$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7629f5ae-a558-3ad0-ba44-6f902b9c9fd1.roa File: 7629f5ae-a558-3ad0-ba44-6f902b9c9fd1.roa (raw, json) Hash identifier: Fw0X5usT4LmC2i2Ov9N4xx/KBUqyASJIWmt4hptz+V4= Subject key identifier: FC:30:79:46:8F:D6:77:98:72:8D:98:DA:B6:AC:8D:CD:CE:9B:A7:0A Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D1794E08C7F17268C9DDC00 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7629f5ae-a558-3ad0-ba44-6f902b9c9fd1.roa Signing time: Thu 18 Sep 2025 19:39:31 +0000 ROA not before: Thu 18 Sep 2025 19:39:31 +0000 ROA not after: Wed 17 Dec 2025 20:39:31 +0000 asID: 11377 IP address blocks: 216.20.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:94:e0:8c:7f:17:26:8c:9d:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:31 2025 GMT Not After : Dec 17 20:39:31 2025 GMT Subject: CN=67d2c094-66d9-42cf-902c-b1dc39fc1d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:c5:b5:fb:78:c3:0d:21:55:5e:8f:fd:8e: ec:11:12:29:e4:c6:99:7d:fb:b9:5d:2c:9d:6e:d2: f6:da:14:5e:11:e8:6a:66:59:23:cf:c6:59:86:f8: 75:a1:43:32:b6:80:08:52:4c:dc:1f:28:29:8e:e6: 25:31:3e:df:46:a6:04:69:70:2f:a5:9f:c8:59:40: 44:23:45:20:03:94:60:53:11:dd:58:1e:8d:a2:7d: dc:98:fe:15:7d:e6:42:4c:30:d0:68:c3:cd:30:77: e4:3c:bd:f3:de:66:44:47:8f:df:75:7d:08:69:83: 5a:d6:93:e7:ed:83:fe:c1:3d:20:5f:5a:d3:f1:34: 2b:ec:60:f4:73:7b:c9:c7:c3:ef:98:bc:bd:8b:c7: 3b:88:67:68:37:07:58:aa:45:56:0d:fa:27:4e:14: fe:a1:a0:0a:4c:be:44:d4:d4:bb:51:ee:69:b3:f7: da:d8:9c:cc:87:60:71:4d:fd:e7:19:e3:4a:a8:3e: e1:c2:a6:e1:10:8f:d1:d9:50:0b:b8:c0:4c:84:30: 17:5c:fa:be:5b:09:06:ac:f0:bb:02:d9:85:f9:98: f0:17:0b:95:bb:76:8a:a7:1b:bd:9f:b5:6a:77:2f: 14:04:5a:aa:ee:7a:68:18:b1:c2:97:74:00:94:cd: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:30:79:46:8F:D6:77:98:72:8D:98:DA:B6:AC:8D:CD:CE:9B:A7:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7629f5ae-a558-3ad0-ba44-6f902b9c9fd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b4:93:b4:42:de:83:18:30:04:b3:30:65:60:fd:ae:62:f7: 51:d0:f8:ed:08:d3:f6:9e:f5:47:e4:8b:47:73:84:93:93:76: 55:f3:c7:55:24:3e:6a:8c:76:84:1a:dd:c2:03:a5:3f:12:8d: 48:ad:95:40:4b:62:68:ab:48:d6:d4:98:d6:f4:9e:aa:28:68: 74:8d:89:97:3f:c7:e0:b8:9d:c4:be:2c:43:6a:6c:87:d9:4f: c7:e2:eb:2d:42:5e:9d:c4:27:bd:a3:90:38:f6:02:e1:d7:95: fb:cc:af:55:86:6f:44:b0:d9:03:aa:71:77:24:58:a1:8a:05: 12:1c:d9:50:3b:3e:b9:32:22:d4:ce:30:2f:c3:b4:43:eb:d0: d6:d9:53:4f:f5:4f:32:ea:63:81:a4:25:a9:ed:06:cb:63:e6: 98:38:da:74:34:6d:e7:9b:41:45:8d:43:55:98:20:b9:09:0c: ab:20:e4:18:85:43:c7:9d:6c:6a:d9:b3:f2:de:c1:9e:36:5d: 41:7b:55:25:f6:3c:63:30:c4:2e:1d:33:c8:ac:88:47:c4:c8: 2a:44:9e:9d:8a:4f:7d:51:5d:b2:15:7a:9b:7f:c7:82:93:ae: 7b:08:a8:79:58:80:4b:a9:0f:d1:f1:20:a4:e5:4d:e0:3b:2c: 24:6f:a2:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F5TgjH8XJoyd3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5MzkzMVoXDTI1MTIxNzIwMzkzMVowLzEtMCsGA1UEAxMk NjdkMmMwOTQtNjZkOS00MmNmLTkwMmMtYjFkYzM5ZmMxZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvDFtft4ww0hVV6P/Y7sERIp5MaZffu5XSyd btL22hReEehqZlkjz8ZZhvh1oUMytoAIUkzcHygpjuYlMT7fRqYEaXAvpZ/IWUBE I0UgA5RgUxHdWB6Non3cmP4VfeZCTDDQaMPNMHfkPL3z3mZER4/fdX0IaYNa1pPn 7YP+wT0gX1rT8TQr7GD0c3vJx8PvmLy9i8c7iGdoNwdYqkVWDfonThT+oaAKTL5E 1NS7Ue5ps/fa2JzMh2BxTf3nGeNKqD7hwqbhEI/R2VALuMBMhDAXXPq+WwkGrPC7 AtmF+ZjwFwuVu3aKpxu9n7Vqdy8UBFqq7npoGLHCl3QAlM07AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwweUaP1neYco2Y2rasjc3Om6cKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvNzYyOWY1YWUtYTU1OC0z YWQwLWJhNDQtNmY5MDJiOWM5ZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi0k7RC3oMYMASzMGVg/a5i91HQ+O0I0/ae9Ufki0dzhJOTdlXzx1Uk PmqMdoQa3cIDpT8SjUitlUBLYmirSNbUmNb0nqooaHSNiZc/x+C4ncS+LENqbIfZ T8fi6y1CXp3EJ72jkDj2AuHXlfvMr1WGb0Sw2QOqcXckWKGKBRIc2VA7PrkyItTO MC/DtEPr0NbZU0/1TzLqY4GkJantBstj5pg42nQ0beebQUWNQ1WYILkJDKsg5BiF Q8edbGrZs/LewZ42XUF7VSX2PGMwxC4dM8isiEfEyCpEnp2KT31RXbIVept/x4KT rnsIqHlYgEupD9HxIKTlTeA7LCRvomM= -----END CERTIFICATE-----Generated at Fri Sep 19 13:06:17 2025 by rpki-client