$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/096ed644-dc92-3c18-ab10-0f2f45957b18.roa File: 096ed644-dc92-3c18-ab10-0f2f45957b18.roa (raw, json) Hash identifier: mlhkFwnPQ3k0jV/ittafssuG4GgZM4z2qvY5QH9WoPM= Subject key identifier: AB:D8:BA:2D:1B:2B:07:CD:9C:8E:48:71:52:58:F9:76:20:B4:43:91 Certificate issuer: /CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Certificate serial: 010D0C9F4328584AF5212B2CF76DAE3E49E2BC40 Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/096ed644-dc92-3c18-ab10-0f2f45957b18.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 22851 IP address blocks: 206.176.20.0/23 maxlen: 24 206.176.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2b:2c:f7:6d:ae:3e:49:e2:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=cf4b27b7-6455-4a22-ae7d-55c4a4e070be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3f:a6:f4:f1:97:58:45:d3:dd:a0:e4:f0:27: 21:ba:8d:ff:62:70:61:c9:6f:94:64:44:69:86:46: cd:1d:29:2e:1a:ab:ed:44:99:63:d6:5c:86:a5:4e: 73:2e:1b:0c:b1:de:ca:52:bf:e3:0e:63:7b:1f:31: 10:25:90:dd:cb:94:08:8d:b7:f2:97:6c:a7:ac:99: f0:b2:28:4b:29:b9:83:92:af:6e:93:a0:56:ea:d7: 4b:59:d4:f9:7b:f3:76:77:73:81:a7:eb:61:30:b6: f9:75:f6:03:46:40:a4:25:c6:85:98:0b:04:77:39: d3:c6:49:be:5c:2f:a4:91:5d:34:c6:e4:d8:55:34: e1:02:7a:c2:b7:a9:ff:9c:47:99:cb:6d:5a:df:92: 85:fb:3b:a2:67:2d:49:94:06:70:80:3e:f8:c6:32: df:62:47:6c:a5:b3:0a:da:50:c2:90:5b:67:7f:df: 2b:fc:80:e6:e0:3a:89:15:73:d9:6f:a0:49:3c:60: 78:94:bc:42:a2:2c:3d:bd:c3:79:11:c0:6a:b3:39: 71:3e:42:33:83:65:c1:2f:a5:57:13:0f:8c:f7:d4: 8f:f2:02:da:a6:97:21:95:0b:e8:85:05:99:f2:75: f5:ae:1b:4c:f4:df:b3:ec:98:13:69:b9:e2:02:a4: ca:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D8:BA:2D:1B:2B:07:CD:9C:8E:48:71:52:58:F9:76:20:B4:43:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/096ed644-dc92-3c18-ab10-0f2f45957b18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl X509v3 Authority Key Identifier: keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer sbgp-ipAddrBlock: critical IPv4: 206.176.20.0/23 206.176.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:41:45:6a:fa:2c:d4:f4:fa:ba:40:d0:9d:77:4e:9b:f3:59: a1:9f:14:84:68:1a:6c:7b:05:06:b6:5f:b8:d7:bd:6c:80:4b: 2b:e0:97:ba:2d:6b:11:b6:0d:a8:a5:01:5e:9a:76:1e:ce:df: be:20:65:6d:d4:81:86:02:80:01:fb:ee:ac:02:ce:46:53:3a: 19:49:9a:17:32:d4:80:4e:c6:dd:25:64:d5:84:b2:dc:a4:f7: 28:ed:84:ad:30:95:ab:0b:92:73:ea:f5:04:03:c8:d2:a0:85: 9f:6e:e7:48:50:83:d5:72:c0:ac:d1:72:02:87:1f:16:87:64: 0e:31:30:ad:1e:a5:7f:c8:01:f7:28:8d:08:f9:9d:d4:92:3f: 8b:b0:87:69:cd:26:ae:60:6e:4a:8d:ca:75:2a:6d:a0:83:04: f6:4b:b1:c5:d7:bc:22:6a:32:94:6a:c5:dc:18:09:e5:38:ff: c3:a2:5a:e0:30:41:6d:8c:99:9f:da:1f:b1:6f:86:b2:2c:28: c5:1f:25:a7:82:e8:4a:c8:ad:22:1c:70:e3:37:c8:9e:90:d5: e1:40:03:cb:38:2e:47:39:c8:9b:72:71:42:db:7c:c5:d1:b9: cc:b1:f2:62:41:fe:22:fe:eb:81:74:22:73:58:c3:89:57:46: 9e:c5:7c:ea -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEr1ISss922uPknivEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc5MzdiNzYtMTQwMS00YTE5LTg2ZWYtMjM1MWZkMDE5 OGE2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2Y0YjI3YjctNjQ1NS00YTIyLWFlN2QtNTVjNGE0ZTA3MGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7j+m9PGXWEXT3aDk8Cchuo3/YnBhyW+UZERp hkbNHSkuGqvtRJlj1lyGpU5zLhsMsd7KUr/jDmN7HzEQJZDdy5QIjbfyl2ynrJnw sihLKbmDkq9uk6BW6tdLWdT5e/N2d3OBp+thMLb5dfYDRkCkJcaFmAsEdznTxkm+ XC+kkV00xuTYVTThAnrCt6n/nEeZy21a35KF+zuiZy1JlAZwgD74xjLfYkdspbMK 2lDCkFtnf98r/IDm4DqJFXPZb6BJPGB4lLxCoiw9vcN5EcBqszlxPkIzg2XBL6VX Ew+M99SP8gLappchlQvohQWZ8nX1rhtM9N+z7JgTabniAqTK4wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKvYui0bKwfNnI5IcVJY+XYgtEORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkz N2I3Ni0xNDAxLTRhMTktODZlZi0yMzUxZmQwMTk4YTYvMDk2ZWQ2NDQtZGM5Mi0z YzE4LWFiMTAtMGYyZjQ1OTU3YjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDc5MzdiNzYtMTQwMS00YTE5LTg2 ZWYtMjM1MWZkMDE5OGE2L2Q3OTM3Yjc2LTE0MDEtNGExOS04NmVmLTIzNTFmZDAx OThhNi5jcmwwHwYDVR0jBBgwFoAUzCmYA5nGRcTgpU9GWUkMpY/nz8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkzN2I3Ni0xNDAxLTRhMTktODZlZi0yMzUx ZmQwMTk4YTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBzrAUAwQA zrA2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAxBRWr6LNT0+rpA0J13TpvzWaGfFIRoGmx7BQa2X7jXvWyA Syvgl7otaxG2DailAV6adh7O374gZW3UgYYCgAH77qwCzkZTOhlJmhcy1IBOxt0l ZNWEstyk9yjthK0wlasLknPq9QQDyNKghZ9u50hQg9VywKzRcgKHHxaHZA4xMK0e pX/IAfcojQj5ndSSP4uwh2nNJq5gbkqNynUqbaCDBPZLscXXvCJqMpRqxdwYCeU4 /8OiWuAwQW2MmZ/aH7FvhrIsKMUfJaeC6ErIrSIccOM3yJ6Q1eFAA8s4Lkc5yJty cULbfMXRucyx8mJB/iL+64F0InNYw4lXRp7FfOo= -----END CERTIFICATE-----Generated at Tue Nov 4 17:35:14 2025 by rpki-client