$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa File: 89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa (raw, json) Hash identifier: hbFC+B3A20exfrgBTfRfAfIHg+faoSAuu+sQ8EW+nDc= Subject key identifier: 51:FC:43:7B:D5:19:8D:09:B6:7A:50:A1:DD:CB:A5:DD:B0:24:14:DF Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F4328584B583C7F9B20677898C9F90B80 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 40501 IP address blocks: 216.235.80.0/24 maxlen: 24 216.235.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:7f:9b:20:67:78:98:c9:f9:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=b6202291-9698-4235-8271-eab0833058c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:51:1d:b5:d4:a0:45:e7:40:45:3e:b2:58:30: 14:12:c7:dc:6c:cf:4f:d6:b0:da:5e:e4:18:ca:43: b8:cb:0d:76:85:8d:04:75:2a:7d:c1:e1:ec:c1:57: 18:6c:19:30:46:be:78:32:20:bc:4b:ba:06:56:68: 3c:87:15:0e:97:66:95:e4:cb:92:07:7e:8c:70:d8: f7:5c:3d:92:8b:b6:99:eb:df:63:a2:2f:5a:8a:9a: 83:47:f6:27:30:52:2f:33:3e:46:6c:16:ad:3a:47: e7:b4:1e:92:b8:15:df:0e:b3:31:49:1c:5d:25:72: d5:fe:2d:bc:23:9a:f1:db:ee:38:07:29:a4:43:0b: e8:41:28:79:d4:27:2c:c9:2e:b6:bf:59:f7:41:d9: f0:e9:14:16:27:20:80:d3:49:85:a3:7f:cc:55:82: ed:4b:88:15:18:2e:c1:7a:f8:70:ef:b8:34:09:61: 64:be:72:55:04:30:55:e4:09:db:da:2c:d2:0a:40: 63:63:fa:74:2e:c8:f0:dd:f7:a4:67:50:2c:91:25: a8:44:7f:c7:96:0a:76:6c:e8:1a:bf:75:2b:5c:ef: 24:06:f0:f7:d7:6a:5b:4c:32:71:20:f2:68:87:5c: 07:1f:64:55:cd:fb:c2:65:e4:fd:67:8d:2f:b8:b4: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FC:43:7B:D5:19:8D:09:B6:7A:50:A1:DD:CB:A5:DD:B0:24:14:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.80.0/24 216.235.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:17:ad:0f:3c:eb:b0:4a:5d:9a:a5:95:cd:b9:32:39:41:b1: 56:c4:ac:c9:e2:4b:2f:c4:f0:a6:20:41:f7:8d:7f:8d:fa:95: af:36:b0:c1:18:7b:e9:c9:79:cd:40:88:dc:0f:c6:93:9b:fa: ba:53:94:c3:d9:77:1e:82:ae:68:2b:e4:aa:55:43:a0:cc:42: 95:7e:79:83:12:53:ac:6a:e3:fa:2a:93:76:8a:0a:bb:af:cf: ca:e9:6a:05:e0:1d:26:3d:c7:3f:f4:57:bf:2a:a3:27:20:e0: ce:8c:05:8f:66:61:36:3a:7a:8a:a3:d6:8f:b0:45:a6:c0:d4: 2d:46:3d:81:a4:31:d3:23:e2:61:9e:fb:a4:c1:90:01:58:79: d2:8b:50:60:35:f5:2b:a8:b3:c0:0f:22:50:f1:e9:64:b9:56: 31:56:51:d0:e3:81:33:49:fc:48:a0:0d:4d:d0:61:81:8e:c6: c9:d4:b4:ee:eb:ba:a6:48:a1:bf:75:73:61:ab:77:0f:1e:dc: 1c:fc:37:5f:65:45:2a:75:1b:9b:84:98:35:2c:bb:24:0e:3b: 2f:b2:2c:e2:29:44:c1:d9:ff:2e:69:9b:85:05:88:06:09:3c: 9f:62:a1:b6:d1:1a:44:c0:44:5f:72:7e:85:b2:ad:ad:6f:ae: bf:0b:36:4c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtYPH+bIGd4mMn5C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YjYyMDIyOTEtOTY5OC00MjM1LTgyNzEtZWFiMDgzMzA1OGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilEdtdSgRedART6yWDAUEsfcbM9P1rDaXuQY ykO4yw12hY0EdSp9weHswVcYbBkwRr54MiC8S7oGVmg8hxUOl2aV5MuSB36McNj3 XD2Si7aZ699joi9aipqDR/YnMFIvMz5GbBatOkfntB6SuBXfDrMxSRxdJXLV/i28 I5rx2+44BymkQwvoQSh51CcsyS62v1n3Qdnw6RQWJyCA00mFo3/MVYLtS4gVGC7B evhw77g0CWFkvnJVBDBV5Anb2izSCkBjY/p0Lsjw3fekZ1AskSWoRH/Hlgp2bOga v3UrXO8kBvD312pbTDJxIPJoh1wHH2RVzfvCZeT9Z40vuLRJ+QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFH8Q3vVGY0JtnpQod3Lpd2wJBTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvODlhMmEwOWQtMDdhYS0z NGQ0LTgwZDYtYzQ0YTRlZGU4MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2OtQAwQA 2OtbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABAXrQ8867BKXZqllc25MjlBsVbErMniSy/E8KYgQfeNf436 la82sMEYe+nJec1AiNwPxpOb+rpTlMPZdx6Crmgr5KpVQ6DMQpV+eYMSU6xq4/oq k3aKCruvz8rpagXgHSY9xz/0V78qoycg4M6MBY9mYTY6eoqj1o+wRabA1C1GPYGk MdMj4mGe+6TBkAFYedKLUGA19Suos8APIlDx6WS5VjFWUdDjgTNJ/EigDU3QYYGO xsnUtO7ruqZIob91c2Grdw8e3Bz8N19lRSp1G5uEmDUsuyQOOy+yLOIpRMHZ/y5p m4UFiAYJPJ9iobbRGkTARF9yfoWyra1vrr8LNkw= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:18 2025 by rpki-client