$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/5d2bfed8-363e-3e2b-919f-100ba77f97f0.roa File: 5d2bfed8-363e-3e2b-919f-100ba77f97f0.roa (raw, json) Hash identifier: N/igU/eBbPMD3V1p9qxgvQV5IzuVrZmtO2668Knam3M= Subject key identifier: FE:55:BD:55:69:34:8F:43:76:D3:E1:57:90:B7:3D:7F:C0:D2:DE:40 Certificate issuer: /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d Certificate serial: 010D0C9F4328584B5B0729C9DCF26BB6B4BDCD80 Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/5d2bfed8-363e-3e2b-919f-100ba77f97f0.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 206.219.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:29:c9:dc:f2:6b:b6:b4:bd:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=6f968ac2-827e-4e09-8aea-60be5f4f4262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:a1:05:5d:4f:4b:5e:11:82:26:e0:be:b1: 31:e6:fa:a4:d5:37:f2:89:3c:28:14:95:2c:93:f0: c1:36:f8:2c:29:b7:f4:04:68:c9:37:65:35:01:df: 6a:21:06:f9:cb:97:d4:46:ba:ef:6e:db:4e:25:cf: 50:64:2a:5a:13:60:19:82:e0:3b:1f:f6:4b:06:af: 02:eb:a2:74:c9:ae:f5:e6:9b:16:6d:6c:fd:0e:a8: b4:c3:1e:36:70:57:fc:1d:3f:a6:d0:3c:3d:28:97: f2:d7:69:1a:7b:0b:20:e6:73:e7:cb:80:32:13:3d: 72:de:fa:3b:49:17:6d:23:8f:fd:9f:fa:40:19:30: b8:a2:5b:f5:23:13:02:12:60:c0:54:c2:f2:52:a3: be:d7:d2:08:19:c9:b6:55:96:95:dc:14:0f:e6:08: c5:f9:7c:fe:3f:9c:c6:99:59:31:57:49:4a:42:02: f6:da:fa:cf:94:aa:2c:86:85:70:8c:e3:9f:36:93: 29:b0:c5:55:14:ba:96:10:24:64:a1:62:de:ce:4f: 60:1a:b9:33:3a:c8:06:77:f5:af:5e:a0:07:ff:eb: 8d:a5:51:14:52:52:22:03:8f:d3:93:92:bd:3b:66: bd:7b:7c:bd:eb:db:fc:19:de:9d:8a:1d:d1:28:24: 25:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:55:BD:55:69:34:8F:43:76:D3:E1:57:90:B7:3D:7F:C0:D2:DE:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/5d2bfed8-363e-3e2b-919f-100ba77f97f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl X509v3 Authority Key Identifier: keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer sbgp-ipAddrBlock: critical IPv4: 206.219.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:3e:1b:bd:59:50:55:94:d6:ea:c3:d9:da:49:82:da:2c:97: ae:aa:4f:f8:32:d7:b3:75:9c:d6:16:22:11:04:5c:49:2d:8f: 6c:12:93:9b:5d:4d:dc:57:21:cd:02:5f:81:46:b1:d3:f8:e5: 50:28:c9:3b:39:88:f4:29:97:97:2b:e8:e0:be:9a:79:6e:8b: 40:4c:dc:e7:b3:e6:2a:6f:f6:9c:5e:1f:32:cb:62:60:92:c1: ae:39:b9:c2:64:86:fa:4f:ed:b8:f0:0e:ba:38:ea:30:ba:18: 5a:5d:90:99:f5:27:91:90:ce:99:f3:68:5d:28:31:2d:c1:f8: 0b:26:f3:9c:29:b0:9d:0a:06:1e:8f:ce:3e:7f:28:58:03:ea: 39:26:2a:c8:55:8f:db:fd:cd:1b:d8:e0:7a:b6:3e:73:c4:16: 9f:2c:f1:22:b3:57:66:81:91:5e:65:45:ce:60:44:ee:b4:2e: 3e:6e:d2:ce:78:f4:f7:eb:e5:6d:c9:2c:38:e3:d7:e3:2c:67: 81:63:41:34:ca:69:e2:13:45:ad:d9:03:60:d5:6e:4b:a7:ba: 39:cb:cd:1a:42:84:cd:ec:2d:8c:f8:00:62:9d:b1:74:68:73: 1d:27:82:4e:d4:47:f8:38:c4:44:6b:80:b2:44:65:15:7d:5b: 83:21:24:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBynJ3PJrtrS9zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVhNjdiOWUtMWM5OS00YjFjLThjNTAtMDU1YzEwZDRk NTVkMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NmY5NjhhYzItODI3ZS00ZTA5LThhZWEtNjBiZTVmNGY0MjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk2hBV1PS14RgibgvrEx5vqk1TfyiTwoFJUs k/DBNvgsKbf0BGjJN2U1Ad9qIQb5y5fURrrvbttOJc9QZCpaE2AZguA7H/ZLBq8C 66J0ya715psWbWz9Dqi0wx42cFf8HT+m0Dw9KJfy12kaewsg5nPny4AyEz1y3vo7 SRdtI4/9n/pAGTC4olv1IxMCEmDAVMLyUqO+19IIGcm2VZaV3BQP5gjF+Xz+P5zG mVkxV0lKQgL22vrPlKoshoVwjOOfNpMpsMVVFLqWECRkoWLezk9gGrkzOsgGd/Wv XqAH/+uNpVEUUlIiA4/Tk5K9O2a9e3y969v8Gd6dih3RKCQlsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5VvVVpNI9DdtPhV5C3PX/A0t5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZWE2 N2I5ZS0xYzk5LTRiMWMtOGM1MC0wNTVjMTBkNGQ1NWQvNWQyYmZlZDgtMzYzZS0z ZTJiLTkxOWYtMTAwYmE3N2Y5N2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGVhNjdiOWUtMWM5OS00YjFjLThj NTAtMDU1YzEwZDRkNTVkLzBlYTY3YjllLTFjOTktNGIxYy04YzUwLTA1NWMxMGQ0 ZDU1ZC5jcmwwHwYDVR0jBBgwFoAUj/m9ZGJvaK1PUYF0eFedVEqgKbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZWE2N2I5ZS0xYzk5LTRiMWMtOGM1MC0wNTVj MTBkNGQ1NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI+G71ZUFWU1urD2dpJgtosl66qT/gy17N1nNYWIhEEXEktj2wSk5td TdxXIc0CX4FGsdP45VAoyTs5iPQpl5cr6OC+mnlui0BM3Oez5ipv9pxeHzLLYmCS wa45ucJkhvpP7bjwDro46jC6GFpdkJn1J5GQzpnzaF0oMS3B+Asm85wpsJ0KBh6P zj5/KFgD6jkmKshVj9v9zRvY4Hq2PnPEFp8s8SKzV2aBkV5lRc5gRO60Lj5u0s54 9Pfr5W3JLDjj1+MsZ4FjQTTKaeITRa3ZA2DVbkunujnLzRpChM3sLYz4AGKdsXRo cx0ngk7UR/g4xERrgLJEZRV9W4MhJNI= -----END CERTIFICATE-----Generated at Mon Oct 20 04:16:20 2025 by rpki-client