$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/038dfcae-6814-3ffe-ae25-acb4cff65a81.roa File: 038dfcae-6814-3ffe-ae25-acb4cff65a81.roa (raw, json) Hash identifier: J0twxox+3ZX3aw+cdhlfoCGc9xgMdvpz1jFYZKjCKRo= Subject key identifier: F3:E2:AC:62:B1:87:DE:03:95:D7:45:A0:11:DE:E9:F9:69:82:C9:CB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B6391768F17077E1A9FFBE1A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/038dfcae-6814-3ffe-ae25-acb4cff65a81.roa Signing time: Thu 02 Oct 2025 14:25:49 +0000 ROA not before: Thu 02 Oct 2025 14:25:49 +0000 ROA not after: Wed 31 Dec 2025 15:25:49 +0000 asID: 401362 IP address blocks: 216.132.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:91:76:8f:17:07:7e:1a:9f:fb:e1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 2 14:25:49 2025 GMT Not After : Dec 31 15:25:49 2025 GMT Subject: CN=9625617d-7ef2-4760-8987-1a6bf9deef3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:76:31:40:55:71:2a:b0:c6:04:97:a2:4f:ba: 60:cc:d6:a2:e7:d0:68:cb:1b:ad:9f:5f:0e:85:d1: af:a2:6e:e0:ae:2c:91:30:ad:12:b0:d6:cd:a8:fb: 92:a4:12:f6:56:87:cf:98:03:07:58:35:48:72:ff: 85:e0:ad:4a:f4:38:4e:d7:33:7e:77:78:1b:6e:3e: 05:69:e4:d5:0a:e2:31:45:05:38:0c:33:0a:0a:1a: d6:00:9f:6e:9a:e1:26:84:62:9d:9a:b9:3f:8e:57: 87:b4:f4:55:fe:ca:9f:51:e1:7c:7b:93:0f:83:62: 84:a3:89:57:af:c8:b2:75:a3:3b:7a:c4:28:be:d0: ee:76:10:63:d2:48:40:fb:c4:c3:39:f6:b0:1b:f7: 73:1f:1e:b4:a9:51:f7:aa:98:b7:c2:27:6d:1d:ec: d7:f4:57:a8:c4:90:49:eb:ed:cc:f2:92:52:51:66: 20:8c:59:fe:2e:31:f6:1b:eb:fd:df:e0:54:5b:1c: 12:2c:ee:54:0c:ce:8b:c9:bd:8c:08:a8:68:cb:d3: e3:60:3f:60:8e:dd:e8:e5:52:bb:e9:23:ea:42:18: 35:f2:74:37:a0:83:e5:3a:3d:66:4a:c9:37:43:95: 96:45:5d:1f:ec:30:13:c2:c6:6f:31:57:41:11:5b: da:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E2:AC:62:B1:87:DE:03:95:D7:45:A0:11:DE:E9:F9:69:82:C9:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/038dfcae-6814-3ffe-ae25-acb4cff65a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:2c:50:8b:69:0e:13:7b:fd:ce:34:df:eb:05:06:26:a6:d9: ee:35:de:b0:ba:fe:cb:ea:5a:a3:11:0b:bc:5a:1b:2a:f4:a0: 92:fa:24:33:a9:49:cd:a3:f6:c6:12:80:04:25:89:88:5e:99: 01:5b:82:e7:20:8b:ab:e1:2f:aa:45:80:e6:a7:89:4d:a1:57: 67:cc:75:2f:11:06:78:e3:d0:3d:16:8e:98:11:6d:9a:a3:20: 29:51:e0:6f:58:ed:75:94:9c:d5:ce:e1:ce:a2:9e:bf:53:1e: e7:62:02:db:2d:76:6d:14:f2:7f:d6:3d:98:18:f9:37:9c:dc: aa:63:4e:c8:4e:a9:8a:bc:b8:37:13:11:13:0c:ae:04:01:2a: 83:32:78:b5:c7:e4:51:f1:cf:f0:96:52:ad:8b:27:33:8d:db: 3b:23:4f:1d:99:b4:62:32:a1:4a:e3:9a:d7:2c:05:d0:b7:4f: b0:96:98:84:30:11:0b:07:36:e9:4f:33:a4:86:5c:d7:c4:a1: 18:0f:ae:ad:32:40:12:61:32:58:a0:52:89:36:94:6c:24:71: 52:78:15:d2:54:a2:fb:1a:5b:38:03:b1:81:08:91:f1:53:fb: 58:bb:4a:5f:41:72:aa:cb:60:ca:83:0a:a8:1a:0a:5d:a6:47: 41:53:9c:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjkXaPFwd+Gp/74aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwMjE0MjU0OVoXDTI1MTIzMTE1MjU0OVowLzEtMCsGA1UEAxMk OTYyNTYxN2QtN2VmMi00NzYwLTg5ODctMWE2YmY5ZGVlZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HYxQFVxKrDGBJeiT7pgzNai59Boyxutn18O hdGvom7griyRMK0SsNbNqPuSpBL2VofPmAMHWDVIcv+F4K1K9DhO1zN+d3gbbj4F aeTVCuIxRQU4DDMKChrWAJ9umuEmhGKdmrk/jleHtPRV/sqfUeF8e5MPg2KEo4lX r8iydaM7esQovtDudhBj0khA+8TDOfawG/dzHx60qVH3qpi3widtHezX9FeoxJBJ 6+3M8pJSUWYgjFn+LjH2G+v93+BUWxwSLO5UDM6Lyb2MCKhoy9PjYD9gjt3o5VK7 6SPqQhg18nQ3oIPlOj1mSsk3Q5WWRV0f7DATwsZvMVdBEVvaSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPirGKxh94DlddFoBHe6flpgsnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDM4ZGZjYWUtNjgxNC0z ZmZlLWFlMjUtYWNiNGNmZjY1YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2IToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4sUItpDhN7/c403+sFBiam2e413rC6/svqWqMRC7xaGyr0oJL6JDOp Sc2j9sYSgAQliYhemQFbgucgi6vhL6pFgOaniU2hV2fMdS8RBnjj0D0WjpgRbZqj IClR4G9Y7XWUnNXO4c6inr9THudiAtstdm0U8n/WPZgY+Tec3KpjTshOqYq8uDcT ERMMrgQBKoMyeLXH5FHxz/CWUq2LJzON2zsjTx2ZtGIyoUrjmtcsBdC3T7CWmIQw EQsHNulPM6SGXNfEoRgPrq0yQBJhMligUok2lGwkcVJ4FdJUovsaWzgDsYEIkfFT +1i7Sl9BcqrLYMqDCqgaCl2mR0FTnPo= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:52 2025 by rpki-client