$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa File: 0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa (raw, json) Hash identifier: 5lWZKS+9bqFCSid2vVWjKQa9taVv/qBRBwyIA8gnhLA= Subject key identifier: C0:EF:50:46:22:E2:89:ED:98:B0:F1:5C:40:0A:0A:25:66:BF:79:91 Certificate issuer: /CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Certificate serial: 010D0C9F4328584B84E79BF8BA119C8EF435C200 Authority key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 19684 IP address blocks: 23.174.152.0/24 maxlen: 24 23.174.153.0/24 maxlen: 24 69.67.164.0/22 maxlen: 22 69.67.164.0/23 maxlen: 23 69.67.166.0/23 maxlen: 23 162.254.224.0/21 maxlen: 21 207.29.192.0/21 maxlen: 21 207.29.192.0/23 maxlen: 23 207.29.194.0/23 maxlen: 23 207.29.196.0/23 maxlen: 23 207.29.198.0/23 maxlen: 23 2607:9540::/32 maxlen: 32 2607:9540::/44 maxlen: 44 2607:9540:10::/44 maxlen: 44 2607:9540:20::/44 maxlen: 44 2607:9540:30::/44 maxlen: 44 2607:9540:40::/44 maxlen: 44 2607:9540:50::/44 maxlen: 44 2607:9540:60::/44 maxlen: 44 2607:9540:70::/44 maxlen: 44 2607:9540:40f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:9b:f8:ba:11:9c:8e:f4:35:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=4b43a5c7-f864-4714-b982-d9f7d2c58531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2f:84:16:d2:b4:27:cb:98:ce:34:a1:69:60: 88:7b:c4:f5:71:06:84:30:19:5c:98:23:a9:a0:e4: 80:a0:e8:5f:bc:87:b7:22:e6:aa:51:85:b9:94:36: eb:5a:65:70:0b:2f:4c:a8:c1:83:73:28:7b:d2:fb: 68:8e:bf:8a:75:c9:d1:95:5a:95:ac:06:42:6e:49: 0e:e6:1b:5a:20:75:1a:34:42:bb:67:8a:75:0a:0a: c2:e8:11:b5:5c:2b:eb:47:b8:03:ec:ba:be:a1:85: 07:54:79:ac:9d:78:a4:d9:7c:81:72:a3:d0:f6:37: 9f:e1:47:f3:d0:4f:2d:1d:c0:9c:ca:36:dc:02:67: e7:6c:2b:c7:b7:65:74:2c:d2:14:cd:b4:2e:d5:f2: 92:06:76:ae:01:c4:45:6f:26:d8:67:e6:a3:38:4e: ff:83:3e:ac:26:ee:5d:5a:fe:ef:23:82:b1:29:3f: 0c:75:fb:f8:23:07:9e:9a:59:f3:ac:9a:d7:76:0a: fc:95:ea:d4:0c:de:b1:7b:07:cb:c4:58:dc:3c:20: a6:da:89:75:97:f6:6d:c6:6c:90:cb:81:13:47:95: 25:bb:8c:94:64:79:65:3d:c8:48:9c:54:0b:ae:cd: 6c:ad:40:de:dd:35:74:73:65:72:98:5b:53:6d:02: 30:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EF:50:46:22:E2:89:ED:98:B0:F1:5C:40:0A:0A:25:66:BF:79:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl X509v3 Authority Key Identifier: keyid:49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer sbgp-ipAddrBlock: critical IPv4: 23.174.152.0/23 69.67.164.0/22 162.254.224.0/21 207.29.192.0/21 IPv6: 2607:9540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:c9:0f:cd:61:70:89:2a:8b:a3:d7:1e:cb:71:01:c9:b9:92: 01:dc:08:cf:4a:cf:57:eb:d7:2f:b3:a0:8e:f1:a6:a5:b1:c0: 0f:fa:7e:a3:93:7c:c8:ad:63:b2:e0:6b:99:5b:34:6e:56:31: b9:5e:00:f4:44:98:00:d0:5f:89:14:af:8a:41:b3:5b:c6:7d: a9:9d:fd:a3:26:e8:f7:00:23:e1:09:35:be:24:73:3c:a8:5d: 33:04:3a:22:36:ac:05:8d:d3:97:41:08:28:2a:ca:15:0c:3b: ee:ab:3a:1a:80:3a:58:98:a8:6b:32:2b:6b:59:4e:d5:99:e4: 47:b5:e8:07:11:0d:c3:6e:73:c8:6c:be:27:b1:1c:6a:9b:e8: 46:06:23:e0:10:64:16:19:d2:cd:d8:e9:66:7d:ca:b7:32:3e: a7:63:72:85:bc:8d:84:ac:df:f0:e3:7a:f8:5e:00:ca:e3:16: 59:5e:68:94:5a:58:96:00:cc:36:c6:f1:6e:d7:b8:16:88:51: 09:ee:f2:53:18:cf:94:e2:6f:b2:93:82:1d:4d:e8:06:04:41: bb:44:08:19:5b:66:f1:46:c2:90:83:92:e9:0c:21:8c:e6:a2: 9e:cf:d4:71:72:46:b5:16:50:49:63:0c:2c:49:e7:6c:3e:dc: 61:18:c5:4d -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEuE55v4uhGcjvQ1wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYzZmJhZTAtYWQ2Zi00ZDI3LWJhYmMtZDJjNmFlMTFh MmNiMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NGI0M2E1YzctZjg2NC00NzE0LWI5ODItZDlmN2QyYzU4NTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi+EFtK0J8uYzjShaWCIe8T1cQaEMBlcmCOp oOSAoOhfvIe3IuaqUYW5lDbrWmVwCy9MqMGDcyh70vtojr+KdcnRlVqVrAZCbkkO 5htaIHUaNEK7Z4p1CgrC6BG1XCvrR7gD7Lq+oYUHVHmsnXik2XyBcqPQ9jef4Ufz 0E8tHcCcyjbcAmfnbCvHt2V0LNIUzbQu1fKSBnauAcRFbybYZ+ajOE7/gz6sJu5d Wv7vI4KxKT8Mdfv4IweemlnzrJrXdgr8lerUDN6xewfLxFjcPCCm2ol1l/ZtxmyQ y4ETR5Ulu4yUZHllPchInFQLrs1srUDe3TV0c2VymFtTbQIwlwIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFMDvUEYi4ontmLDxXEAKCiVmv3mRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNm YmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2YWUxMWEyY2IvMGMxZmVmYjEtNTZjZS0z NmVkLTk2NjAtN2Y2OTZlYWFkMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWYzZmJhZTAtYWQ2Zi00ZDI3LWJh YmMtZDJjNmFlMTFhMmNiLzVmM2ZiYWUwLWFkNmYtNGQyNy1iYWJjLWQyYzZhZTEx YTJjYi5jcmwwHwYDVR0jBBgwFoAUSbDUUzV5ZOgQDYjaiPi3ItJX42MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNmYmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2 YWUxMWEyY2IuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBF66YAwQC RUOkAwQDov7gAwQDzx3AMA0EAgACMAcDBQAmB5VAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKTJD81hcIkq i6PXHstxAcm5kgHcCM9Kz1fr1y+zoI7xpqWxwA/6fqOTfMitY7Lga5lbNG5WMble APREmADQX4kUr4pBs1vGfamd/aMm6PcAI+EJNb4kczyoXTMEOiI2rAWN05dBCCgq yhUMO+6rOhqAOliYqGsyK2tZTtWZ5Ee16AcRDcNuc8hsviexHGqb6EYGI+AQZBYZ 0s3Y6WZ9yrcyPqdjcoW8jYSs3/DjevheAMrjFlleaJRaWJYAzDbG8W7XuBaIUQnu 8lMYz5Tib7KTgh1N6AYEQbtECBlbZvFGwpCDkukMIYzmop7P1HFyRrUWUEljDCxJ 52w+3GEYxU0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:03 2025 by rpki-client