$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa File: ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa (raw, json) Hash identifier: vEeCVmGZQO4F6MgVmAbmo3c/vWAR2DiOrTd93n44VNg= Subject key identifier: A7:26:7C:5C:64:E3:A6:D9:D0:BC:7A:05:B1:8C:7F:1B:0A:45:ED:24 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584B3DBA262CA64F106C8FA43F80 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 40509 IP address blocks: 172.86.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:26:2c:a6:4f:10:6c:8f:a4:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=e2cc522d-63eb-4a76-bae0-a334dfde5955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:19:ce:b7:a6:1e:1c:24:1b:97:5b:70:28:00: 86:a4:36:18:05:05:a5:21:8e:9f:59:f3:bd:1d:d6: d9:6b:ff:ab:d6:78:f5:8d:85:7f:0b:39:63:b1:8b: e5:c4:91:92:8c:a0:fa:c1:a3:bd:d6:b7:48:74:62: 73:1b:93:a0:25:62:31:7d:9c:b6:0a:65:32:4b:f2: 2b:56:a3:d2:64:f1:d3:73:32:a3:06:3b:06:b0:75: 0d:8d:9f:65:60:7e:e7:24:17:dc:0b:05:ad:5a:37: 2b:12:38:2f:7c:a0:f5:27:40:35:ff:60:e7:05:64: 98:b2:d2:d1:26:12:54:7d:42:2e:8a:b0:57:c1:5b: e3:6b:85:8a:89:ff:60:e9:0b:e4:37:e2:fe:64:9f: f8:b0:40:5d:1c:84:8c:d0:3f:41:d8:ff:48:df:f5: f8:5e:52:c8:25:49:28:1d:1d:7c:85:ad:0f:44:99: f5:ad:59:95:63:df:ba:20:fe:d7:5d:51:97:ad:53: 31:37:96:d1:0c:e5:a5:5a:67:b9:83:80:81:a8:fe: bd:d3:79:57:34:73:4f:5d:15:d7:95:0d:b6:09:83: 94:c0:ac:c9:e3:00:fc:8c:a1:6f:86:5e:86:05:dc: 6a:df:22:81:57:a1:a8:f9:3e:7c:f8:1f:46:b2:bf: 05:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:26:7C:5C:64:E3:A6:D9:D0:BC:7A:05:B1:8C:7F:1B:0A:45:ED:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 172.86.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3b:e0:78:f5:8e:82:df:96:75:27:1f:6c:60:39:9c:4e:4b: fd:ca:4f:89:ef:49:fb:cd:d5:c0:0d:59:07:a0:9b:1c:a4:0e: 2a:bd:b3:b7:ef:ff:3a:fb:c3:e7:f0:c1:ce:d6:7f:fe:10:bb: 2c:e0:9f:bf:98:38:b7:90:c9:e7:0b:96:36:1b:6c:16:8a:2e: 7e:f4:76:1e:f3:9a:f8:fe:28:a1:69:71:76:76:f9:5e:ab:09: b3:3f:39:3b:08:d2:bd:a4:3d:7c:dc:50:01:a2:bb:46:57:2d: b1:47:3e:21:23:05:76:ab:a0:52:9b:79:d1:4d:af:f4:90:fe: 08:01:44:fa:a9:0b:28:3c:aa:2f:c1:7f:53:1d:ca:86:fb:cc: 0a:f7:1f:58:3a:80:fa:0f:1d:fd:ac:bc:ad:79:7d:56:fe:19: 6d:2e:ee:96:5e:f0:83:e6:2c:f0:bc:f7:a5:e6:7e:ed:f6:ac: 9b:33:e8:39:b0:a1:9d:cf:fa:e0:55:9d:4d:86:a4:7c:f1:22: 1c:8a:3b:33:36:00:d1:b1:be:5d:26:61:e2:82:a9:31:72:ec: ed:fb:e6:9d:68:2b:35:b6:15:10:a1:2f:6d:d6:d9:6c:ef:89: bc:e4:1b:77:c4:06:3a:3f:f0:21:ab:86:92:82:e4:e3:4b:7a: aa:d2:fd:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uiYspk8QbI+kP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZTJjYzUyMmQtNjNlYi00YTc2LWJhZTAtYTMzNGRmZGU1OTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBnOt6YeHCQbl1twKACGpDYYBQWlIY6fWfO9 HdbZa/+r1nj1jYV/CzljsYvlxJGSjKD6waO91rdIdGJzG5OgJWIxfZy2CmUyS/Ir VqPSZPHTczKjBjsGsHUNjZ9lYH7nJBfcCwWtWjcrEjgvfKD1J0A1/2DnBWSYstLR JhJUfUIuirBXwVvja4WKif9g6QvkN+L+ZJ/4sEBdHISM0D9B2P9I3/X4XlLIJUko HR18ha0PRJn1rVmVY9+6IP7XXVGXrVMxN5bRDOWlWme5g4CBqP6903lXNHNPXRXX lQ22CYOUwKzJ4wD8jKFvhl6GBdxq3yKBV6Go+T58+B9Gsr8FkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcmfFxk46bZ0Lx6BbGMfxsKRe0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvY2E2N2M2ZWQtNTFkNS0z NTY4LTgwMWQtN2ZkOWM5MTNmOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU74Hj1joLflnUnH2xgOZxOS/3KT4nvSfvN1cANWQegmxykDiq9s7fv /zr7w+fwwc7Wf/4Quyzgn7+YOLeQyecLljYbbBaKLn70dh7zmvj+KKFpcXZ2+V6r CbM/OTsI0r2kPXzcUAGiu0ZXLbFHPiEjBXaroFKbedFNr/SQ/ggBRPqpCyg8qi/B f1Mdyob7zAr3H1g6gPoPHf2svK15fVb+GW0u7pZe8IPmLPC896Xmfu32rJsz6Dmw oZ3P+uBVnU2GpHzxIhyKOzM2ANGxvl0mYeKCqTFy7O375p1oKzW2FRChL23W2Wzv ibzkG3fEBjo/8CGrhpKC5ONLeqrS/es= -----END CERTIFICATE-----Generated at Fri Oct 10 20:04:24 2025 by rpki-client