$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9ace0c2-ae4e-339e-9919-934198e27f03.roa File: d9ace0c2-ae4e-339e-9919-934198e27f03.roa (raw, json) Hash identifier: 6FRRz7w72niKtoxyqlPUM4VfCtrgi6SMQFFzFNk0GpQ= Subject key identifier: 2B:A5:0B:A5:44:90:EA:69:64:37:C2:B2:D4:E3:EB:25:83:9A:CB:8B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BBFD5AC295E6971A975918F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9ace0c2-ae4e-339e-9919-934198e27f03.roa Signing time: Tue 04 Nov 2025 15:37:37 +0000 ROA not before: Tue 04 Nov 2025 15:37:37 +0000 ROA not after: Mon 02 Feb 2026 15:37:37 +0000 asID: 3741 IP address blocks: 216.133.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:d5:ac:29:5e:69:71:a9:75:91:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 4 15:37:37 2025 GMT Not After : Feb 2 15:37:37 2026 GMT Subject: CN=7be1684a-3d15-4525-b20b-e8337333ea2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ca:93:6b:c0:b7:8d:93:3d:19:04:14:09:43: 94:fc:b4:e1:aa:e5:a9:ef:09:be:25:73:b9:24:42: d6:e9:5a:bf:0b:a8:dd:e0:1c:eb:9c:df:1f:01:2a: 34:1b:c0:f0:24:de:47:f1:6f:71:4c:1f:64:e6:73: 91:7b:7d:1a:03:e1:3b:5b:fa:b1:14:c9:d0:91:8b: 46:cc:5f:10:f0:ec:1f:10:28:1e:54:4f:ff:0c:b2: a8:be:16:22:f0:cf:7d:c8:3e:48:bf:2c:56:72:2d: d1:1a:a7:d7:11:45:8a:3c:32:40:76:e2:8c:d1:96: 7c:26:5d:9a:74:7e:74:4d:5d:e0:8d:99:fa:e7:18: 48:74:e7:f9:34:2b:09:43:53:e7:18:27:07:39:b0: f3:9b:4c:4c:9c:21:1e:6a:ea:15:52:ee:de:16:88: 7f:d0:59:32:6c:0f:89:2d:c2:5f:a5:5d:c6:f6:6e: f3:a0:6c:d2:68:ec:4e:bd:bd:b7:10:ad:2a:de:ee: c2:00:12:32:b8:82:d7:05:ea:cc:36:45:bf:de:9d: 71:56:9a:4b:02:d3:0e:32:8d:86:8b:27:5c:b4:cd: 75:2b:58:c5:3c:2a:7b:78:ac:94:a4:69:a9:8d:3c: 3b:77:ee:d9:0e:9d:9a:ec:84:00:47:05:00:d7:70: 0a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A5:0B:A5:44:90:EA:69:64:37:C2:B2:D4:E3:EB:25:83:9A:CB:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9ace0c2-ae4e-339e-9919-934198e27f03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.133.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:a6:34:a5:41:36:94:6b:84:9e:81:cd:67:10:63:ed:2d:e7: f9:43:26:e1:64:85:9c:f7:57:c5:b5:19:3d:e8:cf:8b:16:e1: 98:7c:68:e0:81:18:c2:37:61:ae:cb:d1:a0:1c:58:fa:cf:f8: c1:e2:a3:46:cd:f9:d5:cc:a6:4c:6a:27:e6:b6:8a:9b:5c:dc: a0:61:7b:4e:dd:aa:de:3e:b4:73:35:eb:2d:d1:9c:26:4c:49: f3:0e:ec:c3:78:3c:4d:9a:e3:06:18:4b:bc:37:20:72:d3:26: b2:ca:83:13:72:f4:21:f0:57:f9:42:33:26:f4:b4:24:d5:f5: 0b:98:22:20:5d:51:e4:18:f2:15:a1:07:f2:44:b3:d6:ba:61: e0:03:21:f8:b6:e4:a5:d4:27:cb:76:3a:5d:e3:4a:36:df:5c: e1:fe:d0:7a:19:ea:33:c3:c4:b6:0f:68:5a:5c:de:f2:5e:41: 5a:53:09:94:44:a3:8a:7c:9c:6c:da:62:54:70:a4:95:08:f4: 2d:68:a4:d6:0e:12:e6:ec:98:57:92:1d:26:a3:bf:e7:58:13: 8f:23:c4:66:7d:9a:00:87:28:9c:4c:62:05:a6:bd:f0:c0:30: 32:be:57:26:38:a4:d4:6d:46:6d:d5:c5:ee:2b:05:eb:d8:a0: 4b:c5:2e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/1awpXmlxqXWRj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEwNDE1MzczN1oXDTI2MDIwMjE1MzczN1owLzEtMCsGA1UEAxMk N2JlMTY4NGEtM2QxNS00NTI1LWIyMGItZTgzMzczMzNlYTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMqTa8C3jZM9GQQUCUOU/LThquWp7wm+JXO5 JELW6Vq/C6jd4BzrnN8fASo0G8DwJN5H8W9xTB9k5nORe30aA+E7W/qxFMnQkYtG zF8Q8OwfECgeVE//DLKovhYi8M99yD5IvyxWci3RGqfXEUWKPDJAduKM0ZZ8Jl2a dH50TV3gjZn65xhIdOf5NCsJQ1PnGCcHObDzm0xMnCEeauoVUu7eFoh/0FkybA+J LcJfpV3G9m7zoGzSaOxOvb23EK0q3u7CABIyuILXBerMNkW/3p1xVppLAtMOMo2G iydctM11K1jFPCp7eKyUpGmpjTw7d+7ZDp2a7IQARwUA13AKlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCulC6VEkOppZDfCstTj6yWDmsuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDlhY2UwYzItYWU0ZS0z MzllLTk5MTktOTM0MTk4ZTI3ZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IViMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKmNKVBNpRrhJ6BzWcQY+0t5/lDJuFkhZz3V8W1GT3oz4sW4Zh8aOCB GMI3Ya7L0aAcWPrP+MHio0bN+dXMpkxqJ+a2iptc3KBhe07dqt4+tHM16y3RnCZM SfMO7MN4PE2a4wYYS7w3IHLTJrLKgxNy9CHwV/lCMyb0tCTV9QuYIiBdUeQY8hWh B/JEs9a6YeADIfi25KXUJ8t2Ol3jSjbfXOH+0HoZ6jPDxLYPaFpc3vJeQVpTCZRE o4p8nGzaYlRwpJUI9C1opNYOEubsmFeSHSajv+dYE48jxGZ9mgCHKJxMYgWmvfDA MDK+VyY4pNRtRm3Vxe4rBevYoEvFLvQ= -----END CERTIFICATE-----Generated at Wed Nov 5 12:52:43 2025 by rpki-client