$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/c2e76c42-e535-3066-a7a6-a84bb1ea4120.roa File: c2e76c42-e535-3066-a7a6-a84bb1ea4120.roa (raw, json) Hash identifier: nH6w/HnFkN27Yaerq+GKRD1UauQRUttHOcHuleBcRDI= Subject key identifier: D0:B6:9F:79:1C:3A:46:E4:11:27:26:6C:75:F2:D2:B2:A1:77:22:DF Certificate issuer: /CN=502018d6-5414-4889-b679-53ff6a9e5685 Certificate serial: 010D0C9F4328584B7DECA921D62B1638A6C86240 Authority key identifier: F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/c2e76c42-e535-3066-a7a6-a84bb1ea4120.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 28086 IP address blocks: 216.25.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a9:21:d6:2b:16:38:a6:c8:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=502018d6-5414-4889-b679-53ff6a9e5685 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=209e4572-ae49-44f8-b11f-def52d7712fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ff:8c:10:91:33:ea:a4:ce:ba:50:8b:70:43: 82:94:68:9b:d7:71:de:f0:31:95:de:fb:21:a9:5a: 44:e8:5d:da:bc:c0:79:f8:3f:2f:ac:a3:63:45:6d: 30:40:d3:c0:50:07:fd:62:36:d1:f2:27:e1:72:34: a1:76:88:37:23:98:38:62:ff:7e:58:ba:a3:44:f3: a2:22:d0:f0:84:48:2c:50:f0:15:98:43:54:23:92: 72:89:d0:47:82:c0:7e:10:96:21:1d:5f:5e:0e:75: 12:19:54:38:54:71:15:d2:22:97:c2:cb:ed:48:bd: 40:08:2b:d2:de:6f:5a:b7:55:cc:69:f2:c9:53:2c: 54:f4:ec:6e:a9:eb:78:2e:62:e2:03:ad:16:e1:01: 19:4d:7d:88:dc:dd:8b:b3:c2:00:11:8a:e2:c0:30: 65:56:99:0f:65:7e:8a:b1:4c:11:67:61:a4:aa:ac: 2f:45:fe:b1:c4:bd:60:b7:93:ec:1f:6b:c1:1e:6c: 4b:22:6e:e0:66:12:81:a3:80:be:ac:92:df:fc:87: a6:00:3c:86:cb:7a:5d:21:c2:d3:ea:ab:a8:e4:0a: 6a:a2:38:a4:0a:61:f2:8f:9a:d6:1b:a3:cc:8d:01: 73:15:cc:55:e1:ec:c3:24:d8:dc:4c:18:46:68:6e: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B6:9F:79:1C:3A:46:E4:11:27:26:6C:75:F2:D2:B2:A1:77:22:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/c2e76c42-e535-3066-a7a6-a84bb1ea4120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl X509v3 Authority Key Identifier: keyid:F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer sbgp-ipAddrBlock: critical IPv4: 216.25.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:48:6f:83:8e:fe:93:e0:ed:25:37:92:b0:30:bd:63:04:f1: 12:20:21:17:3d:92:5b:5c:c6:67:6d:0c:c4:b1:0a:eb:f9:3e: 18:25:b3:47:a7:ea:a4:14:74:ee:42:cf:24:c6:52:e3:6f:b5: c3:1b:6b:39:14:ea:56:4a:85:79:21:d7:0f:59:d1:c4:41:21: 86:7a:bb:4f:7e:10:92:4d:78:d6:58:d5:5a:85:d8:c0:ad:55: 2e:63:0f:42:e2:73:82:72:66:ce:1a:2c:1c:11:7a:d4:59:65: ca:d4:52:fc:52:a7:ad:5c:fb:6e:a7:0c:a4:34:0a:af:2e:a0: d2:e3:85:77:ec:13:61:8a:9f:30:c4:c7:b1:5a:44:d4:fc:5b: b3:64:04:e8:be:16:67:3a:b1:e6:0c:d7:54:59:c5:6a:25:97: 7e:26:a7:d3:76:7d:fd:09:33:54:b6:52:45:5f:f6:2a:32:cf: bd:9d:0c:b5:36:01:1e:1b:e4:00:ce:76:87:72:f3:72:28:3f: 79:a9:cd:b2:c8:06:93:be:43:dc:12:dc:43:2a:68:c4:36:71: 43:5b:aa:a9:5b:b1:17:43:01:e3:eb:57:00:cb:98:e4:0b:4f: 17:cd:51:58:a3:e5:cb:ab:85:6d:d4:db:d6:d0:34:7a:f6:d9: 8a:b9:b8:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97Kkh1isWOKbIYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAyMDE4ZDYtNTQxNC00ODg5LWI2NzktNTNmZjZhOWU1 Njg1MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MjA5ZTQ1NzItYWU0OS00NGY4LWIxMWYtZGVmNTJkNzcxMmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/+MEJEz6qTOulCLcEOClGib13He8DGV3vsh qVpE6F3avMB5+D8vrKNjRW0wQNPAUAf9YjbR8ifhcjShdog3I5g4Yv9+WLqjRPOi ItDwhEgsUPAVmENUI5JyidBHgsB+EJYhHV9eDnUSGVQ4VHEV0iKXwsvtSL1ACCvS 3m9at1XMafLJUyxU9Oxuqet4LmLiA60W4QEZTX2I3N2Ls8IAEYriwDBlVpkPZX6K sUwRZ2GkqqwvRf6xxL1gt5PsH2vBHmxLIm7gZhKBo4C+rJLf/IemADyGy3pdIcLT 6quo5ApqojikCmHyj5rWG6PMjQFzFcxV4ezDJNjcTBhGaG6LTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC2n3kcOkbkEScmbHXy0rKhdyLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDIw MThkNi01NDE0LTQ4ODktYjY3OS01M2ZmNmE5ZTU2ODUvYzJlNzZjNDItZTUzNS0z MDY2LWE3YTYtYTg0YmIxZWE0MTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTAyMDE4ZDYtNTQxNC00ODg5LWI2 NzktNTNmZjZhOWU1Njg1LzUwMjAxOGQ2LTU0MTQtNDg4OS1iNjc5LTUzZmY2YTll NTY4NS5jcmwwHwYDVR0jBBgwFoAU+WuL7LyEht6T63skHtJKMM1MTUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDIwMThkNi01NDE0LTQ4ODktYjY3OS01M2Zm NmE5ZTU2ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNIb4OO/pPg7SU3krAwvWME8RIgIRc9kltcxmdtDMSxCuv5Phgls0en 6qQUdO5CzyTGUuNvtcMbazkU6lZKhXkh1w9Z0cRBIYZ6u09+EJJNeNZY1VqF2MCt VS5jD0Lic4JyZs4aLBwRetRZZcrUUvxSp61c+26nDKQ0Cq8uoNLjhXfsE2GKnzDE x7FaRNT8W7NkBOi+Fmc6seYM11RZxWoll34mp9N2ff0JM1S2UkVf9ioyz72dDLU2 AR4b5ADOdody83IoP3mpzbLIBpO+Q9wS3EMqaMQ2cUNbqqlbsRdDAePrVwDLmOQL TxfNUVij5curhW3U29bQNHr22Yq5uLQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:20:58 2025 by rpki-client