$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/d41c0259-b9f7-3714-937f-30869ab9b52a.roa File: d41c0259-b9f7-3714-937f-30869ab9b52a.roa (raw, json) Hash identifier: OCM9a7NEsvfE95Fjrtx02b88aEoWNYxITcVM4TU0KzQ= Subject key identifier: 1E:C4:3D:01:87:38:56:BA:2B:E1:1F:83:97:BD:EA:72:1A:AB:67:AA Certificate issuer: /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0 Certificate serial: 010D0C9F4328584B7B21F681B87BEABF1F8316C0 Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/d41c0259-b9f7-3714-937f-30869ab9b52a.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 10996 IP address blocks: 216.239.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f6:81:b8:7b:ea:bf:1f:83:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=42777df3-938f-435f-b267-4b8ee1572a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:2c:17:5e:9b:ac:d1:18:96:b4:da:5f:61: 52:77:95:41:4c:c6:b7:a8:e7:20:6b:4f:ed:75:b0: e2:0c:f7:0b:75:a5:df:2c:20:2c:fc:81:69:3b:00: 74:a2:01:a2:c1:05:f9:31:32:a6:84:49:e6:1c:21: cc:39:ca:26:23:ef:99:4a:bf:3a:ce:01:1d:e3:cf: 6e:36:72:9e:81:ff:78:b9:7c:e6:51:82:6d:21:e0: b4:95:49:4b:38:55:0a:c2:15:2d:2d:54:32:02:29: 28:3d:23:76:21:8f:6d:43:e7:a2:c2:e7:23:9b:99: d2:c3:6d:b2:97:e5:88:7b:2a:2f:04:69:6a:77:16: 95:da:d5:38:54:30:b8:8d:e9:42:6d:93:8d:12:eb: a8:46:15:ed:74:c1:7a:2a:44:5a:82:bf:95:bf:28: 35:6c:6f:20:4e:9a:3f:4e:2f:a8:04:25:34:39:c6: 4a:e3:ee:3b:dc:1f:76:6d:b9:19:c5:52:22:0c:0e: 15:b5:28:79:a9:6d:e3:3d:24:2f:78:5b:5b:04:95: 15:94:2b:bf:64:a2:20:ea:45:4e:ff:11:e4:78:ce: 5b:f9:ca:a2:1a:05:8d:14:09:12:e7:aa:90:85:c4: a6:e3:36:32:31:ac:5a:1d:5f:9f:68:37:c6:4f:41: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C4:3D:01:87:38:56:BA:2B:E1:1F:83:97:BD:EA:72:1A:AB:67:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/d41c0259-b9f7-3714-937f-30869ab9b52a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl X509v3 Authority Key Identifier: keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer sbgp-ipAddrBlock: critical IPv4: 216.239.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:4c:21:20:f3:97:8b:e8:b2:bf:76:2e:c3:c0:1d:4f:1c:dc: f9:9b:82:7a:ab:dc:d8:28:d4:b8:0d:e1:9a:b9:0c:78:80:13: 1a:a5:ba:88:82:d4:7d:4a:d0:b5:f4:7b:2d:0d:53:08:cb:ea: 1f:72:a9:4c:07:2a:29:7d:93:0b:26:6d:0d:c9:fe:23:2a:bd: 9e:78:62:f5:48:7b:65:80:e9:2e:9f:1e:23:42:48:13:f4:72: fd:20:2d:de:f0:a4:e3:2e:7d:70:c5:67:0d:e3:2d:ce:5e:f5: f4:af:7c:ac:67:e2:86:b6:28:a3:47:15:c1:1c:35:9d:45:08: 4a:d6:21:ce:a2:aa:ea:79:64:81:31:9d:d8:4a:2a:6d:f5:2d: 01:75:be:f1:19:fa:66:88:9f:3d:4b:cb:ac:74:dd:2d:2e:a6: 97:2d:cd:ef:65:ea:12:a8:cb:a8:c2:ad:9f:33:97:a1:d1:e3: 81:e5:9a:1c:60:33:c6:18:15:70:3b:c3:ad:1c:3f:0e:5b:b8: 33:29:7b:03:b1:4b:e8:f2:04:a5:66:3f:df:f0:38:14:07:ec: aa:8d:ce:d4:2a:44:92:22:34:09:f0:34:6b:bc:c1:b2:4d:6e: 5a:b9:c8:24:97:01:7a:ae:1e:62:6b:b1:f6:74:be:40:58:f2: 29:5a:2a:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfaBuHvqvx+DFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwYmNiNWQtOWUwNy00NGEzLWFmNjEtMjVlN2YwMjQy YWQwMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk NDI3NzdkZjMtOTM4Zi00MzVmLWIyNjctNGI4ZWUxNTcyYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYksF16brNEYlrTaX2FSd5VBTMa3qOcga0/t dbDiDPcLdaXfLCAs/IFpOwB0ogGiwQX5MTKmhEnmHCHMOcomI++ZSr86zgEd489u NnKegf94uXzmUYJtIeC0lUlLOFUKwhUtLVQyAikoPSN2IY9tQ+eiwucjm5nSw22y l+WIeyovBGlqdxaV2tU4VDC4jelCbZONEuuoRhXtdMF6KkRagr+Vvyg1bG8gTpo/ Ti+oBCU0OcZK4+473B92bbkZxVIiDA4VtSh5qW3jPSQveFtbBJUVlCu/ZKIg6kVO /xHkeM5b+cqiGgWNFAkS56qQhcSm4zYyMaxaHV+faDfGT0FY+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7EPQGHOFa6K+Efg5e96nIaq2eqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MDBi Y2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAyNDJhZDAvZDQxYzAyNTktYjlmNy0z NzE0LTkzN2YtMzA4NjlhYjliNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTAwYmNiNWQtOWUwNy00NGEzLWFm NjEtMjVlN2YwMjQyYWQwLzkwMGJjYjVkLTllMDctNDRhMy1hZjYxLTI1ZTdmMDI0 MmFkMC5jcmwwHwYDVR0jBBgwFoAUsWEfsEw1NKJ6ktKh1nWmALbAQ3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3 ZjAyNDJhZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2O9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFMISDzl4vosr92LsPAHU8c3Pmbgnqr3Ngo1LgN4Zq5DHiAExqluoiC 1H1K0LX0ey0NUwjL6h9yqUwHKil9kwsmbQ3J/iMqvZ54YvVIe2WA6S6fHiNCSBP0 cv0gLd7wpOMufXDFZw3jLc5e9fSvfKxn4oa2KKNHFcEcNZ1FCErWIc6iqup5ZIEx ndhKKm31LQF1vvEZ+maInz1Ly6x03S0uppctze9l6hKoy6jCrZ8zl6HR44Hlmhxg M8YYFXA7w60cPw5buDMpewOxS+jyBKVmP9/wOBQH7KqNztQqRJIiNAnwNGu8wbJN blq5yCSXAXquHmJrsfZ0vkBY8ilaKtU= -----END CERTIFICATE-----Generated at Tue Oct 21 00:06:42 2025 by rpki-client