$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa File: 08ad9252-a414-3b87-84d9-259b7e5e27cf.roa (raw, json) Hash identifier: X6yC3JFAqDwl7ZXoE/P1tu95ctj2a4NKJPDkpqemLIE= Subject key identifier: 26:55:9B:A6:93:DC:76:44:5E:F6:DC:5A:55:47:E7:EB:72:27:BD:A9 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584B821CD887337AE4E4717DD130 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 46687 IP address blocks: 216.119.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d8:87:33:7a:e4:e4:71:7d:d1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=d987c3d7-7e8d-4117-b504-efcd397a1d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ad:32:4a:59:8b:f6:5a:3d:41:f5:3f:35:06: 89:27:6b:c8:b9:9f:e4:6a:af:1c:de:dc:6f:5d:16: 9f:ea:e2:d5:da:73:ae:34:1b:2d:1d:59:07:04:3d: 74:74:ae:df:81:5a:f5:f4:5b:cd:61:c3:82:b2:f8: fc:56:cd:9d:a6:57:d7:78:c2:53:16:57:e1:f0:39: 2c:4e:61:79:5a:30:9c:06:ec:c2:ba:0a:ea:7a:78: d7:1f:49:4f:96:d9:85:dd:43:b7:1e:d1:79:2d:d5: 5e:a3:e7:7d:d0:9f:f8:96:d8:51:b3:44:e0:5c:db: 5b:1a:b7:24:fb:67:77:19:7d:8f:39:5a:d3:5b:d2: 79:f6:6e:cb:e8:df:56:6b:80:83:27:f4:1f:06:f4: 33:8c:6f:3b:7f:dd:1e:e7:75:e8:a0:fc:b0:a4:ac: be:3e:14:6b:29:7c:29:7f:e6:58:b4:3d:84:a3:b6: 78:ba:92:f8:2f:4f:db:32:7d:22:52:d6:86:68:67: 0e:c1:85:54:fe:3f:e6:0d:68:e8:14:5f:af:12:0c: b7:ec:77:d1:95:90:29:d6:21:c9:1d:0b:ff:69:5a: 57:d8:13:43:e1:02:aa:18:da:14:a7:75:02:3f:7f: 54:e3:d4:80:4d:7d:79:30:6a:25:ac:12:6f:44:6b: 3d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:55:9B:A6:93:DC:76:44:5E:F6:DC:5A:55:47:E7:EB:72:27:BD:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 216.119.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:fc:d9:17:c5:a7:ad:cf:e7:19:4a:c3:ca:6b:54:8b:7b:3c: ec:9a:d9:ef:7c:31:21:f4:13:ed:a9:fc:02:9a:a8:85:73:fd: 3d:f5:bf:4f:49:e5:36:1f:57:e9:4a:ea:55:32:b6:9c:2a:7d: 3a:8a:0b:0b:fb:2e:6c:78:2d:bf:0e:7b:cf:ba:fe:c3:57:a2: 00:ed:af:c5:b5:3d:74:b8:02:58:25:a8:2b:08:35:a4:e9:e1: cf:3b:2a:03:64:02:21:22:b8:0e:bb:3a:2b:93:a9:56:fb:2f: a8:72:5a:c4:ee:41:56:f6:5e:b3:de:cf:0e:c3:d5:73:64:56: 51:01:30:77:57:b8:fb:ee:a3:01:fe:b3:7b:29:22:11:01:a6: e5:eb:79:48:50:32:82:4d:2e:74:69:f3:1d:73:fb:a5:51:3f: 16:c9:89:0a:76:63:e4:ff:65:92:af:b3:c3:6d:6a:07:5c:5e: 89:07:6c:52:c0:bf:e6:78:4f:c1:d8:63:c5:ca:25:a3:6b:9d: a0:13:71:60:ad:b3:43:bb:5b:a6:fe:f4:fb:1b:2c:0a:da:d0: 74:72:c6:f9:41:6b:15:0b:fd:15:28:2b:2f:6a:be:17:9e:4d: 80:0c:19:13:62:92:12:a9:eb:30:89:99:8a:a6:e2:f3:00:47: c7:e6:35:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNiHM3rk5HF90TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZDk4N2MzZDctN2U4ZC00MTE3LWI1MDQtZWZjZDM5N2ExZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA560ySlmL9lo9QfU/NQaJJ2vIuZ/kaq8c3txv XRaf6uLV2nOuNBstHVkHBD10dK7fgVr19FvNYcOCsvj8Vs2dplfXeMJTFlfh8Dks TmF5WjCcBuzCugrqenjXH0lPltmF3UO3HtF5LdVeo+d90J/4lthRs0TgXNtbGrck +2d3GX2POVrTW9J59m7L6N9Wa4CDJ/QfBvQzjG87f90e53XooPywpKy+PhRrKXwp f+ZYtD2Eo7Z4upL4L0/bMn0iUtaGaGcOwYVU/j/mDWjoFF+vEgy37HfRlZAp1iHJ HQv/aVpX2BND4QKqGNoUp3UCP39U49SATX15MGolrBJvRGs9rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZVm6aT3HZEXvbcWlVH5+tyJ72pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvMDhhZDkyNTItYTQxNC0z Yjg3LTg0ZDktMjU5YjdlNWUyN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv82RfFp63P5xlKw8prVIt7POya2e98MSH0E+2p/AKaqIVz/T31v09J 5TYfV+lK6lUytpwqfTqKCwv7Lmx4Lb8Oe8+6/sNXogDtr8W1PXS4AlglqCsINaTp 4c87KgNkAiEiuA67OiuTqVb7L6hyWsTuQVb2XrPezw7D1XNkVlEBMHdXuPvuowH+ s3spIhEBpuXreUhQMoJNLnRp8x1z+6VRPxbJiQp2Y+T/ZZKvs8NtagdcXokHbFLA v+Z4T8HYY8XKJaNrnaATcWCts0O7W6b+9PsbLAra0HRyxvlBaxUL/RUoKy9qvhee TYAMGRNikhKp6zCJmYqm4vMAR8fmNXw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:58:51 2025 by rpki-client