$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f9a138e4-ac45-3dd5-8c47-29aa376b706e.roa File: f9a138e4-ac45-3dd5-8c47-29aa376b706e.roa (raw, json) Hash identifier: oL28HjtXLU34cwxhN3pAF5fonyKkJqtkdhQL7i3+J6g= Subject key identifier: 4D:26:2D:9E:5C:CC:D6:66:99:26:EE:15:6B:1F:C4:3E:CB:BD:81:31 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B583CABC2FDD1F95F22A35BC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f9a138e4-ac45-3dd5-8c47-29aa376b706e.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 11059 IP address blocks: 216.132.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:ab:c2:fd:d1:f9:5f:22:a3:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=82baa46c-4aba-4131-95c0-b54375f57c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:36:aa:41:4d:d0:af:5a:9c:c2:77:7a:dc:9e: b8:1e:09:1c:e2:49:36:58:d5:10:a1:f1:31:2a:ff: a2:f7:33:03:8a:4b:5f:07:b3:74:96:34:e6:78:2e: 0f:36:b2:7f:61:7f:ca:f1:68:e4:a8:1e:b3:ae:af: f3:3a:65:70:10:fb:e6:c0:3f:b5:51:58:08:84:e2: b5:2f:ce:b5:5d:6d:88:79:f5:7c:98:b2:13:08:fe: a7:3c:8f:c4:c7:b6:fb:3b:57:54:35:bd:e4:41:67: bb:57:f9:91:0c:9d:db:aa:4b:c8:68:18:77:41:97: 87:18:49:a8:c0:61:cf:bf:d7:5a:4e:28:17:2c:67: 28:44:96:aa:9a:42:c1:05:28:d8:e9:fa:64:d8:94: e0:66:e3:0c:8b:69:17:31:88:53:37:f1:55:ec:e0: 25:49:30:27:a2:b0:8f:92:3b:15:fc:a7:93:86:26: 28:dd:56:b5:e9:2b:3e:62:2b:cc:c9:73:09:c7:29: 71:4d:aa:c6:c6:2e:f0:dd:e3:38:f7:bf:fa:9c:0a: da:02:df:f1:c6:5f:4b:32:d3:7a:f6:e6:bb:86:ff: c4:da:27:85:29:ac:fc:43:8d:c5:d2:cc:82:79:9b: 8c:55:a5:bb:86:e5:eb:ae:78:62:45:a3:05:e6:9d: 41:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:26:2D:9E:5C:CC:D6:66:99:26:EE:15:6B:1F:C4:3E:CB:BD:81:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f9a138e4-ac45-3dd5-8c47-29aa376b706e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ad:10:0c:9f:a1:4f:56:15:57:ae:13:3f:a4:a4:a9:40:99: 5a:35:23:b4:41:99:e8:4d:17:d0:d9:0d:55:90:6d:ed:72:47: b5:29:d8:15:d3:cd:13:90:44:56:2a:f2:db:7c:04:88:f8:ce: 70:90:97:e7:e2:74:5d:b6:75:02:fe:30:f8:e5:34:b2:06:08: 1c:6b:59:8f:e8:46:77:6b:f6:4d:80:d4:7e:92:2a:5b:28:37: bf:c8:dc:bd:94:0e:6e:03:ab:47:a4:bb:1b:51:d5:e2:be:44: af:d4:11:7d:77:5c:a0:bd:6d:73:31:56:ff:85:5a:64:68:df: e4:dc:b1:46:5f:c5:7a:6d:5e:28:e5:3e:9d:0d:66:06:f9:3a: 37:d5:d3:29:78:9c:d7:0a:52:2f:12:7c:51:be:34:24:a8:b9: c7:00:49:39:d3:ae:e8:e6:7a:e3:58:64:06:a4:19:c0:4d:c9: ad:42:03:bc:4e:c9:69:cc:1e:ea:6f:c2:ec:b0:9a:99:7d:1d: b9:6d:da:62:9e:cf:fa:fa:19:48:e7:89:cd:62:6d:69:a8:08: 40:8d:d2:f4:03:bb:2f:54:4b:85:9c:7c:d7:08:36:bc:4f:b6: 9e:61:35:f5:8f:f3:54:52:c8:28:78:8b:7c:c5:74:84:e8:23: 06:3f:14:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKvC/dH5XyKjW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ODJiYWE0NmMtNGFiYS00MTMxLTk1YzAtYjU0Mzc1ZjU3Yzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjaqQU3Qr1qcwnd63J64Hgkc4kk2WNUQofEx Kv+i9zMDiktfB7N0ljTmeC4PNrJ/YX/K8WjkqB6zrq/zOmVwEPvmwD+1UVgIhOK1 L861XW2IefV8mLITCP6nPI/Ex7b7O1dUNb3kQWe7V/mRDJ3bqkvIaBh3QZeHGEmo wGHPv9daTigXLGcoRJaqmkLBBSjY6fpk2JTgZuMMi2kXMYhTN/FV7OAlSTAnorCP kjsV/KeThiYo3Va16Ss+YivMyXMJxylxTarGxi7w3eM497/6nAraAt/xxl9LMtN6 9ua7hv/E2ieFKaz8Q43F0syCeZuMVaW7huXrrnhiRaMF5p1BXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0mLZ5czNZmmSbuFWsfxD7LvYExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjlhMTM4ZTQtYWM0NS0z ZGQ1LThjNDctMjlhYTM3NmI3MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ISQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+tEAyfoU9WFVeuEz+kpKlAmVo1I7RBmehNF9DZDVWQbe1yR7Up2BXT zROQRFYq8tt8BIj4znCQl+fidF22dQL+MPjlNLIGCBxrWY/oRndr9k2A1H6SKlso N7/I3L2UDm4Dq0ekuxtR1eK+RK/UEX13XKC9bXMxVv+FWmRo3+TcsUZfxXptXijl Pp0NZgb5OjfV0yl4nNcKUi8SfFG+NCSouccASTnTrujmeuNYZAakGcBNya1CA7xO yWnMHupvwuywmpl9Hblt2mKez/r6GUjnic1ibWmoCECN0vQDuy9US4WcfNcINrxP tp5hNfWP81RSyCh4i3zFdIToIwY/FIk= -----END CERTIFICATE-----Generated at Sat Oct 11 08:54:16 2025 by rpki-client