$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/686d3cd6-a59a-351e-8bbb-d84a28213d21.roa File: 686d3cd6-a59a-351e-8bbb-d84a28213d21.roa (raw, json) Hash identifier: l3JnTVB6vERU6kWPqwiJ46aot/KRFoEsGpNfhDRLVos= Subject key identifier: 05:F4:D4:E7:17:86:1A:20:9F:91:23:69:C6:BE:5A:10:C7:8C:8E:41 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B1D9C34A782DFA0AD91CFFD80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/686d3cd6-a59a-351e-8bbb-d84a28213d21.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 62610 IP address blocks: 216.27.173.0/24 maxlen: 24 216.27.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:34:a7:82:df:a0:ad:91:cf:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=d7b5ec5f-c82c-49de-a2a5-9b8e0c0a15ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:37:98:b4:97:0c:49:e4:a0:01:06:54:47:32: ab:39:17:98:97:1e:6b:77:04:78:b1:48:59:cb:9b: 49:f8:b6:44:5d:f5:c1:fd:1e:46:94:ca:54:b8:4f: 39:0c:e9:45:5b:92:b2:bd:80:83:95:50:dc:97:ee: 8f:9e:65:1d:0b:bb:2f:ad:53:19:22:c0:6d:63:d9: 39:9c:db:bc:7b:fd:08:c2:dd:70:86:78:92:79:92: 9b:d0:b4:da:05:87:5c:85:b8:46:4b:c8:57:03:2d: 14:a6:d3:0f:48:05:03:88:67:b7:ef:3a:d0:c0:7a: 99:01:bc:9e:6c:8e:fa:bb:c4:5b:69:70:12:c5:20: 42:59:c3:8b:42:34:ca:d8:19:bb:01:16:45:1a:0e: 3d:fc:06:a0:f2:20:cc:db:c6:6b:6f:bc:c5:40:10: e5:16:39:6f:bc:a7:1e:98:c0:b2:32:7d:ce:2b:15: 88:65:26:91:b5:48:b8:bc:bf:99:e6:39:e3:df:92: a1:c1:94:bb:d3:69:ee:d2:2b:25:6a:2b:79:1c:c6: 91:f9:6c:16:98:2b:bb:23:3c:74:03:d0:85:bc:66: 76:ed:5a:cb:a9:1f:25:be:b5:69:93:ef:ea:e3:5d: b1:02:9d:43:25:dd:b8:58:8e:63:e7:27:6c:cb:76: 8d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F4:D4:E7:17:86:1A:20:9F:91:23:69:C6:BE:5A:10:C7:8C:8E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/686d3cd6-a59a-351e-8bbb-d84a28213d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.27.173.0-216.27.174.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b9:24:7f:5d:52:c2:45:72:c0:4b:89:04:ab:1f:14:76:e6: c0:01:5c:ea:84:11:65:59:58:6a:55:73:8b:eb:f6:5f:de:04: 81:e4:ff:d4:09:e8:d8:7b:44:51:7a:86:fd:ea:7e:f9:b0:31: 21:e3:de:3c:28:8b:9c:ca:13:6b:ba:b2:79:dc:c5:44:82:2e: 4c:70:1e:7c:b9:c4:c1:c3:78:f9:5e:d9:46:c3:e8:bd:0d:cd: ff:be:73:c8:ad:2a:65:79:83:8b:cd:b2:4c:71:99:2a:e7:7c: da:0c:62:30:53:1d:23:1c:0d:c9:63:0e:91:d6:3a:75:95:a9: 27:b2:2c:01:eb:40:e7:dc:79:51:ea:9a:c5:ad:40:62:ec:d9: f9:fb:80:0c:cc:dc:37:91:03:60:66:ec:9b:3f:70:50:cb:99: a6:ff:c9:ba:1c:35:5f:09:c8:39:ac:95:f8:54:3e:e9:c7:bc: c1:d9:c6:d6:7f:82:ee:b7:c9:bb:8d:0b:70:e4:60:42:48:3e: 28:8a:d3:79:58:41:09:59:c6:62:40:17:25:51:51:9a:47:55: 53:84:2f:d2:4b:87:86:66:03:50:4d:f0:ac:85:c2:57:44:f8: d8:bb:45:3b:d3:99:8a:24:5e:2c:58:23:b6:1d:a9:78:d4:fc: 9c:34:21:ac -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsdnDSngt+grZHP/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDdiNWVjNWYtYzgyYy00OWRlLWEyYTUtOWI4ZTBjMGExNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDeYtJcMSeSgAQZURzKrOReYlx5rdwR4sUhZ y5tJ+LZEXfXB/R5GlMpUuE85DOlFW5KyvYCDlVDcl+6PnmUdC7svrVMZIsBtY9k5 nNu8e/0Iwt1whniSeZKb0LTaBYdchbhGS8hXAy0UptMPSAUDiGe37zrQwHqZAbye bI76u8RbaXASxSBCWcOLQjTK2Bm7ARZFGg49/Aag8iDM28Zrb7zFQBDlFjlvvKce mMCyMn3OKxWIZSaRtUi4vL+Z5jnj35KhwZS702nu0islait5HMaR+WwWmCu7Izx0 A9CFvGZ27VrLqR8lvrVpk+/q412xAp1DJd24WI5j5ydsy3aNpwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFAX01OcXhhogn5Ejaca+WhDHjI5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjg2ZDNjZDYtYTU5YS0z NTFlLThiYmItZDg0YTI4MjEzZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYG60D BADYG64wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAj7kkf11SwkVywEuJBKsfFHbmwAFc6oQRZVlYalVzi+v2 X94EgeT/1Ano2HtEUXqG/ep++bAxIePePCiLnMoTa7qyedzFRIIuTHAefLnEwcN4 +V7ZRsPovQ3N/75zyK0qZXmDi82yTHGZKud82gxiMFMdIxwNyWMOkdY6dZWpJ7Is AetA59x5Ueqaxa1AYuzZ+fuADMzcN5EDYGbsmz9wUMuZpv/Juhw1XwnIOayV+FQ+ 6ce8wdnG1n+C7rfJu40LcORgQkg+KIrTeVhBCVnGYkAXJVFRmkdVU4Qv0kuHhmYD UE3wrIXCV0T42LtFO9OZiiReLFgjth2peNT8nDQhrA== -----END CERTIFICATE-----Generated at Sat Oct 11 08:54:12 2025 by rpki-client