$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/660081f5-9704-3b8b-bd46-7e76ed60b426.roa File: 660081f5-9704-3b8b-bd46-7e76ed60b426.roa (raw, json) Hash identifier: 2w7m/TRgDbLRyRVTbf0QgP7Gek05yjwCrKmR4AA1Uew= Subject key identifier: 8C:4B:C9:85:7F:AD:D0:1A:5A:0B:5E:71:B2:60:BB:88:C0:23:7C:7C Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D17C6133007E944524A8C80 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/660081f5-9704-3b8b-bd46-7e76ed60b426.roa Signing time: Thu 18 Sep 2025 19:39:55 +0000 ROA not before: Thu 18 Sep 2025 19:39:55 +0000 ROA not after: Wed 17 Dec 2025 20:39:55 +0000 asID: 11377 IP address blocks: 216.20.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:c6:13:30:07:e9:44:52:4a:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:55 2025 GMT Not After : Dec 17 20:39:55 2025 GMT Subject: CN=59570fb0-23c7-4d7b-965e-8a40e63d1ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e6:74:21:08:ac:41:cf:60:83:93:f4:b3:b8: 3e:34:c7:5e:8b:04:7f:26:6f:b7:75:99:a6:92:d4: a7:7f:e2:d5:ca:32:31:8a:66:53:ca:99:bc:00:8f: 46:5a:c3:ed:9d:3a:22:f7:a5:0d:d7:ce:ca:5e:e3: 31:8c:90:88:23:cc:1b:a1:02:a0:6a:f5:04:55:af: 10:39:c1:f9:bb:7d:02:59:b7:63:b0:d9:74:2c:79: 86:8f:ce:07:98:4a:2b:2a:b7:49:59:42:b0:d6:31: 95:7e:9a:04:4b:57:e7:7a:cf:20:9f:40:8b:86:66: 66:c0:1c:1f:b9:40:4c:fc:93:d4:fd:d8:52:29:f1: f8:e9:32:e4:19:d6:79:f0:e8:6f:7c:8c:3b:41:f9: c9:43:f5:55:55:75:a5:d8:97:9c:5e:7f:f8:81:0e: 31:ae:24:69:20:4e:51:ad:a2:ed:e1:74:96:68:1f: 6b:31:ba:46:85:9d:2b:91:7e:cf:2e:8d:62:4b:73: b0:a4:62:36:bf:8b:2f:6a:89:f3:bc:2f:10:d6:f4: c7:c3:64:da:4d:9b:f7:94:9a:3b:f2:23:93:aa:22: f4:25:13:e3:8e:39:8a:a4:50:41:10:79:00:19:72: 52:15:a5:09:13:33:58:4c:68:5d:ad:8f:c0:c6:28: 2d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4B:C9:85:7F:AD:D0:1A:5A:0B:5E:71:B2:60:BB:88:C0:23:7C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/660081f5-9704-3b8b-bd46-7e76ed60b426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:07:72:2c:49:71:d5:42:58:2b:94:f2:f1:85:e2:27:56:38: 08:6b:f9:c4:0b:25:7d:09:a1:bc:2e:c9:43:91:c3:23:fd:78: 12:95:71:18:6d:96:04:34:b8:32:56:9f:c9:d1:dc:35:4e:66: b4:8f:91:9a:db:75:ad:55:5a:0f:01:19:ff:58:19:b1:2c:67: e1:6e:e5:a7:79:9a:66:56:a9:77:59:e1:e4:57:42:e3:ae:a1: 6f:29:66:cd:e0:ec:f0:ad:ee:66:31:6b:79:cf:08:ee:e2:b5: 9f:bb:99:9d:79:1b:99:3f:ed:82:69:cd:05:85:ed:a7:e1:1d: 0e:0f:56:ec:d0:09:72:49:89:71:1e:c4:0b:e9:79:ca:28:06: a2:51:c1:ad:cb:37:fc:e8:33:05:2c:1f:d8:23:91:ca:73:29: ff:b2:39:dd:5c:a9:dc:93:23:f5:28:59:42:99:58:fd:ee:66: e7:f5:20:d2:a5:43:55:89:cd:ed:19:17:65:a1:dc:51:65:b6: 47:a8:0c:9a:5a:a7:e1:b7:93:2c:7a:ce:f0:2a:08:b4:be:d9: c7:61:78:8d:30:99:7b:6c:cb:58:d2:a5:7a:31:26:25:53:ed: 82:ca:70:d4:04:4f:d5:0e:6e:a7:06:f2:4d:0d:2b:01:3f:df: bc:db:52:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F8YTMAfpRFJKjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5Mzk1NVoXDTI1MTIxNzIwMzk1NVowLzEtMCsGA1UEAxMk NTk1NzBmYjAtMjNjNy00ZDdiLTk2NWUtOGE0MGU2M2QxY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOZ0IQisQc9gg5P0s7g+NMdeiwR/Jm+3dZmm ktSnf+LVyjIximZTypm8AI9GWsPtnToi96UN187KXuMxjJCII8wboQKgavUEVa8Q OcH5u30CWbdjsNl0LHmGj84HmEorKrdJWUKw1jGVfpoES1fnes8gn0CLhmZmwBwf uUBM/JPU/dhSKfH46TLkGdZ58OhvfIw7QfnJQ/VVVXWl2JecXn/4gQ4xriRpIE5R raLt4XSWaB9rMbpGhZ0rkX7PLo1iS3OwpGI2v4svaonzvC8Q1vTHw2TaTZv3lJo7 8iOTqiL0JRPjjjmKpFBBEHkAGXJSFaUJEzNYTGhdrY/AxigthQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxLyYV/rdAaWgtecbJgu4jAI3x8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvNjYwMDgxZjUtOTcwNC0z YjhiLWJkNDYtN2U3NmVkNjBiNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8HcixJcdVCWCuU8vGF4idWOAhr+cQLJX0JobwuyUORwyP9eBKVcRht lgQ0uDJWn8nR3DVOZrSPkZrbda1VWg8BGf9YGbEsZ+Fu5ad5mmZWqXdZ4eRXQuOu oW8pZs3g7PCt7mYxa3nPCO7itZ+7mZ15G5k/7YJpzQWF7afhHQ4PVuzQCXJJiXEe xAvpecooBqJRwa3LN/zoMwUsH9gjkcpzKf+yOd1cqdyTI/UoWUKZWP3uZuf1INKl Q1WJze0ZF2Wh3FFltkeoDJpap+G3kyx6zvAqCLS+2cdheI0wmXtsy1jSpXoxJiVT 7YLKcNQET9UObqcG8k0NKwE/37zbUkQ= -----END CERTIFICATE-----Generated at Fri Sep 19 13:07:48 2025 by rpki-client