$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa File: 528a072d-fb5e-3209-b0b6-eff453de4aaf.roa (raw, json) Hash identifier: I2VVaQEsCgq92WExeitOoP0TPs6p32KGfUqfNRSfmtc= Subject key identifier: 85:CB:EB:52:AD:CF:B0:18:5B:D8:67:B0:40:E0:5C:65:03:4A:51:FA Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F4328584B8EACC3BA5BDC7C87DC0CA183 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 6639 IP address blocks: 208.168.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c3:ba:5b:dc:7c:87:dc:0c:a1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=590fc817-343c-47da-926c-62914e855fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:10:b8:63:b4:7a:2c:d5:2c:56:7c:15:b6:d3: 43:70:b7:a8:ab:5a:bf:93:2c:34:c4:4b:2c:aa:a0: 60:56:85:d3:26:b9:dd:4c:bc:b6:69:6e:ee:f3:4c: 2d:f7:48:04:38:73:16:a2:5d:d3:91:bd:f5:5b:98: 2f:fc:cc:bc:23:4a:a8:41:72:38:f5:7a:d6:4a:eb: ad:11:72:05:70:14:af:7c:bc:22:29:c1:68:4a:c9: fb:dd:13:0e:c5:e5:df:d6:05:b5:b5:e4:0f:58:1b: 74:1a:4a:8d:35:96:6c:10:2d:93:43:43:9a:f4:38: 35:81:4b:db:0f:8c:6a:aa:95:90:0d:36:17:9d:bd: 2d:0a:ef:cd:06:3c:4c:87:9f:9a:d9:c2:a3:5e:43: f1:db:73:39:29:2f:9a:e8:78:32:7a:bb:ca:7a:19: 68:15:e5:30:54:8f:86:bf:8d:bb:3e:1e:8b:f4:a0: a4:a7:24:c4:e1:fb:09:00:2d:f0:9a:40:8e:e3:3e: 0d:b3:4b:f1:bf:2a:71:93:84:ef:bd:f2:92:4b:fd: 7a:f2:68:03:27:cd:7a:bf:af:a8:a4:8b:63:c1:42: a9:75:94:d7:83:20:c9:b6:72:79:a5:7c:f1:66:e2: 61:ad:41:1b:ef:cc:5d:4a:55:77:4b:06:46:95:62: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CB:EB:52:AD:CF:B0:18:5B:D8:67:B0:40:E0:5C:65:03:4A:51:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 208.168.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:14:37:ce:4a:71:27:2b:56:38:e5:2f:86:2c:1f:ed:2e:82: f4:70:36:d9:c1:ae:f2:72:d9:92:d7:b9:ae:03:44:15:87:e4: 57:98:78:c6:2a:00:0d:f2:5a:ed:56:db:ae:d8:cd:a0:4f:f8: 6b:da:00:02:9e:e5:4f:5f:e5:f1:97:f3:19:14:b9:b2:11:29: 1d:7b:06:45:a2:95:94:76:7f:e3:3a:c5:44:9e:66:47:b7:12: e6:0e:b7:ba:e2:d3:98:54:af:88:b4:2c:76:12:87:0e:dd:17: 95:80:48:fd:4b:64:a0:b3:be:c7:70:00:68:11:f5:f0:e8:62: 29:5d:3c:a7:ce:c2:4b:fc:fb:22:70:d1:a8:20:14:43:f3:c6: 66:51:82:43:94:ee:0c:66:bc:5f:f6:f6:7b:38:c3:a4:6d:35: 10:75:ef:13:30:8a:c1:d1:da:93:98:65:3e:1b:7e:61:04:db: 35:ab:fe:b8:52:26:9b:86:ad:f7:85:3f:ea:50:cf:dd:62:b2: 3a:15:88:9d:e8:5c:fb:07:17:88:58:2c:27:81:2b:00:55:5f: 68:e1:73:55:fd:f2:cc:1b:51:ff:b3:92:8c:b3:c3:85:1d:cb: 2f:41:4c:9a:fb:e2:be:20:74:1c:92:7b:a5:55:6d:35:e6:13: 25:10:da:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMO6W9x8h9wMoYMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NTkwZmM4MTctMzQzYy00N2RhLTkyNmMtNjI5MTRlODU1ZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxC4Y7R6LNUsVnwVttNDcLeoq1q/kyw0xEss qqBgVoXTJrndTLy2aW7u80wt90gEOHMWol3Tkb31W5gv/My8I0qoQXI49XrWSuut EXIFcBSvfLwiKcFoSsn73RMOxeXf1gW1teQPWBt0GkqNNZZsEC2TQ0Oa9Dg1gUvb D4xqqpWQDTYXnb0tCu/NBjxMh5+a2cKjXkPx23M5KS+a6HgyervKehloFeUwVI+G v427Ph6L9KCkpyTE4fsJAC3wmkCO4z4Ns0vxvypxk4TvvfKSS/168mgDJ816v6+o pItjwUKpdZTXgyDJtnJ5pXzxZuJhrUEb78xdSlV3SwZGlWLesQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXL61Ktz7AYW9hnsEDgXGUDSlH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvNTI4YTA3MmQtZmI1ZS0z MjA5LWIwYjYtZWZmNDUzZGU0YWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0KjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIUN85KcScrVjjlL4YsH+0ugvRwNtnBrvJy2ZLXua4DRBWH5FeYeMYq AA3yWu1W267YzaBP+GvaAAKe5U9f5fGX8xkUubIRKR17BkWilZR2f+M6xUSeZke3 EuYOt7ri05hUr4i0LHYShw7dF5WASP1LZKCzvsdwAGgR9fDoYildPKfOwkv8+yJw 0aggFEPzxmZRgkOU7gxmvF/29ns4w6RtNRB17xMwisHR2pOYZT4bfmEE2zWr/rhS JpuGrfeFP+pQz91isjoViJ3oXPsHF4hYLCeBKwBVX2jhc1X98swbUf+zkoyzw4Ud yy9BTJr74r4gdBySe6VVbTXmEyUQ2ug= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:33 2025 by rpki-client