$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/e5a6970c-4efb-3257-8f40-85b09219d1cb.roa File: e5a6970c-4efb-3257-8f40-85b09219d1cb.roa (raw, json) Hash identifier: Z+JgZXvHbJZ2rTtWt9reMOckpSGKkxEo2Qhk0QagugA= Subject key identifier: F1:E6:24:F7:14:52:44:23:6B:82:23:DF:87:79:87:E0:17:6E:1E:5D Certificate issuer: /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d Certificate serial: 010D0C9F4328584B5B0739C5A4A874936F9B0F00 Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/e5a6970c-4efb-3257-8f40-85b09219d1cb.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 206.219.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:39:c5:a4:a8:74:93:6f:9b:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=d9a10382-8d7b-41ca-b62a-14015e7c746b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:46:ed:95:aa:6f:6f:77:75:ad:28:13:86:a8: 3a:89:6d:bc:00:26:2c:33:7a:fb:d3:e4:0a:d8:fd: 95:11:29:85:c3:53:8b:98:8c:e9:a7:17:11:58:f3: 3f:02:d7:8e:1f:fb:ae:fc:67:de:56:ee:54:86:62: d1:29:48:dd:36:44:d6:c7:ca:3b:0f:a1:5d:08:94: c0:be:6f:7c:a9:bd:32:1f:fa:09:5a:83:ce:0b:c8: 31:b7:02:60:b9:3a:9b:d8:d9:b5:fa:cc:01:85:70: 4b:35:70:4d:14:da:67:39:36:ce:21:ab:79:04:b6: 48:e9:b7:ed:39:b8:0a:15:76:2a:a9:3c:78:89:6f: c8:0b:97:14:90:e7:15:28:62:e9:da:4a:20:08:20: b4:f5:a0:fb:3d:ca:ed:b0:00:20:7f:4d:95:05:12: fb:50:ab:bd:ac:96:e4:bc:cf:4a:da:aa:f4:2b:29: 65:e6:2c:d5:b5:37:ed:a5:b8:2c:6f:fa:ea:e4:c6: 43:c3:e4:18:9a:7e:76:57:41:9b:8d:11:b4:f0:64: cb:e9:ae:98:a1:de:d2:d4:6e:fc:19:b6:5a:20:56: d9:f7:ea:72:ad:e6:13:19:b6:02:6a:c0:fa:1c:3e: 98:14:70:27:d4:48:7a:0b:9d:9b:93:2c:35:9b:33: 18:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E6:24:F7:14:52:44:23:6B:82:23:DF:87:79:87:E0:17:6E:1E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/e5a6970c-4efb-3257-8f40-85b09219d1cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl X509v3 Authority Key Identifier: keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer sbgp-ipAddrBlock: critical IPv4: 206.219.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:18:8e:9e:f2:e6:fd:92:00:37:7a:84:1e:cd:93:86:13:2a: fd:c7:f8:93:d9:20:a4:a9:39:a7:8b:67:79:bf:67:19:c9:4a: 4e:3d:bb:60:09:ad:96:1b:d6:d3:9a:a8:74:2b:04:f2:25:f2: 5d:20:31:15:09:18:8a:a0:4f:64:73:65:17:81:cc:2a:68:44: 80:76:b4:60:34:e5:ef:9d:bc:60:59:df:9a:16:1d:f6:d6:9f: 37:66:b7:52:a3:54:63:b9:6d:ca:60:57:29:aa:f2:93:f8:82: e9:2d:b9:13:1a:34:fb:3c:4f:22:c2:5e:57:97:06:a3:bc:29: 17:79:65:f3:8e:ef:e7:92:de:72:c1:33:56:d3:7b:fe:46:73: b3:c1:70:18:3a:40:65:8f:f0:e0:75:78:77:4a:f6:31:8e:06: 9e:82:0d:26:ec:31:4a:8b:52:1b:9f:85:25:84:b9:34:3e:68: e5:75:8e:e4:3a:eb:df:4c:b1:04:2c:ca:4a:eb:b0:48:57:f2: 4d:2c:cf:30:e9:71:bb:ab:72:8b:5e:85:9f:f8:d5:c4:3b:a8: e7:15:a6:9a:02:3f:79:07:d0:f3:0a:30:77:54:08:c3:a8:dd: c1:49:fa:00:9a:11:1d:67:aa:4e:3f:82:44:a7:ad:fe:d0:fc: 76:9f:d3:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBznFpKh0k2+bDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVhNjdiOWUtMWM5OS00YjFjLThjNTAtMDU1YzEwZDRk NTVkMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZDlhMTAzODItOGQ3Yi00MWNhLWI2MmEtMTQwMTVlN2M3NDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkbtlapvb3d1rSgThqg6iW28ACYsM3r70+QK 2P2VESmFw1OLmIzppxcRWPM/AteOH/uu/GfeVu5UhmLRKUjdNkTWx8o7D6FdCJTA vm98qb0yH/oJWoPOC8gxtwJguTqb2Nm1+swBhXBLNXBNFNpnOTbOIat5BLZI6bft ObgKFXYqqTx4iW/IC5cUkOcVKGLp2kogCCC09aD7PcrtsAAgf02VBRL7UKu9rJbk vM9K2qr0Kyll5izVtTftpbgsb/rq5MZDw+QYmn52V0GbjRG08GTL6a6Yod7S1G78 GbZaIFbZ9+pyreYTGbYCasD6HD6YFHAn1Eh6C52bkyw1mzMYAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHmJPcUUkQja4Ij34d5h+AXbh5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZWE2 N2I5ZS0xYzk5LTRiMWMtOGM1MC0wNTVjMTBkNGQ1NWQvZTVhNjk3MGMtNGVmYi0z MjU3LThmNDAtODViMDkyMTlkMWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGVhNjdiOWUtMWM5OS00YjFjLThj NTAtMDU1YzEwZDRkNTVkLzBlYTY3YjllLTFjOTktNGIxYy04YzUwLTA1NWMxMGQ0 ZDU1ZC5jcmwwHwYDVR0jBBgwFoAUj/m9ZGJvaK1PUYF0eFedVEqgKbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZWE2N2I5ZS0xYzk5LTRiMWMtOGM1MC0wNTVj MTBkNGQ1NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztvhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUYjp7y5v2SADd6hB7Nk4YTKv3H+JPZIKSpOaeLZ3m/ZxnJSk49u2AJ rZYb1tOaqHQrBPIl8l0gMRUJGIqgT2RzZReBzCpoRIB2tGA05e+dvGBZ35oWHfbW nzdmt1KjVGO5bcpgVymq8pP4guktuRMaNPs8TyLCXleXBqO8KRd5ZfOO7+eS3nLB M1bTe/5Gc7PBcBg6QGWP8OB1eHdK9jGOBp6CDSbsMUqLUhufhSWEuTQ+aOV1juQ6 699MsQQsykrrsEhX8k0szzDpcburcotehZ/41cQ7qOcVppoCP3kH0PMKMHdUCMOo 3cFJ+gCaER1nqk4/gkSnrf7Q/Haf0ys= -----END CERTIFICATE-----Generated at Mon Oct 20 12:57:03 2025 by rpki-client