$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/6f1a8f76-091f-31a0-9a9b-75bdec478d2b.roa File: 6f1a8f76-091f-31a0-9a9b-75bdec478d2b.roa (raw, json) Hash identifier: VFnVts/P1fNXVGQRlXBtUOhI3F/vKtFUDP+RGDr8Rpo= Subject key identifier: DD:68:49:C4:66:3E:8A:6D:E3:32:38:A3:F4:04:3B:6C:7D:D2:9E:4F Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584B5B073E40C1736F2B0A73BE80 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/6f1a8f76-091f-31a0-9a9b-75bdec478d2b.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 63298 IP address blocks: 199.45.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3e:40:c1:73:6f:2b:0a:73:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=e08ec147-0542-4090-bae6-5266ae14e7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:40:4b:b5:97:b8:ea:b0:bf:d7:ee:6e:e4:a2: 70:f6:de:c6:89:b6:f5:6e:f2:6e:46:ef:17:85:f4: ac:a4:21:1e:df:fb:cd:2e:71:cb:47:17:6b:34:b8: 04:aa:91:f3:16:c4:05:97:33:59:4a:0a:06:aa:a4: 4b:61:e2:b6:67:88:65:b8:4d:d7:f2:86:10:ad:24: d3:9d:f1:d5:72:06:b8:68:b7:07:fe:33:79:73:02: 0a:a6:67:ce:8a:bc:b6:da:f1:81:ff:eb:f0:aa:a9: 0e:2d:37:9f:e8:4c:72:0a:e7:d0:66:1c:ab:e4:7b: 69:d7:e7:71:ec:68:74:2b:85:a8:dd:73:c2:16:c3: ea:b2:92:3a:25:9c:e2:79:9f:3e:d1:10:a0:97:b1: b9:c1:33:0e:16:4b:40:a6:db:17:a5:56:e3:5f:1a: 7b:bd:2f:e9:42:b7:fc:62:31:8c:7b:17:0b:de:7c: 05:6c:9a:72:09:67:a0:35:34:91:df:56:d8:15:b8: e8:a3:cc:23:85:02:0f:42:3d:95:76:95:8c:d4:b5: ac:db:a6:ee:67:ce:e3:bd:46:97:49:3c:49:4c:87: fd:9d:70:02:0d:a9:f6:0f:4c:47:b5:36:46:a8:fc: 51:12:48:50:c1:ee:9a:31:af:73:1e:7f:27:4d:43: b7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:68:49:C4:66:3E:8A:6D:E3:32:38:A3:F4:04:3B:6C:7D:D2:9E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/6f1a8f76-091f-31a0-9a9b-75bdec478d2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 199.45.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:04:b0:98:09:35:17:01:72:c5:0f:77:db:f4:ca:f4:b8:26: 8b:dc:41:2f:cb:a9:e4:ea:af:fa:08:67:36:b7:c9:83:1a:55: cb:7e:47:c6:3b:c7:a7:79:9e:d3:16:c1:f0:71:a5:e8:2a:b1: ac:21:a7:7e:6e:ff:5e:82:fb:f2:8d:6d:e3:6e:97:0c:84:33: 44:1a:b5:f8:63:4c:7d:e8:02:fc:9f:b0:56:11:7d:11:c7:61: 99:72:f5:b7:85:76:bd:ba:91:a6:7a:cf:5d:9b:20:1b:bb:4a: 22:c1:0b:12:28:83:ba:7c:cd:06:c1:4e:b8:8e:d7:4b:4d:ee: e3:b4:30:8a:80:1d:ce:4a:5b:1a:ed:ac:7c:aa:3b:30:e1:c7: 21:9a:1d:6f:78:9b:b7:c9:a7:ec:25:80:57:53:85:64:c5:ab: e4:36:96:6e:5c:da:a6:4c:58:cc:25:6d:f9:a4:24:d5:f8:2e: 03:21:d2:69:6e:1f:8f:aa:7c:c9:76:13:63:35:4e:73:8f:86: fb:05:c0:ed:fd:93:07:9a:80:cf:45:43:95:26:c4:08:b0:6a: 0d:c9:bf:e8:80:97:97:be:d1:2c:ac:30:27:ee:a6:9f:04:94: 94:60:59:37:39:0e:c8:1d:5e:70:92:d8:0f:9b:79:6c:08:4c: 21:e1:23:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBz5AwXNvKwpzvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZTA4ZWMxNDctMDU0Mi00MDkwLWJhZTYtNTI2NmFlMTRlN2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0BLtZe46rC/1+5u5KJw9t7Gibb1bvJuRu8X hfSspCEe3/vNLnHLRxdrNLgEqpHzFsQFlzNZSgoGqqRLYeK2Z4hluE3X8oYQrSTT nfHVcga4aLcH/jN5cwIKpmfOiry22vGB/+vwqqkOLTef6ExyCufQZhyr5Htp1+dx 7Gh0K4Wo3XPCFsPqspI6JZzieZ8+0RCgl7G5wTMOFktAptsXpVbjXxp7vS/pQrf8 YjGMexcL3nwFbJpyCWegNTSR31bYFbjoo8wjhQIPQj2VdpWM1LWs26buZ87jvUaX STxJTIf9nXACDan2D0xHtTZGqPxREkhQwe6aMa9zHn8nTUO3+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1oScRmPopt4zI4o/QEO2x90p5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvNmYxYThmNzYtMDkxZi0z MWEwLTlhOWItNzViZGVjNDc4ZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQEsJgJNRcBcsUPd9v0yvS4JovcQS/LqeTqr/oIZza3yYMaVct+R8Y7 x6d5ntMWwfBxpegqsawhp35u/16C+/KNbeNulwyEM0QatfhjTH3oAvyfsFYRfRHH YZly9beFdr26kaZ6z12bIBu7SiLBCxIog7p8zQbBTriO10tN7uO0MIqAHc5KWxrt rHyqOzDhxyGaHW94m7fJp+wlgFdThWTFq+Q2lm5c2qZMWMwlbfmkJNX4LgMh0mlu H4+qfMl2E2M1TnOPhvsFwO39kweagM9FQ5UmxAiwag3Jv+iAl5e+0SysMCfupp8E lJRgWTc5DsgdXnCS2A+beWwITCHhI+k= -----END CERTIFICATE-----Generated at Tue Oct 21 10:40:09 2025 by rpki-client