$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/1704a8f3-dbc4-3707-a4a7-3b2cd2f01a06.roa File: 1704a8f3-dbc4-3707-a4a7-3b2cd2f01a06.roa (raw, json) Hash identifier: Za0SREGW8/hgYvyIoKfPb2vvy4bFGh2lXr733Jxy+8E= Subject key identifier: 2D:82:63:22:BD:00:3A:B1:17:A3:AE:80:D5:2E:70:EA:18:3C:E0:48 Certificate issuer: /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d Certificate serial: 010D0C9F4328584B5B073938B558A1656A380580 Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/1704a8f3-dbc4-3707-a4a7-3b2cd2f01a06.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 8987 IP address blocks: 206.219.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:39:38:b5:58:a1:65:6a:38:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=86be2a0d-df42-4082-967a-ad20470a3c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:44:d0:ed:65:a2:36:66:d2:1c:1b:74:4c:8b: 44:f3:d8:41:87:52:e0:71:32:8b:05:f8:b2:18:06: 91:57:af:41:c5:0d:58:e0:7f:47:ec:eb:1c:75:66: a0:6d:da:6f:4b:1e:47:c8:bb:3c:78:bb:ef:89:c2: 63:d5:4e:85:28:01:d1:57:a9:8d:db:05:64:0c:40: 9d:a8:db:16:62:df:0d:b3:3a:4c:97:07:de:67:87: b6:23:a6:3a:c0:14:6e:be:60:07:2c:5c:09:af:a5: 0b:b3:4f:19:83:aa:e7:9b:7d:91:f6:3b:63:2c:b3: 07:78:30:62:d8:68:13:c4:2f:a4:90:8b:56:6e:f3: 59:0d:25:ab:22:5d:4d:4b:82:f3:02:0b:a3:18:8b: bd:89:8f:f9:df:0b:44:d6:66:13:67:0a:29:a4:5a: 82:45:2c:c9:e8:f2:91:fa:9e:37:db:d7:4d:0f:24: cf:77:75:10:38:c7:bc:bf:7b:ba:07:79:74:9e:68: 4c:86:79:33:f0:b9:3b:9c:e2:8a:8f:80:f2:ea:db: b4:5b:35:78:97:e3:ac:b1:3e:d3:d1:98:07:9c:26: 62:bf:34:fa:ca:7c:5d:67:8a:fc:09:ee:05:f9:ae: f3:ee:f5:d8:c9:4c:75:0a:4c:54:52:e8:50:4e:8b: c6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:82:63:22:BD:00:3A:B1:17:A3:AE:80:D5:2E:70:EA:18:3C:E0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/1704a8f3-dbc4-3707-a4a7-3b2cd2f01a06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl X509v3 Authority Key Identifier: keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer sbgp-ipAddrBlock: critical IPv4: 206.219.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f9:db:68:8b:26:e4:6d:89:2f:c9:a1:40:f7:6b:a8:06:b4: 51:ac:21:e8:1e:0d:cd:88:ff:2b:c4:42:8f:c8:c6:34:e6:74: b6:0c:59:4b:d7:57:cd:db:89:89:89:47:c8:ff:d8:85:ea:a5: e1:a8:c8:57:4e:97:4d:96:b0:78:18:86:8c:92:f9:9c:04:e0: de:69:a3:a5:95:37:d9:b8:44:26:f5:04:1d:55:e8:db:21:58: a6:01:0c:39:9d:20:60:b8:d5:d0:eb:11:47:da:cf:c2:61:92: 8d:21:46:0b:d7:3d:ac:94:7c:c4:b8:b8:fc:ba:e4:f7:9e:c2: bf:28:a3:2f:36:7d:5e:ea:7f:04:ca:bb:6e:f5:11:93:40:c5: 57:2c:9c:20:33:cf:3f:8c:46:28:c8:65:62:f1:d1:24:0d:11: ac:07:e5:02:da:9f:63:4a:cb:50:13:d0:d5:19:0a:56:4e:66: 24:d3:e9:12:a6:d6:85:c6:56:8b:33:3c:9c:a3:3e:da:26:25: 42:f7:e2:f9:a5:4c:c2:d5:93:40:3c:6d:12:ad:9e:aa:22:e9: 1e:13:bc:21:2a:14:97:19:b6:ed:58:bc:78:04:27:9e:97:69: 3b:43:3f:49:22:1a:6b:43:13:2f:d9:31:9a:2c:22:5c:63:a9: 84:9c:a1:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzk4tVihZWo4BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVhNjdiOWUtMWM5OS00YjFjLThjNTAtMDU1YzEwZDRk NTVkMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ODZiZTJhMGQtZGY0Mi00MDgyLTk2N2EtYWQyMDQ3MGEzYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0TQ7WWiNmbSHBt0TItE89hBh1LgcTKLBfiy GAaRV69BxQ1Y4H9H7OscdWagbdpvSx5HyLs8eLvvicJj1U6FKAHRV6mN2wVkDECd qNsWYt8NszpMlwfeZ4e2I6Y6wBRuvmAHLFwJr6ULs08Zg6rnm32R9jtjLLMHeDBi 2GgTxC+kkItWbvNZDSWrIl1NS4LzAgujGIu9iY/53wtE1mYTZwoppFqCRSzJ6PKR +p4329dNDyTPd3UQOMe8v3u6B3l0nmhMhnkz8Lk7nOKKj4Dy6tu0WzV4l+OssT7T 0ZgHnCZivzT6ynxdZ4r8Ce4F+a7z7vXYyUx1CkxUUuhQTovG4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2CYyK9ADqxF6OugNUucOoYPOBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZWE2 N2I5ZS0xYzk5LTRiMWMtOGM1MC0wNTVjMTBkNGQ1NWQvMTcwNGE4ZjMtZGJjNC0z NzA3LWE0YTctM2IyY2QyZjAxYTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGVhNjdiOWUtMWM5OS00YjFjLThj NTAtMDU1YzEwZDRkNTVkLzBlYTY3YjllLTFjOTktNGIxYy04YzUwLTA1NWMxMGQ0 ZDU1ZC5jcmwwHwYDVR0jBBgwFoAUj/m9ZGJvaK1PUYF0eFedVEqgKbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZWE2N2I5ZS0xYzk5LTRiMWMtOGM1MC0wNTVj MTBkNGQ1NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztviMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7522iLJuRtiS/JoUD3a6gGtFGsIegeDc2I/yvEQo/IxjTmdLYMWUvX V83biYmJR8j/2IXqpeGoyFdOl02WsHgYhoyS+ZwE4N5po6WVN9m4RCb1BB1V6Nsh WKYBDDmdIGC41dDrEUfaz8Jhko0hRgvXPayUfMS4uPy65Peewr8ooy82fV7qfwTK u271EZNAxVcsnCAzzz+MRijIZWLx0SQNEawH5QLan2NKy1AT0NUZClZOZiTT6RKm 1oXGVoszPJyjPtomJUL34vmlTMLVk0A8bRKtnqoi6R4TvCEqFJcZtu1YvHgEJ56X aTtDP0kiGmtDEy/ZMZosIlxjqYScoVs= -----END CERTIFICATE-----Generated at Mon Oct 20 14:57:52 2025 by rpki-client