$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bb6b9ed0-44ec-3b3c-9721-2f0052cc18e6.roa File: bb6b9ed0-44ec-3b3c-9721-2f0052cc18e6.roa (raw, json) Hash identifier: awxE2b3MJniEvnLKPLMWdSU5SbNb610ncwXGNmhLW7s= Subject key identifier: A8:B6:FE:BC:6D:A5:21:9A:B8:AD:20:00:12:CE:F7:0B:C0:D4:D0:A1 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B2CF6E73569306AA4BBAE7A00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bb6b9ed0-44ec-3b3c-9721-2f0052cc18e6.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 216.219.126.0/24 maxlen: 24 216.219.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e7:35:69:30:6a:a4:bb:ae:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=9fa02b99-2829-482e-b2c0-376b88bd4d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:71:41:8f:e0:22:c4:d5:9f:27:bc:d4:1c:08: d5:11:1c:b3:6c:42:ea:0c:c9:da:f3:23:63:54:98: aa:ee:41:b3:c0:6e:28:a5:05:e9:a5:49:f5:d2:e2: 96:eb:f0:a6:49:38:82:e8:16:5b:5d:de:f5:c4:4f: 12:f1:3b:11:74:33:d9:50:f4:a4:f2:51:61:b1:3b: f7:9d:b5:7a:82:ef:9d:3a:21:cb:22:80:41:f9:48: 3c:a5:0e:aa:ac:56:1f:42:7e:e5:69:9c:6b:71:52: 80:bc:dd:29:d1:da:c5:6f:b9:d7:44:e2:94:6a:58: f1:37:87:26:a5:a5:70:77:88:5a:9e:d5:ab:f6:3e: 00:07:f3:4a:3a:c8:13:ee:3f:57:31:0f:f1:b4:d2: 45:e4:3a:f9:2e:d0:f7:d0:d1:8c:c9:a9:32:84:6a: 7e:d3:67:12:df:76:4f:59:3e:de:ff:7d:67:db:d2: 75:86:10:5b:30:6e:4e:12:dc:ee:fd:56:71:ab:ab: 94:d1:67:b0:e8:19:4c:b9:85:51:e5:05:ed:a5:38: 3b:ce:58:f7:a6:68:56:db:e8:73:61:3a:72:73:86: 18:60:81:d3:b3:8f:56:5c:1b:43:0c:86:ff:16:78: eb:b8:1a:a4:cc:68:12:fe:07:93:c6:f9:f2:47:1e: 61:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:FE:BC:6D:A5:21:9A:B8:AD:20:00:12:CE:F7:0B:C0:D4:D0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bb6b9ed0-44ec-3b3c-9721-2f0052cc18e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 216.219.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:17:50:e2:c0:8b:9d:58:26:4c:f8:83:96:9e:9a:ac:94:63: 8b:2d:24:7d:58:57:61:4f:84:4b:d8:4d:4e:bf:ae:93:cd:f7: 4f:9a:39:a7:57:2e:4f:6c:cd:96:19:98:a3:01:24:e2:30:a5: 99:5c:3d:c2:b3:01:4d:88:63:ed:ff:dd:8c:dc:55:a4:12:11: d1:2d:fa:01:d2:a4:f7:1e:45:05:91:ad:89:ed:97:7e:83:21: 95:44:a7:f2:61:f3:8a:0a:9d:47:03:4a:9d:3d:88:62:39:25: 6d:af:70:cd:f3:d4:8b:92:61:9b:fe:66:fb:80:8f:d3:bf:53: 83:73:8b:b3:41:c5:9b:aa:05:e0:02:8e:75:cf:5a:a6:78:d7: bc:54:a4:2a:6b:4e:9c:6e:df:20:8c:8e:a2:88:c6:1a:fd:b1: f2:4f:9a:61:5b:c4:d2:eb:fc:de:97:b1:f3:68:26:0e:1e:c2: 03:5d:43:a3:af:15:23:d1:26:b2:a9:9b:c2:37:e4:c9:0c:26: c6:09:2f:9e:39:5e:dd:87:f0:c2:b2:49:5b:fc:e3:bc:d3:84: a7:90:b5:14:8a:fc:a1:b3:b5:39:c8:4b:a1:e7:ac:31:49:c2: 52:f2:79:1d:1a:ee:34:2d:12:c2:81:ce:7f:e5:95:9a:bb:aa: cb:88:fb:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uc1aTBqpLuuegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk OWZhMDJiOTktMjgyOS00ODJlLWIyYzAtMzc2Yjg4YmQ0ZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnFBj+AixNWfJ7zUHAjVERyzbELqDMna8yNj VJiq7kGzwG4opQXppUn10uKW6/CmSTiC6BZbXd71xE8S8TsRdDPZUPSk8lFhsTv3 nbV6gu+dOiHLIoBB+Ug8pQ6qrFYfQn7laZxrcVKAvN0p0drFb7nXROKUaljxN4cm paVwd4hantWr9j4AB/NKOsgT7j9XMQ/xtNJF5Dr5LtD30NGMyakyhGp+02cS33ZP WT7e/31n29J1hhBbMG5OEtzu/VZxq6uU0Wew6BlMuYVR5QXtpTg7zlj3pmhW2+hz YTpyc4YYYIHTs49WXBtDDIb/FnjruBqkzGgS/geTxvnyRx5hCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKi2/rxtpSGauK0gABLO9wvA1NChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmI2YjllZDAtNDRlYy0z YjNjLTk3MjEtMmYwMDUyY2MxOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Nt+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYXUOLAi51YJkz4g5aemqyUY4stJH1YV2FPhEvYTU6/rpPN90+aOadX Lk9szZYZmKMBJOIwpZlcPcKzAU2IY+3/3YzcVaQSEdEt+gHSpPceRQWRrYntl36D IZVEp/Jh84oKnUcDSp09iGI5JW2vcM3z1IuSYZv+ZvuAj9O/U4Nzi7NBxZuqBeAC jnXPWqZ417xUpCprTpxu3yCMjqKIxhr9sfJPmmFbxNLr/N6XsfNoJg4ewgNdQ6Ov FSPRJrKpm8I35MkMJsYJL545Xt2H8MKySVv847zThKeQtRSK/KGztTnIS6HnrDFJ wlLyeR0a7jQtEsKBzn/llZq7qsuI+7w= -----END CERTIFICATE-----Generated at Mon Oct 20 02:09:09 2025 by rpki-client