$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa File: fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa (raw, json) Hash identifier: ywHiH08Ri3ImFUjcXa1IRVqvDoH+OpFeO0vYbJn4OX4= Subject key identifier: 70:04:B2:CA:78:61:13:D3:46:D1:62:7C:0D:51:C9:F8:C5:C9:F9:72 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584B3DBA263CE7F456725B734000 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 40509 IP address blocks: 37.16.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:26:3c:e7:f4:56:72:5b:73:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=a128ed25-992b-4f25-900f-ccadb1ced870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8c:3b:eb:0c:97:99:dd:51:dd:f6:93:87:6d: 22:4c:23:c8:56:e1:99:dd:68:ec:7a:c5:38:57:6b: 96:79:f0:61:ed:0f:24:37:9b:0b:db:46:6f:c0:48: 34:15:61:a4:68:d4:fc:26:94:90:9f:35:94:72:15: 0f:e0:98:74:4c:bd:c1:4f:6c:83:bd:30:c4:cc:08: 81:7e:11:f4:5b:72:a7:f2:76:4d:3d:7d:86:7d:e3: b9:97:44:25:9a:b2:25:09:2e:d6:bf:99:cd:dc:de: c6:65:0d:64:d5:60:b3:50:3a:b7:b3:41:b0:1f:d3: b5:a0:a6:14:f3:a9:03:a9:6a:9c:65:49:05:75:bf: 3b:14:fc:6e:d5:2c:80:74:7a:db:5b:3d:60:1b:b2: ea:a0:fb:20:f4:b9:27:b3:23:95:f8:c3:57:1c:db: f2:a3:8d:83:f6:13:3f:90:93:30:15:87:be:b9:36: 80:87:ce:87:de:6f:72:ea:be:cd:93:e0:e3:38:af: f9:92:77:b0:a7:f3:39:f7:f0:2e:b7:69:f1:91:cc: d6:08:47:95:c6:a6:14:3c:55:93:c4:86:26:f6:ac: 3c:97:ca:23:ab:4d:73:71:00:30:ca:e6:da:9e:58: e6:88:d6:4f:57:fd:79:c6:86:83:7f:cd:23:87:df: 60:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:04:B2:CA:78:61:13:D3:46:D1:62:7C:0D:51:C9:F8:C5:C9:F9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 37.16.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:35:c6:61:02:ec:6d:31:5a:90:97:aa:11:f3:fd:e9:a5:82: 2c:1d:6f:7d:82:c4:f4:96:56:28:59:d3:63:32:eb:77:12:e7: 73:35:f5:4c:50:dd:5a:00:1c:d2:71:d6:03:fd:0d:c8:72:c4: 1b:3f:ab:14:06:a2:d4:66:cc:71:ee:4a:92:6c:fa:da:f3:d4: 43:61:42:b5:c5:ff:3e:97:0d:9c:e1:22:54:bf:c1:84:bb:ba: d6:f5:1b:0f:e6:81:88:a6:27:26:9d:47:7e:f5:3c:d8:3e:ef: ca:c2:25:5a:5e:9e:36:85:81:e3:4e:79:23:7e:96:64:27:e8: eb:c2:73:1b:17:8b:e0:8c:79:6e:fb:f0:4e:a7:ec:52:3e:cb: 92:f7:a2:9a:d3:ab:e5:33:de:16:8c:6e:3d:22:12:8c:b0:77: 0e:ac:64:be:e8:65:8f:e8:cf:d9:39:ff:de:e3:ab:42:50:5d: 94:a0:1f:24:0b:40:24:a0:ee:c8:2f:82:b1:2e:38:eb:11:3a: 76:b9:c4:98:1c:e1:40:3d:ee:6c:38:2c:33:e0:8e:b2:e3:a6: ce:7c:43:e2:af:65:ec:7f:04:c5:5a:ff:c5:d3:43:b0:1b:6d: a4:c2:2f:81:5d:3b:95:67:e6:bf:af:22:47:7c:9e:73:bd:cd: c9:96:8f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uiY85/RWcltzQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YTEyOGVkMjUtOTkyYi00ZjI1LTkwMGYtY2NhZGIxY2VkODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4w76wyXmd1R3faTh20iTCPIVuGZ3WjsesU4 V2uWefBh7Q8kN5sL20ZvwEg0FWGkaNT8JpSQnzWUchUP4Jh0TL3BT2yDvTDEzAiB fhH0W3Kn8nZNPX2GfeO5l0QlmrIlCS7Wv5nN3N7GZQ1k1WCzUDq3s0GwH9O1oKYU 86kDqWqcZUkFdb87FPxu1SyAdHrbWz1gG7LqoPsg9LknsyOV+MNXHNvyo42D9hM/ kJMwFYe+uTaAh86H3m9y6r7Nk+DjOK/5knewp/M59/Aut2nxkczWCEeVxqYUPFWT xIYm9qw8l8ojq01zcQAwyubanljmiNZPV/15xoaDf80jh99gGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAEssp4YRPTRtFifA1RyfjFyflyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvZmI3MGI0MWYtYmM3Ny0z Yzc0LThkMWMtMGRhYzBmMmMxYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFJRAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU1xmEC7G0xWpCXqhHz/emlgiwdb32CxPSWVihZ02My63cS53M19UxQ 3VoAHNJx1gP9DchyxBs/qxQGotRmzHHuSpJs+trz1ENhQrXF/z6XDZzhIlS/wYS7 utb1Gw/mgYimJyadR371PNg+78rCJVpenjaFgeNOeSN+lmQn6OvCcxsXi+CMeW77 8E6n7FI+y5L3oprTq+Uz3haMbj0iEoywdw6sZL7oZY/oz9k5/97jq0JQXZSgHyQL QCSg7sgvgrEuOOsROna5xJgc4UA97mw4LDPgjrLjps58Q+KvZex/BMVa/8XTQ7Ab baTCL4FdO5Vn5r+vIkd8nnO9zcmWj0A= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:24 2025 by rpki-client