$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/0ec9e919-c8d2-311d-a03f-0dd681db8591.roa File: 0ec9e919-c8d2-311d-a03f-0dd681db8591.roa (raw, json) Hash identifier: htkHERxjHKJ+8S2+nM3/94G0Um4lxbxP6DX71y3BB3I= Subject key identifier: 05:89:F8:34:22:43:E0:0C:C4:C8:FF:C6:E5:E0:D0:DD:EC:09:B2:20 Certificate issuer: /CN=adce5ac3-c559-48fc-8577-223c6ed88a3e Certificate serial: 010D0C9F4328584B328C32E3C29B0CD9F67D8880 Authority key identifier: 9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/0ec9e919-c8d2-311d-a03f-0dd681db8591.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 21527 IP address blocks: 69.41.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:32:e3:c2:9b:0c:d9:f6:7d:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adce5ac3-c559-48fc-8577-223c6ed88a3e Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=083350c6-3e65-4cc3-8966-383a2a0b6d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d1:b1:e5:0d:d5:2d:47:0a:31:7e:22:e2:f6: 8f:c0:6f:f1:d6:fe:97:c4:ad:de:c1:37:59:84:ea: 86:fa:4f:6d:c1:cd:e2:ad:43:04:4b:97:23:6e:6e: d7:cb:cd:0b:f5:37:67:68:94:04:22:de:46:3d:ff: 43:0b:f7:09:f4:3e:d3:eb:07:1c:3d:04:e7:23:d3: 9b:d1:0b:de:85:ce:df:e0:d3:6a:c4:25:85:af:03: b9:25:3b:dd:1f:03:1c:26:12:98:78:a0:aa:96:1a: 7a:14:20:14:0f:0c:fc:28:a2:7d:fd:47:bc:4e:26: d4:f6:d3:15:6b:19:06:66:5e:44:3f:53:3c:29:2d: d0:ff:db:ae:8a:83:86:5e:d4:2d:66:9f:08:6e:77: f8:e9:79:25:f3:32:40:de:49:f7:85:ad:06:12:85: 78:95:e8:db:83:86:5d:f6:e6:71:3b:26:1b:49:d0: a4:23:75:cd:c8:da:d7:26:57:d3:f6:08:03:fa:d3: 17:08:e8:c2:17:12:7e:26:fa:e5:74:74:07:df:33: 7a:73:f5:7c:dc:7e:56:43:f0:f8:b5:dd:4f:a0:2b: 4c:75:25:36:f5:06:bf:cb:d4:b0:e4:6e:73:bf:95: bb:d2:16:81:09:c2:1c:b1:be:79:42:c0:8b:f3:80: fd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:89:F8:34:22:43:E0:0C:C4:C8:FF:C6:E5:E0:D0:DD:EC:09:B2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/0ec9e919-c8d2-311d-a03f-0dd681db8591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl X509v3 Authority Key Identifier: keyid:9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer sbgp-ipAddrBlock: critical IPv4: 69.41.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:d5:69:b0:4a:46:8f:9a:aa:a0:44:5e:68:84:94:33:e3:5b: f4:94:4f:27:54:41:2f:f2:50:01:e3:be:8a:01:57:26:3a:e0: b7:3b:5b:f1:af:d2:8b:94:2d:9c:78:61:5a:f3:13:e8:d6:51: d1:5b:05:bc:ba:61:3f:a0:cd:59:bc:df:93:d7:eb:b1:35:0e: 26:e7:33:22:c6:be:8c:b8:6d:1d:cb:a7:ac:0b:7f:73:2f:a6: 73:90:76:9b:af:cd:6f:cc:eb:e0:af:a6:c6:96:cd:35:c1:97: 9b:95:51:ac:cf:90:97:4b:41:7b:23:76:47:56:84:73:f3:fe: 42:9c:f8:73:3d:de:cf:fd:41:bd:0a:78:a6:3e:23:c8:d7:71: 79:c0:08:c8:93:4e:69:7c:73:f7:7a:c4:44:6f:00:50:b0:93: 77:52:ea:e6:ee:83:4c:ba:20:6b:72:76:02:02:b0:63:7e:81: 37:ba:b1:db:8a:f4:08:72:99:43:6c:10:29:b8:0c:ae:fe:24: ab:1c:4a:e9:4c:70:87:0a:33:27:db:69:5e:bb:19:fe:9c:ef: 1b:8c:eb:0e:6f:f2:6b:4f:9d:d6:40:60:ff:f3:33:98:9e:c0: 4e:f2:97:a8:3b:54:2c:56:0d:9a:2e:45:79:45:b3:0e:0c:8d: 67:ae:58:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDLjwpsM2fZ9iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRjZTVhYzMtYzU1OS00OGZjLTg1NzctMjIzYzZlZDg4 YTNlMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MDgzMzUwYzYtM2U2NS00Y2MzLTg5NjYtMzgzYTJhMGI2ZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltGx5Q3VLUcKMX4i4vaPwG/x1v6XxK3ewTdZ hOqG+k9twc3irUMES5cjbm7Xy80L9TdnaJQEIt5GPf9DC/cJ9D7T6wccPQTnI9Ob 0Qvehc7f4NNqxCWFrwO5JTvdHwMcJhKYeKCqlhp6FCAUDwz8KKJ9/Ue8TibU9tMV axkGZl5EP1M8KS3Q/9uuioOGXtQtZp8Ibnf46Xkl8zJA3kn3ha0GEoV4lejbg4Zd 9uZxOyYbSdCkI3XNyNrXJlfT9ggD+tMXCOjCFxJ+JvrldHQH3zN6c/V83H5WQ/D4 td1PoCtMdSU29Qa/y9Sw5G5zv5W70haBCcIcsb55QsCL84D9LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWJ+DQiQ+AMxMj/xuXg0N3sCbIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNl NWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNjNmVkODhhM2UvMGVjOWU5MTktYzhkMi0z MTFkLWEwM2YtMGRkNjgxZGI4NTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWRjZTVhYzMtYzU1OS00OGZjLTg1 NzctMjIzYzZlZDg4YTNlL2FkY2U1YWMzLWM1NTktNDhmYy04NTc3LTIyM2M2ZWQ4 OGEzZS5jcmwwHwYDVR0jBBgwFoAUmhnasHlgX4KJItHBGKHq+9J/ZmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNlNWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNj NmVkODhhM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXVabBKRo+aqqBEXmiElDPjW/SUTydUQS/yUAHjvooBVyY64Lc7W/Gv 0ouULZx4YVrzE+jWUdFbBby6YT+gzVm835PX67E1DibnMyLGvoy4bR3Lp6wLf3Mv pnOQdpuvzW/M6+CvpsaWzTXBl5uVUazPkJdLQXsjdkdWhHPz/kKc+HM93s/9Qb0K eKY+I8jXcXnACMiTTml8c/d6xERvAFCwk3dS6ubug0y6IGtydgICsGN+gTe6sduK 9AhymUNsECm4DK7+JKscSulMcIcKMyfbaV67Gf6c7xuM6w5v8mtPndZAYP/zM5ie wE7yl6g7VCxWDZouRXlFsw4MjWeuWHk= -----END CERTIFICATE-----Generated at Sat Oct 11 04:23:33 2025 by rpki-client