$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa File: 429e8e55-3eec-3082-835f-dc4a34d15810.roa (raw, json) Hash identifier: RCKX8H58p4/kLKiZBQ8YQC0gtTpmpdwsbZX5WX7547E= Subject key identifier: 84:21:0B:6D:1B:A0:CD:0A:DD:1C:1A:A2:32:DE:B3:A3:24:06:AA:78 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584B970CDC2581A35BCE54B95D40 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 54238 IP address blocks: 216.213.104.0/22 maxlen: 22 216.213.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:dc:25:81:a3:5b:ce:54:b9:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=0811a11d-a359-415e-84ca-59b4c5c93a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:b6:ee:69:d3:21:a4:94:24:39:a6:e6:18: ff:3e:73:67:eb:9d:bb:ae:df:92:99:ff:ba:81:2a: 7d:38:5f:ee:46:34:0d:d5:4d:35:3f:89:8d:63:ac: 19:a5:f6:a1:79:45:fb:bb:c3:5a:70:e2:0a:f9:35: 36:16:db:74:e2:09:66:57:ba:31:80:f0:87:83:0c: 6b:62:2f:42:bd:9d:85:56:2a:f8:64:c1:a7:a0:bb: 52:1d:9d:67:7f:b1:9a:0f:39:d1:d1:28:20:a9:db: ae:d7:02:04:38:9f:f4:85:9a:50:51:c3:db:3e:c8: 68:68:3e:53:03:2c:78:6b:b5:13:b5:f9:c2:f1:70: bc:16:2a:07:81:9e:00:02:0e:df:db:b8:1e:ca:37: 5f:a3:a6:3c:56:6a:5b:b3:2f:86:f6:d7:01:13:16: db:8d:d9:87:36:6f:5a:79:c1:8b:62:ff:bc:8f:cf: 15:30:1d:0b:fb:61:04:5d:57:3c:d7:6c:e4:4b:b4: d0:89:d0:26:a2:13:8f:42:a1:e4:1b:3d:db:d3:ea: ab:64:fd:a3:da:8c:89:09:99:dc:35:40:ac:8a:23: f0:e8:33:a9:97:94:73:08:a9:98:3f:35:a6:fa:d6: f2:43:2a:25:ad:31:a0:b4:5c:cb:05:58:54:c3:f5: 25:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:21:0B:6D:1B:A0:CD:0A:DD:1C:1A:A2:32:DE:B3:A3:24:06:AA:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 216.213.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5d:64:92:90:24:8e:15:f6:fb:a3:02:d6:b7:c3:3b:13:62: 63:1a:4f:c7:61:aa:50:9b:b3:de:89:10:c9:65:ad:40:7b:c2: 76:0c:56:1c:b4:9b:c7:17:3b:ec:fd:44:d5:c9:97:d3:3e:4c: 57:df:41:2e:ce:ec:2b:f8:ff:1f:81:6b:37:45:ef:4b:5b:0d: a5:9e:be:3e:1c:4b:76:c4:91:f0:12:f2:2a:63:9d:27:65:a2: 83:0e:66:d6:cf:90:08:8b:04:df:39:ff:c8:7a:2c:67:e4:5f: 17:97:c6:73:8a:5f:13:9f:d3:6f:ea:0f:4d:47:d0:67:e7:10: e8:e1:d9:f0:95:82:28:c7:21:20:99:17:1d:a4:52:9a:59:85: 7b:1e:f3:05:59:22:48:1c:7b:99:a7:06:f2:21:30:41:66:d8: eb:63:c0:bd:8e:f3:de:a2:80:8c:9d:81:75:d5:1f:6e:7f:56: a0:f6:a4:b0:f2:28:17:8a:39:c7:67:6c:1b:d2:8b:67:6a:71: 0f:71:de:f1:7f:1f:6d:bd:58:0d:2d:bf:d2:96:58:dc:36:81: 5d:5e:d1:02:ce:94:62:dd:41:3f:9f:18:2f:ca:d4:de:c2:6b: 87:c4:da:75:9f:cf:5a:cb:2b:02:b9:92:a2:5d:e5:82:9d:61: bf:83:ae:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNwlgaNbzlS5XUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MDgxMWExMWQtYTM1OS00MTVlLTg0Y2EtNTliNGM1YzkzYTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtK27mnTIaSUJDmm5hj/PnNn6527rt+Smf+6 gSp9OF/uRjQN1U01P4mNY6wZpfaheUX7u8NacOIK+TU2Ftt04glmV7oxgPCHgwxr Yi9CvZ2FVir4ZMGnoLtSHZ1nf7GaDznR0Sggqduu1wIEOJ/0hZpQUcPbPshoaD5T Ayx4a7UTtfnC8XC8FioHgZ4AAg7f27geyjdfo6Y8Vmpbsy+G9tcBExbbjdmHNm9a ecGLYv+8j88VMB0L+2EEXVc812zkS7TQidAmohOPQqHkGz3b0+qrZP2j2oyJCZnc NUCsiiPw6DOpl5RzCKmYPzWm+tbyQyolrTGgtFzLBVhUw/UlQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQhC20boM0K3RwaojLes6MkBqp4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvNDI5ZThlNTUtM2VlYy0z MDgyLTgzNWYtZGM0YTM0ZDE1ODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2NVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpdZJKQJI4V9vujAta3wzsTYmMaT8dhqlCbs96JEMllrUB7wnYMVhy0 m8cXO+z9RNXJl9M+TFffQS7O7Cv4/x+BazdF70tbDaWevj4cS3bEkfAS8ipjnSdl ooMOZtbPkAiLBN85/8h6LGfkXxeXxnOKXxOf02/qD01H0GfnEOjh2fCVgijHISCZ Fx2kUppZhXse8wVZIkgce5mnBvIhMEFm2OtjwL2O896igIydgXXVH25/VqD2pLDy KBeKOcdnbBvSi2dqcQ9x3vF/H229WA0tv9KWWNw2gV1e0QLOlGLdQT+fGC/K1N7C a4fE2nWfz1rLKwK5kqJd5YKdYb+Drpw= -----END CERTIFICATE-----Generated at Tue Nov 4 13:20:36 2025 by rpki-client