$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/ad2513a9-06a9-3695-892c-eec8ede4fe26.roa File: ad2513a9-06a9-3695-892c-eec8ede4fe26.roa (raw, json) Hash identifier: hUmN3ssRYPHvOCtzr4nIvs0knGBS15jZh20726DSYhI= Subject key identifier: 24:A6:55:BC:EB:1A:06:46:8A:BF:78:EF:8A:19:5C:41:0B:5C:B6:D3 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584BBB758A364012E70CF25B3FD4 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/ad2513a9-06a9-3695-892c-eec8ede4fe26.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 394708 IP address blocks: 216.201.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8a:36:40:12:e7:0c:f2:5b:3f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=2030a6b0-e354-4589-a3da-6de1d9c658f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1a:32:e9:79:42:f6:d5:71:00:d2:96:85:be: 31:b7:41:a0:7e:7c:99:a6:6e:22:1f:cd:5a:5a:51: d0:75:ae:6d:37:2a:48:da:97:51:46:c3:43:2b:9a: ef:96:8c:90:8b:09:fe:0a:0f:79:3a:b7:27:67:10: 17:46:da:95:17:45:65:a0:21:88:67:b1:50:f4:2d: bc:50:6e:b3:a7:ed:02:5b:6c:44:8a:ce:9a:72:4a: 66:cb:28:2b:5d:f6:14:85:4b:be:d4:5d:41:69:81: d0:41:a9:ff:ea:e8:10:fc:af:46:0f:04:65:9a:41: df:07:bc:91:ce:94:d1:9d:44:6a:d7:3f:71:15:58: 57:86:02:15:fe:c1:58:b4:69:3c:4f:7f:e8:22:8c: 46:e4:56:51:a9:d0:b7:22:d9:65:fa:af:56:ad:79: 82:0b:66:f7:bd:0a:8d:aa:eb:ef:08:97:96:a9:bd: cb:09:03:ab:87:75:de:ac:a0:13:22:b8:0f:ca:a8: f2:4c:a5:5d:24:3d:dd:35:fd:a7:3f:f9:79:a3:c8: ff:c6:0b:26:f6:5b:df:d9:99:20:d6:b9:59:69:91: 19:e2:81:9f:90:7d:d5:45:99:79:be:82:73:5a:46: bf:ad:f3:75:9c:ad:b7:f8:c6:9b:20:f0:cb:9b:15: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A6:55:BC:EB:1A:06:46:8A:BF:78:EF:8A:19:5C:41:0B:5C:B6:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/ad2513a9-06a9-3695-892c-eec8ede4fe26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.201.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e8:70:42:1b:b6:c7:f7:96:21:0f:a2:06:cb:e5:38:ab:ed: a4:2e:6f:7c:d8:3d:e7:d4:3e:1b:46:15:20:03:54:db:23:34: da:af:99:dd:42:57:fe:3f:ae:97:91:ed:b0:e1:6c:19:d4:8d: 4a:2b:aa:be:3e:14:44:f2:35:b1:db:0c:81:d1:cd:1e:88:b3: c7:bc:7b:09:03:80:f3:41:2e:74:b3:6f:da:30:10:18:4d:42: 4a:d0:82:b1:83:95:32:dc:9a:c0:f3:2c:8d:fa:f6:ca:e1:9d: 42:49:a6:2e:93:41:c8:30:e9:7f:06:8f:a3:51:f2:06:b2:2c: b2:70:ae:7b:3b:1d:d5:42:61:a7:6d:16:c5:f1:51:8b:eb:99: a4:4a:8f:b7:83:d5:d9:17:45:c4:36:f0:20:ff:ef:bf:a1:51: 25:6b:bd:93:ff:91:6b:10:ce:ba:08:ab:c6:6b:c6:83:4d:94: 1a:7d:5e:2d:35:0e:43:e5:4f:ae:71:e5:1e:cf:9d:05:60:18: e6:fa:f9:8a:fe:ad:12:cc:c1:d4:89:e0:e2:45:a7:a1:48:27: 7a:06:51:2d:d2:7b:cd:1d:c6:c7:52:8a:6c:da:c5:b9:f7:0c: dc:f8:00:9b:cb:b2:8b:4f:56:e7:cd:a2:0c:15:7e:72:8e:39: f9:a1:64:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYo2QBLnDPJbP9QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MjAzMGE2YjAtZTM1NC00NTg5LWEzZGEtNmRlMWQ5YzY1OGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRoy6XlC9tVxANKWhb4xt0GgfnyZpm4iH81a WlHQda5tNypI2pdRRsNDK5rvloyQiwn+Cg95OrcnZxAXRtqVF0VloCGIZ7FQ9C28 UG6zp+0CW2xEis6ackpmyygrXfYUhUu+1F1BaYHQQan/6ugQ/K9GDwRlmkHfB7yR zpTRnURq1z9xFVhXhgIV/sFYtGk8T3/oIoxG5FZRqdC3Itll+q9WrXmCC2b3vQqN quvvCJeWqb3LCQOrh3XerKATIrgPyqjyTKVdJD3dNf2nP/l5o8j/xgsm9lvf2Zkg 1rlZaZEZ4oGfkH3VRZl5voJzWka/rfN1nK23+MabIPDLmxWsVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSmVbzrGgZGir9474oZXEELXLbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvYWQyNTEzYTktMDZhOS0z Njk1LTg5MmMtZWVjOGVkZTRmZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MkqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILocEIbtsf3liEPogbL5Tir7aQub3zYPefUPhtGFSADVNsjNNqvmd1C V/4/rpeR7bDhbBnUjUorqr4+FETyNbHbDIHRzR6Is8e8ewkDgPNBLnSzb9owEBhN QkrQgrGDlTLcmsDzLI369srhnUJJpi6TQcgw6X8Gj6NR8gayLLJwrns7HdVCYadt FsXxUYvrmaRKj7eD1dkXRcQ28CD/77+hUSVrvZP/kWsQzroIq8ZrxoNNlBp9Xi01 DkPlT65x5R7PnQVgGOb6+Yr+rRLMwdSJ4OJFp6FIJ3oGUS3Se80dxsdSimzaxbn3 DNz4AJvLsotPVufNogwVfnKOOfmhZMQ= -----END CERTIFICATE-----Generated at Mon Nov 3 08:43:21 2025 by rpki-client