$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/0db3b563-3287-3841-a396-41461b2172ba.roa File: 0db3b563-3287-3841-a396-41461b2172ba.roa (raw, json) Hash identifier: dCZ5pSroH00Eb+KRlk1sfl+8fc6YaOP6vZyav0zhT24= Subject key identifier: 9D:9E:A8:28:FB:70:58:28:11:3C:42:2A:1F:EC:C9:DA:33:E1:C6:16 Certificate issuer: /CN=7fb67441-9735-44cc-ae5f-20a79cca0b47 Certificate serial: 010D0C9F4328584B944221A323C0468F281AFD40 Authority key identifier: AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/0db3b563-3287-3841-a396-41461b2172ba.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 29894 IP address blocks: 216.122.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:21:a3:23:c0:46:8f:28:1a:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fb67441-9735-44cc-ae5f-20a79cca0b47 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=292ef782-3c84-4b13-9a98-73d79c32d7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1f:0b:66:aa:1a:b0:b9:43:07:a9:91:f7:6a: b5:e9:0a:dd:c0:58:69:76:78:ef:50:85:d4:30:13: 6a:ed:e3:24:27:b3:56:e0:e0:70:6c:3d:c5:9c:99: f8:96:45:22:f9:77:1e:08:07:45:79:88:82:9a:db: f3:4c:e9:6f:7a:08:9d:8b:44:de:e9:ad:b2:92:e7: 8a:b9:53:e5:10:37:49:99:c8:c5:b0:21:f2:91:21: f9:fd:07:ca:7b:f7:34:01:2a:c4:6f:ae:f5:6d:7c: a9:a0:a4:8d:ae:0d:57:07:6a:e0:de:ef:2c:cb:c5: 75:83:c2:e3:4e:7b:91:53:d8:d7:29:66:82:13:05: 61:e2:ff:4c:b2:20:7c:33:5c:3e:f8:b3:10:8b:97: 2b:f1:f2:d0:be:e6:0b:a0:a5:cf:b9:b7:79:e7:3d: b0:16:e1:b4:07:db:1e:5f:f9:fe:c0:38:75:64:6c: c9:9a:28:63:c5:a5:42:11:7e:07:97:05:ab:fc:7f: 99:46:38:6e:d7:c7:7d:89:5a:ea:7b:11:4b:49:01: dd:b7:fc:33:b6:a7:04:13:64:ef:13:87:5e:7b:e9: 81:6e:9b:4d:48:c6:09:42:e2:61:85:ef:a1:db:ab: 0e:a7:a6:35:50:a0:bc:f0:68:fd:83:22:0d:fa:e6: ed:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9E:A8:28:FB:70:58:28:11:3C:42:2A:1F:EC:C9:DA:33:E1:C6:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/0db3b563-3287-3841-a396-41461b2172ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.crl X509v3 Authority Key Identifier: keyid:AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer sbgp-ipAddrBlock: critical IPv4: 216.122.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b9:85:45:9d:95:bd:a1:ca:49:bc:ed:1b:42:ce:4c:96:21: ef:5a:1a:85:c1:06:51:17:36:61:17:bd:71:d8:f8:9b:3a:3c: e8:8e:71:8f:be:b4:c5:46:d9:81:d7:30:81:f0:89:b1:7f:bc: 4a:86:43:6e:02:89:59:03:5d:03:a0:db:32:d4:c1:0e:d2:d1: 01:01:8d:74:ea:6b:3d:65:36:5d:6c:69:a6:b3:bb:1e:8d:28: 49:ec:f4:c6:06:b4:66:c3:6a:08:f6:d1:c1:95:85:01:09:93: 1d:07:6c:d0:1b:56:f6:36:59:98:98:81:07:1b:56:be:f2:7f: e2:1d:40:60:22:c4:82:fb:07:71:4f:43:dc:bb:57:b3:fc:b9: b9:4a:7f:0a:3f:f8:47:9e:2f:d7:5b:34:9f:8e:00:13:71:d4: 82:24:7b:f2:ac:99:96:43:d4:44:3f:c4:d7:2d:16:d3:85:c0: d3:57:5c:27:37:4c:4e:6e:5f:df:3c:a8:0b:fb:c2:78:22:49: 15:ea:b8:e0:f7:87:30:7c:ec:3d:82:ed:47:c8:25:47:29:4f: 07:d6:2e:0f:12:04:0d:52:dd:a4:dd:cf:95:78:5a:5d:f5:e3: a9:07:ce:99:fd:47:db:e7:2c:8e:49:c2:fc:0d:b3:a0:7d:b2: 0f:9d:8e:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiGjI8BGjyga/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ZiNjc0NDEtOTczNS00NGNjLWFlNWYtMjBhNzljY2Ew YjQ3MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk MjkyZWY3ODItM2M4NC00YjEzLTlhOTgtNzNkNzljMzJkN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x8LZqoasLlDB6mR92q16QrdwFhpdnjvUIXU MBNq7eMkJ7NW4OBwbD3FnJn4lkUi+XceCAdFeYiCmtvzTOlvegidi0Te6a2ykueK uVPlEDdJmcjFsCHykSH5/QfKe/c0ASrEb671bXypoKSNrg1XB2rg3u8sy8V1g8Lj TnuRU9jXKWaCEwVh4v9MsiB8M1w++LMQi5cr8fLQvuYLoKXPubd55z2wFuG0B9se X/n+wDh1ZGzJmihjxaVCEX4HlwWr/H+ZRjhu18d9iVrqexFLSQHdt/wztqcEE2Tv E4dee+mBbptNSMYJQuJhhe+h26sOp6Y1UKC88Gj9gyIN+ubtvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2eqCj7cFgoETxCKh/sydoz4cYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZmI2 NzQ0MS05NzM1LTQ0Y2MtYWU1Zi0yMGE3OWNjYTBiNDcvMGRiM2I1NjMtMzI4Ny0z ODQxLWEzOTYtNDE0NjFiMjE3MmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2ZiNjc0NDEtOTczNS00NGNjLWFl NWYtMjBhNzljY2EwYjQ3LzdmYjY3NDQxLTk3MzUtNDRjYy1hZTVmLTIwYTc5Y2Nh MGI0Ny5jcmwwHwYDVR0jBBgwFoAUr0dVvSvoTohfSBrj6ekybcmsTrMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZmI2NzQ0MS05NzM1LTQ0Y2MtYWU1Zi0yMGE3 OWNjYTBiNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW5hUWdlb2hykm87RtCzkyWIe9aGoXBBlEXNmEXvXHY+Js6POiOcY++ tMVG2YHXMIHwibF/vEqGQ24CiVkDXQOg2zLUwQ7S0QEBjXTqaz1lNl1saaazux6N KEns9MYGtGbDagj20cGVhQEJkx0HbNAbVvY2WZiYgQcbVr7yf+IdQGAixIL7B3FP Q9y7V7P8ublKfwo/+EeeL9dbNJ+OABNx1IIke/KsmZZD1EQ/xNctFtOFwNNXXCc3 TE5uX988qAv7wngiSRXquOD3hzB87D2C7UfIJUcpTwfWLg8SBA1S3aTdz5V4Wl31 46kHzpn9R9vnLI5JwvwNs6B9sg+djnY= -----END CERTIFICATE-----Generated at Mon Oct 20 19:49:08 2025 by rpki-client