$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3ded1a70-5a91-3f9e-a5ae-f8350efc1abd.roa File: 3ded1a70-5a91-3f9e-a5ae-f8350efc1abd.roa (raw, json) Hash identifier: Ykt4qxQWNcVRWTESDVnqE7EPTplruNicU0piGmz5CMo= Subject key identifier: CC:DD:7B:50:66:0D:17:53:A7:E8:C7:2A:30:2E:D9:8E:7D:E2:37:AC Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D17B8D33E1F9B8BC1C32400 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3ded1a70-5a91-3f9e-a5ae-f8350efc1abd.roa Signing time: Thu 18 Sep 2025 19:39:48 +0000 ROA not before: Thu 18 Sep 2025 19:39:48 +0000 ROA not after: Wed 17 Dec 2025 20:39:48 +0000 asID: 11377 IP address blocks: 216.20.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:b8:d3:3e:1f:9b:8b:c1:c3:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:48 2025 GMT Not After : Dec 17 20:39:48 2025 GMT Subject: CN=4e0ffd04-ad37-477c-bf2c-1f84f3e4ef17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:56:7b:e7:cd:b8:ce:5c:82:b9:ef:2c:85: cd:01:7b:b0:4d:00:9e:50:c8:6c:4b:f8:a0:d9:f3: 07:3e:9a:45:a2:32:42:5c:40:f4:49:c1:80:ae:69: c6:98:69:db:6a:7a:42:f4:8c:f0:6d:48:a7:67:6a: dd:b5:6e:a4:43:5b:6f:e0:53:9c:23:ec:2f:fa:81: b5:09:eb:c3:92:17:b7:b0:67:6f:b7:e7:81:4b:34: 54:41:40:bd:a2:2a:73:cc:15:36:b5:b4:0a:31:7e: 9e:59:ec:9b:1a:7f:ae:2a:9b:13:c6:b0:e7:d6:f3: 0f:9b:44:84:63:25:e6:0c:5f:66:f3:6f:e2:5a:dd: 0a:47:d7:75:92:75:04:f9:5f:44:4f:ac:4a:f0:22: 0e:48:18:2e:99:11:29:be:27:06:6b:f1:0c:cb:cc: 7b:d9:b9:0c:9b:3c:b2:b4:12:b7:39:ae:d9:1f:d7: e5:66:1a:d1:48:85:df:25:19:a7:1a:e7:6f:3d:39: 1a:67:b1:94:4d:0e:58:61:1a:7d:ca:22:2e:33:ed: e5:de:09:0c:b7:e5:93:bf:f5:8b:ac:ee:1b:e9:f5: 0b:6e:bb:cf:d1:b0:19:27:55:ad:63:06:41:15:3f: 11:c4:c3:32:2e:8b:47:1c:ee:c0:88:4b:68:c4:5d: 9f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DD:7B:50:66:0D:17:53:A7:E8:C7:2A:30:2E:D9:8E:7D:E2:37:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3ded1a70-5a91-3f9e-a5ae-f8350efc1abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3e:44:83:df:dc:82:5c:31:a4:79:cc:28:93:7c:1d:c4:be: 8e:d2:99:77:b6:30:f4:b1:d1:95:17:80:8d:9a:2d:43:d8:b8: bb:50:0e:89:a8:b2:26:ae:e7:b4:bb:76:13:09:ab:9b:47:db: 7d:3c:69:37:46:76:99:6d:54:80:2b:2b:6f:6c:0d:6b:b8:a6: 6a:d3:6b:ce:c2:6f:d0:38:e1:5f:9e:17:4d:b6:82:4b:87:1d: 1c:f6:9c:8b:a1:bc:73:2a:0e:39:6c:5b:77:cd:8e:27:83:d9: 65:ab:38:2f:cb:34:21:d5:13:fb:63:09:e9:d8:fc:94:9a:8b: c0:4a:67:45:22:af:18:ac:fc:3b:f7:21:9c:fe:2b:63:3b:92: 35:18:1f:2e:d7:3b:0b:00:bb:60:e3:fc:65:34:60:1a:d9:c0: 9f:ac:30:6a:b9:aa:ca:74:c7:60:de:47:4a:42:ff:1e:39:ed: aa:19:f9:47:78:9a:05:08:96:ae:f9:dd:0b:15:70:4c:05:1e: d1:f2:c4:ac:34:54:b7:64:60:ea:b6:92:8e:11:80:f5:6f:9b: 6d:8b:a0:79:a1:1d:0a:7a:bc:71:65:7e:6c:e6:d3:43:cc:0e: 7a:42:3c:34:df:eb:da:11:84:4e:9c:87:7b:24:b2:2b:fb:d0: e7:25:49:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F7jTPh+bi8HDJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5Mzk0OFoXDTI1MTIxNzIwMzk0OFowLzEtMCsGA1UEAxMk NGUwZmZkMDQtYWQzNy00NzdjLWJmMmMtMWY4NGYzZTRlZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7xWe+fNuM5cgrnvLIXNAXuwTQCeUMhsS/ig 2fMHPppFojJCXED0ScGArmnGmGnbanpC9IzwbUinZ2rdtW6kQ1tv4FOcI+wv+oG1 CevDkhe3sGdvt+eBSzRUQUC9oipzzBU2tbQKMX6eWeybGn+uKpsTxrDn1vMPm0SE YyXmDF9m82/iWt0KR9d1knUE+V9ET6xK8CIOSBgumREpvicGa/EMy8x72bkMmzyy tBK3Oa7ZH9flZhrRSIXfJRmnGudvPTkaZ7GUTQ5YYRp9yiIuM+3l3gkMt+WTv/WL rO4b6fULbrvP0bAZJ1WtYwZBFT8RxMMyLotHHO7AiEtoxF2f9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzde1BmDRdTp+jHKjAu2Y594jesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvM2RlZDFhNzAtNWE5MS0z ZjllLWE1YWUtZjgzNTBlZmMxYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw+RIPf3IJcMaR5zCiTfB3Evo7SmXe2MPSx0ZUXgI2aLUPYuLtQDomo siau57S7dhMJq5tH2308aTdGdpltVIArK29sDWu4pmrTa87Cb9A44V+eF022gkuH HRz2nIuhvHMqDjlsW3fNjieD2WWrOC/LNCHVE/tjCenY/JSai8BKZ0Uirxis/Dv3 IZz+K2M7kjUYHy7XOwsAu2Dj/GU0YBrZwJ+sMGq5qsp0x2DeR0pC/x457aoZ+Ud4 mgUIlq753QsVcEwFHtHyxKw0VLdkYOq2ko4RgPVvm22LoHmhHQp6vHFlfmzm00PM DnpCPDTf69oRhE6ch3sksiv70OclSUY= -----END CERTIFICATE-----Generated at Fri Sep 19 13:04:19 2025 by rpki-client