$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa File: 2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa (raw, json) Hash identifier: ro3G2sgR8oWifQp9Or2ka9f6k64BUdDQ06EA88H+Zfg= Subject key identifier: 6B:D7:8F:03:D7:F2:53:B5:0D:D7:C9:26:32:0A:D4:0E:8A:F5:0D:97 Certificate issuer: /CN=411f75d5-7410-4ca6-b23e-146e3726e630 Certificate serial: 010D0C9F4328584B8EACC1AFCB06B3E436041340 Authority key identifier: C9:43:90:18:2C:34:67:5A:E2:72:BB:62:46:E2:66:16:1E:4D:64:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 206.80.238.0/24 maxlen: 24 2001:504:91::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c1:af:cb:06:b3:e4:36:04:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411f75d5-7410-4ca6-b23e-146e3726e630 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=a31b08b7-c928-478c-b6bd-8b4f7daaf153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:5d:22:fd:4d:86:1a:9e:2f:3f:29:93:d8: b1:05:13:d6:cc:2b:12:57:4a:82:67:a4:26:95:39: e8:bb:d2:3d:c2:31:94:82:07:4d:91:fa:ca:e0:42: d2:4c:46:cc:05:13:26:6e:a4:4d:2e:89:78:e1:fa: e0:ea:e1:10:a2:9f:13:63:2e:e3:8c:89:a7:7e:bc: 2e:dc:65:96:dc:d7:1d:d8:a6:22:4f:33:00:79:7c: cb:2b:44:8f:3c:79:fb:90:b0:64:32:75:b5:07:90: 40:91:00:b8:ee:87:f3:82:e8:56:6a:d1:1d:78:0a: 38:23:00:55:6c:ba:09:1d:fb:b7:96:69:f3:89:9f: 06:5f:28:80:69:da:85:ee:d5:d2:c8:a3:b1:d4:b6: f5:da:37:40:f1:59:00:0b:5b:4d:bf:1e:87:82:3b: 3b:42:89:e4:71:e7:71:b2:44:a4:55:25:9a:30:78: 04:6c:4a:41:e9:1a:49:87:c5:0d:e6:80:58:31:a4: 82:0b:cb:39:a3:c9:8f:c6:7a:bc:02:dc:df:92:2f: d1:17:eb:5c:73:cd:26:cd:ca:c3:dc:a9:18:5c:3f: 65:1a:38:ff:8a:fc:e8:d3:fa:67:78:d4:c1:11:7c: 19:76:a0:14:66:20:b1:0b:19:7f:46:e0:36:23:d2: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D7:8F:03:D7:F2:53:B5:0D:D7:C9:26:32:0A:D4:0E:8A:F5:0D:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.crl X509v3 Authority Key Identifier: keyid:C9:43:90:18:2C:34:67:5A:E2:72:BB:62:46:E2:66:16:1E:4D:64:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630.cer sbgp-ipAddrBlock: critical IPv4: 206.80.238.0/24 IPv6: 2001:504:91::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:df:68:74:9c:ee:c6:9d:25:57:e1:4f:4f:0a:a7:3e:b5:8a: 38:09:8d:e8:63:11:b7:06:01:a3:f0:82:e6:d7:b1:95:cc:bc: 24:94:5b:64:e5:16:8d:6b:b3:3f:b6:19:42:0a:d3:31:f8:ed: 68:de:a9:50:07:5b:dd:8b:72:23:48:3b:4c:22:1d:98:41:c1: 80:51:fc:b3:40:a0:db:61:26:8f:d9:6c:df:de:46:69:e9:e5: f0:92:ac:f6:33:01:44:a4:5b:30:bb:6c:8a:66:60:92:cb:21: e1:a2:57:3b:3e:f3:a1:04:8a:1f:a0:c2:cb:dc:7b:37:7b:6c: 83:3d:15:df:4a:9d:7e:63:9c:6e:e9:ca:97:ea:76:68:31:0d: 0c:d4:73:b7:08:6c:63:42:ae:a0:b1:82:75:da:13:8b:fe:fe: 44:14:39:25:98:c5:d4:92:80:01:9a:60:8c:67:20:33:e8:6f: e0:a9:30:af:39:20:4c:10:6a:42:57:39:d5:bb:1a:7c:e9:c1: a3:b4:e5:e8:c7:ed:54:5a:1f:3b:d2:82:14:b7:fd:95:fe:0b: 48:a1:e1:0c:30:22:6c:8f:39:b0:b1:df:1a:fb:6b:8f:77:b3: e8:ff:58:ae:e5:91:27:2c:05:23:ed:f1:70:d3:45:03:86:16: 34:8f:ca:bd -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuOrMGvywaz5DYEE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDExZjc1ZDUtNzQxMC00Y2E2LWIyM2UtMTQ2ZTM3MjZl NjMwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YTMxYjA4YjctYzkyOC00NzhjLWI2YmQtOGI0ZjdkYWFmMTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor9dIv1NhhqeLz8pk9ixBRPWzCsSV0qCZ6Qm lTnou9I9wjGUggdNkfrK4ELSTEbMBRMmbqRNLol44frg6uEQop8TYy7jjImnfrwu 3GWW3Ncd2KYiTzMAeXzLK0SPPHn7kLBkMnW1B5BAkQC47ofzguhWatEdeAo4IwBV bLoJHfu3lmnziZ8GXyiAadqF7tXSyKOx1Lb12jdA8VkAC1tNvx6Hgjs7Qonkcedx skSkVSWaMHgEbEpB6RpJh8UN5oBYMaSCC8s5o8mPxnq8Atzfki/RF+tcc80mzcrD 3KkYXD9lGjj/ivzo0/pneNTBEXwZdqAUZiCxCxl/RuA2I9LAnQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGvXjwPX8lO1DdfJJjIK1A6K9Q2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80MTFm NzVkNS03NDEwLTRjYTYtYjIzZS0xNDZlMzcyNmU2MzAvMmI0YjhhYzEtYTE1Ny0z ZTIxLTlmYjktMTg2NTJlNzRlZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDExZjc1ZDUtNzQxMC00Y2E2LWIy M2UtMTQ2ZTM3MjZlNjMwLzQxMWY3NWQ1LTc0MTAtNGNhNi1iMjNlLTE0NmUzNzI2 ZTYzMC5jcmwwHwYDVR0jBBgwFoAUyUOQGCw0Z1ricrtiRuJmFh5NZMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80MTFmNzVkNS03NDEwLTRjYTYtYjIzZS0xNDZl MzcyNmU2MzAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzlDuMA8E AgACMAkDBwAgAQUEAJEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlt9odJzuxp0lV+FPTwqnPrWKOAmN6GMR twYBo/CC5texlcy8JJRbZOUWjWuzP7YZQgrTMfjtaN6pUAdb3YtyI0g7TCIdmEHB gFH8s0Cg22Emj9ls395Gaenl8JKs9jMBRKRbMLtsimZgkssh4aJXOz7zoQSKH6DC y9x7N3tsgz0V30qdfmOcbunKl+p2aDENDNRztwhsY0KuoLGCddoTi/7+RBQ5JZjF 1JKAAZpgjGcgM+hv4KkwrzkgTBBqQlc51bsafOnBo7Tl6MftVFofO9KCFLf9lf4L SKHhDDAibI85sLHfGvtrj3ez6P9YruWRJywFI+3xcNNFA4YWNI/KvQ== -----END CERTIFICATE-----Generated at Sun Oct 19 23:48:52 2025 by rpki-client