$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/0cef76c0-a65d-3c1e-b766-8d7d8d975b57.roa File: 0cef76c0-a65d-3c1e-b766-8d7d8d975b57.roa (raw, json) Hash identifier: GtCKhG/tzmRFrz28jQQb24b8XRVZq/kUDRLyZjgRt4w= Subject key identifier: 30:34:32:CD:69:60:11:53:FA:B0:73:5A:2C:3A:04:82:08:B3:0F:15 Certificate issuer: /CN=252a0154-0e99-44f2-af82-30c36afe00c0 Certificate serial: 010D0C9F4328584B821CC195019C63620CB0D4C0 Authority key identifier: 2B:2A:F8:B6:B3:D6:B9:25:FE:CC:D8:24:EB:7D:5F:00:F7:DF:DF:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/0cef76c0-a65d-3c1e-b766-8d7d8d975b57.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 21919 IP address blocks: 206.55.196.0/22 maxlen: 22 2001:504:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/252a0154-0e99-44f2-af82-30c36afe00c0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/252a0154-0e99-44f2-af82-30c36afe00c0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c1:95:01:9c:63:62:0c:b0:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252a0154-0e99-44f2-af82-30c36afe00c0 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=c8dcf3d6-387e-4877-9f5f-bd79cde80db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:a7:c8:dd:7d:a0:c7:06:d7:9a:dc:18:d5: 94:6b:6a:5d:0b:16:86:43:4f:62:6a:c2:5f:27:47: 22:0b:c3:ba:86:b6:ea:3f:71:0b:20:93:41:ae:ef: f1:63:9e:09:d8:67:f3:d2:99:ce:46:9d:f7:b3:aa: 83:20:52:29:82:ae:01:90:18:6e:fc:5a:17:bc:9e: 36:87:1f:c4:55:3f:53:93:18:06:74:18:55:03:24: 7d:ca:92:c2:f3:c5:e4:9e:8d:bb:a6:93:7c:ee:e9: dc:d7:dd:f4:85:78:3a:f0:25:0d:bf:99:84:3f:11: 2c:32:b2:61:46:61:d6:50:30:4b:42:f7:d8:eb:6d: 73:83:6e:1a:4e:9d:bc:29:f2:d3:fd:2b:45:e3:78: 3b:f9:18:c9:9a:3f:e2:f2:06:55:9d:fa:70:f9:20: 3b:32:00:87:b1:21:23:f2:25:55:ad:c1:0b:91:e3: a1:bf:e7:6e:87:07:81:b8:fb:4d:dd:b2:82:71:ef: a4:0f:63:43:e2:12:49:10:c5:e3:7c:d5:bf:5b:b8: 8e:d5:2d:2a:e8:a6:4e:63:af:d5:ef:d0:97:74:4c: 2a:ea:24:3f:fc:4f:e1:c2:9f:65:8c:5b:7c:c6:55: f3:76:36:2f:87:2c:4f:ba:65:0c:26:51:d8:6f:6d: 33:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:34:32:CD:69:60:11:53:FA:B0:73:5A:2C:3A:04:82:08:B3:0F:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/0cef76c0-a65d-3c1e-b766-8d7d8d975b57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/252a0154-0e99-44f2-af82-30c36afe00c0.crl X509v3 Authority Key Identifier: keyid:2B:2A:F8:B6:B3:D6:B9:25:FE:CC:D8:24:EB:7D:5F:00:F7:DF:DF:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0.cer sbgp-ipAddrBlock: critical IPv4: 206.55.196.0/22 IPv6: 2001:504:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:eb:35:a8:9f:41:fd:05:a9:a7:c9:b8:9d:1b:8d:be:de:0e: c4:c4:8d:c9:d3:0b:ad:d0:13:4d:06:20:e2:99:90:b9:bb:a5: 8b:8b:e5:72:6b:c1:1d:88:5d:9d:02:35:29:16:da:b6:6a:4a: bc:5c:01:1c:83:ce:cf:58:57:ac:7a:d6:f9:91:06:61:08:ab: 45:b3:f2:31:67:a7:46:62:e1:0e:b2:1c:51:f2:6b:06:dc:ba: 1b:4c:06:5b:52:22:8b:e2:0e:68:9f:2b:0f:48:2c:dc:8f:b1: 8e:d3:30:fc:e4:e7:72:27:ea:c4:d2:df:fa:e1:6d:8a:d0:a6: cf:44:23:af:d9:a1:94:a2:1e:94:a9:bb:c3:2c:0d:26:66:a4: 01:a5:ff:c0:41:fc:9e:32:c7:f0:43:04:dd:ee:1f:2f:79:fc: f6:87:5d:9c:58:b8:c4:be:70:ae:d5:80:be:35:d3:cb:27:e5: 58:78:7b:be:fc:5d:b9:d4:14:a6:3c:40:b1:c0:e2:8a:25:5e: ee:4f:6f:06:6d:43:e8:d8:56:06:de:b5:7e:2c:64:70:62:cf: be:d4:67:0f:3a:b4:bd:00:c1:35:c4:aa:a4:bb:19:cb:91:b2: 91:ce:1a:bf:6c:1e:3f:cc:62:6e:4e:c6:dd:b9:cc:9f:83:ba: 39:f0:9b:24 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuCHMGVAZxjYgyw1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYTAxNTQtMGU5OS00NGYyLWFmODItMzBjMzZhZmUw MGMwMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YzhkY2YzZDYtMzg3ZS00ODc3LTlmNWYtYmQ3OWNkZTgwZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6unyN19oMcG15rcGNWUa2pdCxaGQ09iasJf J0ciC8O6hrbqP3ELIJNBru/xY54J2Gfz0pnORp33s6qDIFIpgq4BkBhu/FoXvJ42 hx/EVT9TkxgGdBhVAyR9ypLC88Xkno27ppN87unc1930hXg68CUNv5mEPxEsMrJh RmHWUDBLQvfY621zg24aTp28KfLT/StF43g7+RjJmj/i8gZVnfpw+SA7MgCHsSEj 8iVVrcELkeOhv+duhweBuPtN3bKCce+kD2ND4hJJEMXjfNW/W7iO1S0q6KZOY6/V 79CXdEwq6iQ//E/hwp9ljFt8xlXzdjYvhyxPumUMJlHYb20zXwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDA0Ms1pYBFT+rBzWiw6BIIIsw8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTJh MDE1NC0wZTk5LTQ0ZjItYWY4Mi0zMGMzNmFmZTAwYzAvMGNlZjc2YzAtYTY1ZC0z YzFlLWI3NjYtOGQ3ZDhkOTc1YjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUyYTAxNTQtMGU5OS00NGYyLWFm ODItMzBjMzZhZmUwMGMwLzI1MmEwMTU0LTBlOTktNDRmMi1hZjgyLTMwYzM2YWZl MDBjMC5jcmwwHwYDVR0jBBgwFoAUKyr4trPWuSX+zNgk631fAPff35UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTJhMDE1NC0wZTk5LTQ0ZjItYWY4Mi0zMGMz NmFmZTAwYzAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCzjfEMA8E AgACMAkDBwAgAQUEADEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAces1qJ9B/QWpp8m4nRuNvt4OxMSNydML rdATTQYg4pmQubuli4vlcmvBHYhdnQI1KRbatmpKvFwBHIPOz1hXrHrW+ZEGYQir RbPyMWenRmLhDrIcUfJrBty6G0wGW1Iii+IOaJ8rD0gs3I+xjtMw/OTncifqxNLf +uFtitCmz0Qjr9mhlKIelKm7wywNJmakAaX/wEH8njLH8EME3e4fL3n89oddnFi4 xL5wrtWAvjXTyyflWHh7vvxdudQUpjxAscDiiiVe7k9vBm1D6NhWBt61fixkcGLP vtRnDzq0vQDBNcSqpLsZy5Gykc4av2weP8xibk7G3bnMn4O6OfCbJA== -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:01 2025 by rpki-client