$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa File: 06b897cd-c149-375a-a100-7b8ecde282a5.roa (raw, json) Hash identifier: goDvZlVhMok4folV1epJUXa+2mZu1vnseczQoRjQVdI= Subject key identifier: 57:A8:BE:76:14:0C:15:E9:89:A0:AF:E4:46:2A:0F:62:82:E9:59:56 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584B95A7906BD6312C1B0C44CF00 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 13984 IP address blocks: 216.213.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:90:6b:d6:31:2c:1b:0c:44:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=9b96a6ac-e6b8-4524-b0dc-fb6984a9fd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:89:ea:68:d3:ac:de:d8:8e:a9:4d:ae:d9: 39:e9:65:69:7f:3d:a4:26:c6:05:30:2a:9c:2a:f2: 49:ef:92:0c:9b:13:00:96:c5:7b:68:d7:a3:0a:a0: 9c:39:55:75:85:a9:7f:6b:72:6c:92:17:6f:ee:55: b4:6a:7f:84:92:79:dd:fa:4f:52:a8:1c:00:f0:0a: 86:8e:13:e9:09:fc:57:30:6b:a7:46:8b:bc:dd:cb: ab:58:ca:76:79:2a:17:e8:a4:b5:67:36:85:37:13: 9f:92:ed:20:35:50:fd:f7:26:5f:97:91:ba:de:d5: f3:fe:91:9f:f6:ef:61:53:56:42:39:72:4a:2e:c1: 73:6f:fa:00:3a:7a:d1:21:8b:e2:28:07:79:c6:30: 79:a8:ca:d8:4c:1b:d6:ce:9d:80:6b:b4:ae:eb:ae: 69:ba:65:a8:97:b1:c6:0e:e6:f6:a8:d8:1a:a5:69: 65:d4:3b:67:d2:86:30:18:6a:04:2c:e6:dd:a1:22: 83:33:f1:0d:fe:3d:42:2c:e4:8b:e5:db:26:18:24: 63:dc:0f:b2:98:a4:e3:8e:66:f3:26:3d:a1:ab:9f: ad:59:ca:e6:28:cd:81:a6:af:88:3f:83:e5:f4:7c: 07:83:ec:36:05:04:03:eb:80:d7:9e:57:48:86:43: 48:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A8:BE:76:14:0C:15:E9:89:A0:AF:E4:46:2A:0F:62:82:E9:59:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 216.213.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:02:8c:d7:a6:bd:80:b4:be:21:a5:40:9f:31:5f:c6:17:74: f2:f8:6e:c6:cf:a7:1f:a6:98:31:6d:95:a5:ce:30:dc:07:b9: f2:a5:1f:d4:ac:91:7f:20:ef:eb:d0:9b:10:00:f6:cd:a2:62: e7:57:58:fb:63:00:0c:9c:dc:1d:be:c7:0e:94:c2:49:3e:90: d2:37:ce:61:fe:36:32:81:1c:9e:46:f4:08:87:7c:fe:9c:ed: 84:0c:60:4a:b3:82:92:27:23:60:c1:e9:8c:19:46:70:2c:70: d0:9e:6a:39:0f:cf:cf:41:d1:a3:40:a2:6c:f7:7d:cf:86:d4: 0d:d0:2a:4f:91:6a:5c:07:04:89:97:77:82:c5:30:48:c9:f7: 03:c7:b2:77:fc:35:be:97:b1:82:32:0b:97:a1:e9:20:0a:74: e6:06:21:87:a7:f4:c7:36:ae:33:85:99:e1:69:07:7e:4a:4f: df:51:e4:e5:35:24:9f:6e:d7:c6:56:3e:21:32:30:f4:5a:fd: a3:c1:0d:9d:75:f7:ab:f5:7c:7e:54:5b:98:22:74:ca:dc:20: 06:b0:60:9f:d8:3f:0d:0a:27:33:a4:f9:ac:79:3b:ed:ea:0b: ab:a7:d5:17:a6:a6:a0:11:c9:cd:42:9a:7f:fe:52:58:bf:a6: db:69:45:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5Br1jEsGwxEzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OWI5NmE2YWMtZTZiOC00NTI0LWIwZGMtZmI2OTg0YTlmZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+eJ6mjTrN7YjqlNrtk56WVpfz2kJsYFMCqc KvJJ75IMmxMAlsV7aNejCqCcOVV1hal/a3Jskhdv7lW0an+Eknnd+k9SqBwA8AqG jhPpCfxXMGunRou83curWMp2eSoX6KS1ZzaFNxOfku0gNVD99yZfl5G63tXz/pGf 9u9hU1ZCOXJKLsFzb/oAOnrRIYviKAd5xjB5qMrYTBvWzp2Aa7Su665pumWol7HG Dub2qNgapWll1Dtn0oYwGGoELObdoSKDM/EN/j1CLOSL5dsmGCRj3A+ymKTjjmbz Jj2hq5+tWcrmKM2Bpq+IP4Pl9HwHg+w2BQQD64DXnldIhkNINwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeovnYUDBXpiaCv5EYqD2KC6VlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvMDZiODk3Y2QtYzE0OS0z NzVhLWExMDAtN2I4ZWNkZTI4MmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2NVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0CjNemvYC0viGlQJ8xX8YXdPL4bsbPpx+mmDFtlaXOMNwHufKlH9Ss kX8g7+vQmxAA9s2iYudXWPtjAAyc3B2+xw6Uwkk+kNI3zmH+NjKBHJ5G9AiHfP6c 7YQMYEqzgpInI2DB6YwZRnAscNCeajkPz89B0aNAomz3fc+G1A3QKk+RalwHBImX d4LFMEjJ9wPHsnf8Nb6XsYIyC5eh6SAKdOYGIYen9Mc2rjOFmeFpB35KT99R5OU1 JJ9u18ZWPiEyMPRa/aPBDZ1196v1fH5UW5gidMrcIAawYJ/YPw0KJzOk+ax5O+3q C6un1RempqARyc1Cmn/+Uli/pttpRUw= -----END CERTIFICATE-----Generated at Mon Nov 3 18:01:40 2025 by rpki-client