$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d767b1f8-a026-37d8-b70d-fcd87106fb21.roa File: d767b1f8-a026-37d8-b70d-fcd87106fb21.roa (raw, json) Hash identifier: So+EuBGXjSRKK0BuGchZ+CqZ9oaEgWvbQC2DriVc/8M= Subject key identifier: D6:A3:7B:43:44:CB:7D:33:14:43:E6:CF:88:B2:5D:46:7C:45:B5:F1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B970CE00954FC821385F80B00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d767b1f8-a026-37d8-b70d-fcd87106fb21.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16904 IP address blocks: 216.27.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e0:09:54:fc:82:13:85:f8:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=9a775e0c-d34f-4c48-be8b-c6516e12657a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:93:52:c5:87:28:e2:ec:98:4c:00:46:7a: c0:1c:21:f3:c7:8e:25:ff:c3:07:55:e9:95:e0:ec: bd:fc:9f:e5:50:52:d8:5d:ac:a2:41:c8:15:6c:90: 67:d0:cf:83:58:2f:20:75:b5:90:0f:4f:66:ff:47: f2:c4:e1:4d:2f:e2:92:a9:eb:c3:d8:8e:f3:ea:33: 91:d1:f2:63:8a:48:5d:99:ae:55:c1:17:64:5f:42: 86:df:2d:54:08:01:6d:ca:21:29:78:f7:05:f7:21: 80:a3:e8:7e:fd:3c:00:ea:13:d8:79:36:f8:ac:cf: 39:0e:3d:a7:92:87:40:51:79:f8:03:b1:5f:78:d4: 14:1e:b2:f1:93:cd:b7:91:1f:60:16:c7:10:0f:e3: ca:56:d4:dc:a1:08:9e:11:79:f3:8c:bc:6b:7d:55: 5b:22:5f:1e:af:6f:cc:cc:36:4a:16:a5:9d:4a:21: 16:b9:49:df:17:ae:93:6c:39:12:d0:33:ae:08:3a: 08:c8:04:92:9b:5b:a0:3c:40:87:0c:d6:f7:da:54: 25:b6:11:9d:77:35:fb:a7:3b:3f:ed:35:6c:88:5d: 3b:8b:b8:0f:48:c2:33:5e:00:b4:23:54:f5:b0:0a: a7:7f:06:84:4e:91:56:d3:4f:82:7c:c1:fc:c6:dc: 70:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A3:7B:43:44:CB:7D:33:14:43:E6:CF:88:B2:5D:46:7C:45:B5:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d767b1f8-a026-37d8-b70d-fcd87106fb21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.27.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:28:9e:6e:67:4c:73:f2:34:c5:e4:48:02:91:47:28:e7:0d: d5:0d:3b:90:87:ba:35:08:c2:fb:b0:66:11:4a:05:0c:d6:63: b7:20:f9:2c:eb:bb:9b:ae:c7:54:4e:c3:16:04:5f:df:d5:8f: 0e:e6:22:01:10:cf:d5:d9:bb:13:a9:4f:a3:4b:c0:ee:d8:10: 5c:f4:f6:b1:07:24:41:55:54:5a:38:b5:24:4b:06:1d:87:84: 96:ba:d5:a1:5a:71:41:fd:ac:51:46:81:b9:a7:70:c7:50:fd: 90:87:f3:d6:9e:61:56:3b:75:41:67:fc:85:fc:6a:6f:12:fb: 99:e5:06:d0:ce:53:48:66:5f:fa:e1:1e:50:12:9f:b3:a2:c5: 2c:ff:09:f7:b1:ee:17:5d:2a:cf:5a:c4:a7:7f:78:fe:ac:e5: ec:f9:5b:8f:62:5a:a0:0b:9d:8a:9e:9a:06:90:e2:44:4e:2d: 42:04:ff:bc:da:7d:e6:55:f0:ff:e3:8d:b9:a3:29:3b:ae:30: 1d:d8:a0:c3:88:ee:63:07:ee:70:8d:e7:a7:c3:5c:aa:0e:08: 3b:31:97:2d:48:0f:d0:c1:df:ae:71:71:e1:a3:d7:71:25:5b: 93:c7:ee:44:b3:f0:d8:b3:67:7e:94:ae:35:e1:26:1a:a6:08: a2:22:77:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOAJVPyCE4X4CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk OWE3NzVlMGMtZDM0Zi00YzQ4LWJlOGItYzY1MTZlMTI2NTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsweTUsWHKOLsmEwARnrAHCHzx44l/8MHVemV 4Oy9/J/lUFLYXayiQcgVbJBn0M+DWC8gdbWQD09m/0fyxOFNL+KSqevD2I7z6jOR 0fJjikhdma5VwRdkX0KG3y1UCAFtyiEpePcF9yGAo+h+/TwA6hPYeTb4rM85Dj2n kodAUXn4A7FfeNQUHrLxk823kR9gFscQD+PKVtTcoQieEXnzjLxrfVVbIl8er2/M zDZKFqWdSiEWuUnfF66TbDkS0DOuCDoIyASSm1ugPECHDNb32lQlthGddzX7pzs/ 7TVsiF07i7gPSMIzXgC0I1T1sAqnfwaETpFW00+CfMH8xtxwhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaje0NEy30zFEPmz4iyXUZ8RbXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDc2N2IxZjgtYTAyNi0z N2Q4LWI3MGQtZmNkODcxMDZmYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQonm5nTHPyNMXkSAKRRyjnDdUNO5CHujUIwvuwZhFKBQzWY7cg+Szr u5uux1ROwxYEX9/Vjw7mIgEQz9XZuxOpT6NLwO7YEFz09rEHJEFVVFo4tSRLBh2H hJa61aFacUH9rFFGgbmncMdQ/ZCH89aeYVY7dUFn/IX8am8S+5nlBtDOU0hmX/rh HlASn7OixSz/Cfex7hddKs9axKd/eP6s5ez5W49iWqALnYqemgaQ4kROLUIE/7za feZV8P/jjbmjKTuuMB3YoMOI7mMH7nCN56fDXKoOCDsxly1ID9DB365xceGj13El W5PH7kSz8NizZ36UrjXhJhqmCKIidxM= -----END CERTIFICATE-----Generated at Wed Nov 5 17:17:57 2025 by rpki-client