$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa File: 550a151e-c18d-35ce-90a4-5c8c0337abb6.roa (raw, json) Hash identifier: uw4px6y4yLJwcRgGXGx/aTVwAjHEoiStWw4pinWTQAY= Subject key identifier: 27:FA:00:9B:CB:6B:2A:58:61:F4:3C:FD:EA:EE:79:45:51:D3:DE:94 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584B68FC9A30608AB4B17722CB30 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 398420 IP address blocks: 216.246.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9a:30:60:8a:b4:b1:77:22:cb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=368dc255-3a66-4ddd-b3e9-121ea3360f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2c:8b:b3:3e:f2:5a:54:b9:c9:e9:9e:ea:a9: 0a:8c:f7:ef:c3:fd:00:f2:04:88:d7:db:28:12:e7: 24:4f:01:45:a2:fa:34:0d:cd:ca:31:76:ef:d1:30: a8:0a:ed:a6:2d:83:47:9d:23:2d:55:94:b4:ea:35: 6c:6b:ca:5d:c4:3c:04:60:a4:39:01:d7:90:40:bb: c8:fb:9d:42:56:a1:c8:0e:4f:3b:cc:4c:bd:d5:2a: 9d:d9:05:7e:e1:66:3d:b5:13:13:b8:21:69:89:d4: c0:9c:77:5c:79:81:98:db:40:d0:bb:ed:d0:73:a5: fb:3e:56:79:76:4e:90:12:d6:9a:b5:76:46:40:2b: 55:e9:d2:68:44:b0:89:86:f9:cb:11:f3:5b:1d:54: 93:95:31:d7:3c:17:b3:4b:c8:58:64:de:81:39:0e: 57:2c:52:a1:84:12:42:b8:b9:83:f3:7c:c5:f0:f0: 89:99:a0:9c:69:58:03:db:38:d5:d8:07:9c:77:8a: fd:3a:b4:03:5e:e8:dc:db:fa:f6:51:30:05:e0:89: 3f:57:cc:cf:b2:ff:7e:b0:32:df:7f:bc:05:7e:4d: b6:57:56:b1:24:c8:af:6b:cb:6a:e8:31:57:5a:50: e7:59:9e:b3:59:35:43:1d:c8:33:94:f9:5c:1f:40: 29:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FA:00:9B:CB:6B:2A:58:61:F4:3C:FD:EA:EE:79:45:51:D3:DE:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ec:5a:91:c3:40:05:d6:0d:9a:7d:f9:83:58:66:77:43:c0: 22:10:5d:7e:fb:5c:22:45:fe:33:da:e2:d4:9a:3f:b9:78:b8: ee:eb:ee:f8:0f:1c:14:59:a7:da:26:fc:41:f6:41:57:06:de: 0a:4a:4b:96:de:b5:5e:aa:d3:a6:14:b8:c9:58:67:53:26:46: f4:a7:c3:95:83:76:84:ec:87:70:63:48:c8:f1:90:58:f8:6c: 06:f2:21:a3:ff:a6:a4:ab:35:31:e6:bc:23:d1:d5:fc:8e:50: 1d:37:aa:5d:97:51:ef:e8:f2:7d:9e:5e:e4:9a:1f:c2:f3:8b: a9:15:3d:ff:cf:09:4a:02:a2:64:25:a2:28:1d:d0:6e:8e:98: a7:ee:72:61:4c:44:32:38:64:cf:de:ad:21:d6:d6:32:c5:66: 6d:29:16:36:df:a5:1b:31:37:92:38:1b:32:4d:ed:68:f1:8b: 85:7b:1a:eb:03:f5:75:7a:41:22:dd:44:49:c1:ba:3b:8e:c1: 17:4d:2b:34:8d:4c:cb:61:d0:52:11:e7:9f:2e:6b:91:af:49: 44:e0:10:ca:1e:6e:e6:ea:bd:27:12:b4:6b:5d:68:0d:55:7e: 57:cf:ae:71:4c:9d:ab:14:32:74:12:4b:64:9b:78:8a:fa:f5: 6a:fe:dc:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/JowYIq0sXciyzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk MzY4ZGMyNTUtM2E2Ni00ZGRkLWIzZTktMTIxZWEzMzYwZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSyLsz7yWlS5yeme6qkKjPfvw/0A8gSI19so EuckTwFFovo0Dc3KMXbv0TCoCu2mLYNHnSMtVZS06jVsa8pdxDwEYKQ5AdeQQLvI +51CVqHIDk87zEy91Sqd2QV+4WY9tRMTuCFpidTAnHdceYGY20DQu+3Qc6X7PlZ5 dk6QEtaatXZGQCtV6dJoRLCJhvnLEfNbHVSTlTHXPBezS8hYZN6BOQ5XLFKhhBJC uLmD83zF8PCJmaCcaVgD2zjV2Aecd4r9OrQDXujc2/r2UTAF4Ik/V8zPsv9+sDLf f7wFfk22V1axJMiva8tq6DFXWlDnWZ6zWTVDHcgzlPlcH0ApOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCf6AJvLaypYYfQ8/erueUVR096UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNTUwYTE1MWUtYzE4ZC0z NWNlLTkwYTQtNWM4YzAzMzdhYmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2PbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDsWpHDQAXWDZp9+YNYZndDwCIQXX77XCJF/jPa4tSaP7l4uO7r7vgP HBRZp9om/EH2QVcG3gpKS5betV6q06YUuMlYZ1MmRvSnw5WDdoTsh3BjSMjxkFj4 bAbyIaP/pqSrNTHmvCPR1fyOUB03ql2XUe/o8n2eXuSaH8Lzi6kVPf/PCUoComQl oigd0G6OmKfucmFMRDI4ZM/erSHW1jLFZm0pFjbfpRsxN5I4GzJN7Wjxi4V7GusD 9XV6QSLdREnBujuOwRdNKzSNTMth0FIR558ua5GvSUTgEMoebubqvScStGtdaA1V flfPrnFMnasUMnQSS2SbeIr69Wr+3DA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:00 2025 by rpki-client