARDYMH9Q6u6gD2yYpVuQ2ypt/d4GjqfTH7A3wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOcl26fyV+BuDlupVkMKkMcnQFgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjY2ZmZlMmYtZTY1My0z N2JmLTk0OTMtMTkxOGNjMjNlM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2ITGAwQA 2ITkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFMvaC/JsqS4ON3rNZA1U6OzwbeO0KhcuYVEnihYJ0oxrVf0 KsGl+bj0s1uMPA9O6gMosuKBOkh2N4/sn5cscjZv5gbQ4jbQCO5TQSWwUucADeAg CyocQ6RbctBoKGwgU9W4NY+FK0nLo0TYk4PCaFnyncXZzwSwEdMzhBgU7IZTgBOH simzFOrJwJi9IGVSX5ptrGmMzbfUySTmR/g+vNZ4wMwvLj1VcOOgdrm2SqEw0Zt/ /q5wQba4jxFvL+pU5t9PzFDebmszCOQeX2xioL+Xju3vSXPt1hl/UrF/F/nh0LXH z9R7HJAbKgTUv5rLq08SAybgKiRn97jpafNcGUQ= -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:03 2025 by rpki-client