$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/33028ba9-27e2-3b38-90b7-315e62ccf89c.roa File: 33028ba9-27e2-3b38-90b7-315e62ccf89c.roa (raw, json) Hash identifier: wM0soTh5wjcdT6XLnTTKm5+JmwWsENMAgFE0pvyUazw= Subject key identifier: 56:8C:F2:07:DA:85:95:DC:A5:A7:4F:91:BE:F4:5C:F5:50:DC:9E:9B Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Certificate serial: 010D0C9F4328584B92DCDCBD33F7F3E29D4A0DA0 Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/33028ba9-27e2-3b38-90b7-315e62ccf89c.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 31915 IP address blocks: 204.15.220.0/22 maxlen: 24 208.86.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:dc:bd:33:f7:f3:e2:9d:4a:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=672a5c1f-b917-4680-8547-158ef10b3f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:51:e1:42:69:6f:47:c4:8f:98:4b:dc:28: c5:01:32:b3:95:32:b9:f5:64:90:65:80:2c:ea:6f: 22:9f:d4:90:d2:e8:41:80:8c:5c:de:8e:0f:a0:f2: 66:65:95:21:ee:f7:06:1e:ef:65:41:52:b8:3b:e8: e3:c1:6f:04:e1:91:f5:99:14:3f:ec:34:1a:1a:90: 25:88:a7:ac:52:05:7f:4a:f9:42:d7:fa:39:16:8b: e4:5e:59:d6:83:3d:fc:6c:ad:c1:6b:b1:32:06:41: 59:4e:91:f8:db:19:3e:36:81:f5:d7:8d:1c:0e:b8: 2b:b0:ca:b3:1f:22:5d:bf:59:a4:52:d5:79:31:6d: 53:d7:13:f5:66:85:d0:00:37:cb:5a:3f:56:31:d1: be:86:e5:73:5a:69:06:bc:7b:1e:60:ae:5a:17:72: 05:06:41:55:d5:2a:33:ab:ef:b1:4b:0b:7c:3b:85: ea:ba:6a:87:e4:03:24:c9:26:84:34:50:5d:ef:56: 9b:c0:58:70:1d:f4:48:31:b6:3d:dc:b5:af:f4:44: 37:c7:6f:16:3e:7f:6c:59:09:97:e6:34:fb:b4:89: 8d:32:5b:6a:b3:3d:f7:8d:af:58:29:bb:65:d5:87: a1:c5:66:65:9a:74:a0:f6:09:10:84:20:4b:22:de: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8C:F2:07:DA:85:95:DC:A5:A7:4F:91:BE:F4:5C:F5:50:DC:9E:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/33028ba9-27e2-3b38-90b7-315e62ccf89c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl X509v3 Authority Key Identifier: keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer sbgp-ipAddrBlock: critical IPv4: 204.15.220.0/22 208.86.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:cb:59:16:28:c8:7b:df:ce:d7:c3:2d:73:30:65:87:5b:0b: c9:cb:da:00:14:50:06:d6:6e:dc:a1:c6:72:77:7e:88:36:30: 62:72:19:e9:b8:8b:e5:14:04:d8:32:0f:0a:ea:77:f3:f0:1f: 83:75:59:a7:80:94:92:6d:bb:b8:97:9d:a1:c1:7c:bc:75:89: 3d:d0:ed:b8:73:3a:2d:ad:e5:a0:21:4b:ea:eb:93:a6:7a:c8: 73:42:25:77:b6:56:62:4a:f7:1f:a5:99:82:01:77:64:70:1b: 0e:c6:0c:7b:72:82:f8:a4:ff:e9:f9:b8:03:90:33:2e:5a:88: 69:bb:fb:8c:dd:8f:02:f8:af:9a:56:c9:17:b0:37:49:fa:61: 82:aa:72:53:a7:ad:d1:c4:ec:eb:bb:ff:ef:3a:55:9d:f3:95: 51:70:14:e4:a0:5d:88:2d:7d:59:96:d4:c3:e3:ee:53:31:18: da:d7:53:45:cb:a6:d0:d5:44:f6:30:ef:cf:e1:55:5f:28:b9: 08:41:9a:d4:55:a8:1e:e6:5a:68:60:a8:bb:ce:51:c7:d8:65: 08:11:16:70:63:ec:b4:73:12:4f:51:b1:ca:b5:14:2e:18:91: a6:b5:12:a0:7a:0a:fe:b2:33:9c:2c:0d:cf:40:f7:95:1c:75: 20:d9:40:af -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuS3Ny9M/fz4p1KDaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz ZjcxMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NjcyYTVjMWYtYjkxNy00NjgwLTg1NDctMTU4ZWYxMGIzZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh5R4UJpb0fEj5hL3CjFATKzlTK59WSQZYAs 6m8in9SQ0uhBgIxc3o4PoPJmZZUh7vcGHu9lQVK4O+jjwW8E4ZH1mRQ/7DQaGpAl iKesUgV/SvlC1/o5FovkXlnWgz38bK3Ba7EyBkFZTpH42xk+NoH1140cDrgrsMqz HyJdv1mkUtV5MW1T1xP1ZoXQADfLWj9WMdG+huVzWmkGvHseYK5aF3IFBkFV1Soz q++xSwt8O4XqumqH5AMkySaENFBd71abwFhwHfRIMbY93LWv9EQ3x28WPn9sWQmX 5jT7tImNMltqsz33ja9YKbtl1YehxWZlmnSg9gkQhCBLIt7ZwwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFaM8gfahZXcpadPkb70XPVQ3J6bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5 NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvMzMwMjhiYTktMjdlMi0z YjM4LTkwYjctMzE1ZTYyY2NmODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi NzRlMDNmNzEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCzA/cAwQD 0FZ4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE/LWRYoyHvfztfDLXMwZYdbC8nL2gAUUAbWbtyhxnJ3fog2 MGJyGem4i+UUBNgyDwrqd/PwH4N1WaeAlJJtu7iXnaHBfLx1iT3Q7bhzOi2t5aAh S+rrk6Z6yHNCJXe2VmJK9x+lmYIBd2RwGw7GDHtygvik/+n5uAOQMy5aiGm7+4zd jwL4r5pWyRewN0n6YYKqclOnrdHE7Ou7/+86VZ3zlVFwFOSgXYgtfVmW1MPj7lMx GNrXU0XLptDVRPYw78/hVV8ouQhBmtRVqB7mWmhgqLvOUcfYZQgRFnBj7LRzEk9R scq1FC4Ykaa1EqB6Cv6yM5wsDc9A95UcdSDZQK8= -----END CERTIFICATE-----Generated at Sun Oct 19 20:53:01 2025 by rpki-client