$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/c5c446b7-a32c-3135-b07e-ce54a5444e06.roa File: c5c446b7-a32c-3135-b07e-ce54a5444e06.roa (raw, json) Hash identifier: 9MuD+WbkMgpsUjGy7JD/r3Hg4U64krMMtyK5vGtcDx8= Subject key identifier: 80:E4:73:32:87:C0:ED:00:B8:8A:38:42:09:4F:1A:4A:AD:93:D8:A5 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584B33F1A8BCE7F6A1EB6204F200 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/c5c446b7-a32c-3135-b07e-ce54a5444e06.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 21559 IP address blocks: 200.5.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a8:bc:e7:f6:a1:eb:62:04:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=149aa1d3-e856-4d47-a515-e06f77d6d4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:05:3d:5d:63:6e:69:8b:6d:1e:28:44:54:b1: 51:43:5f:09:b5:6d:24:52:31:9d:56:ac:bd:29:2a: 57:6c:72:26:96:35:6d:93:2c:7c:c0:5b:04:d3:70: e3:6a:72:51:27:af:38:e1:bd:69:43:a4:5a:a6:04: 19:42:15:3b:51:2c:7c:2c:04:45:8e:96:a2:6c:59: c4:2e:6f:a3:a2:31:81:81:65:01:1a:49:34:0c:42: d2:0d:10:c3:47:26:28:22:aa:e1:0d:c9:b0:86:70: 57:d0:1c:7f:f7:04:79:5a:31:38:75:08:79:99:84: cd:05:21:b0:ec:3e:70:32:91:ce:a4:21:ad:59:9f: 3b:8f:b1:14:30:cc:e4:40:12:2a:a2:cc:9a:7e:6c: 5b:5e:9b:2d:13:64:77:7d:7d:56:6f:e9:a0:46:8a: a5:6c:08:fe:c8:6e:2b:d2:05:fa:18:35:1c:a9:ba: e7:7f:1a:52:bb:29:ed:12:34:78:a3:b8:3c:55:dc: 47:ec:58:52:7a:b2:40:1a:fd:37:40:43:bc:d7:3e: 43:41:bc:9d:ee:9c:6e:f9:51:e6:12:94:8a:81:df: 0a:7c:05:f2:46:ae:0c:7e:1b:80:28:1a:bc:5b:56: 4d:b7:41:44:81:90:dc:17:e2:9a:53:97:ae:b8:60: 87:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E4:73:32:87:C0:ED:00:B8:8A:38:42:09:4F:1A:4A:AD:93:D8:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/c5c446b7-a32c-3135-b07e-ce54a5444e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 200.5.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:51:a8:28:59:13:06:c9:d2:0c:5e:ee:cb:60:da:ab:66:e1: 38:64:55:ad:c8:ff:8a:68:31:e3:a3:43:a2:29:9e:ef:d1:31: 54:ba:f8:c2:69:9a:d5:b7:c7:a3:37:1e:a6:bf:0a:17:a0:63: a5:9c:e4:7e:13:96:1d:20:61:d4:69:f1:32:ea:29:92:a1:b8: 47:08:19:d7:a8:2e:28:0e:16:ea:cc:6b:f2:f2:9c:fc:bf:d8: d9:a8:51:aa:15:46:74:50:1e:f2:a6:66:63:57:2c:fb:eb:a6: f7:a7:87:16:05:cc:1a:35:1c:5b:3d:39:56:ec:dc:9e:05:43: e7:da:b6:ce:15:88:60:74:a7:5d:1f:d1:6d:9d:a0:bb:70:38: 66:f4:32:cf:0d:7b:88:5f:95:f9:4e:c3:21:46:b9:b3:1b:b1: 79:bd:ea:17:c4:08:2b:74:df:83:92:1d:72:0c:75:93:d9:4e: 78:67:85:72:37:45:f5:f3:78:38:93:ac:86:2e:6d:ed:5c:f0: 29:d3:01:a9:eb:a4:7f:49:27:cf:0d:52:7b:88:e0:2b:04:80: d0:60:ad:2f:f3:4a:d4:55:19:6c:71:4c:6d:ec:32:04:47:b6: 2e:19:37:a7:1f:3c:03:7e:34:f8:5f:6a:36:fa:1a:82:08:e6: 0d:8b:63:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8ai85/ah62IE8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk MTQ5YWExZDMtZTg1Ni00ZDQ3LWE1MTUtZTA2Zjc3ZDZkNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgU9XWNuaYttHihEVLFRQ18JtW0kUjGdVqy9 KSpXbHImljVtkyx8wFsE03DjanJRJ6844b1pQ6RapgQZQhU7USx8LARFjpaibFnE Lm+jojGBgWUBGkk0DELSDRDDRyYoIqrhDcmwhnBX0Bx/9wR5WjE4dQh5mYTNBSGw 7D5wMpHOpCGtWZ87j7EUMMzkQBIqosyafmxbXpstE2R3fX1Wb+mgRoqlbAj+yG4r 0gX6GDUcqbrnfxpSuyntEjR4o7g8VdxH7FhSerJAGv03QEO81z5DQbyd7pxu+VHm EpSKgd8KfAXyRq4MfhuAKBq8W1ZNt0FEgZDcF+KaU5euuGCH5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDkczKHwO0AuIo4QglPGkqtk9ilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvYzVjNDQ2YjctYTMyYy0z MTM1LWIwN2UtY2U1NGE1NDQ0ZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyAUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElRqChZEwbJ0gxe7stg2qtm4ThkVa3I/4poMeOjQ6Ipnu/RMVS6+MJp mtW3x6M3Hqa/ChegY6Wc5H4Tlh0gYdRp8TLqKZKhuEcIGdeoLigOFurMa/LynPy/ 2NmoUaoVRnRQHvKmZmNXLPvrpvenhxYFzBo1HFs9OVbs3J4FQ+fats4ViGB0p10f 0W2doLtwOGb0Ms8Ne4hflflOwyFGubMbsXm96hfECCt034OSHXIMdZPZTnhnhXI3 RfXzeDiTrIYube1c8CnTAanrpH9JJ88NUnuI4CsEgNBgrS/zStRVGWxxTG3sMgRH ti4ZN6cfPAN+NPhfajb6GoII5g2LY4I= -----END CERTIFICATE-----Generated at Tue Oct 21 22:26:37 2025 by rpki-client