$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0bad0919-b564-3dee-96a4-a4f26f18891e.roa File: 0bad0919-b564-3dee-96a4-a4f26f18891e.roa (raw, json) Hash identifier: OLkO2LNWr+dz+2qtXzTyIy+nzgCXSqWAuWlnWnqeJps= Subject key identifier: FB:7D:E0:EB:64:77:93:3E:78:26:0F:D4:5A:7C:F7:ED:D7:BB:7A:30 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B6367516466B0A14609449080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0bad0919-b564-3dee-96a4-a4f26f18891e.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 3257 IP address blocks: 216.132.208.0/22 maxlen: 24 216.132.212.0/22 maxlen: 24 216.132.216.0/22 maxlen: 24 216.132.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:51:64:66:b0:a1:46:09:44:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=0c820143-5474-4222-bdd0-09e01be3cab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ca:60:51:7c:8f:95:f6:66:eb:88:31:d9:81: 02:58:90:9a:3f:13:0f:e4:cc:ca:32:d4:85:79:91: 36:36:1d:0a:3a:ed:70:b5:7b:dd:86:29:3a:09:12: f1:f8:f6:71:ad:cc:50:68:0a:85:2c:3b:00:c1:13: 0f:75:1d:82:a0:7e:8b:d9:0d:db:9a:07:ea:b9:85: 5d:57:52:df:e0:17:b1:d2:a6:16:fc:f7:cb:e5:d5: 98:e3:0d:4d:50:62:2f:50:1d:3e:f2:8a:de:7a:fc: 9d:ed:9c:68:7d:b1:42:b9:47:cf:82:9a:77:3a:20: 53:d2:c6:c0:01:c4:52:70:85:b5:69:d2:69:ee:6d: 8e:22:8e:69:6a:6c:29:64:0a:78:b5:21:23:03:a7: cd:dc:df:6e:e3:6c:23:59:01:bf:34:88:0d:61:c0: 2f:38:1a:d7:60:d0:e5:3f:ed:0f:83:18:7d:63:5b: 79:e4:dc:99:d9:2d:50:7b:a8:49:04:1e:4c:9b:6e: 27:72:88:4e:fe:26:04:19:0d:9e:15:84:27:63:37: 61:c0:aa:07:ce:c1:1a:f9:b1:f2:40:0c:f3:6b:5b: ad:35:42:12:ed:83:5a:c0:fb:72:ac:e3:61:b6:1a: a7:05:f0:d4:10:9d:00:34:6e:37:b7:7f:01:bc:cb: bf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7D:E0:EB:64:77:93:3E:78:26:0F:D4:5A:7C:F7:ED:D7:BB:7A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0bad0919-b564-3dee-96a4-a4f26f18891e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e8:19:c1:1f:d2:fa:59:fa:89:63:1c:15:fe:9c:c9:bf:fc: 28:dc:c5:33:0c:82:5b:88:8e:fc:44:98:9a:04:3c:cf:33:4c: 47:b2:f8:e8:bc:13:bb:43:4e:39:54:7c:cd:8e:2c:2c:d0:4a: 6f:4c:20:db:b2:50:22:99:10:2e:69:a9:7b:3e:18:4e:f7:44: 21:d3:26:5c:81:e8:25:9f:37:16:d1:f5:4e:36:bf:a4:ce:71: 76:de:31:95:40:1f:ba:47:d7:2d:db:35:bc:33:94:be:7c:5a: 62:10:74:96:fb:41:82:34:83:be:55:68:21:cb:77:d7:d5:92: d2:d3:f3:1c:e0:49:22:bc:52:40:79:f4:49:72:66:f2:a5:56: 81:f9:e3:f7:60:9d:c2:2a:8e:bd:b4:19:24:10:35:79:27:43: 20:21:8b:c0:c2:db:46:a1:5d:ac:a3:ba:b6:39:48:21:48:dc: 79:eb:49:ef:d4:3a:da:9e:26:c0:f2:d4:dc:ae:17:32:6a:5f: b6:c2:54:d1:5b:16:5f:5b:ff:13:b0:45:1f:35:a0:fb:1e:81: 45:d1:a3:64:a7:53:30:73:cc:a0:25:57:31:53:79:bc:06:40: 41:3a:77:cd:08:4c:3d:71:0b:df:fc:71:62:88:7b:d9:e8:cd: 43:d6:75:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ1FkZrChRglEkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MGM4MjAxNDMtNTQ3NC00MjIyLWJkZDAtMDllMDFiZTNjYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MpgUXyPlfZm64gx2YECWJCaPxMP5MzKMtSF eZE2Nh0KOu1wtXvdhik6CRLx+PZxrcxQaAqFLDsAwRMPdR2CoH6L2Q3bmgfquYVd V1Lf4Bex0qYW/PfL5dWY4w1NUGIvUB0+8oreevyd7ZxofbFCuUfPgpp3OiBT0sbA AcRScIW1adJp7m2OIo5pamwpZAp4tSEjA6fN3N9u42wjWQG/NIgNYcAvOBrXYNDl P+0Pgxh9Y1t55NyZ2S1Qe6hJBB5Mm24ncohO/iYEGQ2eFYQnYzdhwKoHzsEa+bHy QAzza1utNUIS7YNawPtyrONhthqnBfDUEJ0ANG43t38BvMu/hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPt94Otkd5M+eCYP1Fp89+3Xu3owMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGJhZDA5MTktYjU2NC0z ZGVlLTk2YTQtYTRmMjZmMTg4OTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ITQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIboGcEf0vpZ+oljHBX+nMm//CjcxTMMgluIjvxEmJoEPM8zTEey+Oi8 E7tDTjlUfM2OLCzQSm9MINuyUCKZEC5pqXs+GE73RCHTJlyB6CWfNxbR9U42v6TO cXbeMZVAH7pH1y3bNbwzlL58WmIQdJb7QYI0g75VaCHLd9fVktLT8xzgSSK8UkB5 9ElyZvKlVoH54/dgncIqjr20GSQQNXknQyAhi8DC20ahXayjurY5SCFI3HnrSe/U OtqeJsDy1NyuFzJqX7bCVNFbFl9b/xOwRR81oPsegUXRo2SnUzBzzKAlVzFTebwG QEE6d80ITD1xC9/8cWKIe9nozUPWdek= -----END CERTIFICATE-----Generated at Sat Oct 11 08:54:14 2025 by rpki-client