$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa File: 89fdbba5-c305-3bf1-be38-0d9990f5f655.roa (raw, json) Hash identifier: JuVposRMthCSoLwoiOwE1MUr5Q7UnefrZXx64TXOf+c= Subject key identifier: E3:CE:B8:63:21:24:FB:E3:C6:60:8A:98:77:F2:82:27:8A:39:C7:68 Certificate issuer: /CN=0067e111-9d19-4c1e-a1ef-86f133669a8e Certificate serial: 010D0C9F4328584B03168DADB74E27ABEE1B0680 Authority key identifier: 96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 393966 IP address blocks: 204.239.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:8d:ad:b7:4e:27:ab:ee:1b:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0067e111-9d19-4c1e-a1ef-86f133669a8e Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=d37cb13e-b7e8-4ba2-a104-5a6c08e6456f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:89:2b:06:68:a2:ed:5a:7c:67:4b:da:bd: 45:22:0e:24:d5:22:ff:30:42:03:6a:e8:32:01:04: 55:4b:e6:8f:cf:70:cf:ce:f3:60:eb:56:b6:84:dc: bd:34:3d:07:6f:7d:d5:de:d8:b5:f2:e7:25:37:2b: a3:85:f8:a2:c9:f8:05:43:f2:86:f3:f5:aa:d5:b3: 82:1f:0f:0a:b7:c8:68:32:92:94:65:fc:c4:2c:85: 94:51:16:63:9f:c8:c6:ca:27:d6:5e:45:b4:63:c1: 7d:6e:3a:aa:38:5b:62:b3:98:fe:b0:2d:72:37:92: 03:01:37:fa:90:c8:b0:30:cc:47:63:a8:55:04:e4: e6:53:46:5e:41:62:d5:2e:d7:39:92:26:17:11:40: 38:41:c8:18:be:18:39:1e:27:9f:e8:80:8c:2c:cd: 3a:88:06:d3:b1:b8:af:09:24:bf:b4:a2:fb:10:16: 7a:bf:eb:3d:f5:d3:da:18:ef:e0:76:c5:13:49:71: 5b:59:32:69:6f:08:1f:71:1f:26:9a:94:2b:02:e9: 12:5d:82:ac:aa:c9:a0:53:30:08:01:f8:e5:b2:a8: 80:0a:5d:35:0a:b0:55:34:0a:a9:0a:f1:77:9a:ab: a3:b6:b7:0f:52:26:56:55:bc:60:18:c3:46:80:c6: a3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CE:B8:63:21:24:FB:E3:C6:60:8A:98:77:F2:82:27:8A:39:C7:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl X509v3 Authority Key Identifier: keyid:96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer sbgp-ipAddrBlock: critical IPv4: 204.239.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:78:70:dd:5c:36:84:d4:5a:cd:a0:61:94:de:2d:d3:df:c3: 61:f5:90:78:c5:69:72:eb:6d:cd:ee:e3:9b:b3:32:13:6f:f8: cd:d6:a1:2f:ff:c8:5c:95:8e:a9:22:d1:33:f5:9d:c4:89:c9: 97:ed:c4:68:b4:5e:c2:0b:95:76:20:ba:08:cd:3f:80:3f:e8: fc:b2:24:94:46:a9:e1:2d:e5:b0:1a:5b:67:96:52:c2:09:ec: 5d:a6:1a:e3:6f:f9:17:fb:39:9a:de:0e:c4:74:bb:f1:9b:0e: ae:4f:cb:88:fc:42:fd:e1:db:af:00:bb:50:61:81:e9:e6:44: e5:c5:3b:08:3e:81:4c:83:12:95:ef:64:f8:28:a5:b8:51:16: 78:3e:fb:fb:6e:a1:35:72:f1:32:15:4d:8f:f5:f2:66:58:9c: 64:0b:0e:0e:66:0a:9d:4c:4d:df:99:d4:4b:b9:20:30:9c:bf: fb:8a:f6:91:31:a5:25:fb:a9:7a:81:b0:d8:ba:9e:90:27:4a: 85:0a:1e:18:2e:05:51:c2:ac:6c:04:5a:3b:29:9a:a4:55:a1: f7:e1:ba:8f:20:50:eb:7d:44:25:15:4d:0d:ca:05:8d:19:35: ee:c2:42:6d:9a:80:63:20:43:4a:77:ed:1c:10:de:0c:b0:5b: 15:75:53:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFo2tt04nq+4bBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA2N2UxMTEtOWQxOS00YzFlLWExZWYtODZmMTMzNjY5 YThlMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk ZDM3Y2IxM2UtYjdlOC00YmEyLWExMDQtNWE2YzA4ZTY0NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymWJKwZoou1afGdL2r1FIg4k1SL/MEIDaugy AQRVS+aPz3DPzvNg61a2hNy9ND0Hb33V3ti18uclNyujhfiiyfgFQ/KG8/Wq1bOC Hw8Kt8hoMpKUZfzELIWUURZjn8jGyifWXkW0Y8F9bjqqOFtis5j+sC1yN5IDATf6 kMiwMMxHY6hVBOTmU0ZeQWLVLtc5kiYXEUA4QcgYvhg5Hief6ICMLM06iAbTsbiv CSS/tKL7EBZ6v+s99dPaGO/gdsUTSXFbWTJpbwgfcR8mmpQrAukSXYKsqsmgUzAI AfjlsqiACl01CrBVNAqpCvF3mqujtrcPUiZWVbxgGMNGgMajAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPOuGMhJPvjxmCKmHfygieKOcdoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMDY3 ZTExMS05ZDE5LTRjMWUtYTFlZi04NmYxMzM2NjlhOGUvODlmZGJiYTUtYzMwNS0z YmYxLWJlMzgtMGQ5OTkwZjVmNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDA2N2UxMTEtOWQxOS00YzFlLWEx ZWYtODZmMTMzNjY5YThlLzAwNjdlMTExLTlkMTktNGMxZS1hMWVmLTg2ZjEzMzY2 OWE4ZS5jcmwwHwYDVR0jBBgwFoAUlskWWwf6rfza/VMJjgMSFtSDko4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wMDY3ZTExMS05ZDE5LTRjMWUtYTFlZi04NmYx MzM2NjlhOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzO+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG14cN1cNoTUWs2gYZTeLdPfw2H1kHjFaXLrbc3u45uzMhNv+M3WoS// yFyVjqki0TP1ncSJyZftxGi0XsILlXYgugjNP4A/6PyyJJRGqeEt5bAaW2eWUsIJ 7F2mGuNv+Rf7OZreDsR0u/GbDq5Py4j8Qv3h268Au1BhgenmROXFOwg+gUyDEpXv ZPgopbhRFng++/tuoTVy8TIVTY/18mZYnGQLDg5mCp1MTd+Z1Eu5IDCcv/uK9pEx pSX7qXqBsNi6npAnSoUKHhguBVHCrGwEWjspmqRVoffhuo8gUOt9RCUVTQ3KBY0Z Ne7CQm2agGMgQ0p37RwQ3gywWxV1U/I= -----END CERTIFICATE-----Generated at Sat Oct 11 18:03:09 2025 by rpki-client