$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/de50b0d4-4323-3366-a872-b7f78b1a7210.roa File: de50b0d4-4323-3366-a872-b7f78b1a7210.roa (raw, json) Hash identifier: R4lTKOI3ZbvZao5uXwixcBzopXcp0EexINI5xL7WcRg= Subject key identifier: 4A:9D:6D:55:E3:D6:BC:1E:07:59:C3:BA:A2:9E:42:7E:37:A7:4C:BD Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584B3556F067E3C0C0FCDB67AC00 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/de50b0d4-4323-3366-a872-b7f78b1a7210.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 397976 IP address blocks: 206.82.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f0:67:e3:c0:c0:fc:db:67:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=8a62343b-4a49-4ee9-a768-3c911e94583d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:71:06:12:32:c9:83:e1:54:2d:00:22:2e: 78:b0:fb:38:79:9b:b1:f1:a6:46:94:72:26:43:ee: 1e:89:cf:f4:21:20:a3:d7:ce:f7:41:19:d9:fa:2b: 53:68:2d:36:7f:42:a6:61:ce:55:8d:27:76:ca:de: 36:6f:ad:87:39:8b:1b:1d:df:7f:9d:f5:da:3a:43: 8f:c3:fb:ed:6c:1b:80:d2:0e:25:7f:1f:d1:bb:22: f7:cc:a3:7c:29:3c:34:8f:17:35:38:ea:dc:90:74: 53:a7:f2:14:14:71:bc:75:dd:85:4a:c4:9c:6f:de: a4:60:db:a9:b9:74:23:4e:5c:3a:92:72:b0:52:6f: 60:0f:f2:6b:5e:7a:aa:b8:4f:fe:84:20:a8:fd:e8: 66:ee:42:53:99:da:44:49:76:0a:75:cc:00:fa:b7: 7b:1f:5c:89:9d:87:29:75:84:de:9e:40:c4:86:14: 02:e2:b8:e7:2e:b3:80:ec:8b:6a:2d:ed:5a:92:ac: a1:fc:8a:8a:e0:27:0e:5c:4d:54:61:02:fd:71:a0: 08:cd:73:b0:7e:0d:ed:cf:fc:fa:21:dd:33:a0:96: eb:3e:f1:ce:97:cb:46:bb:b3:ff:37:82:d2:96:81: f2:b9:ba:2d:f2:8c:e0:aa:00:6a:08:c4:8b:84:55: d6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9D:6D:55:E3:D6:BC:1E:07:59:C3:BA:A2:9E:42:7E:37:A7:4C:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/de50b0d4-4323-3366-a872-b7f78b1a7210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 206.82.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e3:c3:60:ef:76:54:23:9f:83:02:6e:f8:93:2d:08:79:2e: 00:83:b5:b2:08:30:5f:43:53:1d:62:92:7b:78:10:9d:8c:27: 9f:58:5b:6b:63:f6:94:71:81:dc:7a:a5:36:98:0b:18:82:f8: 0a:ef:a3:8b:89:46:23:78:54:9b:c6:e4:e1:2c:e8:4e:33:d0: a3:24:2d:3a:38:c4:2f:11:1f:2a:7a:08:70:6e:1d:d2:1e:e2: 25:00:1c:ac:3a:dd:ca:80:39:09:ae:47:c4:60:5c:d1:fe:0d: 02:13:09:69:d8:00:1a:e4:f2:5b:0b:5b:c2:f3:e6:b0:8f:d5: f6:77:43:d9:be:02:d1:c4:ec:10:d5:87:40:01:b2:95:33:f3: 12:70:a0:91:81:c9:af:97:4d:7a:74:e4:ff:cc:a7:a7:49:20: ee:b2:c5:a7:e5:f4:de:ad:f6:a8:12:89:3f:4b:59:bd:6a:1e: 2a:0a:e2:57:08:52:38:ba:3b:6b:8c:de:63:f1:a8:43:f1:46: ca:dc:0c:32:b0:c5:b1:bc:47:89:02:3d:de:28:35:3a:0b:3a: 6f:7b:60:fe:0a:d2:2d:c5:75:8e:9c:29:37:da:a2:8d:51:56: 45:8b:64:6a:fa:85:14:87:84:ab:ae:40:f7:e7:49:43:68:aa: d3:f6:cc:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VvBn48DA/NtnrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OGE2MjM0M2ItNGE0OS00ZWU5LWE3NjgtM2M5MTFlOTQ1ODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAhxBhIyyYPhVC0AIi54sPs4eZux8aZGlHIm Q+4eic/0ISCj1873QRnZ+itTaC02f0KmYc5VjSd2yt42b62HOYsbHd9/nfXaOkOP w/vtbBuA0g4lfx/RuyL3zKN8KTw0jxc1OOrckHRTp/IUFHG8dd2FSsScb96kYNup uXQjTlw6knKwUm9gD/JrXnqquE/+hCCo/ehm7kJTmdpESXYKdcwA+rd7H1yJnYcp dYTenkDEhhQC4rjnLrOA7ItqLe1akqyh/IqK4CcOXE1UYQL9caAIzXOwfg3tz/z6 Id0zoJbrPvHOl8tGu7P/N4LSloHyubot8ozgqgBqCMSLhFXWGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqdbVXj1rweB1nDuqKeQn43p0y9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvZGU1MGIwZDQtNDMyMy0z MzY2LWE4NzItYjdmNzhiMWE3MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzlJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfjw2DvdlQjn4MCbviTLQh5LgCDtbIIMF9DUx1iknt4EJ2MJ59YW2tj 9pRxgdx6pTaYCxiC+Arvo4uJRiN4VJvG5OEs6E4z0KMkLTo4xC8RHyp6CHBuHdIe 4iUAHKw63cqAOQmuR8RgXNH+DQITCWnYABrk8lsLW8Lz5rCP1fZ3Q9m+AtHE7BDV h0ABspUz8xJwoJGBya+XTXp05P/Mp6dJIO6yxafl9N6t9qgSiT9LWb1qHioK4lcI Uji6O2uM3mPxqEPxRsrcDDKwxbG8R4kCPd4oNToLOm97YP4K0i3FdY6cKTfaoo1R VkWLZGr6hRSHhKuuQPfnSUNoqtP2zFs= -----END CERTIFICATE-----Generated at Tue Oct 21 09:47:05 2025 by rpki-client