$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/614b6e40-c958-3824-8cf1-5905e6c7c991.roa File: 614b6e40-c958-3824-8cf1-5905e6c7c991.roa (raw, json) Hash identifier: eYXvWI+6vt50IJVYw7aKmJE2pKGPiUMgtDQ+7y2sFxA= Subject key identifier: 09:82:3B:56:3E:F6:32:79:ED:AF:AD:F9:31:86:E2:10:93:62:74:0A Certificate issuer: /CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Certificate serial: 010D0C9F4328584B9E07AFDFCD5969070EBEE2E0 Authority key identifier: 88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/614b6e40-c958-3824-8cf1-5905e6c7c991.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 13631 IP address blocks: 216.52.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:af:df:cd:59:69:07:0e:be:e2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=2bed4ebd-7a40-4a2a-aa57-baf840ed346a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4c:58:e9:12:94:45:31:e6:64:88:80:e0:af: d1:9d:fa:0c:4b:ee:dd:c5:7c:8a:75:b6:a4:b0:53: 00:49:60:ae:b1:44:70:b7:27:a2:b3:81:85:f0:8a: e0:03:a1:93:26:9f:1f:35:82:42:56:ca:7f:80:8b: 5d:0f:34:27:79:c0:ee:a1:1b:4b:3d:f7:8a:00:4b: 0d:0c:d2:d2:0f:de:37:92:d9:52:ff:04:c6:9e:84: 71:0f:b6:49:fb:01:0a:e2:38:e4:be:89:43:9f:69: 5d:95:b6:cd:1f:9c:2a:a2:02:b1:ae:e6:28:ae:16: b3:2d:62:78:28:71:b2:cf:ea:f5:fe:cc:19:f2:6f: 3a:1f:05:e4:88:e0:5a:c1:86:02:6e:36:68:b0:96: 98:82:4a:37:aa:1b:f6:6b:be:76:1f:04:41:16:09: 59:98:0a:a4:df:d8:24:a6:ee:dc:13:07:8e:1c:55: 8c:34:c7:52:03:bc:83:f8:49:36:9b:23:5d:f7:31: ac:71:36:be:0b:e7:20:34:cc:69:79:58:a6:41:3c: 4b:63:61:98:1f:4c:e6:6e:95:9b:eb:ae:1c:b7:eb: 62:a6:62:cc:a5:0f:11:57:cd:5e:b4:4c:c4:a1:2c: 2b:a5:7c:82:a9:64:00:2f:f9:69:89:68:12:c7:4c: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:82:3B:56:3E:F6:32:79:ED:AF:AD:F9:31:86:E2:10:93:62:74:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/614b6e40-c958-3824-8cf1-5905e6c7c991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl X509v3 Authority Key Identifier: keyid:88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer sbgp-ipAddrBlock: critical IPv4: 216.52.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:13:1e:69:ad:3b:6f:08:10:9f:7b:72:b5:fb:e9:25:aa:e8: a6:58:fe:1b:5c:5c:76:e3:d2:28:ea:a6:00:0b:47:b5:fd:8e: 57:97:96:b4:7a:f4:07:81:6e:ed:de:ab:89:1c:9f:8b:56:d7: ac:11:49:e3:b8:fc:81:5a:70:8b:4c:48:da:9e:45:bd:85:52: bd:40:d8:dc:ab:9d:d3:a6:ee:09:2a:77:ad:36:9f:62:b1:62: 60:70:d9:c4:b7:29:76:fa:3f:b3:fd:2e:a6:33:e0:23:6f:6a: 52:ca:9c:2f:0e:a6:39:18:db:b8:bd:65:a3:65:77:0d:e0:3d: f9:bf:0d:55:e5:29:f0:0c:29:ca:13:75:52:1a:61:ce:88:38: af:53:e8:e3:8b:cd:4b:10:ea:ef:df:85:bb:5f:ac:fa:6a:21: 30:97:44:83:45:da:85:1d:3f:ed:ed:a6:a8:74:01:01:d3:28: 80:45:8d:2c:3a:92:55:81:42:9c:20:35:04:bf:e5:0c:f0:52: 12:6d:00:f0:f9:79:99:ed:51:35:28:07:ae:8b:cd:9f:f5:86: 87:30:81:89:82:78:d2:cd:cf:22:77:7b:7a:57:6a:c1:11:ab: ea:59:ed:70:61:eb:5a:0c:db:f4:20:aa:8c:9f:e0:87:da:1f: f1:da:ba:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6/fzVlpBw6+4uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI4ZWJlOGUtMzJkOS00ODczLWFkNTMtMWE1ZTQyMTEy NmQ1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MmJlZDRlYmQtN2E0MC00YTJhLWFhNTctYmFmODQwZWQzNDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkxY6RKURTHmZIiA4K/RnfoMS+7dxXyKdbak sFMASWCusURwtyeis4GF8IrgA6GTJp8fNYJCVsp/gItdDzQnecDuoRtLPfeKAEsN DNLSD943ktlS/wTGnoRxD7ZJ+wEK4jjkvolDn2ldlbbNH5wqogKxruYorhazLWJ4 KHGyz+r1/swZ8m86HwXkiOBawYYCbjZosJaYgko3qhv2a752HwRBFglZmAqk39gk pu7cEweOHFWMNMdSA7yD+Ek2myNd9zGscTa+C+cgNMxpeVimQTxLY2GYH0zmbpWb 664ct+tipmLMpQ8RV81etEzEoSwrpXyCqWQAL/lpiWgSx0zmlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmCO1Y+9jJ57a+t+TGG4hCTYnQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhl YmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVlNDIxMTI2ZDUvNjE0YjZlNDAtYzk1OC0z ODI0LThjZjEtNTkwNWU2YzdjOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI4ZWJlOGUtMzJkOS00ODczLWFk NTMtMWE1ZTQyMTEyNmQ1LzMyOGViZThlLTMyZDktNDg3My1hZDUzLTFhNWU0MjEx MjZkNS5jcmwwHwYDVR0jBBgwFoAUiIBLAkTafnbXZO4xKEi2F+/d7g0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhlYmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVl NDIxMTI2ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DQOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHATHmmtO28IEJ97crX76SWq6KZY/htcXHbj0ijqpgALR7X9jleXlrR6 9AeBbu3eq4kcn4tW16wRSeO4/IFacItMSNqeRb2FUr1A2NyrndOm7gkqd602n2Kx YmBw2cS3KXb6P7P9LqYz4CNvalLKnC8OpjkY27i9ZaNldw3gPfm/DVXlKfAMKcoT dVIaYc6IOK9T6OOLzUsQ6u/fhbtfrPpqITCXRINF2oUdP+3tpqh0AQHTKIBFjSw6 klWBQpwgNQS/5QzwUhJtAPD5eZntUTUoB66LzZ/1hocwgYmCeNLNzyJ3e3pXasER q+pZ7XBh61oM2/Qgqoyf4IfaH/HautI= -----END CERTIFICATE-----Generated at Tue Nov 4 09:30:03 2025 by rpki-client