$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/04bcb534-109e-3dec-a653-5e03796d1436.roa File: 04bcb534-109e-3dec-a653-5e03796d1436.roa (raw, json) Hash identifier: 9kaVkw6q4Bfn4QSL4rchLNBIX465F0I+r+lhjyEp/AU= Subject key identifier: 31:53:F3:C4:2C:24:4E:6B:FB:83:44:88:09:65:21:8C:58:0A:A0:36 Certificate issuer: /CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8 Certificate serial: 010D0C9F4328584B047C096D23F9120F698EF780 Authority key identifier: 0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/04bcb534-109e-3dec-a653-5e03796d1436.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 400764 IP address blocks: 206.223.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:09:6d:23:f9:12:0f:69:8e:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=6d3b0e5f-5e3c-45f8-83ef-34df1856ba43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c7:68:4d:50:19:46:78:b2:51:5f:9d:1b:85: a0:ec:30:8b:83:23:18:5a:8a:18:22:ad:8c:1b:3f: ee:f7:61:2d:f6:86:b6:14:56:de:0e:ae:54:64:f6: fd:68:97:a3:0d:ea:96:5b:6d:66:91:12:83:c1:85: 91:9f:b2:48:68:87:46:58:8c:ae:67:eb:01:6a:cc: 94:83:e0:8a:47:9f:29:ef:7b:87:e1:23:3e:b1:ec: 3f:e1:49:03:7c:9a:d6:dd:12:a8:cd:2a:75:8f:1a: 99:5f:67:f2:f6:bb:ee:99:a0:e1:7d:d5:8e:51:d1: e5:ab:3b:42:a0:e5:d0:ec:4c:c2:19:d3:78:4c:64: c5:a0:f0:d5:1d:c9:93:44:d4:57:ad:c8:e3:c1:30: ec:9e:f4:5f:40:be:8b:c3:95:85:61:d0:6b:28:6a: 0e:8c:e3:a5:5a:94:90:4c:7e:68:9d:ee:4b:b9:aa: 34:11:4b:71:d3:3f:ad:30:5c:a6:6b:87:20:5c:e6: b3:eb:c9:e7:17:25:af:1d:8f:0e:45:08:0e:8e:25: 7e:13:75:ab:4a:cc:84:8a:13:a4:4d:24:aa:f2:19: 08:82:88:0b:a1:2f:e8:22:9c:a8:1d:54:1a:a9:ec: 55:e8:29:67:f6:f9:70:ec:13:2c:86:a3:2d:6c:52: d2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:53:F3:C4:2C:24:4E:6B:FB:83:44:88:09:65:21:8C:58:0A:A0:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/04bcb534-109e-3dec-a653-5e03796d1436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl X509v3 Authority Key Identifier: keyid:0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer sbgp-ipAddrBlock: critical IPv4: 206.223.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b2:46:e2:14:50:69:fb:59:cf:14:01:20:cc:e3:91:30:1a: f6:1a:4d:86:e8:c8:57:19:19:0e:f6:79:c0:e8:6f:6c:83:fb: f8:37:d2:2d:05:75:87:59:ea:b5:63:bc:ec:ca:90:7a:77:a8: a5:e2:3a:f8:06:ee:15:51:70:c8:76:1d:23:38:f6:be:e4:71: ae:4d:c9:56:33:0a:8e:4a:c2:f3:73:0c:6d:69:b4:25:4e:57: 80:87:92:aa:e0:06:d5:0c:a0:74:cd:a5:1e:e3:a9:a3:10:48: 83:65:cf:35:4b:74:f7:ff:a2:12:9f:6f:e9:e1:7a:b9:b6:14: 23:93:1f:ba:86:ac:8a:86:d3:a2:3c:5f:7b:00:1b:d2:10:a1: 0c:5c:cb:0b:8f:9d:e3:b9:e0:d7:14:12:41:fe:35:14:e4:e4: 74:95:ea:5c:8a:86:4f:96:a8:84:45:4e:64:0f:8d:81:ca:e7: c3:bc:ef:55:a6:90:d8:f7:d7:26:53:e4:04:b5:67:96:38:eb: 04:f7:a0:53:0f:8d:a1:de:35:82:42:a5:12:13:55:a7:27:59: ef:e1:5d:7e:d6:cf:bc:4c:a6:69:01:25:45:d2:b2:78:9f:45: 19:5f:06:73:aa:dd:66:69:c4:71:82:bc:56:5e:b4:e3:73:75: 02:6c:d6:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAltI/kSD2mO94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhkOTlmOGItYTg1YS00MWU5LTg5YjQtNjEyYzZiOWMx MGE4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NmQzYjBlNWYtNWUzYy00NWY4LTgzZWYtMzRkZjE4NTZiYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8doTVAZRniyUV+dG4Wg7DCLgyMYWooYIq2M Gz/u92Et9oa2FFbeDq5UZPb9aJejDeqWW21mkRKDwYWRn7JIaIdGWIyuZ+sBasyU g+CKR58p73uH4SM+sew/4UkDfJrW3RKozSp1jxqZX2fy9rvumaDhfdWOUdHlqztC oOXQ7EzCGdN4TGTFoPDVHcmTRNRXrcjjwTDsnvRfQL6Lw5WFYdBrKGoOjOOlWpSQ TH5one5Luao0EUtx0z+tMFyma4cgXOaz68nnFyWvHY8ORQgOjiV+E3WrSsyEihOk TSSq8hkIgogLoS/oIpyoHVQaqexV6Cln9vlw7BMshqMtbFLSFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFT88QsJE5r+4NEiAllIYxYCqA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOGQ5 OWY4Yi1hODVhLTQxZTktODliNC02MTJjNmI5YzEwYTgvMDRiY2I1MzQtMTA5ZS0z ZGVjLWE2NTMtNWUwMzc5NmQxNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDhkOTlmOGItYTg1YS00MWU5LTg5 YjQtNjEyYzZiOWMxMGE4L2Q4ZDk5ZjhiLWE4NWEtNDFlOS04OWI0LTYxMmM2Yjlj MTBhOC5jcmwwHwYDVR0jBBgwFoAUC3KTapyDteNst3bjWSGKYYdWzuYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kOGQ5OWY4Yi1hODVhLTQxZTktODliNC02MTJj NmI5YzEwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzt+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmyRuIUUGn7Wc8UASDM45EwGvYaTYboyFcZGQ72ecDob2yD+/g30i0F dYdZ6rVjvOzKkHp3qKXiOvgG7hVRcMh2HSM49r7kca5NyVYzCo5KwvNzDG1ptCVO V4CHkqrgBtUMoHTNpR7jqaMQSINlzzVLdPf/ohKfb+nherm2FCOTH7qGrIqG06I8 X3sAG9IQoQxcywuPneO54NcUEkH+NRTk5HSV6lyKhk+WqIRFTmQPjYHK58O871Wm kNj31yZT5AS1Z5Y46wT3oFMPjaHeNYJCpRITVacnWe/hXX7Wz7xMpmkBJUXSsnif RRlfBnOq3WZpxHGCvFZetONzdQJs1lM= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:04 2025 by rpki-client