$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/a07b204f-edf4-348e-a1c8-032675f4fe15.roa File: a07b204f-edf4-348e-a1c8-032675f4fe15.roa (raw, json) Hash identifier: SeNZQI1WGy62g0n5EVmrAnCRrLQHjI47hSKjKVVEoJQ= Subject key identifier: DE:45:A2:83:34:00:B5:0E:EC:DB:C7:FF:B7:D6:4F:29:AC:83:26:D6 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA667ADC1DA834BEA06004A80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/a07b204f-edf4-348e-a1c8-032675f4fe15.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 216.247.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ad:c1:da:83:4b:ea:06:00:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=6cf773d3-6703-47e5-be5c-29250e904d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:0e:a4:bc:24:cb:9a:93:ee:af:90:cf:ed: 37:92:02:e7:84:50:a8:c8:94:83:01:35:cc:82:9e: 9e:47:e4:b6:bd:c7:21:17:06:c1:79:2a:ef:76:0f: b0:46:ac:7e:94:eb:72:c1:34:f3:55:0d:64:ca:33: 86:5c:a1:00:73:17:a9:63:21:c2:df:07:f3:3a:d4: f4:a1:aa:aa:5e:4e:74:7a:44:e4:80:5f:8d:0c:da: 97:ef:d3:16:43:a6:3d:02:4a:a5:bd:68:a4:28:a7: 89:87:96:83:6f:05:a1:5d:b4:90:80:8a:ef:eb:18: 3a:70:cf:a9:83:44:bd:fe:b7:36:d6:9c:dd:73:e6: 1c:79:12:ea:b8:13:53:3c:ad:66:b4:99:48:07:7d: 2b:1a:63:08:d9:99:bc:f5:d8:71:2d:a2:07:83:52: 35:52:c1:20:22:79:e6:43:7e:01:8c:a6:84:1d:1b: c8:5a:55:8c:35:f6:05:57:88:de:81:b6:4c:41:c9: 65:ed:52:83:0e:ea:47:85:e0:e4:9e:31:58:a0:3c: 8d:be:6c:6a:f8:75:a8:ea:cf:b2:3e:23:d1:37:a1: 2e:d2:c6:0f:23:41:fb:2e:fc:ed:13:81:77:1f:7f: a2:3e:42:78:56:72:44:62:d8:d2:4d:1e:ae:6c:68: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:45:A2:83:34:00:B5:0E:EC:DB:C7:FF:B7:D6:4F:29:AC:83:26:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/a07b204f-edf4-348e-a1c8-032675f4fe15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 216.247.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:aa:ad:6e:dc:2a:a9:af:aa:a5:27:0e:31:6c:86:4a:84:d0: 51:7e:72:54:17:b9:5e:82:ec:f9:3d:e1:97:f5:4d:08:c6:fd: 26:57:c5:2f:d0:95:96:6f:6b:65:61:2a:bb:1e:b5:5b:78:0c: 9a:ea:f4:8a:14:7a:35:2b:c2:47:19:fa:d0:61:37:9a:2e:d8: 2d:eb:fd:06:79:6c:92:b9:5a:23:7d:65:9a:3e:ed:90:b5:02: c4:0a:66:e1:83:65:e4:f0:75:9d:8b:98:5b:8a:d2:46:ca:fc: 79:88:4a:6b:2f:0f:53:a7:70:4c:46:ef:0c:24:97:e7:68:97: 1f:5c:d1:9a:4a:fb:1e:dd:f8:ba:e9:e2:e0:df:d7:3c:c6:a9: ac:57:de:73:c6:de:34:63:47:dc:b0:d7:da:26:ec:bf:a5:49: 25:18:b4:40:5e:5b:8c:97:a7:68:b1:07:03:ee:82:d7:b3:5f: 81:7e:54:71:d6:01:0e:80:6b:c6:d6:09:4a:14:bb:4e:86:c4: 03:d9:d1:fd:62:4d:7d:7e:85:67:ff:9f:74:fd:b1:ad:73:bf: 37:c7:24:94:e9:40:30:bd:aa:a4:36:38:e3:15:0e:c0:21:93: e6:74:b5:4b:4b:25:22:e2:c4:18:fa:76:cb:f1:dd:cc:49:d4: 95:01:25:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ63B2oNL6gYASoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NmNmNzczZDMtNjcwMy00N2U1LWJlNWMtMjkyNTBlOTA0ZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRkOpLwky5qT7q+Qz+03kgLnhFCoyJSDATXM gp6eR+S2vcchFwbBeSrvdg+wRqx+lOtywTTzVQ1kyjOGXKEAcxepYyHC3wfzOtT0 oaqqXk50ekTkgF+NDNqX79MWQ6Y9AkqlvWikKKeJh5aDbwWhXbSQgIrv6xg6cM+p g0S9/rc21pzdc+YceRLquBNTPK1mtJlIB30rGmMI2Zm89dhxLaIHg1I1UsEgInnm Q34BjKaEHRvIWlWMNfYFV4jegbZMQcll7VKDDupHheDknjFYoDyNvmxq+HWo6s+y PiPRN6Eu0sYPI0H7LvztE4F3H3+iPkJ4VnJEYtjSTR6ubGiXYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5FooM0ALUO7NvH/7fWTymsgybWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYTA3YjIwNGYtZWRmNC0z NDhlLWExYzgtMDMyNjc1ZjRmZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Pf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaqrW7cKqmvqqUnDjFshkqE0FF+clQXuV6C7Pk94Zf1TQjG/SZXxS/Q lZZva2VhKrsetVt4DJrq9IoUejUrwkcZ+tBhN5ou2C3r/QZ5bJK5WiN9ZZo+7ZC1 AsQKZuGDZeTwdZ2LmFuK0kbK/HmISmsvD1OncExG7wwkl+dolx9c0ZpK+x7d+Lrp 4uDf1zzGqaxX3nPG3jRjR9yw19om7L+lSSUYtEBeW4yXp2ixBwPugtezX4F+VHHW AQ6Aa8bWCUoUu06GxAPZ0f1iTX1+hWf/n3T9sa1zvzfHJJTpQDC9qqQ2OOMVDsAh k+Z0tUtLJSLixBj6dsvx3cxJ1JUBJek= -----END CERTIFICATE-----Generated at Mon Nov 3 08:48:50 2025 by rpki-client