$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/c84357d8-f33f-3c67-b65b-b50d4878537c.roa File: c84357d8-f33f-3c67-b65b-b50d4878537c.roa (raw, json) Hash identifier: eBMFiw5CBkQUDZR2C4U8zY8M0vH6bWTfGjoBKZbxorg= Subject key identifier: A4:CC:3C:BA:1E:F9:8D:5E:76:84:1C:00:6B:55:44:F5:5F:09:7A:67 Certificate issuer: /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932 Certificate serial: 010D0C9F4328584B4081E23CCE19C1B965BC6000 Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/c84357d8-f33f-3c67-b65b-b50d4878537c.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 16509 IP address blocks: 69.194.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:e2:3c:ce:19:c1:b9:65:bc:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=1212d627-716a-42eb-9f77-9f500a83a26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:c7:f0:8b:c9:a6:5a:81:fc:e8:83:92:8d: 13:97:f4:05:df:05:b5:81:cc:5a:3c:a0:9f:cc:54: 65:ad:64:fe:db:0a:69:56:42:cf:6f:cb:d5:e8:76: e6:98:86:02:8f:e6:c9:d9:68:44:dc:75:8c:9d:7e: 95:27:78:cf:9a:9b:39:e1:17:27:1c:9e:d5:40:2b: 86:8a:81:81:89:69:50:bc:45:51:07:b3:55:cc:0f: cd:20:49:89:21:2c:8d:fb:d0:72:ab:91:7d:99:2e: ba:81:c3:f6:1b:62:16:dd:f7:00:9c:1b:c2:94:ed: 5b:33:db:03:fc:1e:a1:68:27:13:ec:a7:0c:c2:35: e4:d1:48:c0:25:24:4b:d2:dd:ef:71:f3:ce:d4:3b: 63:99:64:60:c4:01:35:4d:a6:aa:2b:71:91:47:d2: 08:2a:8b:41:a4:de:96:ef:64:0a:17:45:27:ff:28: de:c0:de:4d:46:e7:1b:66:22:d1:5d:89:18:d4:bb: 73:34:8d:74:de:17:eb:cd:c1:c7:1e:64:41:6a:54: 85:cb:8d:91:5f:76:d0:6d:4a:5e:f1:2b:4f:26:ad: 9a:1e:05:a7:51:62:9c:0f:36:66:59:c7:58:ed:9e: df:84:6b:8e:a2:98:ec:dd:48:75:1f:af:fe:26:3a: 2a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CC:3C:BA:1E:F9:8D:5E:76:84:1C:00:6B:55:44:F5:5F:09:7A:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/c84357d8-f33f-3c67-b65b-b50d4878537c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl X509v3 Authority Key Identifier: keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer sbgp-ipAddrBlock: critical IPv4: 69.194.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:01:3f:2f:4b:c3:26:e0:c2:c3:a0:1f:39:09:13:75:81:61: a5:6f:70:38:b8:aa:de:f3:d5:f8:b9:a4:ed:e1:7e:a7:77:51: 63:28:e6:08:e0:63:47:90:5b:00:d4:88:47:41:b7:02:ee:53: b8:19:66:2f:14:bc:44:61:4b:e9:1c:e5:c0:4b:d5:d1:7d:86: d6:a6:2e:a6:ad:fc:83:0c:81:63:0b:9f:53:3b:9b:7f:70:c1: 04:64:e6:89:1a:f9:c2:99:9f:14:b4:f0:f1:39:5d:f0:f3:84: 7b:f9:59:45:d7:a3:73:a4:10:0e:86:33:8b:5e:b2:02:7f:2d: b0:b6:e6:22:59:06:ba:0d:69:f5:c4:69:8d:e7:58:aa:2f:aa: 52:01:ae:98:bf:d0:07:6f:3f:72:89:65:b3:af:e5:4c:f2:9d: de:94:e3:87:f8:0d:6a:ae:2b:1a:d2:99:03:ff:6a:8b:e0:49: f4:68:a6:2d:0a:1e:8d:bb:99:71:c9:d9:46:3e:bf:6e:a3:20: cd:62:64:c8:17:a8:84:ab:c7:47:39:4a:c2:96:10:ae:1c:84: a9:6a:82:b3:62:3f:7d:23:da:c9:14:bc:2f:a7:6d:ed:4f:7e: 3b:47:8e:f4:92:28:34:1d:89:f2:15:ab:82:ad:61:9c:82:20: e5:41:2c:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgeI8zhnBuWW8YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZmNTVmYmUtMzljMi00NWI0LTlhYTItNjAxNjJkNGUy OTMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MTIxMmQ2MjctNzE2YS00MmViLTlmNzctOWY1MDBhODNhMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJXH8IvJplqB/OiDko0Tl/QF3wW1gcxaPKCf zFRlrWT+2wppVkLPb8vV6HbmmIYCj+bJ2WhE3HWMnX6VJ3jPmps54RcnHJ7VQCuG ioGBiWlQvEVRB7NVzA/NIEmJISyN+9Byq5F9mS66gcP2G2IW3fcAnBvClO1bM9sD /B6haCcT7KcMwjXk0UjAJSRL0t3vcfPO1DtjmWRgxAE1TaaqK3GRR9IIKotBpN6W 72QKF0Un/yjewN5NRucbZiLRXYkY1LtzNI103hfrzcHHHmRBalSFy42RX3bQbUpe 8StPJq2aHgWnUWKcDzZmWcdY7Z7fhGuOopjs3Uh1H6/+JjoqXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTMPLoe+Y1edoQcAGtVRPVfCXpnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZmY1 NWZiZS0zOWMyLTQ1YjQtOWFhMi02MDE2MmQ0ZTI5MzIvYzg0MzU3ZDgtZjMzZi0z YzY3LWI2NWItYjUwZDQ4Nzg1MzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGZmNTVmYmUtMzljMi00NWI0LTlh YTItNjAxNjJkNGUyOTMyLzRmZjU1ZmJlLTM5YzItNDViNC05YWEyLTYwMTYyZDRl MjkzMi5jcmwwHwYDVR0jBBgwFoAUHP9AdpG2YPFJ/JUDj4ksEk1MAVswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZmY1NWZiZS0zOWMyLTQ1YjQtOWFhMi02MDE2 MmQ0ZTI5MzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRcKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgBPy9LwybgwsOgHzkJE3WBYaVvcDi4qt7z1fi5pO3hfqd3UWMo5gjg Y0eQWwDUiEdBtwLuU7gZZi8UvERhS+kc5cBL1dF9htamLqat/IMMgWMLn1M7m39w wQRk5oka+cKZnxS08PE5XfDzhHv5WUXXo3OkEA6GM4tesgJ/LbC25iJZBroNafXE aY3nWKovqlIBrpi/0AdvP3KJZbOv5Uzynd6U44f4DWquKxrSmQP/aovgSfRopi0K Ho27mXHJ2UY+v26jIM1iZMgXqISrx0c5SsKWEK4chKlqgrNiP30j2skUvC+nbe1P fjtHjvSSKDQdifIVq4KtYZyCIOVBLAs= -----END CERTIFICATE-----Generated at Mon Oct 20 18:06:26 2025 by rpki-client