$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/c2e7eca9-bc66-3f06-9a7a-6e2f4c9e468e.roa File: c2e7eca9-bc66-3f06-9a7a-6e2f4c9e468e.roa (raw, json) Hash identifier: zZIwRmUMuXeR9k19c79WL+1ji7zzZI9X/VXWdaGs75U= Subject key identifier: 9B:DF:4A:41:47:21:4F:0D:4B:20:D5:9B:38:09:DC:6A:8C:B1:73:50 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D17C146359A66DD1CC87458 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/c2e7eca9-bc66-3f06-9a7a-6e2f4c9e468e.roa Signing time: Thu 18 Sep 2025 19:39:52 +0000 ROA not before: Thu 18 Sep 2025 19:39:52 +0000 ROA not after: Wed 17 Dec 2025 20:39:52 +0000 asID: 11377 IP address blocks: 216.20.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:c1:46:35:9a:66:dd:1c:c8:74:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:52 2025 GMT Not After : Dec 17 20:39:52 2025 GMT Subject: CN=b6a9c6be-5d8d-4793-a1bc-4d5e5d8baaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:58:a3:90:54:48:44:8a:49:46:0f:17:45:61: e3:73:d7:30:f6:6e:99:be:ca:79:f3:b3:d5:67:88: e5:50:11:e3:73:f4:99:c2:a3:ff:4e:73:dd:4a:7c: 58:c7:aa:61:66:77:4d:68:72:1e:b7:99:ae:c6:61: b5:4d:56:6c:7a:e4:c9:5d:1b:3b:05:eb:eb:84:66: 58:d0:1e:03:b5:b2:b0:37:f9:91:f3:d3:d9:1b:7c: fb:6c:74:7c:b0:1d:19:c6:59:50:b7:42:a9:a6:44: 6a:b4:39:4f:67:3c:7d:df:47:c7:f0:6f:8f:e0:69: a5:17:10:f7:e7:ab:69:c3:7c:dd:3a:d8:6a:0e:21: 70:0a:5a:fc:70:f4:d8:d2:f5:12:78:c6:2b:ea:59: 57:26:53:1a:97:e2:91:45:4e:25:83:f6:2c:b0:5a: b8:26:28:4e:b9:55:ce:4b:21:5b:7b:fd:6e:dd:43: 58:9f:e1:a9:3c:d1:65:3c:e7:5e:6a:61:83:d9:bc: 20:7c:ba:7c:c5:f7:cc:0f:72:9d:be:1a:87:93:3d: 0a:8e:40:ce:08:f0:bb:a7:de:18:f7:82:56:8f:3e: 88:bd:ac:d9:2d:e4:08:31:09:b8:de:bd:cb:fd:23: 4f:40:a7:77:d7:bb:3b:4c:22:9f:02:61:1e:09:72: 28:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DF:4A:41:47:21:4F:0D:4B:20:D5:9B:38:09:DC:6A:8C:B1:73:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/c2e7eca9-bc66-3f06-9a7a-6e2f4c9e468e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8e:67:23:22:62:3d:a8:70:d3:1c:e7:21:3c:0b:8c:c0:c4: c5:63:33:0e:a5:fe:ee:09:62:56:d2:67:9d:2c:79:7c:8e:09: ae:85:96:f4:4b:02:8f:33:b8:ff:68:9d:b8:0a:48:e4:98:0e: 24:eb:39:2e:d5:be:aa:bf:70:67:07:f6:70:36:4d:01:64:bb: e5:f4:e7:d0:b7:75:2f:3a:08:d6:c4:36:bd:a6:d3:39:76:07: 60:1a:4b:e1:23:c4:8c:c1:6c:ee:40:f8:be:7f:43:7a:ef:6b: d1:2e:68:1c:7d:17:3d:96:97:ca:36:2c:0c:cf:b3:a1:0e:e8: d1:b2:d2:10:d3:78:14:c6:9a:78:81:e0:fe:0e:2a:bc:5d:f2: 9e:6a:dc:22:5e:6b:3e:60:83:e9:a1:50:8d:9a:a6:00:57:d8: 33:1f:64:66:49:11:38:75:41:55:3b:36:67:af:a2:2c:62:c5: 41:b3:9c:9c:13:ad:4c:22:1d:27:13:f4:a7:a9:37:cd:49:75: 38:81:51:cd:ac:96:26:1c:f7:2e:a2:13:e0:a8:06:45:5a:61: 21:08:44:31:f1:a6:d8:24:2b:cd:cc:ec:68:fc:dd:bb:23:a8: 27:59:67:dd:92:b5:fa:ce:ef:e5:fa:3d:a8:f4:41:11:ec:5a: 88:c6:d7:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F8FGNZpm3RzIdFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5Mzk1MloXDTI1MTIxNzIwMzk1MlowLzEtMCsGA1UEAxMk YjZhOWM2YmUtNWQ4ZC00NzkzLWExYmMtNGQ1ZTVkOGJhYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFijkFRIRIpJRg8XRWHjc9cw9m6Zvsp587PV Z4jlUBHjc/SZwqP/TnPdSnxYx6phZndNaHIet5muxmG1TVZseuTJXRs7BevrhGZY 0B4DtbKwN/mR89PZG3z7bHR8sB0ZxllQt0KppkRqtDlPZzx930fH8G+P4GmlFxD3 56tpw3zdOthqDiFwClr8cPTY0vUSeMYr6llXJlMal+KRRU4lg/YssFq4JihOuVXO SyFbe/1u3UNYn+GpPNFlPOdeamGD2bwgfLp8xffMD3KdvhqHkz0KjkDOCPC7p94Y 94JWjz6IvazZLeQIMQm43r3L/SNPQKd317s7TCKfAmEeCXIoWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvfSkFHIU8NSyDVmzgJ3GqMsXNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvYzJlN2VjYTktYmM2Ni0z ZjA2LTlhN2EtNmUyZjRjOWU0NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWOZyMiYj2ocNMc5yE8C4zAxMVjMw6l/u4JYlbSZ50seXyOCa6FlvRL Ao8zuP9onbgKSOSYDiTrOS7Vvqq/cGcH9nA2TQFku+X059C3dS86CNbENr2m0zl2 B2AaS+EjxIzBbO5A+L5/Q3rva9EuaBx9Fz2Wl8o2LAzPs6EO6NGy0hDTeBTGmniB 4P4OKrxd8p5q3CJeaz5gg+mhUI2apgBX2DMfZGZJETh1QVU7NmevoixixUGznJwT rUwiHScT9KepN81JdTiBUc2sliYc9y6iE+CoBkVaYSEIRDHxptgkK83M7Gj83bsj qCdZZ92StfrO7+X6Paj0QRHsWojG1/M= -----END CERTIFICATE-----Generated at Fri Sep 19 13:03:47 2025 by rpki-client