$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e73ff965-f86a-3edd-ab37-915c097c74e3.roa File: e73ff965-f86a-3edd-ab37-915c097c74e3.roa (raw, json) Hash identifier: +qvk2sGXFyXsFmK5Cv68bwyeMF0X7iUCtMVw+72ex5s= Subject key identifier: 22:B6:F1:A4:47:97:55:B6:9A:82:D3:67:58:00:EC:76:2A:65:4D:54 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AF0F155D94B220698F2E435F0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e73ff965-f86a-3edd-ab37-915c097c74e3.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 11059 IP address blocks: 216.132.200.0/23 maxlen: 24 216.132.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:55:d9:4b:22:06:98:f2:e4:35:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=3f60a1b7-ae53-4f6d-ba2c-a709693d7338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:20:78:4f:9d:d9:cb:3e:99:66:75:d8:00: 05:f0:85:1f:3e:e5:35:f7:6e:69:39:84:c6:76:b2: cd:bd:6c:47:87:64:ff:ae:84:49:3f:12:b4:2a:ce: 64:8a:a2:51:c3:0c:7b:95:28:8a:a2:15:1e:69:f5: f7:b0:ff:15:7d:cb:d7:5f:82:75:f2:27:37:19:6e: 74:3b:2f:b9:c2:12:11:f6:40:21:47:a7:b3:59:1f: e5:30:52:55:37:40:ce:a1:5e:59:83:f8:72:1f:e9: 65:d5:27:5d:b5:0a:ea:02:cd:95:66:51:68:12:c7: b5:fd:a7:5a:c7:8c:b2:86:2c:88:e3:cd:d2:da:a8: 05:cd:24:89:cf:a8:37:49:7b:b8:82:da:31:93:64: c9:07:e8:91:b6:36:70:75:a2:d0:cc:c8:97:d2:4a: d0:6d:77:9a:35:f3:55:53:d1:26:43:3d:ee:80:c1: 17:c1:30:6c:b7:58:e5:47:4f:71:2e:41:d7:f5:c3: f5:97:54:68:af:c1:ea:a4:22:db:1a:7c:9a:c6:32: e5:86:b6:40:38:fa:2f:e6:9e:ca:06:7a:9f:7d:19: 59:76:5c:55:f5:32:75:5c:54:5b:96:fd:bd:b3:91: 1d:e8:5c:73:08:e0:a6:91:d0:da:a7:2a:99:88:9a: f6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B6:F1:A4:47:97:55:B6:9A:82:D3:67:58:00:EC:76:2A:65:4D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e73ff965-f86a-3edd-ab37-915c097c74e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:e8:c7:eb:36:01:e4:9a:3b:77:41:13:f9:71:cf:45:f6:2d: 3e:db:e1:ae:7f:eb:38:75:89:49:0b:e7:fb:ad:3f:9d:a9:e7: d0:62:8e:3d:4b:ae:a0:d6:65:dc:66:bb:21:0e:b1:4e:c8:7d: 41:60:a7:4a:15:f3:ba:89:28:0e:77:0c:ce:06:39:9e:15:ec: fe:36:c5:53:62:5d:e1:a2:4b:93:33:2d:e4:5c:08:00:64:26: 81:a5:73:8c:c5:34:27:d1:ba:2b:5a:b9:20:02:02:1b:ca:06: 92:b4:f3:50:7d:a1:3e:31:ea:5e:9f:ed:0a:bd:98:2a:78:63: bd:f8:18:51:05:ad:5a:3a:15:6b:df:7a:9c:d6:ef:5c:05:ea: 1f:9e:fc:c4:d9:9e:fc:d3:3f:72:b2:65:8f:7f:df:3a:1b:7d: 47:7f:77:82:20:2c:56:5e:68:e5:c7:0a:05:73:2f:ce:61:60: 01:68:70:00:e1:b0:4d:8b:d6:ff:9d:63:6b:3c:e0:5d:54:09: 6d:d5:86:a2:c5:e8:eb:54:fc:89:91:c2:ce:e2:6f:a4:48:f2: de:15:de:f7:21:38:2b:bc:d9:aa:27:5f:93:26:71:59:5b:c2: a9:a1:f8:93:10:96:ab:50:fa:4a:3f:3f:f0:5d:84:30:d8:de: 29:2f:4d:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8VXZSyIGmPLkNfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk M2Y2MGExYjctYWU1My00ZjZkLWJhMmMtYTcwOTY5M2Q3MzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswogeE+d2cs+mWZ12AAF8IUfPuU1925pOYTG drLNvWxHh2T/roRJPxK0Ks5kiqJRwwx7lSiKohUeafX3sP8VfcvXX4J18ic3GW50 Oy+5whIR9kAhR6ezWR/lMFJVN0DOoV5Zg/hyH+ll1SddtQrqAs2VZlFoEse1/ada x4yyhiyI483S2qgFzSSJz6g3SXu4gtoxk2TJB+iRtjZwdaLQzMiX0krQbXeaNfNV U9EmQz3ugMEXwTBst1jlR09xLkHX9cP1l1Ror8HqpCLbGnyaxjLlhrZAOPov5p7K BnqffRlZdlxV9TJ1XFRblv29s5Ed6FxzCOCmkdDapyqZiJr2uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCK28aRHl1W2moLTZ1gA7HYqZU1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTczZmY5NjUtZjg2YS0z ZWRkLWFiMzctOTE1YzA5N2M3NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ITIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzox+s2AeSaO3dBE/lxz0X2LT7b4a5/6zh1iUkL5/utP52p59Bijj1L rqDWZdxmuyEOsU7IfUFgp0oV87qJKA53DM4GOZ4V7P42xVNiXeGiS5MzLeRcCABk JoGlc4zFNCfRuitauSACAhvKBpK081B9oT4x6l6f7Qq9mCp4Y734GFEFrVo6FWvf epzW71wF6h+e/MTZnvzTP3KyZY9/3zobfUd/d4IgLFZeaOXHCgVzL85hYAFocADh sE2L1v+dY2s84F1UCW3VhqLF6OtU/ImRws7ib6RI8t4V3vchOCu82aonX5MmcVlb wqmh+JMQlqtQ+ko/P/BdhDDY3ikvTTk= -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:50 2025 by rpki-client