$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1d966ed1-5f19-30a2-8730-11453eb7bf18.roa File: 1d966ed1-5f19-30a2-8730-11453eb7bf18.roa (raw, json) Hash identifier: 2ehHJz3+rgQEb2BAYbQjlNIG12n8t4Kxa2CfeLP+RCY= Subject key identifier: 00:60:87:A4:4E:15:9D:85:1C:8E:B1:9C:B1:6D:46:45:2F:92:EF:3F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B79937657676F3E0FB3582A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1d966ed1-5f19-30a2-8730-11453eb7bf18.roa Signing time: Fri 10 Oct 2025 11:37:38 +0000 ROA not before: Fri 10 Oct 2025 11:37:38 +0000 ROA not after: Thu 08 Jan 2026 12:37:38 +0000 asID: 9304 IP address blocks: 216.132.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:93:76:57:67:6f:3e:0f:b3:58:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 11:37:38 2025 GMT Not After : Jan 8 12:37:38 2026 GMT Subject: CN=7236d939-fec5-497a-9faa-8b085aa29f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:00:a2:57:3c:9a:1c:14:37:15:9b:4d:c9:96: 2f:be:cf:ea:00:00:bd:44:30:a6:57:7f:8b:81:c5: 75:88:56:58:f6:81:98:f6:76:03:f8:8b:bb:a9:a9: 02:50:32:a0:fc:6b:da:63:49:e9:bb:aa:f4:88:d2: 2f:eb:63:3b:29:3c:0c:c8:dc:ed:11:28:04:17:9a: b1:5c:f4:f4:6b:8d:f8:06:fb:c5:35:d8:52:6d:65: bb:b7:a3:ab:fe:5f:4b:f9:c3:48:1e:93:68:61:62: 20:a7:08:13:4e:10:fe:e3:b2:6e:32:df:38:d3:24: aa:7d:f0:14:9d:ec:59:ab:ac:7b:b6:0c:1d:22:9b: c0:40:da:92:f3:38:f3:e7:63:0d:54:7b:77:6b:90: 1f:ee:14:98:68:49:d1:0d:0d:7e:09:1c:2b:4a:c9: 90:62:55:fa:d4:61:13:69:36:55:7c:e4:94:a1:a3: 41:ff:75:47:51:39:38:30:01:8c:a9:96:d5:6e:37: dc:f4:5b:fb:da:a5:01:18:66:87:d4:59:c7:ad:08: 9f:0f:b8:76:db:ee:a1:6c:f3:04:55:58:c7:16:f8: 57:d3:1f:b5:f5:a7:8c:69:3f:fe:ff:a6:05:ce:ef: 37:02:f2:e3:6f:c5:4b:84:ec:d8:a1:41:41:94:66: 07:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:60:87:A4:4E:15:9D:85:1C:8E:B1:9C:B1:6D:46:45:2F:92:EF:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1d966ed1-5f19-30a2-8730-11453eb7bf18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e6:13:a5:03:16:28:3b:2a:e5:c2:b9:d7:c7:60:a2:78:00: 13:81:c8:ae:58:59:96:eb:b4:33:fc:4b:68:af:9f:0c:43:f2: 8d:59:c8:4e:fb:a1:b7:7a:0f:21:82:de:2d:f2:ea:48:04:e3: 8d:aa:68:53:1a:1f:3a:d2:a4:1f:cd:2a:8f:a0:eb:6f:6d:7c: 2d:15:de:e1:fe:40:68:0c:c2:3f:2c:49:74:36:e3:ee:12:6f: e5:42:15:c7:a9:93:39:ee:7b:a1:31:23:82:bd:e6:21:ed:d7: 59:d8:94:c9:57:9d:22:ca:93:e4:b1:85:1b:63:70:22:b4:08: 03:a8:aa:10:b8:ac:c9:5d:41:e4:0b:03:47:45:ca:5f:76:75: 0e:af:2a:3a:b0:ab:78:a7:36:bc:01:5b:57:45:0e:ac:94:20: 03:fc:b6:21:15:00:00:e6:62:f0:3c:06:58:5d:da:c2:e3:8b: 09:2c:c3:7f:a4:5a:33:e5:a6:63:eb:a7:86:f9:09:8e:a6:00: 0a:a8:fd:f9:41:ff:af:75:7c:9c:2b:08:4f:f1:8e:10:be:9a: 7d:65:46:d4:33:87:e4:09:84:5c:03:00:d2:ac:d5:79:02:3b: 95:4e:35:47:dd:42:cd:03:07:db:68:6b:87:16:15:ce:c5:b5: 33:cf:df:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5k3ZXZ28+D7NYKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMDExMzczOFoXDTI2MDEwODEyMzczOFowLzEtMCsGA1UEAxMk NzIzNmQ5MzktZmVjNS00OTdhLTlmYWEtOGIwODVhYTI5ZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwCiVzyaHBQ3FZtNyZYvvs/qAAC9RDCmV3+L gcV1iFZY9oGY9nYD+Iu7qakCUDKg/GvaY0npu6r0iNIv62M7KTwMyNztESgEF5qx XPT0a434BvvFNdhSbWW7t6Or/l9L+cNIHpNoYWIgpwgTThD+47JuMt840ySqffAU nexZq6x7tgwdIpvAQNqS8zjz52MNVHt3a5Af7hSYaEnRDQ1+CRwrSsmQYlX61GET aTZVfOSUoaNB/3VHUTk4MAGMqZbVbjfc9Fv72qUBGGaH1FnHrQifD7h22+6hbPME VVjHFvhX0x+19aeMaT/+/6YFzu83AvLjb8VLhOzYoUFBlGYHXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABgh6ROFZ2FHI6xnLFtRkUvku8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWQ5NjZlZDEtNWYxOS0z MGEyLTg3MzAtMTE0NTNlYjdiZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3mE6UDFig7KuXCudfHYKJ4ABOByK5YWZbrtDP8S2ivnwxD8o1ZyE77 obd6DyGC3i3y6kgE442qaFMaHzrSpB/NKo+g629tfC0V3uH+QGgMwj8sSXQ24+4S b+VCFcepkznue6ExI4K95iHt11nYlMlXnSLKk+SxhRtjcCK0CAOoqhC4rMldQeQL A0dFyl92dQ6vKjqwq3inNrwBW1dFDqyUIAP8tiEVAADmYvA8Blhd2sLjiwksw3+k WjPlpmPrp4b5CY6mAAqo/flB/691fJwrCE/xjhC+mn1lRtQzh+QJhFwDANKs1XkC O5VONUfdQs0DB9toa4cWFc7FtTPP35c= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:59 2025 by rpki-client