$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/d9066334-6b47-396f-b5fa-b1599e148736.roa File: d9066334-6b47-396f-b5fa-b1599e148736.roa (raw, json) Hash identifier: X1ztK8oLJUuOwLcq74kTtiEU5NLQ5XaXfLbHYXG2A+g= Subject key identifier: 8C:16:0D:35:19:C7:DD:4F:4B:AC:37:9B:B0:73:6B:DF:8F:0B:E8:C0 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584BBB7591D9111A953F5221C254 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/d9066334-6b47-396f-b5fa-b1599e148736.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 394708 IP address blocks: 216.255.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:91:d9:11:1a:95:3f:52:21:c2:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=779bce20-b5b3-410f-a1a4-9a5357e29b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:35:17:ec:74:60:e8:66:bc:31:92:c2:9c:9c: e9:39:52:49:26:be:75:a6:7e:7c:f7:67:3b:48:52: 8c:3d:ed:79:78:a2:75:1e:21:47:4a:7f:de:ec:a4: e7:e5:cd:02:70:60:35:ed:62:90:08:69:39:9a:34: 1c:9d:24:70:ca:f4:24:9c:d6:c5:e2:6c:0c:0d:2e: 6a:c4:5c:e5:59:f3:0d:1b:c5:64:61:8e:cb:a6:13: 7b:1e:e3:4d:07:52:52:96:04:da:38:bb:6e:9a:2b: 76:eb:9f:2b:5f:fa:18:7f:2d:30:0a:d8:69:7b:e9: e7:27:73:ad:5f:28:e7:2a:2d:ce:2a:17:67:3d:3d: 0b:40:ed:e3:fd:4b:30:20:67:d9:3d:34:f0:70:e4: f5:89:f6:55:d8:17:a2:62:24:c7:37:63:ff:ee:c5: 5b:22:36:03:89:3c:93:01:1a:05:eb:a0:4a:a4:54: 92:87:e1:82:c3:e3:d1:64:bb:a5:d9:f7:c2:8b:25: 39:12:43:6a:fd:f4:0c:ee:c1:cf:d6:89:74:74:5b: 64:1a:2b:47:93:c7:a8:18:12:4a:d4:e7:cd:ce:4e: c4:fa:a3:63:09:b8:14:96:02:85:b1:41:8f:54:d5: c1:d4:81:e3:a9:95:64:f5:4a:59:8c:34:a5:0d:c6: 72:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:16:0D:35:19:C7:DD:4F:4B:AC:37:9B:B0:73:6B:DF:8F:0B:E8:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/d9066334-6b47-396f-b5fa-b1599e148736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:84:68:a8:ed:a8:68:db:16:8b:02:2a:90:2b:82:8d:07:49: fc:67:ef:3a:72:f1:51:a4:95:9f:35:df:99:85:17:7d:7e:83: 84:3c:b9:b5:44:83:c0:03:2b:2e:18:0d:1c:a6:15:df:ad:e0: f4:03:88:70:a2:41:93:2e:52:06:9c:56:3f:53:af:33:2b:97: e3:63:2b:30:fb:e2:f6:2a:dd:5c:d3:4f:47:ad:38:5e:f0:70: a9:ba:a2:e2:fc:41:08:0e:16:b2:45:ad:f1:8b:80:d7:20:a6: ad:9a:a4:e9:20:2b:d3:8c:a4:28:fe:52:7b:4c:3a:85:e9:54: 97:83:23:29:30:9c:06:e1:1f:1c:c1:48:1c:a4:2a:2a:c0:65: 32:57:f0:1f:aa:c4:bd:be:55:a9:e2:98:79:22:2f:2e:37:95: 43:bd:3d:c5:85:33:29:1b:1f:02:4c:3a:fc:a1:ac:4e:37:1d: 9f:38:12:7c:eb:96:fb:93:e6:d1:86:86:b4:a4:6f:3c:8d:08: 9f:ad:8e:5e:cd:da:3b:bd:a2:28:71:97:23:2f:ae:14:56:9e: 91:ef:2e:1c:be:bb:a3:2a:87:0b:61:3a:1c:38:1c:f2:c7:9e: cc:62:a2:77:0d:9b:69:41:44:d3:a0:c7:50:e7:d1:9b:aa:27: e6:10:68:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZHZERqVP1IhwlQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk Nzc5YmNlMjAtYjViMy00MTBmLWExYTQtOWE1MzU3ZTI5YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzUX7HRg6Ga8MZLCnJzpOVJJJr51pn5892c7 SFKMPe15eKJ1HiFHSn/e7KTn5c0CcGA17WKQCGk5mjQcnSRwyvQknNbF4mwMDS5q xFzlWfMNG8VkYY7LphN7HuNNB1JSlgTaOLtumit2658rX/oYfy0wCthpe+nnJ3Ot XyjnKi3OKhdnPT0LQO3j/UswIGfZPTTwcOT1ifZV2BeiYiTHN2P/7sVbIjYDiTyT ARoF66BKpFSSh+GCw+PRZLul2ffCiyU5EkNq/fQM7sHP1ol0dFtkGitHk8eoGBJK 1OfNzk7E+qNjCbgUlgKFsUGPVNXB1IHjqZVk9UpZjDSlDcZyNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwWDTUZx91PS6w3m7Bza9+PC+jAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvZDkwNjYzMzQtNmI0Ny0z OTZmLWI1ZmEtYjE1OTllMTQ4NzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6EaKjtqGjbFosCKpArgo0HSfxn7zpy8VGklZ8135mFF31+g4Q8ubVE g8ADKy4YDRymFd+t4PQDiHCiQZMuUgacVj9TrzMrl+NjKzD74vYq3VzTT0etOF7w cKm6ouL8QQgOFrJFrfGLgNcgpq2apOkgK9OMpCj+UntMOoXpVJeDIykwnAbhHxzB SBykKirAZTJX8B+qxL2+VanimHkiLy43lUO9PcWFMykbHwJMOvyhrE43HZ84Enzr lvuT5tGGhrSkbzyNCJ+tjl7N2ju9oihxlyMvrhRWnpHvLhy+u6MqhwthOhw4HPLH nsxioncNm2lBRNOgx1Dn0ZuqJ+YQaKk= -----END CERTIFICATE-----Generated at Mon Nov 3 08:43:46 2025 by rpki-client