$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/2d68a7fd-3dac-3b03-955f-a88fddcf8bbf.roa File: 2d68a7fd-3dac-3b03-955f-a88fddcf8bbf.roa (raw, json) Hash identifier: LQhA/T5Bw3tkKzB67dvoedlfteM0KTl/Z9sHvKPMdeQ= Subject key identifier: 9E:63:AF:E6:4C:61:B9:84:40:7C:49:EB:A4:00:67:9A:CC:FB:18:A2 Certificate issuer: /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355 Certificate serial: 010D0C9F4328584B3556E09ABBA7F2F1A6015100 Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/2d68a7fd-3dac-3b03-955f-a88fddcf8bbf.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 2381 IP address blocks: 216.56.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e0:9a:bb:a7:f2:f1:a6:01:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=b1bc437f-ac2c-4e13-95fc-7213c53c78d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2a:a3:d3:a9:b8:78:96:b0:3f:e9:b0:aa:81: a8:9d:38:46:dd:54:c4:45:9b:5b:2b:1c:a2:f4:d7: 53:d7:ca:bd:94:61:ec:04:2a:9a:58:be:73:9f:6f: 88:a8:0e:d4:53:5d:b1:05:ba:4f:72:04:80:61:ab: 3d:f2:33:6c:68:cd:61:81:6e:5c:14:11:02:49:c6: 06:53:f6:08:71:c0:30:89:72:7e:2a:b6:9d:00:72: e0:2b:c7:64:98:7c:05:c3:64:e7:40:2d:bc:a6:25: b0:35:7a:f6:da:3d:9a:52:ff:58:74:0f:86:44:7a: 97:70:e7:e0:d4:99:51:8b:e9:16:32:51:89:1a:da: 75:ed:1d:f6:e0:f1:6f:cf:07:d5:9c:c2:4b:a2:4e: 7e:6a:f9:2d:53:bd:a5:56:62:df:4e:ca:71:76:65: 06:db:94:68:9a:a7:0f:3f:2e:58:ab:56:62:e7:87: 98:15:e7:ae:7a:b2:d9:00:c9:ec:9f:d4:a0:f9:84: 20:bf:16:46:b5:01:e8:22:f8:94:2f:ca:98:b0:ce: ba:30:7c:2e:c5:0f:27:6b:b9:99:77:9d:c3:5f:38: b5:32:4e:9a:89:e3:80:5f:fc:54:98:ac:10:57:95: f0:0a:eb:0f:c9:52:60:58:3d:f2:33:af:3b:b3:18: 6f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:63:AF:E6:4C:61:B9:84:40:7C:49:EB:A4:00:67:9A:CC:FB:18:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/2d68a7fd-3dac-3b03-955f-a88fddcf8bbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl X509v3 Authority Key Identifier: keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer sbgp-ipAddrBlock: critical IPv4: 216.56.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:6d:6e:29:3d:97:e0:7b:ea:02:1a:63:1f:d4:88:57:cd:b3: 3f:7f:24:03:56:7d:50:c4:01:1c:c2:1b:f8:4b:43:ea:45:ec: 2d:76:9e:a3:09:ca:d1:f9:1a:f1:e5:0b:92:d2:37:58:ef:55: 19:37:7e:07:b7:9a:37:b1:db:a1:cb:71:2c:9a:57:36:3a:b7: 38:39:b4:71:18:db:50:d9:3c:71:d5:b5:a6:ea:ce:e5:70:d3: 91:fa:cc:51:1b:ca:92:cf:b3:be:3d:01:dc:09:b4:77:23:57: 1c:95:ed:dc:78:3c:8c:17:5c:cf:b6:c6:db:2f:47:3e:e6:36: c0:e7:89:72:b9:d3:8f:72:c1:4d:dc:75:07:a4:89:29:23:f4: e7:1c:ec:81:78:aa:fe:e6:c0:0d:da:e4:66:16:c2:be:fa:14: dc:1e:79:bc:50:d3:18:08:ff:8e:3a:fb:21:d6:34:92:3f:ae: e1:5d:9d:27:2c:85:32:e5:ec:ca:97:14:64:61:3f:e2:6c:fe: cf:43:2f:c6:a8:71:fe:a1:1f:24:69:aa:81:6b:f2:c3:78:ce: 85:b6:f0:39:65:b0:7e:a0:98:44:ad:8c:ca:e9:9d:93:6e:1c: da:17:d6:b0:dc:fb:67:49:da:aa:ec:74:cf:dd:fd:34:96:22: ac:15:61:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VuCau6fy8aYBUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZkYTBlMTAtZjZiZi00YzIzLWJmZmItZDRhOWE3MzUy MzU1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YjFiYzQzN2YtYWMyYy00ZTEzLTk1ZmMtNzIxM2M1M2M3OGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cqj06m4eJawP+mwqoGonThG3VTERZtbKxyi 9NdT18q9lGHsBCqaWL5zn2+IqA7UU12xBbpPcgSAYas98jNsaM1hgW5cFBECScYG U/YIccAwiXJ+KradAHLgK8dkmHwFw2TnQC28piWwNXr22j2aUv9YdA+GRHqXcOfg 1JlRi+kWMlGJGtp17R324PFvzwfVnMJLok5+avktU72lVmLfTspxdmUG25RomqcP Py5Yq1Zi54eYFeeuerLZAMnsn9Sg+YQgvxZGtQHoIviUL8qYsM66MHwuxQ8na7mZ d53DXzi1Mk6aieOAX/xUmKwQV5XwCusPyVJgWD3yM687sxhv8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5jr+ZMYbmEQHxJ66QAZ5rM+xiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZmRh MGUxMC1mNmJmLTRjMjMtYmZmYi1kNGE5YTczNTIzNTUvMmQ2OGE3ZmQtM2RhYy0z YjAzLTk1NWYtYTg4ZmRkY2Y4YmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGZkYTBlMTAtZjZiZi00YzIzLWJm ZmItZDRhOWE3MzUyMzU1LzhmZGEwZTEwLWY2YmYtNGMyMy1iZmZiLWQ0YTlhNzM1 MjM1NS5jcmwwHwYDVR0jBBgwFoAUEFJ7frj3pvQHb8/NWj8S4x3SLMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZmRhMGUxMC1mNmJmLTRjMjMtYmZmYi1kNGE5 YTczNTIzNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Dj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADptbik9l+B76gIaYx/UiFfNsz9/JANWfVDEARzCG/hLQ+pF7C12nqMJ ytH5GvHlC5LSN1jvVRk3fge3mjex26HLcSyaVzY6tzg5tHEY21DZPHHVtabqzuVw 05H6zFEbypLPs749AdwJtHcjVxyV7dx4PIwXXM+2xtsvRz7mNsDniXK5049ywU3c dQekiSkj9Occ7IF4qv7mwA3a5GYWwr76FNweebxQ0xgI/446+yHWNJI/ruFdnScs hTLl7MqXFGRhP+Js/s9DL8aocf6hHyRpqoFr8sN4zoW28DllsH6gmEStjMrpnZNu HNoX1rDc+2dJ2qrsdM/d/TSWIqwVYcg= -----END CERTIFICATE-----Generated at Sun Oct 19 22:29:48 2025 by rpki-client