$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3a5ce221-8f9b-348f-9b51-2bd163e99c81.roa File: 3a5ce221-8f9b-348f-9b51-2bd163e99c81.roa (raw, json) Hash identifier: HgY8FAHWtq+hJRhdHL/5EMMm4BdmSOnsWn5xLpxwL9g= Subject key identifier: 17:DA:25:5A:B8:48:35:AF:8F:6B:4D:84:EE:47:DA:D9:E5:24:A3:2F Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D179824780D152E5D706980 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3a5ce221-8f9b-348f-9b51-2bd163e99c81.roa Signing time: Thu 18 Sep 2025 19:39:33 +0000 ROA not before: Thu 18 Sep 2025 19:39:33 +0000 ROA not after: Wed 17 Dec 2025 20:39:33 +0000 asID: 11377 IP address blocks: 216.20.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:98:24:78:0d:15:2e:5d:70:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:33 2025 GMT Not After : Dec 17 20:39:33 2025 GMT Subject: CN=f147472b-41e4-4009-b7db-926f74ae310c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:24:d8:f6:1c:25:be:82:cd:de:92:cd:af: d9:77:ed:d3:38:07:8d:c0:0a:19:d4:dc:d4:27:49: f8:b9:88:c9:4c:6c:90:5c:ff:af:d3:82:c5:b5:bb: 4b:ca:98:a6:d1:93:81:22:50:d3:7d:02:79:29:55: f5:09:68:23:5c:f5:c5:0c:5b:5c:d0:aa:ca:d8:cc: 94:30:67:5e:2d:33:e8:68:68:be:2c:1c:0f:fe:92: f3:6e:ae:37:91:81:dd:18:79:f8:dc:3f:ac:07:f9: 20:8d:a9:67:2c:d2:7f:ab:9d:85:fe:58:fd:52:fd: c8:fb:2e:a3:8a:80:b3:89:89:99:c4:68:56:6e:e9: ef:68:94:59:ce:18:d2:e1:77:24:59:17:86:d2:3e: 4c:df:8c:6e:a6:27:e6:2b:37:d8:61:a1:82:59:c3: 28:6b:53:ed:dd:45:bd:62:13:33:7f:99:c6:29:ae: f3:1d:0d:9b:a7:d4:25:0b:61:ba:82:09:38:e4:13: 09:74:79:bd:8c:58:fd:bc:fe:4c:f1:95:a6:08:0c: 3b:49:b4:69:21:d4:9b:1e:99:79:d9:fb:60:f1:ad: c9:53:e2:e1:8a:47:c0:f4:a1:99:a0:3e:8b:27:d9: f9:7c:33:31:e9:94:2d:00:36:f4:23:05:c3:68:42: b2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DA:25:5A:B8:48:35:AF:8F:6B:4D:84:EE:47:DA:D9:E5:24:A3:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3a5ce221-8f9b-348f-9b51-2bd163e99c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:92:90:51:0e:1a:0e:f0:bf:8b:45:bd:7e:c5:32:73:2b:1c: 58:b5:ab:01:db:2a:53:31:eb:72:70:29:62:6a:a1:68:15:10: 82:4c:70:04:84:4f:6b:63:2c:0e:95:e4:5c:6e:a7:13:63:74: 2a:7d:a8:3f:02:cf:16:89:5d:bc:63:ee:ef:69:c5:b5:11:3c: ce:47:cf:9e:f1:69:28:bc:c7:36:d4:12:66:0b:d2:27:32:27: ff:09:7e:f5:0f:65:d1:26:5d:7b:da:77:a0:dc:93:60:b8:97: 17:bb:07:dd:a8:65:9d:47:2c:c0:62:75:cb:3c:f0:24:40:c9: db:a0:a0:6e:c2:5b:87:b5:0c:22:0a:6f:ee:41:39:9f:18:21: 82:eb:ef:c4:50:c4:c2:55:56:55:9f:73:90:ae:40:88:a6:32: aa:32:30:56:a7:03:8f:a6:c4:ac:e7:d3:70:86:e3:37:02:ea: b1:ae:06:37:d6:9b:23:0e:ee:af:8f:a1:b0:8c:b8:61:ae:e0: 09:51:08:28:e5:5b:64:51:6d:02:5a:e8:8d:e6:15:cf:5b:43: 3a:13:40:9a:37:f4:2d:49:4a:10:5b:60:92:e3:cf:63:48:b2: 6c:d5:20:eb:9a:f2:9a:44:29:49:ef:af:5a:e1:ab:58:da:e5: de:47:42:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F5gkeA0VLl1waYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5MzkzM1oXDTI1MTIxNzIwMzkzM1owLzEtMCsGA1UEAxMk ZjE0NzQ3MmItNDFlNC00MDA5LWI3ZGItOTI2Zjc0YWUzMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppEk2PYcJb6Czd6Sza/Zd+3TOAeNwAoZ1NzU J0n4uYjJTGyQXP+v04LFtbtLypim0ZOBIlDTfQJ5KVX1CWgjXPXFDFtc0KrK2MyU MGdeLTPoaGi+LBwP/pLzbq43kYHdGHn43D+sB/kgjalnLNJ/q52F/lj9Uv3I+y6j ioCziYmZxGhWbunvaJRZzhjS4XckWReG0j5M34xupifmKzfYYaGCWcMoa1Pt3UW9 YhMzf5nGKa7zHQ2bp9QlC2G6ggk45BMJdHm9jFj9vP5M8ZWmCAw7SbRpIdSbHpl5 2ftg8a3JU+LhikfA9KGZoD6LJ9n5fDMx6ZQtADb0IwXDaEKyqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfaJVq4SDWvj2tNhO5H2tnlJKMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvM2E1Y2UyMjEtOGY5Yi0z NDhmLTliNTEtMmJkMTYzZTk5YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuSkFEOGg7wv4tFvX7FMnMrHFi1qwHbKlMx63JwKWJqoWgVEIJMcASE T2tjLA6V5FxupxNjdCp9qD8CzxaJXbxj7u9pxbURPM5Hz57xaSi8xzbUEmYL0icy J/8JfvUPZdEmXXvad6Dck2C4lxe7B92oZZ1HLMBidcs88CRAydugoG7CW4e1DCIK b+5BOZ8YIYLr78RQxMJVVlWfc5CuQIimMqoyMFanA4+mxKzn03CG4zcC6rGuBjfW myMO7q+PobCMuGGu4AlRCCjlW2RRbQJa6I3mFc9bQzoTQJo39C1JShBbYJLjz2NI smzVIOua8ppEKUnvr1rhq1ja5d5HQlU= -----END CERTIFICATE-----Generated at Fri Sep 19 13:03:44 2025 by rpki-client