$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/de0c75c3-d3bc-3f50-9911-fde5dd621864.roa File: de0c75c3-d3bc-3f50-9911-fde5dd621864.roa (raw, json) Hash identifier: LVLFoScUFgnj4d3f6Dse2GukQ/fAxKDqh6zrE4shAmw= Subject key identifier: 62:B5:15:93:E6:9C:D1:18:9A:B0:C4:B9:37:1B:FA:63:FA:93:CF:10 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584B4081CABD138539E9545E81C0 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/de0c75c3-d3bc-3f50-9911-fde5dd621864.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 19165 IP address blocks: 208.66.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:ca:bd:13:85:39:e9:54:5e:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=075e5460-8d97-440e-8e10-ee9638e0d450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c1:21:4b:d6:9e:f8:bc:f1:29:30:11:58:45: c4:81:29:84:14:2b:8a:34:1e:98:1b:23:8f:56:18: 9c:4d:c2:10:57:a5:2f:0d:6c:97:de:95:05:67:79: 68:49:78:2f:f3:5d:f3:96:4a:5b:51:6c:7b:66:85: 6d:8a:91:63:dd:d3:37:c9:17:b6:75:ed:ca:5a:1a: be:e3:53:ab:8f:e5:36:ae:d4:9a:5c:b3:42:15:39: 62:a2:1e:c5:1f:21:44:93:6a:c4:75:63:58:92:be: 03:f1:67:21:da:c6:99:a9:c4:46:18:f1:96:af:de: 4b:b7:b7:07:c9:21:47:91:54:09:61:3f:29:db:e7: 40:da:35:1e:ba:c3:d2:a8:1a:77:c0:2e:8f:a6:90: b8:00:9c:a5:d8:fe:3a:94:7d:93:4f:8d:ac:ef:de: 47:81:1b:3a:c4:e7:75:9c:f6:c2:ce:7f:53:e5:d8: 70:c6:bc:6b:0c:29:c8:5a:3f:61:59:40:58:d5:07: 81:06:be:4b:d6:20:ce:e2:b8:9e:10:34:f0:9d:50: d5:6e:cd:b7:f5:1e:2f:f1:93:1f:b8:68:8e:ce:18: 27:b2:ac:3c:ba:f5:bd:8b:09:93:e4:25:14:ec:53: aa:ae:5d:29:71:39:68:d8:39:81:34:d8:f2:c9:a2: 21:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B5:15:93:E6:9C:D1:18:9A:B0:C4:B9:37:1B:FA:63:FA:93:CF:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/de0c75c3-d3bc-3f50-9911-fde5dd621864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 208.66.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:20:f8:db:1e:71:5f:2b:82:de:10:79:dd:eb:ce:8f:97:1d: 84:8e:5c:f4:7b:34:2e:46:c3:f5:f5:df:20:b9:30:64:62:54: 6d:09:a5:92:44:d6:1a:0b:36:95:9c:7a:59:02:7e:a5:c0:e1: a7:c1:ad:5f:42:94:9e:04:79:eb:e3:b7:7b:f1:28:d9:d9:47: a6:b1:3c:7f:52:de:32:8d:db:73:3e:96:d0:2d:54:51:84:00: 32:29:77:e9:87:0b:a6:76:e9:47:bc:31:ef:21:27:19:a0:4b: 48:cc:1f:2c:bb:3b:57:a7:be:8b:54:70:20:96:0f:e1:9c:43: b8:4e:c9:4c:ba:8a:2c:04:c8:cd:27:ab:9f:60:17:73:1c:76: d8:b3:d3:ab:6e:5b:f6:9c:08:35:7b:07:94:6c:72:6c:88:32: 12:48:78:c8:3d:65:a4:2a:1c:e5:24:e7:90:5f:7c:4a:4f:91: b0:83:26:eb:70:0a:be:84:63:ee:74:c5:b5:9a:8a:67:e1:0f: e8:2f:26:f9:e0:25:5b:56:e8:20:ce:c9:c7:39:52:75:53:6e: 0c:43:83:3f:11:16:ae:2c:3b:43:de:63:5e:16:b4:b0:40:72: 98:fb:46:e7:a7:93:a2:0b:d4:2d:8d:d8:aa:4d:ec:f3:32:d7: fb:4e:52:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgcq9E4U56VRegcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MDc1ZTU0NjAtOGQ5Ny00NDBlLThlMTAtZWU5NjM4ZTBkNDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MEhS9ae+LzxKTARWEXEgSmEFCuKNB6YGyOP VhicTcIQV6UvDWyX3pUFZ3loSXgv813zlkpbUWx7ZoVtipFj3dM3yRe2de3KWhq+ 41Orj+U2rtSaXLNCFTlioh7FHyFEk2rEdWNYkr4D8Wch2saZqcRGGPGWr95Lt7cH ySFHkVQJYT8p2+dA2jUeusPSqBp3wC6PppC4AJyl2P46lH2TT42s795HgRs6xOd1 nPbCzn9T5dhwxrxrDCnIWj9hWUBY1QeBBr5L1iDO4rieEDTwnVDVbs239R4v8ZMf uGiOzhgnsqw8uvW9iwmT5CUU7FOqrl0pcTlo2DmBNNjyyaIhQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGK1FZPmnNEYmrDEuTcb+mP6k88QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZGUwYzc1YzMtZDNiYy0z ZjUwLTk5MTEtZmRlNWRkNjIxODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwg+NsecV8rgt4Qed3rzo+XHYSOXPR7NC5Gw/X13yC5MGRiVG0JpZJE 1hoLNpWcelkCfqXA4afBrV9ClJ4Eeevjt3vxKNnZR6axPH9S3jKN23M+ltAtVFGE ADIpd+mHC6Z26Ue8Me8hJxmgS0jMHyy7O1envotUcCCWD+GcQ7hOyUy6iiwEyM0n q59gF3Mcdtiz06tuW/acCDV7B5RscmyIMhJIeMg9ZaQqHOUk55BffEpPkbCDJutw Cr6EY+50xbWaimfhD+gvJvngJVtW6CDOycc5UnVTbgxDgz8RFq4sO0PeY14WtLBA cpj7Ruenk6IL1C2N2KpN7PMy1/tOUtg= -----END CERTIFICATE-----Generated at Tue Oct 21 16:19:30 2025 by rpki-client