$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa File: d2408c5f-d225-32f4-9f6c-82686c9fa438.roa (raw, json) Hash identifier: BTnnwCwLiwfd2DWDIfrCLjOy/SmiwJidmDbEac6Gmcg= Subject key identifier: DF:3C:C5:61:EA:00:E2:E9:93:D6:5D:E2:20:4A:7A:C0:11:B7:38:2C Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584B1D9C224EBB1FB804C3EFCA00 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 32058 IP address blocks: 216.147.192.0/20 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:22:4e:bb:1f:b8:04:c3:ef:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=7e1f425e-6f41-4ff0-a698-9d0c97e3aaa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2a:84:e5:16:b3:d9:dd:8b:30:3e:ee:ff:d8: b6:10:55:e8:f6:30:75:cd:df:29:07:3d:e5:8e:8e: 9b:fc:46:2e:c5:05:af:d7:0c:92:4f:a8:c8:13:f7: 86:3b:15:3d:86:99:1c:7d:8b:35:fc:93:2d:b0:2b: 62:65:b2:fe:55:98:aa:8b:49:10:46:17:71:2b:12: e8:80:40:c7:41:cb:b9:6b:70:89:48:8d:b3:d4:7b: bd:e9:72:85:f1:25:20:31:b0:1d:b7:04:85:18:1e: d9:ca:04:da:22:c8:aa:6f:e3:0c:88:48:32:da:6c: 7e:82:41:bb:6a:eb:66:3e:94:66:8f:a6:16:59:de: 4f:bc:5b:69:ad:42:67:4d:33:e9:82:ba:0b:33:d7: c5:0d:0e:98:7c:ec:58:e0:1b:d6:97:d1:e3:c0:e1: de:99:42:bf:cb:be:eb:2f:17:46:47:15:45:86:60: d6:03:3b:5f:d8:7f:97:ab:1c:62:af:7d:05:70:e9: e2:18:ac:29:ff:b1:b3:15:fc:44:61:b8:f7:ab:f4: 0f:f6:fe:b0:6e:3a:e1:8f:8c:cf:03:be:37:4f:f4: d4:8f:66:1d:62:e0:ed:de:79:2e:e8:f0:d0:0b:7f: 4b:b3:01:c7:15:1b:de:fd:7c:0a:44:31:9c:9b:3e: ed:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3C:C5:61:EA:00:E2:E9:93:D6:5D:E2:20:4A:7A:C0:11:B7:38:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv4: 216.147.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:cc:87:12:bf:d2:19:b3:e9:47:47:9f:eb:1d:66:f3:45:e4: 9c:0b:e4:58:92:49:3c:ef:a9:d1:73:2d:18:e0:0c:c3:83:75: e4:38:e9:26:f9:7c:f5:9f:f6:9a:8c:42:50:f5:4b:bb:1e:51: e6:f9:f8:30:cd:46:ea:a9:7f:48:8b:1f:6e:fd:ba:33:d5:3d: 20:8e:f2:98:ce:01:cb:50:8e:73:c5:38:14:4f:d7:54:12:d1: 29:1a:78:07:62:6c:73:fb:53:49:7d:9a:52:2f:36:44:e6:ce: 75:e9:8b:03:b1:aa:74:1a:e1:43:b9:4a:8e:eb:46:34:03:f5: ed:59:4f:5f:2a:9d:3a:7e:c2:af:98:3e:d1:56:79:dc:c2:64: dc:5a:94:ad:3c:9f:29:47:f6:1f:f6:2b:69:d2:2b:15:3a:21: 7c:56:8e:ad:43:3b:56:27:67:93:c6:7b:1c:97:b5:5a:cc:f8: df:61:b8:e6:80:02:55:43:89:42:18:df:b2:ff:c4:c0:4b:1a: 9d:bf:60:52:9c:f7:48:72:87:1b:75:2d:f8:b6:23:fa:27:09: 2c:2d:22:1d:60:80:d0:0f:bd:00:f1:a7:f5:24:9c:fa:f4:04: 19:3f:eb:51:4c:ee:f4:10:c4:2d:cc:55:91:42:50:7e:de:2d: e2:69:47:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCJOux+4BMPvygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk N2UxZjQyNWUtNmY0MS00ZmYwLWE2OTgtOWQwYzk3ZTNhYWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iqE5Raz2d2LMD7u/9i2EFXo9jB1zd8pBz3l jo6b/EYuxQWv1wyST6jIE/eGOxU9hpkcfYs1/JMtsCtiZbL+VZiqi0kQRhdxKxLo gEDHQcu5a3CJSI2z1Hu96XKF8SUgMbAdtwSFGB7ZygTaIsiqb+MMiEgy2mx+gkG7 autmPpRmj6YWWd5PvFtprUJnTTPpgroLM9fFDQ6YfOxY4BvWl9HjwOHemUK/y77r LxdGRxVFhmDWAztf2H+Xqxxir30FcOniGKwp/7GzFfxEYbj3q/QP9v6wbjrhj4zP A743T/TUj2YdYuDt3nku6PDQC39LswHHFRve/XwKRDGcmz7tRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN88xWHqAOLpk9Zd4iBKesARtzgsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvZDI0MDhjNWYtZDIyNS0z MmY0LTlmNmMtODI2ODZjOWZhNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2JPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXMhxK/0hmz6UdHn+sdZvNF5JwL5FiSSTzvqdFzLRjgDMODdeQ46Sb5 fPWf9pqMQlD1S7seUeb5+DDNRuqpf0iLH279ujPVPSCO8pjOActQjnPFOBRP11QS 0SkaeAdibHP7U0l9mlIvNkTmznXpiwOxqnQa4UO5So7rRjQD9e1ZT18qnTp+wq+Y PtFWedzCZNxalK08nylH9h/2K2nSKxU6IXxWjq1DO1YnZ5PGexyXtVrM+N9huOaA AlVDiUIY37L/xMBLGp2/YFKc90hyhxt1Lfi2I/onCSwtIh1ggNAPvQDxp/UknPr0 BBk/61FM7vQQxC3MVZFCUH7eLeJpR3g= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:41 2025 by rpki-client