$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa File: a401becd-3ae1-3b96-8178-8f59dad578c9.roa (raw, json) Hash identifier: 19A3IvcQt8vQNVob1sWFWyRtpk0cJPURalIKo4Ue/tY= Subject key identifier: 6E:F4:5B:72:C0:4D:9B:0E:A1:9F:57:98:23:AD:FA:70:6B:18:CA:FD Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Certificate serial: 010D0C9F4328584B0746AF9ABFEF7B940451B080 Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 803 IP address blocks: 216.197.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:af:9a:bf:ef:7b:94:04:51:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=8f7257c0-c9e9-458a-95d9-59fb999e7f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:03:99:3c:2d:b0:12:c1:2f:19:56:2a:f6:44: 7c:ac:7b:11:81:26:66:c3:87:01:e9:97:08:49:a1: 6f:9f:0c:5b:85:35:02:02:70:b2:26:c8:9b:fc:57: 3d:a6:3b:7e:24:34:d5:e3:34:22:67:12:f7:e6:55: 16:62:a1:d7:7b:1f:f7:8b:6f:c4:41:49:5e:c8:87: f5:d6:7b:8a:d6:1d:8e:93:85:6b:9f:0e:cc:c5:1f: b9:68:c6:1a:c2:47:d4:b8:e0:b2:5e:2e:74:6f:e1: 2a:2f:ab:72:7a:b9:99:3b:a0:10:35:ca:ce:ac:de: 1a:45:bd:4a:12:19:db:62:c4:5d:90:70:52:1b:39: c5:75:8d:af:ae:04:85:f1:88:9a:c9:d4:74:35:de: 56:0c:75:fa:24:50:e1:31:85:31:88:16:05:b7:83: cc:f3:03:7f:5c:c1:41:20:59:e1:c8:dc:95:76:23: d7:63:75:9c:d7:25:2e:dd:3f:24:e4:14:b4:59:17: 07:97:23:c7:1a:56:4c:26:d6:2a:10:f0:65:14:47: 18:06:64:83:bc:b0:9d:7e:65:98:41:81:bd:79:a0: bb:4a:b3:05:93:88:0c:13:a7:75:87:5f:da:4b:c4: 2b:08:ab:0f:b3:a3:d3:a0:7f:3b:f1:bd:c3:d9:84: 81:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F4:5B:72:C0:4D:9B:0E:A1:9F:57:98:23:AD:FA:70:6B:18:CA:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl X509v3 Authority Key Identifier: keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer sbgp-ipAddrBlock: critical IPv4: 216.197.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a8:e2:e0:a0:2f:f7:7f:3f:57:e0:70:5f:74:58:fe:b3:a7: bb:0d:a7:21:dd:f5:ae:63:80:39:30:87:28:79:5b:7f:64:d9: f0:01:ca:ce:31:06:d5:94:34:62:f9:18:ec:63:f0:cd:98:ff: c1:ec:b9:2d:3f:4b:de:da:b4:4d:28:cf:1c:be:79:1f:cd:1f: 79:aa:61:07:df:4a:77:8c:2b:dd:0d:fd:c2:9e:e0:c3:ca:00: bc:ce:d4:ee:75:61:12:68:b2:13:1e:22:e2:fd:dc:20:4c:6a: 70:07:70:05:a9:37:c9:08:a7:a6:bd:3d:b9:a2:13:5b:b6:75: 7c:52:45:6d:fc:f0:b9:82:71:87:85:8a:b2:67:85:d9:ec:fc: ea:f5:9c:25:d1:8c:4a:29:cb:15:a7:5b:02:e6:c0:8b:b4:86: ff:7f:a3:06:c8:21:3f:15:35:ba:bc:02:d6:4d:98:70:53:30: bf:01:6e:1f:27:1b:ee:43:7d:86:3a:c6:9f:64:c4:da:85:a7: b5:eb:d2:08:d8:de:ef:dd:12:26:95:c9:9d:3e:43:b2:d5:16: 58:73:63:dc:32:cf:08:17:37:de:00:3f:3c:ef:b4:5f:19:81: 76:b8:a0:33:d4:0d:a3:d1:c6:49:fa:ef:70:5f:3f:e4:3b:94: 26:7d:4c:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRq+av+97lARRsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5 NGExMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk OGY3MjU3YzAtYzllOS00NThhLTk1ZDktNTlmYjk5OWU3Zjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwOZPC2wEsEvGVYq9kR8rHsRgSZmw4cB6ZcI SaFvnwxbhTUCAnCyJsib/Fc9pjt+JDTV4zQiZxL35lUWYqHXex/3i2/EQUleyIf1 1nuK1h2Ok4Vrnw7MxR+5aMYawkfUuOCyXi50b+EqL6tyermZO6AQNcrOrN4aRb1K EhnbYsRdkHBSGznFdY2vrgSF8YiaydR0Nd5WDHX6JFDhMYUxiBYFt4PM8wN/XMFB IFnhyNyVdiPXY3Wc1yUu3T8k5BS0WRcHlyPHGlZMJtYqEPBlFEcYBmSDvLCdfmWY QYG9eaC7SrMFk4gME6d1h1/aS8QrCKsPs6PToH878b3D2YSBFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG70W3LATZsOoZ9XmCOt+nBrGMr9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvYTQwMWJlY2QtM2FlMS0z Yjk2LTgxNzgtOGY1OWRhZDU3OGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5 N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw YjZkYTk0YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2MWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuo4uCgL/d/P1fgcF90WP6zp7sNpyHd9a5jgDkwhyh5W39k2fABys4x BtWUNGL5GOxj8M2Y/8HsuS0/S97atE0ozxy+eR/NH3mqYQffSneMK90N/cKe4MPK ALzO1O51YRJoshMeIuL93CBManAHcAWpN8kIp6a9PbmiE1u2dXxSRW388LmCcYeF irJnhdns/Or1nCXRjEopyxWnWwLmwIu0hv9/owbIIT8VNbq8AtZNmHBTML8Bbh8n G+5DfYY6xp9kxNqFp7Xr0gjY3u/dEiaVyZ0+Q7LVFlhzY9wyzwgXN94APzzvtF8Z gXa4oDPUDaPRxkn673BfP+Q7lCZ9TKk= -----END CERTIFICATE-----Generated at Thu Oct 9 09:05:17 2025 by rpki-client