$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/1d838f6d-fcb1-3396-9152-647a9876e567.roa File: 1d838f6d-fcb1-3396-9152-647a9876e567.roa (raw, json) Hash identifier: 0J8FZD0V4Xgy/tgzYgXB9E6ZQkWWNNRleMMUD7o+a6U= Subject key identifier: AA:D2:E1:0F:B3:D8:CD:0F:25:25:3F:3B:65:FB:4D:9D:91:57:0A:69 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D17AC7815302CF2B7922680 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/1d838f6d-fcb1-3396-9152-647a9876e567.roa Signing time: Thu 18 Sep 2025 19:39:43 +0000 ROA not before: Thu 18 Sep 2025 19:39:43 +0000 ROA not after: Wed 17 Dec 2025 20:39:43 +0000 asID: 11377 IP address blocks: 216.20.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:ac:78:15:30:2c:f2:b7:92:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:43 2025 GMT Not After : Dec 17 20:39:43 2025 GMT Subject: CN=d5eca785-1c9e-44f9-8cc5-52f1da259d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:a8:f8:df:fe:07:3e:a2:f4:1d:e7:c3:62: 97:f5:7e:3b:d6:1f:d2:80:62:af:53:4d:0e:36:97: a1:ed:e7:e5:aa:49:9a:4c:40:27:ec:62:cf:d8:a6: 24:9c:da:4c:13:1f:db:16:c4:8c:58:fd:11:4c:19: 10:0c:17:08:28:ed:c6:bc:ec:56:57:8a:84:83:4c: 20:e6:26:b4:ba:33:b0:7b:7d:e1:40:e2:4b:75:6e: 62:a9:e2:dd:5b:40:0d:e5:ea:9e:24:be:0c:23:15: 59:c4:2a:98:ce:4b:10:ea:45:c8:cd:26:18:de:23: bd:da:99:12:2d:bc:87:f2:6d:a6:2e:36:e8:4a:42: 65:a5:0b:4a:b7:99:d7:ca:b9:20:af:e5:2e:ea:1c: 10:06:82:0d:01:e3:19:6d:9b:88:99:75:00:f9:07: 43:81:72:b3:fd:62:91:40:74:f3:f2:f0:7c:8c:00: 6d:3b:70:13:16:1f:8b:14:75:63:aa:75:1b:97:cd: 22:60:db:a0:a5:db:dc:67:77:81:8c:fa:cf:aa:d2: 87:b2:d8:8b:b8:52:bc:19:66:33:34:33:46:4d:10: 5f:0f:ff:37:74:55:e6:64:15:2a:53:01:db:d5:2e: a1:8f:0e:62:d7:c5:13:82:f8:f5:5d:76:4b:89:f9: d3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D2:E1:0F:B3:D8:CD:0F:25:25:3F:3B:65:FB:4D:9D:91:57:0A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/1d838f6d-fcb1-3396-9152-647a9876e567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:bb:34:e5:94:9a:13:13:6d:b0:cf:3b:b1:1e:90:e8:f4:27: 4c:29:42:c8:f3:2d:07:06:5b:45:57:a2:94:93:90:b3:61:3a: 48:74:a2:d5:7a:83:71:a4:17:c5:9c:f8:09:35:cb:27:bb:dc: f3:60:db:22:cd:70:c1:4c:d9:b6:44:65:cd:d5:14:f2:d7:3e: cc:33:8d:3e:e8:0e:58:88:00:45:f1:f2:21:27:17:4b:7e:07: 4e:16:0b:83:02:ab:49:83:f8:48:0a:b9:16:3d:c9:6d:c5:80: 58:13:e7:fd:f4:9b:60:2f:ca:78:ae:94:f4:79:74:18:ce:06: 5d:bc:0c:31:e3:15:44:d6:df:e6:52:c7:17:9e:a1:cb:e0:5b: 81:bc:d3:53:bf:51:8b:7c:00:5f:e8:40:ea:ff:36:ef:c6:55: 91:b8:21:a1:1a:c7:b0:46:7a:78:2e:d7:52:a6:b3:73:7b:ad: 04:62:3f:14:6e:6c:16:e8:59:f6:2b:d2:6e:26:6e:1f:e4:5c: 09:92:a2:57:3c:a2:59:08:5f:d9:ae:b4:f1:e2:aa:f5:4e:d7: 28:9e:d7:d4:d5:dd:81:bc:40:a1:a4:40:8e:b5:d0:ca:ef:52: 97:72:f6:e6:0e:16:ad:4e:35:6d:cd:93:6a:23:02:a9:a9:09: d3:5f:75:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F6x4FTAs8reSJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5Mzk0M1oXDTI1MTIxNzIwMzk0M1owLzEtMCsGA1UEAxMk ZDVlY2E3ODUtMWM5ZS00NGY5LThjYzUtNTJmMWRhMjU5ZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxSo+N/+Bz6i9B3nw2KX9X471h/SgGKvU00O Npeh7eflqkmaTEAn7GLP2KYknNpMEx/bFsSMWP0RTBkQDBcIKO3GvOxWV4qEg0wg 5ia0ujOwe33hQOJLdW5iqeLdW0AN5eqeJL4MIxVZxCqYzksQ6kXIzSYY3iO92pkS LbyH8m2mLjboSkJlpQtKt5nXyrkgr+Uu6hwQBoINAeMZbZuImXUA+QdDgXKz/WKR QHTz8vB8jABtO3ATFh+LFHVjqnUbl80iYNugpdvcZ3eBjPrPqtKHstiLuFK8GWYz NDNGTRBfD/83dFXmZBUqUwHb1S6hjw5i18UTgvj1XXZLifnTtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrS4Q+z2M0PJSU/O2X7TZ2RVwppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvMWQ4MzhmNmQtZmNiMS0z Mzk2LTkxNTItNjQ3YTk4NzZlNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm7NOWUmhMTbbDPO7EekOj0J0wpQsjzLQcGW0VXopSTkLNhOkh0otV6 g3GkF8Wc+Ak1yye73PNg2yLNcMFM2bZEZc3VFPLXPswzjT7oDliIAEXx8iEnF0t+ B04WC4MCq0mD+EgKuRY9yW3FgFgT5/30m2AvyniulPR5dBjOBl28DDHjFUTW3+ZS xxeeocvgW4G801O/UYt8AF/oQOr/Nu/GVZG4IaEax7BGengu11Kms3N7rQRiPxRu bBboWfYr0m4mbh/kXAmSolc8olkIX9mutPHiqvVO1yie19TV3YG8QKGkQI610Mrv Updy9uYOFq1ONW3Nk2ojAqmpCdNfdaI= -----END CERTIFICATE-----Generated at Fri Sep 19 18:11:14 2025 by rpki-client