$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa File: f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa (raw, json) Hash identifier: rtxJyXeFq/T86FJd5HD6U0paRyGrVxCJ9Hb8MqzPjkU= Subject key identifier: 4B:4E:9A:5E:55:CF:23:AC:F6:37:84:80:7A:1E:F7:97:04:21:1D:5F Certificate issuer: /CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Certificate serial: 010D0C9F4328584B1AD189FC086AB6B740D35120 Authority key identifier: F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 15100 IP address blocks: 216.38.32.0/20 maxlen: 20 216.38.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:89:fc:08:6a:b6:b7:40:d3:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=3768232f-9713-443a-9018-181984e8c75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:85:5f:30:37:79:b5:a2:42:e2:3d:7a:c5:49: 23:d0:2e:49:31:3f:96:ed:a7:19:07:a7:fa:d6:54: 8e:eb:32:25:38:51:51:72:c2:cc:d7:55:73:77:25: c6:76:51:dc:45:e9:84:0b:f8:7f:15:95:09:6d:ad: e3:dc:45:48:70:50:4b:c1:10:4a:ee:5e:ce:9a:b8: 4c:99:89:1e:40:07:31:43:0d:dc:d3:1f:36:33:8a: c7:5b:ee:d1:23:27:99:66:d4:19:d2:07:64:d6:88: 4a:05:a5:6d:70:eb:53:a5:09:8f:90:12:ae:bd:aa: da:88:c8:eb:e3:1c:f3:e6:28:d5:87:d3:01:31:ba: d7:df:d0:39:bf:5b:b3:a3:57:0c:8e:fe:c4:70:bc: b0:1c:93:49:b1:19:ff:a6:0c:96:ed:67:00:7e:9a: 42:dc:4c:ac:6d:2a:fa:2a:2e:52:bd:c2:ce:88:3a: 4e:04:c8:5c:f9:e7:66:dc:78:59:80:61:ae:8d:e9: 88:bf:c2:c5:b2:09:82:b1:4b:7a:f8:e5:0a:0f:7d: fd:38:0a:f5:30:6a:75:f9:c2:76:67:9e:6b:b5:4f: 06:13:6e:20:93:c7:e2:01:8b:c2:b6:e5:b4:54:d6: f9:cc:15:a7:80:6f:a1:a3:ef:f9:a9:7b:58:6e:f7: 44:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4E:9A:5E:55:CF:23:AC:F6:37:84:80:7A:1E:F7:97:04:21:1D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl X509v3 Authority Key Identifier: keyid:F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer sbgp-ipAddrBlock: critical IPv4: 216.38.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:9c:b9:6e:19:f9:aa:fa:f2:04:86:60:58:96:e0:bf:89:3c: 0d:db:44:48:f1:86:57:29:ea:3e:ee:07:ce:d8:9c:ad:25:e8: 31:34:c2:75:5b:9f:aa:b3:ce:1f:b7:fb:4b:35:f2:32:db:63: af:0c:36:fa:fc:60:1b:03:ec:f3:3b:5b:a9:ec:dd:a4:4b:34: 4e:18:61:14:00:f1:0e:26:31:b3:6d:89:54:89:3c:3b:4d:6a: f0:47:b5:20:29:a9:a4:58:69:22:f5:c0:50:bf:7b:ba:05:d5: 3b:c9:7d:ca:bd:b6:3f:19:72:03:b1:83:2b:10:e4:a9:ab:fa: cb:2a:bd:ee:f3:93:c2:d9:56:19:cf:b5:fa:c6:43:ae:78:7e: f2:4b:07:78:63:2c:eb:53:6a:bf:6d:59:87:fc:8f:58:fd:5c: 25:65:fc:66:41:98:b0:4f:ba:56:b2:c0:e5:25:1d:3c:b6:b1: 02:a5:86:f2:a6:60:a8:d3:85:04:de:dd:b2:d0:88:31:0d:c6: 87:20:b3:a8:6f:c1:b3:42:3b:b6:26:c9:64:c7:3e:d6:ee:59: f0:b6:49:69:0e:94:6d:bc:2b:99:fa:7b:a2:b5:a2:07:e3:e2: 0c:be:88:e4:e7:02:bd:61:29:60:23:4a:83:ea:31:71:f0:0e: 11:b6:fe:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Yn8CGq2t0DTUSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRhZTUyYTUtY2RiNy00MTVjLWFkNDQtNTEyNWJiMTIz YTdhMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk Mzc2ODIzMmYtOTcxMy00NDNhLTkwMTgtMTgxOTg0ZThjNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYVfMDd5taJC4j16xUkj0C5JMT+W7acZB6f6 1lSO6zIlOFFRcsLM11VzdyXGdlHcRemEC/h/FZUJba3j3EVIcFBLwRBK7l7OmrhM mYkeQAcxQw3c0x82M4rHW+7RIyeZZtQZ0gdk1ohKBaVtcOtTpQmPkBKuvaraiMjr 4xzz5ijVh9MBMbrX39A5v1uzo1cMjv7EcLywHJNJsRn/pgyW7WcAfppC3EysbSr6 Ki5SvcLOiDpOBMhc+edm3HhZgGGujemIv8LFsgmCsUt6+OUKD339OAr1MGp1+cJ2 Z55rtU8GE24gk8fiAYvCtuW0VNb5zBWngG+ho+/5qXtYbvdEJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtOml5VzyOs9jeEgHoe95cEIR1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFl NTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1YmIxMjNhN2EvZjkyNDEzM2EtYjVhZC0z NmYxLThhNDUtYzg2ZGJlYjFkYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRhZTUyYTUtY2RiNy00MTVjLWFk NDQtNTEyNWJiMTIzYTdhL2RkYWU1MmE1LWNkYjctNDE1Yy1hZDQ0LTUxMjViYjEy M2E3YS5jcmwwHwYDVR0jBBgwFoAU8OMjUuuNKxXWUGX45vcgpyceMvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFlNTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1 YmIxMjNhN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2CYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGcuW4Z+ar68gSGYFiW4L+JPA3bREjxhlcp6j7uB87YnK0l6DE0wnVb n6qzzh+3+0s18jLbY68MNvr8YBsD7PM7W6ns3aRLNE4YYRQA8Q4mMbNtiVSJPDtN avBHtSApqaRYaSL1wFC/e7oF1TvJfcq9tj8ZcgOxgysQ5Kmr+ssqve7zk8LZVhnP tfrGQ654fvJLB3hjLOtTar9tWYf8j1j9XCVl/GZBmLBPulaywOUlHTy2sQKlhvKm YKjThQTe3bLQiDENxocgs6hvwbNCO7YmyWTHPtbuWfC2SWkOlG28K5n6e6K1ogfj 4gy+iOTnAr1hKWAjSoPqMXHwDhG2/k4= -----END CERTIFICATE-----Generated at Sat Oct 11 04:28:17 2025 by rpki-client