$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa File: 0bae7820-559d-38ce-bc60-e8ef8a792915.roa (raw, json) Hash identifier: Edro19SK3p4iNrAlyukSNxvFuMqCY9wxpy7Cz/n1ns4= Subject key identifier: 1C:79:E3:F9:3D:54:27:D1:E8:9B:49:41:C3:25:D3:DD:13:9F:C6:B2 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584AF5212E21C310D5DBE5CD1C80 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 216.9.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2e:21:c3:10:d5:db:e5:cd:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=f0913c7a-effc-4d50-b8a6-219be8376f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6d:f9:4d:48:91:e0:c8:9d:db:d1:8e:30:92: cc:0f:24:4c:5c:87:5c:b1:0b:66:d4:ad:1b:0d:ca: 80:2b:b9:b9:6c:a5:0b:64:fc:a4:e7:55:f8:3c:86: d4:4c:c2:06:99:81:c0:7d:67:ad:bc:61:f1:f9:1c: a0:c4:e2:84:94:08:de:3d:21:0c:22:0f:63:80:bd: f5:f2:14:1f:cb:82:e6:8a:00:09:55:9f:55:d1:6e: a6:13:82:fb:05:ef:30:9f:0e:a7:f1:ab:c0:e0:90: 8e:09:2a:50:46:c1:14:9c:4a:50:6a:a5:36:f7:eb: 82:6a:81:49:2d:33:c6:7f:45:86:9a:56:8f:03:ec: 9a:c9:16:25:19:e9:e2:9c:f8:1f:0f:03:d7:d1:28: 2f:7f:3f:5a:75:75:89:5f:f4:64:8c:11:70:3c:d8: 86:bd:67:ad:c8:ef:59:9a:c2:5b:b8:4c:73:69:8a: 56:b6:92:79:64:ab:b2:30:fd:6e:b1:b1:57:ff:6b: ef:ba:0d:35:7e:32:c9:c4:b8:1b:de:a4:12:d4:77: a0:a2:75:dc:17:ed:b0:93:8f:2b:8e:fb:30:81:d3: 35:00:8d:0b:c0:38:9c:6e:ed:28:c8:05:81:7d:06: 14:64:5c:22:64:12:87:d2:c6:c6:da:3c:53:cb:67: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:79:E3:F9:3D:54:27:D1:E8:9B:49:41:C3:25:D3:DD:13:9F:C6:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 216.9.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:0d:b6:e8:1d:0a:e1:14:c8:e4:74:f8:8b:aa:72:48:04:47: 57:26:21:44:33:64:57:13:ee:6f:c3:2d:ff:35:ce:c7:5c:da: 5d:a2:32:c8:a2:63:e5:b9:d4:b1:5e:e7:49:a2:73:7e:ed:07: c3:93:7e:51:92:ee:50:08:5f:40:e0:94:10:cf:24:8d:cf:64: ae:f4:f5:15:18:d6:9b:0d:47:da:b6:2b:36:4f:05:06:92:b9: 67:be:7f:f5:b7:0e:ed:1d:6b:fe:1a:21:48:1d:c8:56:7e:3d: ee:12:dc:fe:3d:1a:4a:dc:df:14:7e:9b:26:20:a6:1d:9f:47: a2:d3:29:60:64:59:1f:a4:26:f0:c2:49:33:80:c3:23:8c:f3: 81:28:bb:3f:65:af:e1:80:7b:88:d8:65:98:5a:3c:09:57:77: 19:f5:05:1f:f4:80:c1:c6:4f:76:a5:9c:a9:ae:5c:a0:95:66: 50:b9:c1:d7:e9:4e:29:c9:56:cf:d0:98:4f:77:6a:5c:d6:5c: 6a:0b:42:31:9c:2c:37:06:22:3f:ad:e3:a3:09:27:78:0f:bf: 77:f9:de:25:75:28:fd:a8:a5:be:f0:00:19:b4:1a:53:75:ee: aa:11:25:2a:da:bb:d4:97:8f:a7:39:6a:d3:26:ad:34:38:8c: bb:2c:c9:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IS4hwxDV2+XNHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjA5MTNjN2EtZWZmYy00ZDUwLWI4YTYtMjE5YmU4Mzc2ZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym35TUiR4Mid29GOMJLMDyRMXIdcsQtm1K0b DcqAK7m5bKULZPyk51X4PIbUTMIGmYHAfWetvGHx+RygxOKElAjePSEMIg9jgL31 8hQfy4LmigAJVZ9V0W6mE4L7Be8wnw6n8avA4JCOCSpQRsEUnEpQaqU29+uCaoFJ LTPGf0WGmlaPA+yayRYlGeninPgfDwPX0Sgvfz9adXWJX/RkjBFwPNiGvWetyO9Z msJbuExzaYpWtpJ5ZKuyMP1usbFX/2vvug01fjLJxLgb3qQS1HegonXcF+2wk48r jvswgdM1AI0LwDicbu0oyAWBfQYUZFwiZBKH0sbG2jxTy2etLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBx54/k9VCfR6JtJQcMl090Tn8ayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvMGJhZTc4MjAtNTU5ZC0z OGNlLWJjNjAtZThlZjhhNzkyOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoNtugdCuEUyOR0+IuqckgER1cmIUQzZFcT7m/DLf81zsdc2l2iMsii Y+W51LFe50mic37tB8OTflGS7lAIX0DglBDPJI3PZK709RUY1psNR9q2KzZPBQaS uWe+f/W3Du0da/4aIUgdyFZ+Pe4S3P49Gkrc3xR+myYgph2fR6LTKWBkWR+kJvDC STOAwyOM84Eouz9lr+GAe4jYZZhaPAlXdxn1BR/0gMHGT3alnKmuXKCVZlC5wdfp TinJVs/QmE93alzWXGoLQjGcLDcGIj+t46MJJ3gPv3f53iV1KP2opb7wABm0GlN1 7qoRJSrau9SXj6c5atMmrTQ4jLssybY= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:27 2025 by rpki-client