$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a152d8c4-2eed-362c-b195-c5f6e1880722.roa File: a152d8c4-2eed-362c-b195-c5f6e1880722.roa (raw, json) Hash identifier: UvIDDGo5TyM9DHEH9n7pc3mTCVPKYW+V6juZoJQ44a0= Subject key identifier: 47:CD:FB:14:96:91:67:2A:C9:E9:08:1E:D1:B9:F6:47:95:94:4D:72 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584B715CB1116BD991972181B400 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a152d8c4-2eed-362c-b195-c5f6e1880722.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 393336 IP address blocks: 216.73.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b1:11:6b:d9:91:97:21:81:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=32a95310-4684-4ca7-8efe-d553c99af56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a9:18:30:c6:57:9a:74:08:09:6e:4b:50:90: f6:6c:86:00:32:41:8c:44:f8:2d:35:39:03:25:e7: ed:95:66:91:5f:09:86:67:fe:e8:44:9c:28:03:f9: b3:c8:b3:0c:27:b2:61:12:57:99:f1:dd:87:24:09: f9:65:20:dc:c8:51:76:ed:3b:3f:b4:92:49:8c:b8: 67:9c:ed:1e:a2:39:90:fa:0e:aa:fb:41:ce:de:0e: b1:22:9a:e8:a4:41:bb:98:89:cf:1a:9a:b6:cf:84: d1:97:41:f1:e8:80:42:93:26:a0:31:6a:e9:20:26: b0:af:48:1c:23:ba:3b:db:ca:3b:7f:35:32:ff:60: fc:a7:35:35:43:12:17:01:cd:51:0e:a0:24:15:1c: 9f:ff:f6:42:58:ea:76:06:90:db:f0:4c:25:b9:b3: 14:0f:e3:96:49:31:b5:86:5a:82:41:4a:60:d4:8b: b0:14:c4:b5:66:1c:a0:a6:ae:3e:2e:0d:bf:b2:9e: 2a:19:ac:8b:65:97:9d:ce:a7:2f:3f:5a:1e:fd:54: e7:86:cd:1d:5e:40:5c:bf:71:bb:e7:91:75:d2:0b: 59:0d:60:8d:72:66:46:1d:4e:a6:52:b4:20:d4:eb: d4:a8:7e:45:c8:31:d8:71:a4:ca:8c:0e:a4:e9:d4: 50:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CD:FB:14:96:91:67:2A:C9:E9:08:1E:D1:B9:F6:47:95:94:4D:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a152d8c4-2eed-362c-b195-c5f6e1880722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 216.73.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:65:88:5d:bd:1d:13:63:45:2e:ba:cb:44:03:bd:18:60:98: 83:a1:f6:a1:ac:5f:9e:49:d1:94:72:5d:2a:61:cf:fb:b1:f4: fd:fa:5e:d3:05:18:71:f8:26:28:1d:94:6a:49:36:3b:6f:25: ec:f1:70:5d:72:ca:0d:1f:dc:73:7a:85:65:64:6f:8c:c6:79: 1a:3c:a3:77:d7:e2:c2:8f:e7:23:9c:7b:3a:be:89:bf:89:2d: ce:33:ef:c3:92:09:a6:05:9c:c8:0f:f8:41:10:71:82:2c:5c: c7:ed:5f:3d:79:d0:00:23:f8:45:e2:e3:4d:95:0e:8d:0a:0b: 2d:e5:d0:07:d3:2d:63:f0:b8:c9:eb:c3:d0:38:b0:df:2e:3b: 74:5b:1e:01:00:ef:c0:39:dc:02:f9:80:2e:d9:dd:52:eb:5f: 24:08:e4:d9:37:1a:72:ae:a5:6e:a6:ac:86:9a:ef:b8:ef:62: a5:aa:26:17:fa:5e:28:20:28:b0:88:40:02:8d:1d:55:8c:1f: dc:cd:3e:2a:c1:61:89:d9:4c:7f:8d:5a:5c:37:d6:b7:05:0c: 95:47:ba:b5:23:27:bf:c7:75:d6:17:04:de:86:56:ce:86:45: 3b:65:d4:dd:dd:e3:4c:e0:a1:3f:b9:46:b4:c1:f4:c0:fe:1e: 95:ec:a9:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLERa9mRlyGBtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MzJhOTUzMTAtNDY4NC00Y2E3LThlZmUtZDU1M2M5OWFmNTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6kYMMZXmnQICW5LUJD2bIYAMkGMRPgtNTkD JeftlWaRXwmGZ/7oRJwoA/mzyLMMJ7JhEleZ8d2HJAn5ZSDcyFF27Ts/tJJJjLhn nO0eojmQ+g6q+0HO3g6xIpropEG7mInPGpq2z4TRl0Hx6IBCkyagMWrpICawr0gc I7o728o7fzUy/2D8pzU1QxIXAc1RDqAkFRyf//ZCWOp2BpDb8EwlubMUD+OWSTG1 hlqCQUpg1IuwFMS1Zhygpq4+Lg2/sp4qGayLZZedzqcvP1oe/VTnhs0dXkBcv3G7 55F10gtZDWCNcmZGHU6mUrQg1OvUqH5FyDHYcaTKjA6k6dRQnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfN+xSWkWcqyekIHtG59keVlE1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYTE1MmQ4YzQtMmVlZC0z NjJjLWIxOTUtYzVmNmUxODgwNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Em0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtliF29HRNjRS66y0QDvRhgmIOh9qGsX55J0ZRyXSphz/ux9P36XtMF GHH4JigdlGpJNjtvJezxcF1yyg0f3HN6hWVkb4zGeRo8o3fX4sKP5yOcezq+ib+J Lc4z78OSCaYFnMgP+EEQcYIsXMftXz150AAj+EXi402VDo0KCy3l0AfTLWPwuMnr w9A4sN8uO3RbHgEA78A53AL5gC7Z3VLrXyQI5Nk3GnKupW6mrIaa77jvYqWqJhf6 XiggKLCIQAKNHVWMH9zNPirBYYnZTH+NWlw31rcFDJVHurUjJ7/HddYXBN6GVs6G RTtl1N3d40zgoT+5RrTB9MD+HpXsqWU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:16 2025 by rpki-client