$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/67680324-7caa-3bc8-a0da-d5b9782851fa.roa File: 67680324-7caa-3bc8-a0da-d5b9782851fa.roa (raw, json) Hash identifier: DcOKuriXLkC0I9qVxx+7lhQBaaGJn7QNQL851R5bryk= Subject key identifier: 06:42:73:1E:CF:6A:B0:A1:C1:68:A3:81:FF:8E:A0:1F:8F:09:39:BC Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F4328584AE4611ABA30D23997CAF0C480 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/67680324-7caa-3bc8-a0da-d5b9782851fa.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 32133 IP address blocks: 169.197.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:1a:ba:30:d2:39:97:ca:f0:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=72f2af7f-7b7a-4c3c-a67b-05e51e1e598d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c4:15:ff:9a:fd:7c:0a:07:3a:11:1d:12:95: 48:79:a7:47:a8:a4:44:8e:ea:fc:bf:c3:76:68:b8: b8:ad:0a:69:3b:1f:e4:36:51:34:71:65:79:c6:8d: ce:0d:1c:77:7f:57:d9:63:39:ed:95:f8:ba:d5:ba: a9:f2:a6:ef:94:ee:47:7f:dd:20:3c:ba:f2:90:c0: 4b:15:de:7c:c4:f7:7c:14:f9:10:85:6b:5a:2f:96: 01:02:f3:cd:f8:e9:89:47:c8:1f:e7:63:e7:d4:52: dc:79:34:89:a5:f2:9a:cd:ca:c1:d6:88:65:c5:57: 24:6c:5f:af:b3:07:75:bd:06:33:1e:00:07:33:3c: 9a:bb:1f:85:00:93:a3:26:81:4b:3c:a0:bb:d8:7e: 40:9c:df:8f:03:a2:34:05:04:e6:fc:e4:c5:30:8b: 25:a4:d9:1c:38:6d:8f:46:28:d9:03:1b:79:ab:0d: 0b:0d:15:e4:c1:55:dd:7d:db:d5:cd:84:b4:42:e6: aa:26:a7:57:f7:19:a6:99:93:90:f9:e3:6f:5f:bf: 83:1d:12:51:6c:9c:db:80:96:7a:52:f5:a8:2f:18: 0c:01:2d:a3:52:9d:81:63:41:d1:12:69:eb:82:e7: 57:5b:47:28:68:f7:95:ee:ce:50:08:26:97:6b:74: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:42:73:1E:CF:6A:B0:A1:C1:68:A3:81:FF:8E:A0:1F:8F:09:39:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/67680324-7caa-3bc8-a0da-d5b9782851fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv4: 169.197.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:8f:b1:11:1f:45:8f:31:ee:61:30:41:f3:19:ce:02:99:89: 3e:6d:3f:1a:1c:da:15:f3:83:57:a6:b2:c6:ba:96:ab:67:77: 4a:77:bc:09:ac:d5:28:6f:72:f8:23:70:da:dc:e1:39:bb:78: fb:fa:8a:11:15:9f:b0:d5:4c:a4:38:9b:22:dc:f6:6a:6f:c8: 5a:23:6d:5c:85:b8:6f:a3:bb:39:f8:02:be:b7:82:18:36:cf: 81:43:b9:b1:c8:8b:7d:46:89:93:69:11:12:c4:a6:a5:1d:64: 61:a7:31:53:b0:7c:ff:f2:7b:00:2b:4f:16:e1:60:63:db:c5: aa:bf:b0:c6:c8:6e:6a:e8:20:af:a6:f0:80:f1:f8:9f:29:e9: 2d:56:6d:b1:08:d7:0d:93:67:ee:e1:60:02:e3:18:96:87:39: 4e:83:ad:74:d1:de:f7:2a:5f:19:4c:5d:2c:83:b9:f4:8c:c5: 14:78:92:56:43:03:c6:09:df:91:0e:e2:68:50:c0:b7:5c:ed: 7a:d4:97:01:88:b1:26:de:fb:89:df:41:32:21:f4:28:77:1b: de:d0:46:ef:3e:73:33:a0:f2:c2:6a:8b:19:e2:d2:2f:77:07: 00:ab:c5:12:84:d1:1c:23:96:c8:8e:14:e2:7f:9a:6d:f1:3c: 66:82:db:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRq6MNI5l8rwxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NzJmMmFmN2YtN2I3YS00YzNjLWE2N2ItMDVlNTFlMWU1OThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MQV/5r9fAoHOhEdEpVIeadHqKREjur8v8N2 aLi4rQppOx/kNlE0cWV5xo3ODRx3f1fZYzntlfi61bqp8qbvlO5Hf90gPLrykMBL Fd58xPd8FPkQhWtaL5YBAvPN+OmJR8gf52Pn1FLceTSJpfKazcrB1ohlxVckbF+v swd1vQYzHgAHMzyaux+FAJOjJoFLPKC72H5AnN+PA6I0BQTm/OTFMIslpNkcOG2P RijZAxt5qw0LDRXkwVXdfdvVzYS0QuaqJqdX9xmmmZOQ+eNvX7+DHRJRbJzbgJZ6 UvWoLxgMAS2jUp2BY0HREmnrgudXW0coaPeV7s5QCCaXa3TlzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZCcx7ParChwWijgf+OoB+PCTm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvNjc2ODAzMjQtN2NhYS0z YmM4LWEwZGEtZDViOTc4Mjg1MWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqcUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuPsREfRY8x7mEwQfMZzgKZiT5tPxoc2hXzg1emssa6lqtnd0p3vAms 1ShvcvgjcNrc4Tm7ePv6ihEVn7DVTKQ4myLc9mpvyFojbVyFuG+juzn4Ar63ghg2 z4FDubHIi31GiZNpERLEpqUdZGGnMVOwfP/yewArTxbhYGPbxaq/sMbIbmroIK+m 8IDx+J8p6S1WbbEI1w2TZ+7hYALjGJaHOU6DrXTR3vcqXxlMXSyDufSMxRR4klZD A8YJ35EO4mhQwLdc7XrUlwGIsSbe+4nfQTIh9Ch3G97QRu8+czOg8sJqixni0i93 BwCrxRKE0RwjlsiOFOJ/mm3xPGaC2xk= -----END CERTIFICATE-----Generated at Thu Aug 21 10:29:00 2025 by rpki-client