$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/054d3026-e5df-3750-985f-6a33870df3a6.roa File: 054d3026-e5df-3750-985f-6a33870df3a6.roa (raw, json) Hash identifier: xpruMS+PVK/zL760/xL2NudWBPemaXqOKfnpZcCRU4c= Subject key identifier: B2:E1:7D:EA:BD:8A:CF:1F:57:D0:60:99:C3:08:4C:6C:6A:A3:F4:AB Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F4328584B21CC20B7B4298288E6458080 Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/054d3026-e5df-3750-985f-6a33870df3a6.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 1299 IP address blocks: 216.150.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:20:b7:b4:29:82:88:e6:45:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=b29b4b45-bf73-4d3f-ba1a-8ae435834c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:0f:19:d0:10:6c:e9:d9:90:aa:0d:60:fa: 17:37:19:ef:28:f9:fd:71:61:b6:53:c8:ab:f1:a3: 63:4d:c1:6a:80:ec:f4:33:c5:78:bc:b5:7c:a9:8c: f4:3e:7b:fc:01:f2:d1:de:19:19:78:a6:1a:55:58: bc:56:0f:58:63:7c:62:43:3a:c2:06:a3:2e:72:84: b1:7f:a8:da:a2:47:04:87:26:3c:b3:df:a3:8d:bf: ff:16:08:c2:76:61:ad:c6:88:bc:ff:a6:4c:f6:f9: 02:c7:e6:38:3b:09:56:0c:9b:1d:43:8c:90:34:85: b1:ed:f2:5c:14:68:9f:e4:e6:79:a9:99:2e:73:42: 50:33:6d:c1:8a:8c:20:9f:64:0f:76:59:f1:e9:b6: 97:27:83:39:52:ed:c2:f1:cf:78:72:3b:98:d5:7c: 67:42:51:02:fb:90:99:2a:e9:44:07:78:64:f2:62: 40:6e:93:f8:69:7b:5b:07:73:89:fa:3f:e7:aa:cb: 7f:3e:22:dc:5a:82:9c:6f:c8:26:44:ac:fe:98:ab: ec:c5:aa:13:c4:4b:21:56:d0:7f:e8:77:15:35:a9: cd:7e:9a:b5:02:0e:30:75:75:0d:02:34:75:1d:8a: 39:29:3f:5d:50:fc:02:9b:f9:6c:b6:07:ea:16:e6: e7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E1:7D:EA:BD:8A:CF:1F:57:D0:60:99:C3:08:4C:6C:6A:A3:F4:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/054d3026-e5df-3750-985f-6a33870df3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: 216.150.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c2:2c:b3:56:15:37:26:b9:18:3f:16:da:5a:35:d8:3e:dc: b5:28:88:4c:89:15:6f:fe:8c:0f:f5:e6:12:bb:ca:3c:50:64: f2:3a:40:90:89:61:02:4f:5b:af:a8:87:cd:79:76:7d:6a:34: 8d:7b:dc:f6:73:f8:02:d0:00:c3:72:ad:72:5b:ec:c9:e7:60: 07:2a:da:3f:ba:b4:93:b2:2b:f6:f7:18:e8:0f:0d:76:1d:e1: 1b:c9:91:95:ee:4c:4e:ac:d3:40:ce:18:f2:23:ef:ae:b3:74: be:9b:fc:d7:ba:9c:1b:76:d7:81:38:19:0e:86:5b:94:42:fc: ba:5a:70:da:0a:94:8e:94:43:0a:c4:f7:80:84:f8:93:d9:9b: b6:80:66:89:9e:14:fc:b6:39:4e:ee:28:fe:2f:a7:03:5f:c2: 6c:82:26:a0:80:50:0a:60:bc:93:d2:ad:b8:89:fc:d7:b4:bd: 9d:56:bb:bb:7e:b5:09:b8:24:dd:e2:22:e6:7d:a2:cb:02:ee: 84:21:cd:a6:cd:7c:02:0b:bd:ee:e4:a7:59:84:3c:4d:27:e1: ae:47:01:7c:9b:d7:6b:53:68:74:34:bc:0d:04:9c:cc:54:ff: 29:82:04:6c:62:33:88:bb:bd:6b:16:1d:23:93:73:0e:21:bb: b2:39:fc:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCC3tCmCiOZFgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk YjI5YjRiNDUtYmY3My00ZDNmLWJhMWEtOGFlNDM1ODM0YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2kPGdAQbOnZkKoNYPoXNxnvKPn9cWG2U8ir 8aNjTcFqgOz0M8V4vLV8qYz0Pnv8AfLR3hkZeKYaVVi8Vg9YY3xiQzrCBqMucoSx f6jaokcEhyY8s9+jjb//FgjCdmGtxoi8/6ZM9vkCx+Y4OwlWDJsdQ4yQNIWx7fJc FGif5OZ5qZkuc0JQM23Biowgn2QPdlnx6baXJ4M5Uu3C8c94cjuY1XxnQlEC+5CZ KulEB3hk8mJAbpP4aXtbB3OJ+j/nqst/PiLcWoKcb8gmRKz+mKvsxaoTxEshVtB/ 6HcVNanNfpq1Ag4wdXUNAjR1HYo5KT9dUPwCm/lstgfqFubn6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLhfeq9is8fV9BgmcMITGxqo/SrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvMDU0ZDMwMjYtZTVkZi0z NzUwLTk4NWYtNmEzMzg3MGRmM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2JYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfCLLNWFTcmuRg/FtpaNdg+3LUoiEyJFW/+jA/15hK7yjxQZPI6QJCJ YQJPW6+oh815dn1qNI173PZz+ALQAMNyrXJb7MnnYAcq2j+6tJOyK/b3GOgPDXYd 4RvJkZXuTE6s00DOGPIj766zdL6b/Ne6nBt214E4GQ6GW5RC/LpacNoKlI6UQwrE 94CE+JPZm7aAZomeFPy2OU7uKP4vpwNfwmyCJqCAUApgvJPSrbiJ/Ne0vZ1Wu7t+ tQm4JN3iIuZ9ossC7oQhzabNfAILve7kp1mEPE0n4a5HAXyb12tTaHQ0vA0EnMxU /ymCBGxiM4i7vWsWHSOTcw4hu7I5/Pk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:10 2025 by rpki-client