$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af/4a6d7861-b2b6-3ee6-b92c-8008b1ed1471.roa File: 4a6d7861-b2b6-3ee6-b92c-8008b1ed1471.roa (raw, json) Hash identifier: ezBDJYZvMbAH3p50v6y81m2L2QgYGQXkbjlUeJgR3Wo= Subject key identifier: 81:88:E9:C7:07:C7:7F:7D:EB:81:8B:07:F1:E5:00:2A:67:62:1F:38 Certificate issuer: /CN=1dad5646-ccde-4526-bd31-81887215d6af Certificate serial: 010D0C9F4328584B4E771686AAC7EDF747188BD8 Authority key identifier: 19:48:0C:17:7A:F7:E2:90:62:F4:2A:0A:06:E3:43:1C:82:D9:94:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af/4a6d7861-b2b6-3ee6-b92c-8008b1ed1471.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 23395 IP address blocks: 216.197.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af/1dad5646-ccde-4526-bd31-81887215d6af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af/1dad5646-ccde-4526-bd31-81887215d6af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:16:86:aa:c7:ed:f7:47:18:8b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dad5646-ccde-4526-bd31-81887215d6af Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=bedcaeb7-1287-4002-a657-cc6845f11066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:66:1e:bd:a7:5d:13:eb:aa:1e:bb:4e:e1:b3: 9b:ee:9d:93:cf:45:19:6d:6a:8b:04:0a:43:43:b9: be:b9:c6:77:64:2a:65:4c:b0:ea:71:7f:83:97:d8: 01:98:bd:5d:e5:bd:25:66:13:3d:bd:a7:1d:80:8e: 1a:92:d4:81:4e:22:f5:21:db:7e:e5:a2:1c:96:7b: 87:30:65:9d:16:ee:46:4c:18:d2:1c:17:c1:a6:4a: ee:8d:1c:09:55:bb:2d:da:c0:07:70:50:25:2b:e4: 60:55:2a:f0:32:74:45:1d:62:aa:7e:27:6f:d4:16: 37:1b:73:1b:51:8b:0b:0b:73:e5:a1:51:06:ee:fe: a6:73:c7:95:2e:b9:28:c0:7e:dc:b5:31:00:6d:88: 70:a4:d3:e4:f4:e4:96:7e:6e:e6:f6:f1:6b:f5:8d: 04:1a:79:28:90:d1:7c:3c:a3:11:6f:9b:b7:54:ca: 7a:b4:79:19:42:6e:2a:5a:f6:fd:b5:9b:28:23:be: b5:b5:5b:2c:64:f4:16:96:b0:ef:b5:95:51:a5:98: 29:f6:d8:bc:4c:4c:35:6f:d5:67:80:8a:b3:3b:b9: 1f:c7:f2:97:31:3b:a2:78:d7:f3:57:f8:29:ef:53: b5:e3:54:b3:8b:1b:3a:7c:59:1f:49:be:47:5e:55: 5b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:88:E9:C7:07:C7:7F:7D:EB:81:8B:07:F1:E5:00:2A:67:62:1F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af/4a6d7861-b2b6-3ee6-b92c-8008b1ed1471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af/1dad5646-ccde-4526-bd31-81887215d6af.crl X509v3 Authority Key Identifier: keyid:19:48:0C:17:7A:F7:E2:90:62:F4:2A:0A:06:E3:43:1C:82:D9:94:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dad5646-ccde-4526-bd31-81887215d6af.cer sbgp-ipAddrBlock: critical IPv4: 216.197.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:8a:2a:71:c7:02:c2:db:66:7a:56:ec:a9:c0:d1:0a:0f:01: 3e:8a:8d:bf:cc:31:ba:dc:5e:35:51:75:55:2a:2d:c7:53:b7: 61:68:b9:14:a9:05:69:0d:fe:93:5a:dd:89:b9:c6:d9:27:ed: a7:67:d0:6c:68:05:fe:e3:b7:2e:cb:e4:97:f6:a8:24:9e:69: 62:9c:73:14:ed:5c:05:44:a5:f5:5d:2c:3e:d9:56:77:a7:c6: 29:c5:52:46:16:9c:66:46:e5:88:2d:d2:a0:57:8a:a9:b9:0d: a6:85:70:e3:58:17:d3:3d:9e:c1:75:9a:a3:7b:f5:7a:ba:0b: 18:6c:5b:1d:6e:74:6f:29:47:cd:c5:b1:40:f2:f8:59:ae:fe: 09:97:09:e4:9e:f1:bc:51:e9:cd:eb:cd:3f:d7:96:e0:99:6b: fe:43:fb:fc:f9:4c:ce:31:0c:86:07:48:ad:ba:f1:5a:af:18: 5a:3f:0a:04:37:de:84:6a:b9:f9:c8:28:3c:73:3e:7e:0c:5d: ac:f5:59:1f:f8:3c:b3:41:cb:88:c0:81:50:45:cb:dc:d8:df: 0a:65:66:6d:27:05:3f:e1:1c:09:af:86:dc:f9:cd:37:fe:58: d4:32:b0:9b:1d:f9:75:f6:2a:d5:ed:a6:00:e4:e6:57:b9:70: 93:cc:bc:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxaGqsft90cYi9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRhZDU2NDYtY2NkZS00NTI2LWJkMzEtODE4ODcyMTVk NmFmMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YmVkY2FlYjctMTI4Ny00MDAyLWE2NTctY2M2ODQ1ZjExMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimYevaddE+uqHrtO4bOb7p2Tz0UZbWqLBApD Q7m+ucZ3ZCplTLDqcX+Dl9gBmL1d5b0lZhM9vacdgI4aktSBTiL1Idt+5aIclnuH MGWdFu5GTBjSHBfBpkrujRwJVbst2sAHcFAlK+RgVSrwMnRFHWKqfidv1BY3G3Mb UYsLC3PloVEG7v6mc8eVLrkowH7ctTEAbYhwpNPk9OSWfm7m9vFr9Y0EGnkokNF8 PKMRb5u3VMp6tHkZQm4qWvb9tZsoI761tVssZPQWlrDvtZVRpZgp9ti8TEw1b9Vn gIqzO7kfx/KXMTuieNfzV/gp71O141Szixs6fFkfSb5HXlVbaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGI6ccHx39964GLB/HlACpnYh84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZGFk NTY0Ni1jY2RlLTQ1MjYtYmQzMS04MTg4NzIxNWQ2YWYvNGE2ZDc4NjEtYjJiNi0z ZWU2LWI5MmMtODAwOGIxZWQxNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWRhZDU2NDYtY2NkZS00NTI2LWJk MzEtODE4ODcyMTVkNmFmLzFkYWQ1NjQ2LWNjZGUtNDUyNi1iZDMxLTgxODg3MjE1 ZDZhZi5jcmwwHwYDVR0jBBgwFoAUGUgMF3r34pBi9CoKBuNDHILZlAowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZGFkNTY0Ni1jY2RlLTQ1MjYtYmQzMS04MTg4 NzIxNWQ2YWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2MVcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiKKnHHAsLbZnpW7KnA0QoPAT6Kjb/MMbrcXjVRdVUqLcdTt2FouRSp BWkN/pNa3Ym5xtkn7adn0GxoBf7jty7L5Jf2qCSeaWKccxTtXAVEpfVdLD7ZVnen xinFUkYWnGZG5Ygt0qBXiqm5DaaFcONYF9M9nsF1mqN79Xq6CxhsWx1udG8pR83F sUDy+Fmu/gmXCeSe8bxR6c3rzT/XluCZa/5D+/z5TM4xDIYHSK268VqvGFo/CgQ3 3oRqufnIKDxzPn4MXaz1WR/4PLNBy4jAgVBFy9zY3wplZm0nBT/hHAmvhtz5zTf+ WNQysJsd+XX2KtXtpgDk5le5cJPMvFQ= -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:53 2025 by rpki-client