$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/88113347-11fa-3503-98e2-c17388c80662.roa File: 88113347-11fa-3503-98e2-c17388c80662.roa (raw, json) Hash identifier: j08DZvactpkjIlfkURRENt8ZD9lKb7YkndwHgZRkwx8= Subject key identifier: FD:16:F0:B9:F3:42:8D:7E:15:E3:A7:71:00:9B:57:E1:F5:8B:D8:D9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B33F1B74C5E2E7BCA0579BB40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/88113347-11fa-3503-98e2-c17388c80662.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 9304 IP address blocks: 216.133.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:b7:4c:5e:2e:7b:ca:05:79:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=5c33b439-d01a-4800-94d4-c7c73d2ca28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:37:e3:81:42:25:d5:ff:77:f9:9d:4a:e6: a0:67:4e:cb:36:2a:3f:18:5a:b4:45:50:ce:dc:d3: 6f:64:a0:f0:d0:65:3e:d3:67:f4:23:a9:27:cb:24: f7:70:cc:96:7b:56:d9:b6:81:9f:cc:96:7a:29:b9: 22:0a:9c:6d:fd:36:6b:67:f7:57:17:0c:d0:30:b1: 9f:c9:a9:f9:9a:51:28:cd:87:e8:ac:2f:0c:4b:6b: 80:a8:eb:1d:f7:6d:18:61:8b:d5:0e:40:e3:c7:1a: 94:11:94:a0:2a:98:90:aa:11:0a:ed:5e:dc:a5:e7: 88:44:a5:db:79:a2:0c:da:26:85:80:3f:e0:3c:7d: eb:ce:7a:77:6a:9f:e3:c3:4c:d8:5b:f8:da:1a:c5: 14:0e:34:d5:c4:22:76:f5:02:9d:aa:c6:b9:fc:3d: 41:75:74:c2:dd:1d:2e:85:83:27:f3:6a:78:af:c7: b5:9b:65:0a:02:22:06:3a:64:3a:4b:1a:43:43:49: 45:01:d8:e0:c9:23:46:6e:e1:80:7a:bf:1c:de:cd: d9:92:5a:16:98:83:fa:b2:f2:5f:dc:cb:c3:dc:66: c8:88:aa:a3:8d:16:53:85:f5:40:93:3c:bb:9c:3b: b2:97:7e:71:e4:c3:cb:21:4a:cf:d7:1c:16:69:5e: cd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:16:F0:B9:F3:42:8D:7E:15:E3:A7:71:00:9B:57:E1:F5:8B:D8:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/88113347-11fa-3503-98e2-c17388c80662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.133.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9d:6b:c3:08:d2:69:0a:ec:cb:23:d3:60:19:b4:ab:73:d4: 11:df:04:b5:b9:d3:af:ad:2f:5a:e4:68:95:2c:a8:f1:f5:ce: eb:29:54:e3:ca:00:07:e4:d6:fc:0c:1a:0c:9c:60:bd:3d:c5: ab:47:fa:2e:2f:91:b2:92:66:4b:ce:25:5a:37:f4:69:12:ed: 85:c9:f0:ab:3a:3e:05:e7:44:c8:7d:6e:8b:18:d7:0a:94:5d: d3:d3:ae:e7:02:7f:b0:ad:55:77:78:be:22:c7:0b:c7:11:cf: d1:93:4e:c3:67:6f:c4:15:a1:d0:c0:0e:08:b5:33:27:cd:cc: 60:e9:0e:68:c0:dd:60:d4:ce:32:64:af:7c:53:4e:2d:f6:c3: 23:88:b9:ee:d4:52:1b:5c:b4:54:98:bd:49:7d:7b:2a:aa:e3: 98:d2:f2:99:83:e1:da:25:31:f0:f7:2a:da:20:03:c0:d6:bd: 65:61:e0:10:35:20:12:78:24:94:09:b4:43:87:ec:bc:25:16: 73:ed:71:1e:b3:92:d4:23:a4:f6:1b:96:a6:01:57:26:0c:8d: 36:0c:32:ba:f5:81:a0:d1:64:db:64:f1:f7:60:d7:0f:13:ba: d5:2c:b3:ef:a3:a6:f2:1c:8f:81:b3:a8:b5:99:56:fd:96:c1: 38:48:7a:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8bdMXi57ygV5u0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NWMzM2I0MzktZDAxYS00ODAwLTk0ZDQtYzdjNzNkMmNhMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwws344FCJdX/d/mdSuagZ07LNio/GFq0RVDO 3NNvZKDw0GU+02f0I6knyyT3cMyWe1bZtoGfzJZ6KbkiCpxt/TZrZ/dXFwzQMLGf yan5mlEozYforC8MS2uAqOsd920YYYvVDkDjxxqUEZSgKpiQqhEK7V7cpeeIRKXb eaIM2iaFgD/gPH3rznp3ap/jw0zYW/jaGsUUDjTVxCJ29QKdqsa5/D1BdXTC3R0u hYMn82p4r8e1m2UKAiIGOmQ6SxpDQ0lFAdjgySNGbuGAer8c3s3ZkloWmIP6svJf 3MvD3GbIiKqjjRZThfVAkzy7nDuyl35x5MPLIUrP1xwWaV7N6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0W8LnzQo1+FeOncQCbV+H1i9jZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODgxMTMzNDctMTFmYS0z NTAzLTk4ZTItYzE3Mzg4YzgwNjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWda8MI0mkK7Msj02AZtKtz1BHfBLW506+tL1rkaJUsqPH1zuspVOPK AAfk1vwMGgycYL09xatH+i4vkbKSZkvOJVo39GkS7YXJ8Ks6PgXnRMh9bosY1wqU XdPTrucCf7CtVXd4viLHC8cRz9GTTsNnb8QVodDADgi1MyfNzGDpDmjA3WDUzjJk r3xTTi32wyOIue7UUhtctFSYvUl9eyqq45jS8pmD4dolMfD3KtogA8DWvWVh4BA1 IBJ4JJQJtEOH7LwlFnPtcR6zktQjpPYblqYBVyYMjTYMMrr1gaDRZNtk8fdg1w8T utUss++jpvIcj4GzqLWZVv2WwThIejw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:56:39 2025 by rpki-client