$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa File: 5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa (raw, json) Hash identifier: BgpKlE5/xK0olOui4A5pSJWhnEPtQ+7v/Cq5fUskSfw= Subject key identifier: 9B:F0:7C:A7:7D:14:E0:9A:4A:5B:70:2E:36:48:FD:57:71:AE:9A:33 Certificate issuer: /CN=ff7959e1-b47c-43d5-89e1-72b6a534e066 Certificate serial: 010D0C9F4328584B891763A7120E35C494DB6680 Authority key identifier: AF:32:C1:E6:35:B8:EC:F7:E6:66:76:14:9B:EC:E7:FD:57:A8:DA:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 29997 IP address blocks: 204.16.252.0/22 maxlen: 24 2620:0:2e60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:63:a7:12:0e:35:c4:94:db:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff7959e1-b47c-43d5-89e1-72b6a534e066 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=b5ed3679-89df-4e63-8c3f-add802e71c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:1d:91:32:a3:a9:fa:a2:53:bc:f7:fd:f0: b2:54:db:08:2f:a8:ca:68:e5:7d:eb:9a:86:93:87: ff:f0:5e:7c:4c:01:d1:bb:56:47:f2:ab:42:fa:92: 0f:52:ec:5e:38:1c:0c:a8:9a:fc:c8:80:4e:0f:33: 80:30:de:94:74:f4:19:01:2b:60:95:e5:ed:ad:36: 03:54:97:58:dc:0e:bb:bc:7a:6f:6d:0d:1d:a2:23: 03:49:30:d2:d9:8b:1f:d7:09:1d:0f:e3:9c:57:4a: 46:b8:bb:a0:83:24:9f:ee:0b:63:48:2c:95:60:be: 3c:a2:0f:67:9e:c6:da:bd:39:52:3f:c1:ef:60:21: 97:11:3f:02:ce:3b:4c:7d:d1:90:77:9a:ee:c5:58: b0:9b:16:33:33:de:c2:0f:ae:5a:f4:6b:a1:13:c4: 39:2a:4c:23:2f:86:52:86:ad:44:f8:d4:32:65:92: f3:4c:ba:36:ff:4b:70:65:9c:94:16:15:78:8c:e0: 63:3d:38:e2:76:e3:b5:5b:e7:20:6a:a3:37:d1:b6: 6b:40:5d:9e:c4:4a:5f:1a:bf:22:ae:c3:8e:ef:d8: a8:e1:d5:06:9d:d1:fa:0d:27:7f:96:0d:bd:ba:85: f6:15:51:39:b2:a7:e4:fe:f0:d4:fb:30:6a:99:ab: dd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F0:7C:A7:7D:14:E0:9A:4A:5B:70:2E:36:48:FD:57:71:AE:9A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.crl X509v3 Authority Key Identifier: keyid:AF:32:C1:E6:35:B8:EC:F7:E6:66:76:14:9B:EC:E7:FD:57:A8:DA:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066.cer sbgp-ipAddrBlock: critical IPv4: 204.16.252.0/22 IPv6: 2620:0:2e60::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b6:b8:f4:1e:91:3a:35:c2:d9:08:d0:69:26:48:53:6a:e7: 43:90:4b:c4:1c:02:cf:1f:7c:82:b0:6c:3b:dc:3b:eb:4f:12: 6e:b5:d6:fd:85:15:80:05:be:30:bf:93:f2:18:be:e9:0d:68: fd:5e:63:f3:a6:e2:50:0a:23:b3:48:9f:03:84:10:1f:ea:97: 88:3c:db:59:60:fe:6a:a0:fb:b1:5f:c4:73:5b:f9:59:03:4a: 0f:d3:a6:ce:e2:cf:6e:68:af:05:42:46:27:0a:7a:30:22:2b: 0b:12:62:77:b6:4a:86:d8:c9:05:af:81:02:a7:d9:9b:fd:87: 18:8e:ff:d5:d4:cc:e4:ab:a1:4e:b4:46:0f:29:f4:e5:ef:df: 32:f6:8f:26:e0:ec:a4:27:09:a7:6d:b8:a0:6c:9b:ea:b1:84: bc:0e:e4:85:e2:94:36:6f:8f:47:f4:59:69:75:96:9c:73:14: 03:f4:c9:1c:08:05:31:e6:2b:39:2c:8e:76:e1:9e:a5:2e:67: 73:1a:eb:16:b8:2c:1e:b1:44:59:a8:1f:12:38:41:88:97:2a: 78:84:64:f3:42:68:6d:ec:33:69:bc:db:bb:cc:f8:0f:5d:7f: 42:ad:a8:38:a5:45:96:8c:d2:be:f9:08:be:49:6f:07:1b:76: 25:c1:21:b2 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuJF2OnEg41xJTbZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY3OTU5ZTEtYjQ3Yy00M2Q1LTg5ZTEtNzJiNmE1MzRl MDY2MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk YjVlZDM2NzktODlkZi00ZTYzLThjM2YtYWRkODAyZTcxYzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkcdkTKjqfqiU7z3/fCyVNsIL6jKaOV965qG k4f/8F58TAHRu1ZH8qtC+pIPUuxeOBwMqJr8yIBODzOAMN6UdPQZAStgleXtrTYD VJdY3A67vHpvbQ0doiMDSTDS2Ysf1wkdD+OcV0pGuLuggySf7gtjSCyVYL48og9n nsbavTlSP8HvYCGXET8CzjtMfdGQd5ruxViwmxYzM97CD65a9GuhE8Q5KkwjL4ZS hq1E+NQyZZLzTLo2/0twZZyUFhV4jOBjPTjiduO1W+cgaqM30bZrQF2exEpfGr8i rsOO79io4dUGndH6DSd/lg29uoX2FVE5sqfk/vDU+zBqmavd3wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJvwfKd9FOCaSltwLjZI/VdxrpozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjc5 NTllMS1iNDdjLTQzZDUtODllMS03MmI2YTUzNGUwNjYvNWEwZmIwYTQtMGExZi0z NTBmLTk4MGMtYjM0YWQ2NWM3MDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY3OTU5ZTEtYjQ3Yy00M2Q1LTg5 ZTEtNzJiNmE1MzRlMDY2L2ZmNzk1OWUxLWI0N2MtNDNkNS04OWUxLTcyYjZhNTM0 ZTA2Ni5jcmwwHwYDVR0jBBgwFoAUrzLB5jW47PfmZnYUm+zn/Veo2r8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjc5NTllMS1iNDdjLTQzZDUtODllMS03MmI2 YTUzNGUwNjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCzBD8MA8E AgACMAkDBwQmIAAALmAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAera49B6ROjXC2QjQaSZIU2rnQ5BLxBwC zx98grBsO9w7608SbrXW/YUVgAW+ML+T8hi+6Q1o/V5j86biUAojs0ifA4QQH+qX iDzbWWD+aqD7sV/Ec1v5WQNKD9OmzuLPbmivBUJGJwp6MCIrCxJid7ZKhtjJBa+B AqfZm/2HGI7/1dTM5KuhTrRGDyn05e/fMvaPJuDspCcJp224oGyb6rGEvA7kheKU Nm+PR/RZaXWWnHMUA/TJHAgFMeYrOSyOduGepS5ncxrrFrgsHrFEWagfEjhBiJcq eIRk80Jobewzabzbu8z4D11/Qq2oOKVFlozSvvkIvklvBxt2JcEhsg== -----END CERTIFICATE-----Generated at Mon Oct 20 07:37:41 2025 by rpki-client