$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/cf6647fc-9b24-399c-8771-2a6af1a4b386.roa File: cf6647fc-9b24-399c-8771-2a6af1a4b386.roa (raw, json) Hash identifier: oBkE2NN36qBQtNY+p/utYKdD9vlsi59qtdRdYg2blMQ= Subject key identifier: 6F:A8:50:E2:07:C3:DD:C1:39:BB:E6:19:22:1F:6D:6A:5C:C5:1A:D2 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D1796709F44ABEFFC966480 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/cf6647fc-9b24-399c-8771-2a6af1a4b386.roa Signing time: Thu 18 Sep 2025 19:39:32 +0000 ROA not before: Thu 18 Sep 2025 19:39:32 +0000 ROA not after: Wed 17 Dec 2025 20:39:32 +0000 asID: 11377 IP address blocks: 216.20.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:96:70:9f:44:ab:ef:fc:96:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:32 2025 GMT Not After : Dec 17 20:39:32 2025 GMT Subject: CN=19893848-88cb-4509-a194-363d8d574eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:fc:66:8a:4b:6d:4b:21:80:de:60:f4:e2: 4f:05:be:19:77:46:ea:23:4b:3c:b8:ff:a4:8e:36: d8:7e:e7:eb:7b:74:2b:d9:36:48:38:ac:11:8d:fa: 7d:31:84:a2:51:07:2d:2e:7c:8d:4a:aa:33:5a:50: 93:6c:b8:2a:d8:4f:30:f8:ec:c7:19:63:ab:bf:e5: 09:39:8c:65:82:ba:b7:be:86:15:93:70:ba:54:cc: f4:90:1a:2b:d1:45:29:c6:19:da:62:7c:2b:0e:6b: 1f:7d:8c:5e:1e:a7:e1:5a:d2:8c:8f:a6:7f:bb:43: 8e:e4:03:cb:64:84:a3:77:86:4a:f5:99:e8:24:2c: c3:f6:ca:f4:8f:53:a5:21:03:27:cc:ec:d2:68:1e: 6d:28:58:fc:2f:80:8b:8d:8d:08:be:9c:36:5c:d7: 6d:4e:1a:af:c7:18:76:33:ce:9d:19:44:bc:bf:5f: ce:72:60:a1:19:28:aa:48:c8:37:e8:aa:c0:fb:06: a0:60:0c:46:58:0c:99:c6:d7:d9:74:31:e5:ac:b1: ec:60:f4:50:0a:c8:51:25:8f:c5:3d:e9:05:6f:90: 13:ab:4c:68:0a:52:83:37:13:d3:82:b1:b7:70:5e: 27:1a:2b:ec:41:89:41:87:71:1c:4a:67:eb:12:b3: e3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A8:50:E2:07:C3:DD:C1:39:BB:E6:19:22:1F:6D:6A:5C:C5:1A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/cf6647fc-9b24-399c-8771-2a6af1a4b386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1e:85:66:82:6b:10:70:ce:79:5b:eb:a6:36:1e:69:26:d3: a9:40:e9:33:65:08:97:86:a5:0b:52:0d:bd:28:41:9d:6e:08: 4f:1c:26:37:8f:99:94:b9:b6:c8:be:ae:07:f6:e3:92:24:f9: bc:f4:f2:a8:72:15:6f:e1:84:49:fc:37:54:45:b5:a9:6f:ad: ea:66:cd:dd:02:b9:28:b8:b8:4b:bb:c9:c0:90:34:61:b1:e4: 69:15:8f:bd:85:0e:04:04:9b:a7:95:4a:42:b4:4c:88:8e:1b: d7:3e:50:9e:1b:ec:65:27:31:ff:3d:18:b7:0a:6c:16:55:ad: 36:f8:1e:33:2c:a8:99:a7:91:c6:85:2e:9a:7b:0b:89:75:17: 61:a1:d5:1f:4c:68:e0:73:51:af:0e:1d:61:11:b1:d6:cb:7a: 30:86:19:e9:38:6e:11:b9:69:d3:53:fd:65:78:22:45:00:2a: 8d:25:59:bd:e9:90:42:eb:59:47:ac:13:6f:57:70:18:8f:be: 08:5d:62:ec:63:78:d0:1d:54:fa:35:f8:73:0b:76:41:7a:bd: 7d:75:dc:dd:69:b5:d2:f7:78:d9:34:65:76:d8:dd:c2:5e:6b: ec:18:f8:38:8e:b7:5f:12:29:7d:6f:0e:89:1c:5f:c5:23:04: 9a:03:4d:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F5Zwn0Sr7/yWZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5MzkzMloXDTI1MTIxNzIwMzkzMlowLzEtMCsGA1UEAxMk MTk4OTM4NDgtODhjYi00NTA5LWExOTQtMzYzZDhkNTc0ZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniP8ZopLbUshgN5g9OJPBb4Zd0bqI0s8uP+k jjbYfufre3Qr2TZIOKwRjfp9MYSiUQctLnyNSqozWlCTbLgq2E8w+OzHGWOrv+UJ OYxlgrq3voYVk3C6VMz0kBor0UUpxhnaYnwrDmsffYxeHqfhWtKMj6Z/u0OO5APL ZISjd4ZK9ZnoJCzD9sr0j1OlIQMnzOzSaB5tKFj8L4CLjY0Ivpw2XNdtThqvxxh2 M86dGUS8v1/OcmChGSiqSMg36KrA+wagYAxGWAyZxtfZdDHlrLHsYPRQCshRJY/F PekFb5ATq0xoClKDNxPTgrG3cF4nGivsQYlBh3EcSmfrErPjOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+oUOIHw93BObvmGSIfbWpcxRrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvY2Y2NjQ3ZmMtOWIyNC0z OTljLTg3NzEtMmE2YWYxYTRiMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BR0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoehWaCaxBwznlb66Y2Hmkm06lA6TNlCJeGpQtSDb0oQZ1uCE8cJjeP mZS5tsi+rgf245Ik+bz08qhyFW/hhEn8N1RFtalvrepmzd0CuSi4uEu7ycCQNGGx 5GkVj72FDgQEm6eVSkK0TIiOG9c+UJ4b7GUnMf89GLcKbBZVrTb4HjMsqJmnkcaF Lpp7C4l1F2Gh1R9MaOBzUa8OHWERsdbLejCGGek4bhG5adNT/WV4IkUAKo0lWb3p kELrWUesE29XcBiPvghdYuxjeNAdVPo1+HMLdkF6vX113N1ptdL3eNk0ZXbY3cJe a+wY+DiOt18SKX1vDokcX8UjBJoDTU4= -----END CERTIFICATE-----Generated at Fri Sep 19 16:04:29 2025 by rpki-client