$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/518e9091-b854-3d66-ba08-f6d275b4138b.roa File: 518e9091-b854-3d66-ba08-f6d275b4138b.roa (raw, json) Hash identifier: O2F1PtC3w2Y2h5TkgFmMoJrmBEYoy0/MLmuLuSGs7Lo= Subject key identifier: A5:01:AB:EA:52:2C:E1:73:99:BA:D2:41:CA:B0:74:2B:95:2A:86:5A Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584B25FC3F5095986CFFF90D7100 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/518e9091-b854-3d66-ba08-f6d275b4138b.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 46450 IP address blocks: 208.64.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:3f:50:95:98:6c:ff:f9:0d:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=4f2309c9-3d1a-4d0b-8629-0b69323441de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e8:8c:a9:ac:22:c2:8c:2a:0c:f8:2e:8c:ad: 83:86:02:fe:02:8c:b7:03:ac:95:53:a0:26:fe:65: a6:a3:42:73:ee:6d:c6:f7:62:6e:21:6c:13:f4:c0: a2:e1:06:e6:7a:85:6f:45:cc:49:79:01:2e:73:33: 25:09:97:90:53:57:13:18:51:77:4b:51:aa:fa:4e: af:49:ce:19:ce:bf:b8:f1:8c:00:b7:f2:e6:58:2b: cc:b6:67:cb:aa:b3:ca:d1:84:35:5d:16:55:16:43: 44:39:e2:73:03:73:b6:ee:2e:6d:de:ce:af:b2:59: e7:ef:a6:f1:72:11:fe:0e:36:a7:5b:29:fe:46:47: 53:3a:11:18:fd:3a:9b:4f:f9:9d:78:fd:f2:9d:0d: 65:75:e8:4f:af:44:52:00:8a:65:bb:0e:e1:75:2d: 80:0c:1b:d3:5b:f9:2f:5d:08:70:26:cd:ad:a2:8c: e6:26:18:c9:57:5e:b4:96:8d:bf:bf:f8:09:19:0e: d9:53:22:e7:4a:16:3b:4d:5e:60:87:90:b0:98:68: a4:ff:ae:5f:39:3c:63:56:64:2e:01:a2:40:6d:98: 26:f1:36:33:b6:76:be:22:20:a9:28:7d:bd:59:f2: 95:fa:44:a8:d3:26:59:54:10:c4:88:0b:bc:5a:cc: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:01:AB:EA:52:2C:E1:73:99:BA:D2:41:CA:B0:74:2B:95:2A:86:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/518e9091-b854-3d66-ba08-f6d275b4138b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 208.64.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f8:59:fa:0d:a3:57:f3:48:41:c8:82:7f:4a:9c:52:e9:79: 56:b6:24:5f:a3:e7:34:93:b2:76:a1:1e:fe:76:93:cc:7e:ad: 41:46:a1:e5:1e:2b:d9:a7:f8:28:89:09:b8:ef:4c:47:c7:d9: 94:07:5f:83:d1:0c:86:f6:6c:9c:f8:d1:4a:01:04:99:c1:5b: ef:e0:fd:cd:ca:19:f5:74:c5:88:1c:3f:cd:65:e2:26:96:56: eb:af:c9:f4:0b:65:d3:6c:d6:82:e4:6b:dc:e6:1f:a4:af:91: 20:b9:4d:4d:2f:d8:8e:af:c7:d8:c5:27:b8:22:3a:f6:7b:b9: 13:70:ae:5b:ca:40:ff:c3:56:47:10:1f:54:2f:be:91:15:12: de:76:e0:15:c7:fb:aa:cc:8f:a3:1d:5f:59:bd:81:2c:4e:73: 6b:fb:e0:9e:a3:9a:5b:e8:53:d5:7f:16:82:26:ed:19:39:6c: 2a:7d:c7:74:31:60:09:59:08:b5:59:3f:d1:23:f8:1e:15:aa: 6b:7d:c6:94:64:7c:11:28:e3:49:0b:50:e8:34:69:8b:25:33: a6:6f:e4:b1:7c:05:54:8f:8a:b1:21:40:79:66:4e:31:ee:04: f7:29:e9:f0:78:94:51:26:04:11:b6:a1:d7:23:d4:95:7d:22: 39:18:b8:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/D9QlZhs//kNcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NGYyMzA5YzktM2QxYS00ZDBiLTg2MjktMGI2OTMyMzQ0MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOiMqawiwowqDPgujK2DhgL+Aoy3A6yVU6Am /mWmo0Jz7m3G92JuIWwT9MCi4QbmeoVvRcxJeQEuczMlCZeQU1cTGFF3S1Gq+k6v Sc4Zzr+48YwAt/LmWCvMtmfLqrPK0YQ1XRZVFkNEOeJzA3O27i5t3s6vslnn76bx chH+DjanWyn+RkdTOhEY/TqbT/mdeP3ynQ1ldehPr0RSAIpluw7hdS2ADBvTW/kv XQhwJs2toozmJhjJV160lo2/v/gJGQ7ZUyLnShY7TV5gh5CwmGik/65fOTxjVmQu AaJAbZgm8TYztna+IiCpKH29WfKV+kSo0yZZVBDEiAu8Wszx2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUBq+pSLOFzmbrSQcqwdCuVKoZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvNTE4ZTkwOTEtYjg1NC0z ZDY2LWJhMDgtZjZkMjc1YjQxMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EAbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH4WfoNo1fzSEHIgn9KnFLpeVa2JF+j5zSTsnahHv52k8x+rUFGoeUe K9mn+CiJCbjvTEfH2ZQHX4PRDIb2bJz40UoBBJnBW+/g/c3KGfV0xYgcP81l4iaW VuuvyfQLZdNs1oLka9zmH6SvkSC5TU0v2I6vx9jFJ7giOvZ7uRNwrlvKQP/DVkcQ H1QvvpEVEt524BXH+6rMj6MdX1m9gSxOc2v74J6jmlvoU9V/FoIm7Rk5bCp9x3Qx YAlZCLVZP9Ej+B4Vqmt9xpRkfBEo40kLUOg0aYslM6Zv5LF8BVSPirEhQHlmTjHu BPcp6fB4lFEmBBG2odcj1JV9IjkYuKc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:32:59 2025 by rpki-client