$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa File: 87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa (raw, json) Hash identifier: WZ/JF1dLy4FYekGjfBXRvffC2nADXHcjxkiaJN43eA4= Subject key identifier: BF:98:28:97:FC:18:3B:DC:CE:C5:9A:FF:EA:6F:71:9C:1A:39:AB:5C Certificate issuer: /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Certificate serial: 010D0C9F4328584B1806D788F1E47C0EF51EEE80 Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 1299 IP address blocks: 72.251.128.0/19 maxlen: 24 158.62.224.0/19 maxlen: 24 209.25.224.0/21 maxlen: 24 2605:d2c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d7:88:f1:e4:7c:0e:f5:1e:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=20954fd5-fda3-4fa9-99a0-190165e6e8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:49:13:a6:83:bd:6f:2b:a3:24:31:fd:de:d7: f3:00:5b:13:e2:be:a8:d0:e5:03:d3:83:1d:72:0c: bb:16:90:2b:d5:0c:9d:6a:56:df:73:ce:c3:cd:06: e8:58:98:87:18:45:fc:b5:3c:a2:e7:5d:ef:17:16: 50:09:05:98:9b:2a:9b:a9:f7:94:5b:15:43:90:9e: b3:62:46:87:1b:d0:9c:0a:94:d7:33:31:c8:e9:b9: 42:ae:22:d9:60:0d:33:cd:59:9d:ea:c8:cd:b5:ba: 30:fd:0d:4c:93:64:a2:99:5c:fa:d5:18:06:79:b2: f7:8d:01:27:af:01:99:a3:c4:c9:8e:6e:6e:ea:2c: 67:10:a3:f1:f3:8b:7d:bd:0c:1b:99:47:c4:77:6b: a7:74:a7:ac:c6:83:73:47:16:a9:a0:47:d0:6f:03: d8:39:98:75:2b:2e:af:2a:d9:b0:5b:7e:0c:08:01: 1a:b1:70:cc:cf:c5:79:91:d5:e1:c5:a8:8e:d8:d0: b8:a4:2f:bd:82:c0:69:c8:45:2f:21:e4:ba:f8:cb: 45:65:9a:0c:dc:9a:c9:32:fb:9a:f0:6a:3d:7e:b0: 4b:8e:91:ab:f3:93:f3:57:b7:34:20:c7:49:8b:bd: 3a:0a:76:59:2e:17:24:e0:c8:9f:bb:bd:1e:bb:7f: 02:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:98:28:97:FC:18:3B:DC:CE:C5:9A:FF:EA:6F:71:9C:1A:39:AB:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl X509v3 Authority Key Identifier: keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer sbgp-ipAddrBlock: critical IPv4: 72.251.128.0/19 158.62.224.0/19 209.25.224.0/21 IPv6: 2605:d2c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c0:a2:76:ff:fd:8b:bf:12:b7:fd:47:a0:38:60:33:bb:f5: 1c:b9:7d:bc:ec:b9:94:6d:33:95:b9:c1:91:bc:0e:46:c2:e8: 50:70:df:45:d0:ab:46:a5:83:e9:fc:53:47:f4:f4:ef:81:a0: 4d:3e:2f:79:b5:0d:b5:6c:9e:51:15:af:2e:cb:f9:4f:1d:e4: 2f:26:75:c2:58:24:0f:20:11:4d:0b:a8:89:ec:4b:17:23:f9: 72:f8:07:26:cc:e1:87:46:93:0c:2e:d2:a8:7a:26:22:87:bf: 41:e1:16:27:41:2b:99:c0:f4:aa:55:66:56:5a:27:80:b1:85: 2a:a7:1c:71:92:f4:dc:9a:10:f4:34:d2:3d:34:7f:58:7f:b9: 0f:91:25:2c:37:e0:46:28:f1:85:1e:72:d3:bc:a0:36:69:43: d5:3c:0c:a5:e3:ba:5b:e4:fe:ad:59:62:a8:18:f7:04:4f:76: e7:ed:fa:2a:ec:da:3d:c4:32:f7:c3:b6:5a:e6:84:ab:b6:2c: 2c:89:ad:c9:97:3e:a0:ec:bd:f6:44:13:31:2e:a9:f9:54:13: 55:44:3e:1e:5b:60:f4:e6:58:a1:37:10:ce:56:d3:01:03:6f: fd:59:a9:7e:ee:26:18:ed:72:1e:56:68:aa:03:79:9e:53:5d: cb:8e:e3:43 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEsYBteI8eR8DvUe7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkZGVmY2QtNmUwZS00OGFjLTg3MjgtYTFkODJlOTEx MjlhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MjA5NTRmZDUtZmRhMy00ZmE5LTk5YTAtMTkwMTY1ZTZlOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkkTpoO9byujJDH93tfzAFsT4r6o0OUD04Md cgy7FpAr1Qydalbfc87DzQboWJiHGEX8tTyi513vFxZQCQWYmyqbqfeUWxVDkJ6z YkaHG9CcCpTXMzHI6blCriLZYA0zzVmd6sjNtbow/Q1Mk2SimVz61RgGebL3jQEn rwGZo8TJjm5u6ixnEKPx84t9vQwbmUfEd2undKesxoNzRxapoEfQbwPYOZh1Ky6v KtmwW34MCAEasXDMz8V5kdXhxaiO2NC4pC+9gsBpyEUvIeS6+MtFZZoM3JrJMvua 8Go9frBLjpGr85PzV7c0IMdJi706CnZZLhck4Mifu70eu38CRwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFL+YKJf8GDvczsWa/+pvcZwaOatcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRk ZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4MmU5MTEyOWEvODdkNjMxNWItOGIzYi0z YmE4LTliZTQtYTViNzQzM2U2MDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjVkZGVmY2QtNmUwZS00OGFjLTg3 MjgtYTFkODJlOTExMjlhLzI1ZGRlZmNkLTZlMGUtNDhhYy04NzI4LWExZDgyZTkx MTI5YS5jcmwwHwYDVR0jBBgwFoAUERE64R4SQWKGBHYPg+Iv7Tr5tgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRkZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4 MmU5MTEyOWEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFSPuAAwQF nj7gAwQD0RngMA0EAgACMAcDBQAmBdLAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHTAonb//Yu/Erf9R6A4 YDO79Ry5fbzsuZRtM5W5wZG8DkbC6FBw30XQq0alg+n8U0f09O+BoE0+L3m1DbVs nlEVry7L+U8d5C8mdcJYJA8gEU0LqInsSxcj+XL4BybM4YdGkwwu0qh6JiKHv0Hh FidBK5nA9KpVZlZaJ4CxhSqnHHGS9NyaEPQ00j00f1h/uQ+RJSw34EYo8YUectO8 oDZpQ9U8DKXjulvk/q1ZYqgY9wRPduft+irs2j3EMvfDtlrmhKu2LCyJrcmXPqDs vfZEEzEuqflUE1VEPh5bYPTmWKE3EM5W0wEDb/1ZqX7uJhjtch5WaKoDeZ5TXcuO 40M= -----END CERTIFICATE-----Generated at Fri Oct 10 03:52:05 2025 by rpki-client