$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bcb88dad-ac67-33fb-ae1e-e3b724c1358e.roa File: bcb88dad-ac67-33fb-ae1e-e3b724c1358e.roa (raw, json) Hash identifier: tQ+mBIymL+bgZFnc/34ya05cZEN9EKR/5A+PtUd8AQA= Subject key identifier: 97:F4:7C:C4:BD:C5:E1:9E:E8:7E:65:1B:D1:EE:70:52:13:10:03:69 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B7C875B7941569B7E2B9C6000 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bcb88dad-ac67-33fb-ae1e-e3b724c1358e.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 212238 IP address blocks: 216.180.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:5b:79:41:56:9b:7e:2b:9c:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=6f095b57-4146-460a-b92d-8d3fb09b25aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b5:2a:4c:19:26:92:54:4e:30:ee:56:b2:c5: e1:97:98:bb:12:2a:5c:10:5e:02:09:79:eb:cc:86: 27:43:ef:10:54:d3:4c:e1:fa:3d:83:7d:76:28:74: a7:73:c2:c8:36:76:94:a6:08:7a:94:f5:a7:bc:e4: 23:b2:c6:a2:ab:31:21:52:99:a0:0b:ee:64:c1:fa: 43:ce:a0:db:e0:95:e6:21:fe:23:ce:0a:32:f1:9b: 34:77:35:df:26:41:96:23:ca:f6:2b:ef:83:a4:08: 36:e5:8c:41:01:2b:c4:7e:1d:2d:38:22:26:1d:fb: f7:50:85:1f:1f:ea:87:59:9c:39:53:d7:29:aa:cf: 68:3f:0e:b9:6c:90:73:d7:b5:8c:87:5c:e0:d3:c1: 09:51:3a:b0:ff:21:03:6f:9b:56:68:82:05:8d:d9: cf:09:4b:cd:0e:9e:22:54:2c:bd:b2:ec:77:5c:ae: 56:13:cb:b0:37:86:15:a5:18:ff:63:29:a3:a1:01: 4f:b9:0f:87:ee:04:bd:13:05:d6:26:36:83:37:d4: c3:1a:db:a5:76:4d:4a:ad:77:18:9a:58:30:3c:9f: f9:61:91:15:f4:42:60:6a:ce:5b:c8:70:66:8e:2f: 24:c2:fe:84:c3:ad:99:10:95:61:fa:53:fc:a4:2b: d5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F4:7C:C4:BD:C5:E1:9E:E8:7E:65:1B:D1:EE:70:52:13:10:03:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bcb88dad-ac67-33fb-ae1e-e3b724c1358e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 216.180.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:0c:2c:2e:d4:66:39:39:db:0c:03:a5:be:a2:78:c4:d1:24: 6e:c2:a3:76:f9:6f:64:8b:d7:a6:eb:87:5a:25:79:41:99:0b: d2:6e:0b:2b:01:d5:3d:c9:3a:7f:20:17:8b:6b:26:56:5c:5e: c8:79:5b:02:7d:25:1c:fd:23:81:83:68:b0:16:d7:be:f9:de: d4:39:d7:36:a6:75:9d:0c:f6:ef:4b:33:70:ed:59:35:89:e5: 7d:98:e1:9f:d1:fc:9a:db:b6:39:7f:b8:5e:31:13:41:75:74: 9b:08:ec:db:7f:1f:de:36:d3:cf:69:a6:17:42:95:98:0f:ce: 90:f7:c8:c7:e5:b2:9e:60:b3:52:c6:6f:bb:cd:b7:c9:a0:e2: ed:1a:94:e9:61:9e:cd:b7:27:1d:9b:67:c3:83:25:f8:7c:14: 93:77:5e:a4:25:bf:17:11:3b:0e:8a:27:33:c4:6c:1b:42:95: 08:74:db:74:33:30:e5:e8:5b:0c:1f:6c:cc:f4:68:a6:30:b4: 00:23:82:4d:7f:db:a4:a5:5f:1f:99:74:53:46:c6:d3:08:60: 28:40:0c:84:4a:ef:c0:7d:48:fa:36:df:87:26:e9:78:5b:b8: 85:c5:b5:d3:fc:78:d7:4e:c4:23:9c:dc:d1:c7:9a:3c:59:eb: c9:06:8d:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h1t5QVabfiucYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk NmYwOTViNTctNDE0Ni00NjBhLWI5MmQtOGQzZmIwOWIyNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27UqTBkmklROMO5WssXhl5i7EipcEF4CCXnr zIYnQ+8QVNNM4fo9g312KHSnc8LINnaUpgh6lPWnvOQjssaiqzEhUpmgC+5kwfpD zqDb4JXmIf4jzgoy8Zs0dzXfJkGWI8r2K++DpAg25YxBASvEfh0tOCImHfv3UIUf H+qHWZw5U9cpqs9oPw65bJBz17WMh1zg08EJUTqw/yEDb5tWaIIFjdnPCUvNDp4i VCy9sux3XK5WE8uwN4YVpRj/YymjoQFPuQ+H7gS9EwXWJjaDN9TDGtuldk1KrXcY mlgwPJ/5YZEV9EJgas5byHBmji8kwv6Ew62ZEJVh+lP8pCvVWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJf0fMS9xeGe6H5lG9HucFITEANpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYmNiODhkYWQtYWM2Ny0z M2ZiLWFlMWUtZTNiNzI0YzEzNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LT9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsMLC7UZjk52wwDpb6ieMTRJG7Co3b5b2SL16brh1oleUGZC9JuCysB 1T3JOn8gF4trJlZcXsh5WwJ9JRz9I4GDaLAW17753tQ51zamdZ0M9u9LM3DtWTWJ 5X2Y4Z/R/Jrbtjl/uF4xE0F1dJsI7Nt/H942089pphdClZgPzpD3yMflsp5gs1LG b7vNt8mg4u0alOlhns23Jx2bZ8ODJfh8FJN3XqQlvxcROw6KJzPEbBtClQh023Qz MOXoWwwfbMz0aKYwtAAjgk1/26SlXx+ZdFNGxtMIYChADIRK78B9SPo234cm6Xhb uIXFtdP8eNdOxCOc3NHHmjxZ68kGjW8= -----END CERTIFICATE-----Generated at Sat Oct 11 14:51:52 2025 by rpki-client