$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8c43ce1a-6c87-3217-b9bf-42d180a43df9.roa File: 8c43ce1a-6c87-3217-b9bf-42d180a43df9.roa (raw, json) Hash identifier: R5RQJ2JgyLAK/S+LBgDgtwRNuxvp70CvlejwiSfJ6y4= Subject key identifier: 54:27:4F:CD:8E:B0:A6:D1:F4:17:74:63:28:F3:BB:AC:8F:D0:F7:0D Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584B95A78D81EB519DFBB1026F80 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8c43ce1a-6c87-3217-b9bf-42d180a43df9.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 13984 IP address blocks: 216.213.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8d:81:eb:51:9d:fb:b1:02:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=116e4c0b-1901-410b-8b2b-86c5ae885bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7a:25:a7:3d:98:b4:70:a2:ba:2e:3f:bf:d2: 06:96:f0:d3:33:3c:cb:f9:b0:19:d2:f5:48:86:97: ec:6b:fd:cd:da:e2:92:df:fb:c8:60:68:43:8e:1a: 05:1d:9b:a4:00:39:d5:1b:8d:bd:93:a4:68:85:b2: 04:2c:48:5a:9e:7c:74:b3:41:56:eb:15:e6:6f:bc: 10:45:a1:ac:06:18:27:29:b8:d5:92:3d:6d:ad:46: da:94:7c:04:96:81:7c:3e:c1:12:26:88:e9:0a:7c: ff:72:d5:1a:9f:08:32:7b:2e:39:43:71:38:c9:01: bd:fe:f2:8f:ef:63:5d:e0:c1:a4:e9:a8:33:08:9a: 63:a5:a8:b8:02:b1:ac:70:6e:22:be:ab:a1:c7:9c: f0:14:3d:da:93:c5:98:78:92:0a:df:8f:12:39:21: fa:51:ae:e3:fc:d1:0c:d5:4d:9e:79:64:08:91:f3: 22:23:c0:67:d6:1a:fb:21:17:a6:60:d3:08:0d:83: 0f:22:0a:96:ff:35:67:5c:51:82:0b:eb:4f:23:c3: eb:ac:2f:fe:da:c2:c7:ff:3b:09:a9:f2:e4:00:80: 43:fd:d1:83:30:53:45:cf:06:77:92:0a:cf:48:a9: de:6e:3c:2f:df:45:a9:fc:d6:98:80:5d:5b:6f:19: 0f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:27:4F:CD:8E:B0:A6:D1:F4:17:74:63:28:F3:BB:AC:8F:D0:F7:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8c43ce1a-6c87-3217-b9bf-42d180a43df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 216.213.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a8:be:0c:8b:59:ee:7b:ca:e2:e9:c8:99:4c:68:2a:71:b4: 40:48:a5:31:38:d9:2e:93:d7:22:5a:c6:9d:0a:de:fe:32:2f: c5:18:30:a9:41:f5:d4:67:d7:00:6e:5c:27:a1:d6:51:d6:80: bf:79:f9:f5:65:71:c3:40:31:91:3c:78:fb:38:12:e7:39:44: b2:d0:9f:a5:38:f7:e9:17:89:74:2a:87:a8:ed:8f:94:85:3a: 86:1e:a9:37:01:31:64:58:ae:eb:42:02:f4:a3:ba:70:f5:f5: ef:e3:84:1d:cf:a2:6c:5e:93:32:9f:1b:81:ad:30:53:d5:61: 1e:b3:3a:91:ad:83:f0:5a:77:46:43:1c:1c:cc:8c:cb:2b:69: a7:d8:b7:3f:82:bc:5e:4c:40:fd:9f:c7:f1:de:0d:ab:92:bf: 13:53:f1:f7:f3:0d:5f:0d:ee:01:f3:ca:42:f1:3f:35:ca:16: ae:f9:f3:58:0d:42:ef:78:de:e0:3a:0f:3d:53:90:6f:09:f4: 03:4e:2a:39:3d:9c:76:80:76:4b:16:51:da:62:0a:0d:80:d0: f3:f4:ec:fc:2c:6f:37:2b:d6:8c:65:f0:80:83:bb:29:80:5c: 92:bc:55:90:d8:7d:97:20:34:13:24:14:a6:ed:8f:64:a8:d2: c5:09:51:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp42B61Gd+7ECb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTE2ZTRjMGItMTkwMS00MTBiLThiMmItODZjNWFlODg1YmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHolpz2YtHCiui4/v9IGlvDTMzzL+bAZ0vVI hpfsa/3N2uKS3/vIYGhDjhoFHZukADnVG429k6RohbIELEhannx0s0FW6xXmb7wQ RaGsBhgnKbjVkj1trUbalHwEloF8PsESJojpCnz/ctUanwgyey45Q3E4yQG9/vKP 72Nd4MGk6agzCJpjpai4ArGscG4ivquhx5zwFD3ak8WYeJIK348SOSH6Ua7j/NEM 1U2eeWQIkfMiI8Bn1hr7IRemYNMIDYMPIgqW/zVnXFGCC+tPI8PrrC/+2sLH/zsJ qfLkAIBD/dGDMFNFzwZ3kgrPSKnebjwv30Wp/NaYgF1bbxkP2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQnT82OsKbR9Bd0Yyjzu6yP0PcNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvOGM0M2NlMWEtNmM4Ny0z MjE3LWI5YmYtNDJkMTgwYTQzZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2NVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeovgyLWe57yuLpyJlMaCpxtEBIpTE42S6T1yJaxp0K3v4yL8UYMKlB 9dRn1wBuXCeh1lHWgL95+fVlccNAMZE8ePs4Euc5RLLQn6U49+kXiXQqh6jtj5SF OoYeqTcBMWRYrutCAvSjunD19e/jhB3PomxekzKfG4GtMFPVYR6zOpGtg/Bad0ZD HBzMjMsraafYtz+CvF5MQP2fx/HeDauSvxNT8ffzDV8N7gHzykLxPzXKFq7581gN Qu943uA6Dz1TkG8J9ANOKjk9nHaAdksWUdpiCg2A0PP07Pwsbzcr1oxl8ICDuymA XJK8VZDYfZcgNBMkFKbtj2So0sUJUUc= -----END CERTIFICATE-----Generated at Mon Nov 3 18:01:39 2025 by rpki-client