$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa File: a3b93d87-5667-328e-a14c-5284dd2687a0.roa (raw, json) Hash identifier: V56QNfsq0J/kV3AwyEuQ+U00vs7gmGHN9s4OgLTFfDA= Subject key identifier: 6C:6B:B8:61:4C:21:05:C9:50:E9:22:86:FA:12:0E:97:EE:07:C5:48 Certificate issuer: /CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Certificate serial: 010D0C9F4328584B583C86C84D6780678A46E580 Authority key identifier: EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 21922 IP address blocks: 204.197.128.0/20 maxlen: 24 216.37.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:86:c8:4d:67:80:67:8a:46:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=43533a87-1925-473b-b378-f5a1366aa745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:71:53:e0:c7:fe:1f:ea:4a:ef:cb:d3:6d:9d: aa:10:26:5a:42:92:09:a3:f1:f9:70:27:ff:d7:ee: 99:99:db:0d:cc:76:eb:fa:8d:92:e5:2d:d7:d3:4e: 5d:ff:1a:49:11:c2:d8:9d:fe:1e:e5:be:a1:fb:7b: 37:5a:00:e8:59:8a:cc:eb:a3:d3:e0:ec:99:a6:83: fc:ef:10:02:9a:8e:53:60:1e:e8:34:3b:73:4d:83: af:9d:9c:a4:d3:01:33:f7:ab:bd:a7:83:e8:8a:73: 50:85:52:9b:82:a0:05:82:95:8a:5a:78:92:b3:3f: 59:da:fd:10:34:54:7f:49:da:e9:1a:d2:33:ca:73: db:32:34:c9:8d:9c:6a:1c:42:44:86:fb:a8:4f:56: ac:14:8c:a6:a5:fe:b9:58:0c:cf:fc:8c:ee:13:f5: 18:f2:d0:54:69:c8:6b:df:50:0b:59:ed:fc:0c:e4: cb:a2:14:f6:ea:a6:64:15:2e:cb:9c:8f:74:bf:55: da:5a:0a:ab:54:30:04:9f:c6:95:01:17:55:fa:d3: 34:ea:2f:74:45:6e:56:0d:39:c9:10:61:52:8c:a6: 7a:de:c8:2c:14:81:e7:ec:1e:63:76:99:75:ca:c3: f9:d1:da:c4:9f:c2:07:1f:fd:0f:d2:92:a4:b5:e2: 49:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6B:B8:61:4C:21:05:C9:50:E9:22:86:FA:12:0E:97:EE:07:C5:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl X509v3 Authority Key Identifier: keyid:EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer sbgp-ipAddrBlock: critical IPv4: 204.197.128.0/20 216.37.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:39:33:63:f3:35:fd:d7:55:0a:b2:94:db:b3:69:a4:23:96: 18:42:47:9a:19:62:68:59:2e:f2:61:70:48:44:13:ee:7e:7c: 98:98:2e:ed:01:45:ad:30:6e:92:0d:c4:93:7a:c3:c8:7a:61: ef:e1:2d:a2:42:20:f5:7c:f9:c6:90:ed:df:28:12:eb:11:4b: 3f:6a:12:01:51:17:e2:c1:f9:e3:fe:fb:eb:52:07:c7:99:16: f9:ba:61:ad:f8:79:b0:5c:59:55:df:df:1d:b8:71:32:61:d8: fd:cf:63:c6:79:6e:45:59:cc:af:ab:7a:91:12:22:8c:38:04: 0f:d1:97:ab:31:12:57:75:ab:39:9f:08:32:40:82:37:f6:3b: 82:24:9e:4c:e6:63:93:2e:46:ce:9b:48:26:8e:f5:0b:13:21: 20:6a:f7:fa:68:43:22:01:7c:26:20:3d:bf:7a:c9:25:a3:68: ad:af:23:ff:ff:41:ad:4d:b5:66:49:c6:fa:2e:9a:3b:b4:b9: d3:80:5f:37:70:c4:08:d2:68:cc:a7:92:f0:ea:1a:69:79:ee: 3b:b0:50:61:d2:46:09:d4:53:06:f0:5f:2b:a3:49:7a:9c:d2: b5:d1:9e:04:80:a4:0f:86:a8:ea:e5:ef:69:a0:00:c4:74:c6: 60:eb:9d:29 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtYPIbITWeAZ4pG5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMyYTQ5YTMtZjA4My00YmMxLWI0MDItYzVkMmQyMzdi MTc3MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NDM1MzNhODctMTkyNS00NzNiLWIzNzgtZjVhMTM2NmFhNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknFT4Mf+H+pK78vTbZ2qECZaQpIJo/H5cCf/ 1+6ZmdsNzHbr+o2S5S3X005d/xpJEcLYnf4e5b6h+3s3WgDoWYrM66PT4OyZpoP8 7xACmo5TYB7oNDtzTYOvnZyk0wEz96u9p4PoinNQhVKbgqAFgpWKWniSsz9Z2v0Q NFR/SdrpGtIzynPbMjTJjZxqHEJEhvuoT1asFIympf65WAzP/IzuE/UY8tBUachr 31ALWe38DOTLohT26qZkFS7LnI90v1XaWgqrVDAEn8aVARdV+tM06i90RW5WDTnJ EGFSjKZ63sgsFIHn7B5jdpl1ysP50drEn8IHH/0P0pKkteJJzwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGxruGFMIQXJUOkihvoSDpfuB8VIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YzJh NDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQyZDIzN2IxNzcvYTNiOTNkODctNTY2Ny0z MjhlLWExNGMtNTI4NGRkMjY4N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGMyYTQ5YTMtZjA4My00YmMxLWI0 MDItYzVkMmQyMzdiMTc3LzRjMmE0OWEzLWYwODMtNGJjMS1iNDAyLWM1ZDJkMjM3 YjE3Ny5jcmwwHwYDVR0jBBgwFoAU61QzOVkxiBz9ljWpgvf/9DHLyeowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YzJhNDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQy ZDIzN2IxNzcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEzMWAAwQF 2CVAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALA5M2PzNf3XVQqylNuzaaQjlhhCR5oZYmhZLvJhcEhEE+5+ fJiYLu0BRa0wbpINxJN6w8h6Ye/hLaJCIPV8+caQ7d8oEusRSz9qEgFRF+LB+eP+ ++tSB8eZFvm6Ya34ebBcWVXf3x24cTJh2P3PY8Z5bkVZzK+repESIow4BA/Rl6sx Eld1qzmfCDJAgjf2O4IknkzmY5MuRs6bSCaO9QsTISBq9/poQyIBfCYgPb96ySWj aK2vI///Qa1NtWZJxvoumju0udOAXzdwxAjSaMynkvDqGml57juwUGHSRgnUUwbw XyujSXqc0rXRngSApA+GqOrl72mgAMR0xmDrnSk= -----END CERTIFICATE-----Generated at Tue Oct 21 18:01:42 2025 by rpki-client