$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/31044689-5617-3cd5-a65d-c714e253e409.roa File: 31044689-5617-3cd5-a65d-c714e253e409.roa (raw, json) Hash identifier: 5CTfTrw+HhjYcDWX/ETb1AiBbOyREOT5TJBud0W4gWI= Subject key identifier: 7C:F9:81:1D:1A:97:AF:33:96:FD:29:47:63:53:C2:55:BF:66:33:85 Certificate issuer: /CN=a3fc976b-6294-4c7f-adf9-0a124c38f9a7 Certificate serial: 010D0C9F4328584B4616FBBFAEB78BFD33093380 Authority key identifier: BC:48:F4:17:89:7B:A1:47:3A:31:97:75:CD:A6:4D:B8:00:A8:ED:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/31044689-5617-3cd5-a65d-c714e253e409.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 399111 IP address blocks: 216.73.136.0/22 maxlen: 32 2607:3cc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:16:fb:bf:ae:b7:8b:fd:33:09:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3fc976b-6294-4c7f-adf9-0a124c38f9a7 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=436f444b-5eab-4d4d-895d-d8c13438120d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:d2:04:d9:27:5b:f2:c6:34:88:c9:dc:e7: 63:3d:ab:5a:a3:2c:55:12:6d:b7:ac:9f:ab:4f:e8: e9:bf:97:e8:12:bb:77:e7:54:5f:33:0e:3f:56:4b: 79:cc:60:ac:f7:2f:52:8e:a2:f4:8d:f5:2e:fe:f6: 02:8a:d5:01:c3:08:c8:09:37:7e:ac:19:c4:4a:01: 48:62:4e:d8:fd:57:0f:db:7d:ff:fd:53:ad:3e:37: b6:a3:31:31:87:61:33:ef:8c:66:ce:59:bc:fd:85: de:f3:1f:ec:0c:d3:d7:60:36:a3:89:bb:7a:8e:30: ed:fd:8a:2f:db:4e:75:4a:1b:00:84:ce:f4:74:c3: 58:ae:90:a0:fe:82:f9:72:54:14:53:77:ca:f6:1a: d9:91:d1:b3:cc:ec:40:08:3c:ba:6f:21:8c:82:ca: f5:83:fc:42:3b:37:2a:f9:35:2c:ce:05:49:3f:ab: 87:7d:97:59:ea:0b:f4:41:c1:17:78:fa:72:b3:08: a6:c2:77:b5:72:2e:60:80:c4:ac:5e:0a:33:14:a2: d8:7a:d3:24:2a:7e:e0:ed:7e:4f:5e:06:9a:d1:1e: 2f:1c:d9:ac:09:38:0a:e0:83:62:cf:29:83:6f:1c: 9d:9d:c8:58:f0:98:1d:a8:8e:da:8a:ff:71:0f:fc: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F9:81:1D:1A:97:AF:33:96:FD:29:47:63:53:C2:55:BF:66:33:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/31044689-5617-3cd5-a65d-c714e253e409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.crl X509v3 Authority Key Identifier: keyid:BC:48:F4:17:89:7B:A1:47:3A:31:97:75:CD:A6:4D:B8:00:A8:ED:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer sbgp-ipAddrBlock: critical IPv4: 216.73.136.0/22 IPv6: 2607:3cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9e:ad:ef:d2:1b:b1:29:e7:d9:49:92:69:1f:28:40:8e:da: 0b:11:a3:af:bc:d6:f2:db:88:21:84:3f:a1:42:ac:ce:4c:7e: 63:85:32:bd:1a:17:bb:be:b6:1b:11:de:dd:15:8f:93:ef:b4: d9:cf:04:63:ea:94:d5:3e:1a:5a:0e:d5:18:a7:c0:fa:1d:5b: 78:52:c6:67:10:3b:92:54:be:5b:19:28:51:10:cd:12:9f:4e: c4:d3:9a:a7:5d:c8:df:39:30:dd:32:e5:96:b8:29:32:16:33: 6a:e1:86:5f:7d:ee:93:99:71:46:76:02:44:05:d6:66:cd:33: 71:25:85:78:da:9a:75:38:ee:46:b7:4f:a4:d7:28:cd:ca:5b: 9d:fc:8a:03:ba:44:8a:8e:f2:be:33:c1:cd:5d:6c:a4:ee:49: a9:93:37:bf:44:a6:bf:52:46:04:89:9f:d8:cc:7d:84:9a:67: 0a:0d:01:97:38:14:cd:12:df:49:a3:10:b1:b4:a6:33:01:6b: f3:bd:87:79:73:21:c5:11:e7:86:50:11:17:b5:e2:78:9f:0d: e9:1a:66:e1:87:d4:d1:0c:82:e1:4f:60:72:cf:e4:60:f4:71: e6:ad:12:c4:49:0a:81:fb:99:b1:e7:4f:98:cf:c0:d2:55:20: 69:95:2f:e1 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEtGFvu/rreL/TMJM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNmYzk3NmItNjI5NC00YzdmLWFkZjktMGExMjRjMzhm OWE3MB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk NDM2ZjQ0NGItNWVhYi00ZDRkLTg5NWQtZDhjMTM0MzgxMjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiTSBNknW/LGNIjJ3OdjPataoyxVEm23rJ+r T+jpv5foErt351RfMw4/Vkt5zGCs9y9SjqL0jfUu/vYCitUBwwjICTd+rBnESgFI Yk7Y/VcP233//VOtPje2ozExh2Ez74xmzlm8/YXe8x/sDNPXYDajibt6jjDt/Yov 2051ShsAhM70dMNYrpCg/oL5clQUU3fK9hrZkdGzzOxACDy6byGMgsr1g/xCOzcq +TUszgVJP6uHfZdZ6gv0QcEXePpyswimwne1ci5ggMSsXgozFKLYetMkKn7g7X5P Xgaa0R4vHNmsCTgK4INizymDbxydnchY8JgdqI7aiv9xD/xtbwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFHz5gR0al68zlv0pR2NTwlW/ZjOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hM2Zj OTc2Yi02Mjk0LTRjN2YtYWRmOS0wYTEyNGMzOGY5YTcvMzEwNDQ2ODktNTYxNy0z Y2Q1LWE2NWQtYzcxNGUyNTNlNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTNmYzk3NmItNjI5NC00YzdmLWFk ZjktMGExMjRjMzhmOWE3L2EzZmM5NzZiLTYyOTQtNGM3Zi1hZGY5LTBhMTI0YzM4 ZjlhNy5jcmwwHwYDVR0jBBgwFoAUvEj0F4l7oUc6MZd1zaZNuACo7RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hM2ZjOTc2Yi02Mjk0LTRjN2YtYWRmOS0wYTEy NGMzOGY5YTcuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQC2EmIMA0E AgACMAcDBQAmBzzAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAIuere/SG7Ep59lJkmkfKECO2gsRo6+81vLb iCGEP6FCrM5MfmOFMr0aF7u+thsR3t0Vj5PvtNnPBGPqlNU+GloO1RinwPodW3hS xmcQO5JUvlsZKFEQzRKfTsTTmqddyN85MN0y5Za4KTIWM2rhhl997pOZcUZ2AkQF 1mbNM3ElhXjamnU47ka3T6TXKM3KW538igO6RIqO8r4zwc1dbKTuSamTN79Epr9S RgSJn9jMfYSaZwoNAZc4FM0S30mjELG0pjMBa/O9h3lzIcUR54ZQERe14nifDeka ZuGH1NEMguFPYHLP5GD0ceatEsRJCoH7mbHnT5jPwNJVIGmVL+E= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:52 2025 by rpki-client