$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa File: 408e275f-c077-3b66-9a3f-a4e43e87657a.roa (raw, json) Hash identifier: 1NvMY7zBaZEOJplefA97w54yHAItac3VqSAcZoskY44= Subject key identifier: 61:A9:AB:D1:76:AB:B5:D0:9C:39:1C:6E:95:C9:D6:2F:E3:C1:5B:10 Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F4328584B821CD1E4415DA2CF688ECA30 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 22418 IP address blocks: 208.96.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d1:e4:41:5d:a2:cf:68:8e:ca:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=6883b37b-0464-43b3-bfd9-624b522769d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:09:1a:54:0d:0f:b7:d7:07:a6:a6:3c:1e:86: 64:6c:22:d3:a1:e1:92:fe:4c:48:04:c4:a6:6e:bc: 0c:a8:4f:c9:63:c6:41:0c:78:86:38:18:5a:84:39: a4:a1:a0:47:66:fa:8b:d9:dc:08:b3:dd:95:5f:3d: 81:fc:34:25:d6:30:ac:a1:c6:35:3a:f0:f7:f2:a2: 37:67:31:1b:44:68:ef:d1:76:79:67:61:10:be:25: ab:b6:d4:4b:d2:e0:64:e4:56:e6:b2:8d:63:46:73: f6:11:4c:74:fb:a9:32:4b:50:a8:cf:6b:d2:6f:60: 34:67:03:da:47:c0:57:f0:e9:08:e5:90:a6:03:82: f9:bc:34:15:14:9d:c6:3c:3e:76:c3:c6:fe:eb:cc: 82:87:b0:6f:a1:d4:19:e9:12:7e:1d:2e:46:3e:aa: f1:08:d9:c5:f4:2e:3c:ca:e0:91:39:95:f7:de:6b: 58:d3:70:e8:86:56:06:be:7e:8f:2d:f9:98:18:9b: d5:28:0d:49:c8:ed:32:4d:40:fd:da:5c:98:17:f6: 54:db:98:36:60:93:72:c7:fb:f7:9e:fd:c8:88:0e: ce:de:c9:89:e2:c5:d7:a0:b7:1d:93:54:90:e2:18: 48:d3:1a:ff:30:76:dc:35:13:f8:39:9e:d2:3f:4c: e2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A9:AB:D1:76:AB:B5:D0:9C:39:1C:6E:95:C9:D6:2F:E3:C1:5B:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 208.96.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:2e:c1:0c:86:9b:f8:92:57:0d:ad:a9:2f:c5:b7:2b:e0:7b: f4:ea:01:20:42:2c:ac:dc:4f:34:3d:95:b5:d5:63:71:eb:44: 5d:24:98:d0:93:db:c1:d5:71:ea:86:2d:61:65:3f:63:d3:7f: cc:a9:fe:5e:cf:e4:7d:0d:eb:9a:0a:72:c9:a8:79:1f:c6:7b: fc:b8:69:12:49:e7:49:a5:c9:eb:6b:21:a2:88:89:f2:dd:76: 6e:98:f8:0d:7e:64:e7:48:7e:62:60:66:b8:96:27:ce:00:5e: a0:bc:3f:7f:7e:59:e8:c3:ab:2e:5c:09:a4:d2:72:0a:f2:e4: a9:f2:7a:a6:6e:c4:29:4d:0a:49:ec:f7:5c:98:a1:0b:6d:f9: d2:1e:fd:cd:8c:96:e8:15:bc:ff:c8:6a:8d:d7:7a:b6:d1:6d: ad:4d:05:d2:25:44:d2:55:19:97:24:47:bc:44:1b:b3:02:09: e1:06:c3:28:20:a4:d3:92:cf:97:cb:62:92:01:0f:9e:ad:00: 30:5e:49:06:80:d7:55:87:f7:aa:39:05:76:d4:ea:27:3d:2f: 8c:60:01:8a:52:a8:bf:af:d7:c5:ce:75:6a:e8:11:30:91:f7: 37:eb:21:4e:9c:74:cf:73:77:e6:01:3d:86:8a:0e:1c:49:12: 27:a9:90:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNHkQV2iz2iOyjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk Njg4M2IzN2ItMDQ2NC00M2IzLWJmZDktNjI0YjUyMjc2OWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAkaVA0Pt9cHpqY8HoZkbCLToeGS/kxIBMSm brwMqE/JY8ZBDHiGOBhahDmkoaBHZvqL2dwIs92VXz2B/DQl1jCsocY1OvD38qI3 ZzEbRGjv0XZ5Z2EQviWrttRL0uBk5Fbmso1jRnP2EUx0+6kyS1Coz2vSb2A0ZwPa R8BX8OkI5ZCmA4L5vDQVFJ3GPD52w8b+68yCh7BvodQZ6RJ+HS5GPqrxCNnF9C48 yuCROZX33mtY03DohlYGvn6PLfmYGJvVKA1JyO0yTUD92lyYF/ZU25g2YJNyx/v3 nv3IiA7O3smJ4sXXoLcdk1SQ4hhI0xr/MHbcNRP4OZ7SP0ziwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGpq9F2q7XQnDkcbpXJ1i/jwVsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvNDA4ZTI3NWYtYzA3Ny0z YjY2LTlhM2YtYTRlNDNlODc2NTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUuwQyGm/iSVw2tqS/Ftyvge/TqASBCLKzcTzQ9lbXVY3HrRF0kmNCT 28HVceqGLWFlP2PTf8yp/l7P5H0N65oKcsmoeR/Ge/y4aRJJ50mlyetrIaKIifLd dm6Y+A1+ZOdIfmJgZriWJ84AXqC8P39+WejDqy5cCaTScgry5KnyeqZuxClNCkns 91yYoQtt+dIe/c2MlugVvP/Iao3XerbRba1NBdIlRNJVGZckR7xEG7MCCeEGwygg pNOSz5fLYpIBD56tADBeSQaA11WH96o5BXbU6ic9L4xgAYpSqL+v18XOdWroETCR 9zfrIU6cdM9zd+YBPYaKDhxJEiepkMg= -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:47 2025 by rpki-client