$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/dfef8194-204a-3e7b-919c-616dade0fb88.roa File: dfef8194-204a-3e7b-919c-616dade0fb88.roa (raw, json) Hash identifier: isGwwtqN6esduCbBT+ygLot5P2eio7qKvKxwgwSCVQc= Subject key identifier: 10:AE:9E:09:EC:9E:5B:E0:E1:4C:DC:78:7D:35:A3:8A:F2:21:B7:58 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584B031694F6009182485E9C5280 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/dfef8194-204a-3e7b-919c-616dade0fb88.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 216.198.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:94:f6:00:91:82:48:5e:9c:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=16406312-e51c-40f2-a877-1145f5fe88c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2b:04:2e:a0:12:5b:ed:6d:ba:0c:55:6f:36: 98:62:34:8c:bb:79:e8:fd:af:12:ad:9e:fa:ac:12: 24:f6:54:9b:1b:8b:af:18:7f:2f:53:ef:0b:ea:1a: 76:c4:3c:58:c0:d3:25:e2:ff:7e:7f:1b:e5:41:5a: aa:84:35:53:3d:53:10:43:da:20:77:f0:0d:f4:9b: 23:d2:30:76:cc:a3:a8:97:95:c8:f8:d9:c8:fc:11: d6:d3:9e:2f:55:77:65:e2:3d:c4:25:7c:18:6a:cd: e0:7d:12:65:a8:35:3c:f7:26:94:37:b1:9d:b9:4c: 04:7a:6e:3d:5d:b1:2b:15:52:18:5f:3e:45:31:55: 13:0c:0f:a6:e5:b0:ab:c5:0f:15:88:45:00:1f:37: 8d:76:e4:7b:4d:ec:ea:90:4b:8e:2b:ec:fe:4a:d5: 8f:19:2b:51:5b:c5:3e:8b:00:a9:d5:0c:35:2a:59: ad:b8:c9:66:fe:b2:f3:76:db:cc:76:f9:af:52:34: 45:2b:f1:83:a7:98:c0:c8:c9:56:81:24:b2:62:fe: 28:f8:a1:cb:4c:cb:35:42:3b:0b:c2:96:3c:f1:cc: 82:7a:02:e3:7f:d8:b6:4d:d2:1a:dc:f1:82:12:8b: 6e:29:87:83:b3:2c:22:24:a1:07:bb:aa:8b:fb:0d: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AE:9E:09:EC:9E:5B:E0:E1:4C:DC:78:7D:35:A3:8A:F2:21:B7:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/dfef8194-204a-3e7b-919c-616dade0fb88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 216.198.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d7:34:31:21:57:b0:ba:12:1f:28:d5:ee:f6:e4:08:ed:00: aa:a9:03:9f:da:98:f2:f9:5a:ea:37:ef:d5:15:31:0c:96:5a: db:0c:7d:41:9b:6f:f0:c0:66:4d:06:b7:90:79:69:bc:a3:ed: bd:6b:06:59:ae:17:df:28:97:82:83:9b:fe:9b:24:73:77:6d: 2d:58:e4:2d:7b:61:4b:5a:52:10:38:2f:b5:0d:18:a8:ed:f6: 5d:b4:37:88:6a:e8:bf:81:8f:69:dc:06:8d:b0:a6:ae:8c:f4: 5f:a0:18:54:55:89:fd:5c:ab:c0:a9:50:3a:85:56:3e:a5:0f: b3:b5:04:c3:df:d3:f9:00:aa:0a:74:56:30:5e:be:75:a4:46: b5:72:eb:ac:cf:ab:a1:2a:23:63:de:50:f4:2e:01:9f:a4:55: ca:78:91:9f:d6:96:5c:fa:ea:5e:4a:98:94:d3:f3:47:c4:81: 8e:0b:12:57:cd:79:b9:64:69:42:f0:0d:bf:d6:f3:f6:4d:d5: 39:72:a5:b7:71:12:f4:27:cd:38:9f:be:99:93:10:01:c3:73: 72:43:5d:3c:d6:1e:40:ed:22:7c:24:c4:75:a5:21:99:40:0e: 94:93:14:c7:75:45:50:09:49:b1:d1:df:ce:83:d0:5a:91:08: b2:8f:1f:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFpT2AJGCSF6cUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk MTY0MDYzMTItZTUxYy00MGYyLWE4NzctMTE0NWY1ZmU4OGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSsELqASW+1tugxVbzaYYjSMu3no/a8SrZ76 rBIk9lSbG4uvGH8vU+8L6hp2xDxYwNMl4v9+fxvlQVqqhDVTPVMQQ9ogd/AN9Jsj 0jB2zKOol5XI+NnI/BHW054vVXdl4j3EJXwYas3gfRJlqDU89yaUN7GduUwEem49 XbErFVIYXz5FMVUTDA+m5bCrxQ8ViEUAHzeNduR7TezqkEuOK+z+StWPGStRW8U+ iwCp1Qw1KlmtuMlm/rLzdtvMdvmvUjRFK/GDp5jAyMlWgSSyYv4o+KHLTMs1QjsL wpY88cyCegLjf9i2TdIa3PGCEotuKYeDsywiJKEHu6qL+w1nywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCungnsnlvg4UzceH01o4ryIbdYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvZGZlZjgxOTQtMjA0YS0z ZTdiLTkxOWMtNjE2ZGFkZTBmYjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MZPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvXNDEhV7C6Eh8o1e725AjtAKqpA5/amPL5Wuo379UVMQyWWtsMfUGb b/DAZk0Gt5B5abyj7b1rBlmuF98ol4KDm/6bJHN3bS1Y5C17YUtaUhA4L7UNGKjt 9l20N4hq6L+Bj2ncBo2wpq6M9F+gGFRVif1cq8CpUDqFVj6lD7O1BMPf0/kAqgp0 VjBevnWkRrVy66zPq6EqI2PeUPQuAZ+kVcp4kZ/Wllz66l5KmJTT80fEgY4LElfN eblkaULwDb/W8/ZN1TlypbdxEvQnzTifvpmTEAHDc3JDXTzWHkDtInwkxHWlIZlA DpSTFMd1RVAJSbHR386D0FqRCLKPH/M= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:12 2025 by rpki-client