$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa File: 1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa (raw, json) Hash identifier: 0q+0xLacODrOIfHkXqHz9nra1FOYoK/t4WZdGuM3XkU= Subject key identifier: D7:FF:F5:5E:C8:20:5F:A6:7A:EF:6B:8B:F5:CF:77:57:2E:BA:C9:0C Certificate issuer: /CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Certificate serial: 010D0C9F4328584B728661D934ABF1234EAA9200 Authority key identifier: 47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa Signing time: Tue 07 Oct 2025 23:00:37 +0000 ROA not before: Tue 07 Oct 2025 23:00:37 +0000 ROA not after: Tue 06 Jan 2026 00:00:37 +0000 asID: 14965 IP address blocks: 158.51.216.0/22 maxlen: 24 199.241.44.0/22 maxlen: 24 2605:98c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:86:61:d9:34:ab:f1:23:4e:aa:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Validity Not Before: Oct 7 23:00:37 2025 GMT Not After : Jan 6 00:00:37 2026 GMT Subject: CN=29b9654b-aa16-431f-b0ae-26cbffc0abb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:55:9c:00:c6:47:22:f7:b6:62:7f:f1:c1:c2: 76:ea:73:ea:22:4f:88:34:81:ec:85:be:89:f7:52: fd:e4:48:85:2b:f2:32:3e:e4:3b:10:2e:cb:0c:f7: 1e:f0:c6:48:bf:6c:c2:70:41:ce:ee:09:f5:c1:34: 77:dd:56:2d:4a:02:b2:b9:1f:45:66:d7:04:24:40: b1:ce:d5:6b:94:7e:d5:0b:f6:a1:49:4b:86:23:1a: 13:11:d1:da:93:e8:68:a6:53:4d:86:b9:ef:5a:f9: b7:4e:6c:da:1d:59:b4:49:c5:2d:88:bf:e4:e1:e7: e4:ba:e6:4d:3f:95:0d:87:4d:d8:0d:b8:d9:f4:b4: d4:97:c9:df:58:a4:ee:bd:e6:e2:9c:43:d8:83:52: 36:04:a4:14:e6:64:4f:0a:88:0a:e2:12:85:b2:65: 9f:47:0a:82:44:e2:17:30:84:5a:76:0c:36:cc:2a: 9b:14:a7:51:90:ed:68:f5:29:73:13:60:c3:05:a7: c6:11:2c:22:fd:80:90:66:b3:df:11:b3:02:b4:cc: a2:91:ee:42:88:26:8f:5c:7c:51:9f:38:87:af:ab: bd:3c:cb:96:69:38:99:de:bc:e0:b9:ee:4f:a5:fc: ad:f9:6f:45:24:4b:c8:db:6f:46:f5:c1:ef:74:58: 14:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FF:F5:5E:C8:20:5F:A6:7A:EF:6B:8B:F5:CF:77:57:2E:BA:C9:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl X509v3 Authority Key Identifier: keyid:47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer sbgp-ipAddrBlock: critical IPv4: 158.51.216.0/22 199.241.44.0/22 IPv6: 2605:98c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:42:f1:bf:04:45:96:a3:33:b0:4f:e8:82:78:fb:07:0d:62: ff:ff:91:b3:b5:f7:5b:47:a4:e2:74:8b:3a:28:6e:2e:02:88: e3:5c:05:3c:2d:12:ba:11:57:94:de:58:6c:a8:98:89:fc:b9: d2:28:b6:4b:e5:9c:4d:db:ab:83:b3:60:b9:8e:1f:56:93:87: 09:fb:c0:94:b3:d7:c6:7a:47:ad:b3:db:a5:ff:fa:2b:02:6f: 43:66:68:98:02:54:b5:80:bf:75:8b:c3:06:84:64:18:3f:e1: 0d:1e:10:2d:ce:f3:5f:14:52:9a:08:6e:fd:c9:99:32:86:0a: 21:b4:16:6a:ac:79:7c:71:61:05:1d:e8:08:4a:28:1a:14:10: 5f:c1:21:5a:b3:be:00:1a:bb:29:c0:e5:a3:4c:2e:8f:a3:da: eb:b0:69:60:27:e5:c7:ce:ea:e4:6a:f6:53:7b:82:dc:67:47: d8:f5:dc:22:11:66:44:45:2e:e2:be:65:bf:5f:d3:af:40:3d: 5e:77:39:38:70:13:46:64:84:91:9e:72:14:62:79:3e:a8:ef: af:f9:c5:7c:4f:9d:5a:e7:23:dd:d1:8b:cb:ed:65:bb:74:06: b4:fc:36:14:d0:4b:9a:f3:25:0b:0f:d6:7b:38:92:61:69:f6: a3:29:e2:e3 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEtyhmHZNKvxI06qkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMjBhZDktYTg0OC00ZDBkLWExMTktM2RmNWQ2ZGJj YjFmMB4XDTI1MTAwNzIzMDAzN1oXDTI2MDEwNjAwMDAzN1owLzEtMCsGA1UEAxMk MjliOTY1NGItYWExNi00MzFmLWIwYWUtMjZjYmZmYzBhYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1WcAMZHIve2Yn/xwcJ26nPqIk+INIHshb6J 91L95EiFK/IyPuQ7EC7LDPce8MZIv2zCcEHO7gn1wTR33VYtSgKyuR9FZtcEJECx ztVrlH7VC/ahSUuGIxoTEdHak+hoplNNhrnvWvm3TmzaHVm0ScUtiL/k4efkuuZN P5UNh03YDbjZ9LTUl8nfWKTuvebinEPYg1I2BKQU5mRPCogK4hKFsmWfRwqCROIX MIRadgw2zCqbFKdRkO1o9SlzE2DDBafGESwi/YCQZrPfEbMCtMyike5CiCaPXHxR nziHr6u9PMuWaTiZ3rzgue5Ppfyt+W9FJEvI229G9cHvdFgUUQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFNf/9V7IIF+meu9ri/XPd1cuuskMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEy MGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1ZDZkYmNiMWYvMWM4ZmNhMjItM2M5My0z ZWFjLThmOTEtY2Y3MTg3YmQyODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMjBhZDktYTg0OC00ZDBkLWEx MTktM2RmNWQ2ZGJjYjFmLzIxYTIwYWQ5LWE4NDgtNGQwZC1hMTE5LTNkZjVkNmRi Y2IxZi5jcmwwHwYDVR0jBBgwFoAUR/7o0BwHiDWZxcIwx3IIh9YCfigwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEyMGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1 ZDZkYmNiMWYuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCnjPYAwQC x/EsMA0EAgACMAcDBQAmBZjAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFpC8b8ERZajM7BP6IJ4+wcNYv// kbO191tHpOJ0izoobi4CiONcBTwtEroRV5TeWGyomIn8udIotkvlnE3bq4OzYLmO H1aThwn7wJSz18Z6R62z26X/+isCb0NmaJgCVLWAv3WLwwaEZBg/4Q0eEC3O818U UpoIbv3JmTKGCiG0FmqseXxxYQUd6AhKKBoUEF/BIVqzvgAauynA5aNMLo+j2uuw aWAn5cfO6uRq9lN7gtxnR9j13CIRZkRFLuK+Zb9f069APV53OThwE0ZkhJGechRi eT6o76/5xXxPnVrnI93Ri8vtZbt0BrT8NhTQS5rzJQsP1ns4kmFp9qMp4uM= -----END CERTIFICATE-----Generated at Wed Oct 8 21:02:50 2025 by rpki-client