$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af676e91-f574-3a35-a1eb-6f87b5a96c8e.roa File: af676e91-f574-3a35-a1eb-6f87b5a96c8e.roa (raw, json) Hash identifier: dnGWmtRHdcCCcfY45Zjz67RvHWxESqTb0nx3rzaFyHg= Subject key identifier: 19:8E:F6:FC:1E:FF:4B:F4:BD:A4:E3:7C:5E:36:22:24:89:95:01:45 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D17AAE80BF4C5A13F2E7280 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af676e91-f574-3a35-a1eb-6f87b5a96c8e.roa Signing time: Thu 18 Sep 2025 19:39:42 +0000 ROA not before: Thu 18 Sep 2025 19:39:42 +0000 ROA not after: Wed 17 Dec 2025 20:39:42 +0000 asID: 11377 IP address blocks: 216.20.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:aa:e8:0b:f4:c5:a1:3f:2e:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:42 2025 GMT Not After : Dec 17 20:39:42 2025 GMT Subject: CN=d029c6b5-5cbc-4ddf-8755-66b29c2526fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:22:f1:10:15:5b:69:da:16:da:ae:c8:1b:93: f2:49:48:09:80:2d:af:a7:39:1d:ad:1d:a4:a4:76: cb:ec:4f:07:84:14:e3:af:d1:b2:4a:03:9e:9d:eb: 42:2c:92:a0:05:80:97:df:c0:9f:97:59:48:6a:ef: 07:79:22:3e:25:9c:09:3d:8c:b9:1e:04:04:c4:90: 50:52:2e:31:4a:a2:ca:16:73:52:28:0c:70:57:ca: bd:3b:4d:11:ad:42:f9:34:a1:0b:95:ae:0a:c3:c7: 36:ba:83:4c:39:85:24:e3:b3:9d:1e:7f:ef:f1:5d: fb:49:68:b5:7e:82:c8:1c:26:64:36:0e:7b:bf:7d: d8:34:af:79:0b:e2:26:6e:17:10:3c:fb:ce:15:6c: 4e:17:09:ee:49:0b:90:e9:1d:55:b3:6a:c8:d6:ae: 38:47:3a:57:63:c9:1e:e1:6f:3c:cb:fc:bb:fc:11: 21:8d:ec:a5:63:91:52:01:99:8c:cb:56:1c:74:d4: 02:e9:ab:ba:8c:b7:34:2f:62:34:d4:c5:0b:5a:90: 72:be:4c:8c:f6:6c:07:ab:e0:38:e1:e4:90:9d:5c: 05:dd:7a:6e:36:8c:0b:36:78:6b:98:18:97:8e:5a: 30:3d:d6:8e:18:b4:82:8c:33:e9:a2:f5:16:b6:7f: d3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8E:F6:FC:1E:FF:4B:F4:BD:A4:E3:7C:5E:36:22:24:89:95:01:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af676e91-f574-3a35-a1eb-6f87b5a96c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:64:09:f8:72:fd:77:c5:80:58:8c:bb:34:99:c6:72:19:63: 36:13:ef:b7:bd:f4:c1:28:6f:af:22:4e:2c:34:b1:b9:af:1b: cd:0e:86:3e:90:00:e7:d5:99:d9:40:97:13:4b:18:98:c1:a2: 0a:f4:13:a3:67:a2:a5:62:fd:c5:9e:9e:8e:f3:7e:9c:0b:32: fd:20:ff:6a:3b:a3:3b:41:06:8b:63:f5:85:64:27:8f:8f:de: 08:9f:47:bf:78:fd:e2:1f:e8:29:21:ac:42:8a:26:f0:e3:97: 88:5c:9c:67:bb:07:75:b4:68:55:7d:b7:5e:3c:40:36:2e:a7: b2:c4:ba:83:88:12:18:a4:c3:3f:29:1c:82:3f:fd:34:33:85: 0d:0a:73:c7:2a:64:96:cc:67:2a:4a:90:04:1b:06:74:c1:f8: 2c:c1:17:7d:2b:c2:ee:58:33:20:1f:79:15:3c:ce:23:20:1f: 3a:ed:e2:35:d3:af:0e:b3:33:e3:87:f5:d3:ef:e1:89:75:e4: 9d:8b:ec:24:e9:a0:f1:a5:8e:c9:b7:8d:6d:e5:72:e2:a0:0a: 7b:5c:dd:9c:93:a6:c1:07:0c:80:05:b1:b5:a1:52:2b:d5:a2: 85:55:5b:b3:a9:3d:8a:c9:42:a5:e8:f2:2e:90:af:8a:42:16: ee:b7:5e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F6roC/TFoT8ucoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5Mzk0MloXDTI1MTIxNzIwMzk0MlowLzEtMCsGA1UEAxMk ZDAyOWM2YjUtNWNiYy00ZGRmLTg3NTUtNjZiMjljMjUyNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCLxEBVbadoW2q7IG5PySUgJgC2vpzkdrR2k pHbL7E8HhBTjr9GySgOenetCLJKgBYCX38Cfl1lIau8HeSI+JZwJPYy5HgQExJBQ Ui4xSqLKFnNSKAxwV8q9O00RrUL5NKELla4Kw8c2uoNMOYUk47OdHn/v8V37SWi1 foLIHCZkNg57v33YNK95C+ImbhcQPPvOFWxOFwnuSQuQ6R1Vs2rI1q44RzpXY8ke 4W88y/y7/BEhjeylY5FSAZmMy1YcdNQC6au6jLc0L2I01MULWpByvkyM9mwHq+A4 4eSQnVwF3XpuNowLNnhrmBiXjlowPdaOGLSCjDPpovUWtn/TZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmO9vwe/0v0vaTjfF42IiSJlQFFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvYWY2NzZlOTEtZjU3NC0z YTM1LWExZWItNmY4N2I1YTk2YzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxkCfhy/XfFgFiMuzSZxnIZYzYT77e99MEob68iTiw0sbmvG80Ohj6Q AOfVmdlAlxNLGJjBogr0E6NnoqVi/cWeno7zfpwLMv0g/2o7oztBBotj9YVkJ4+P 3gifR794/eIf6CkhrEKKJvDjl4hcnGe7B3W0aFV9t148QDYup7LEuoOIEhikwz8p HII//TQzhQ0Kc8cqZJbMZypKkAQbBnTB+CzBF30rwu5YMyAfeRU8ziMgHzrt4jXT rw6zM+OH9dPv4Yl15J2L7CTpoPGljsm3jW3lcuKgCntc3ZyTpsEHDIAFsbWhUivV ooVVW7OpPYrJQqXo8i6Qr4pCFu63XnE= -----END CERTIFICATE-----Generated at Fri Sep 19 14:32:06 2025 by rpki-client