$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f8e73e04-24ce-33fa-a8ac-e3de7660c942.roa File: f8e73e04-24ce-33fa-a8ac-e3de7660c942.roa (raw, json) Hash identifier: vv4lmQbW0DVj1tTNR+hB6y0k6php79Wb/wvcm98Z18Y= Subject key identifier: B0:2B:11:E7:77:A3:CB:57:59:D8:92:CC:43:10:8E:B4:4D:B5:26:A1 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D17A16FBFAA7D6CAD788340 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f8e73e04-24ce-33fa-a8ac-e3de7660c942.roa Signing time: Thu 18 Sep 2025 19:39:37 +0000 ROA not before: Thu 18 Sep 2025 19:39:37 +0000 ROA not after: Wed 17 Dec 2025 20:39:37 +0000 asID: 11377 IP address blocks: 216.20.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:a1:6f:bf:aa:7d:6c:ad:78:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:37 2025 GMT Not After : Dec 17 20:39:37 2025 GMT Subject: CN=5c445b14-6a9c-4f6b-9d05-24e2011f7ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:8a:c8:30:24:43:4b:5e:fc:45:ec:5b:5c: 94:eb:d5:58:46:8e:1e:a4:92:d2:0b:87:3f:0c:8f: 3a:c2:71:de:90:ae:52:85:d8:e5:d8:47:2e:9b:7d: c2:14:24:3e:3c:0f:f5:29:6c:9e:3c:48:dc:97:0b: a8:56:a4:8d:8d:e8:fa:35:c9:30:cc:26:7c:ca:9b: 50:3d:f7:c3:a7:5f:2f:ac:e0:ef:a2:b3:63:4e:2c: 6c:05:ad:8b:9e:d4:69:e7:89:14:39:9b:2e:51:86: f1:37:ea:17:1d:0e:47:a7:0b:40:5a:db:0e:85:0c: d2:86:a3:89:d4:88:bc:15:95:a9:33:bb:43:0e:8d: b7:9f:99:93:50:c3:f1:f0:ac:e6:c9:47:39:39:8f: 2c:b4:50:ff:e7:2f:fb:cc:65:1d:37:c4:9b:4d:cf: 3b:ad:5a:1b:6a:28:af:2c:49:d2:7d:29:cf:f2:28: 80:f8:cd:1d:62:94:71:44:34:dd:14:de:c2:3d:01: b2:a0:3d:4b:88:ed:30:08:8d:27:19:5c:85:42:16: 27:1a:3c:c9:01:fe:d6:13:fe:aa:6b:83:ee:02:e0: 81:44:cf:c6:ae:a2:7c:35:db:7b:04:90:fe:78:97: 29:d5:fe:7a:db:bf:42:7e:9a:9e:b4:13:a8:8a:dd: a1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2B:11:E7:77:A3:CB:57:59:D8:92:CC:43:10:8E:B4:4D:B5:26:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f8e73e04-24ce-33fa-a8ac-e3de7660c942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d7:87:38:fc:aa:50:06:2a:fa:62:59:9a:42:02:b6:11:f1: 06:c5:52:07:42:2a:d6:08:c6:87:85:22:0c:19:53:3f:71:f4: b1:cc:9f:91:cd:c5:c2:97:b7:da:e8:9e:d8:60:23:4b:7a:cd: ac:7d:ee:cd:0b:32:70:0b:ab:fe:54:dc:d5:bb:36:9d:59:31: 56:f3:61:73:dd:af:2e:b4:5e:d6:88:39:67:30:d7:6c:ce:6b: a5:4d:03:54:ed:11:c7:93:1c:07:dd:be:1f:63:d5:a5:d1:de: 82:0e:f6:0b:7c:e0:c2:2d:92:ca:89:fa:70:cf:be:a9:dd:cb: 7e:bd:7f:8d:a4:29:b7:73:60:e5:2b:2a:e0:8f:91:1d:bb:8c: 27:33:cb:1c:78:f7:88:e7:c6:c6:1e:58:ea:68:b1:55:07:54: a5:e3:c9:09:e7:69:47:66:99:f0:9e:94:94:58:7a:06:6c:a1: 16:c4:da:60:bb:09:2e:45:1c:10:d4:0d:d9:e5:5d:07:49:35: 4d:48:a5:7e:20:ea:ba:bb:16:18:84:b3:47:45:7c:1e:61:c2: 41:51:84:71:82:01:70:78:69:14:09:ee:4f:c5:73:91:77:3e: 48:00:12:21:47:c5:9e:0a:91:4d:1d:75:39:42:33:e5:cf:4a: bd:f7:1b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F6Fvv6p9bK14g0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5MzkzN1oXDTI1MTIxNzIwMzkzN1owLzEtMCsGA1UEAxMk NWM0NDViMTQtNmE5Yy00ZjZiLTlkMDUtMjRlMjAxMWY3Y2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+KKyDAkQ0te/EXsW1yU69VYRo4epJLSC4c/ DI86wnHekK5Shdjl2Ecum33CFCQ+PA/1KWyePEjclwuoVqSNjej6NckwzCZ8yptQ PffDp18vrODvorNjTixsBa2LntRp54kUOZsuUYbxN+oXHQ5HpwtAWtsOhQzShqOJ 1Ii8FZWpM7tDDo23n5mTUMPx8KzmyUc5OY8stFD/5y/7zGUdN8SbTc87rVobaiiv LEnSfSnP8iiA+M0dYpRxRDTdFN7CPQGyoD1LiO0wCI0nGVyFQhYnGjzJAf7WE/6q a4PuAuCBRM/GrqJ8Ndt7BJD+eJcp1f56279CfpqetBOoit2hKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLArEed3o8tXWdiSzEMQjrRNtSahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvZjhlNzNlMDQtMjRjZS0z M2ZhLWE4YWMtZTNkZTc2NjBjOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHXhzj8qlAGKvpiWZpCArYR8QbFUgdCKtYIxoeFIgwZUz9x9LHMn5HN xcKXt9ronthgI0t6zax97s0LMnALq/5U3NW7Np1ZMVbzYXPdry60XtaIOWcw12zO a6VNA1TtEceTHAfdvh9j1aXR3oIO9gt84MItksqJ+nDPvqndy369f42kKbdzYOUr KuCPkR27jCczyxx494jnxsYeWOposVUHVKXjyQnnaUdmmfCelJRYegZsoRbE2mC7 CS5FHBDUDdnlXQdJNU1IpX4g6rq7FhiEs0dFfB5hwkFRhHGCAXB4aRQJ7k/Fc5F3 PkgAEiFHxZ4KkU0ddTlCM+XPSr33G5Q= -----END CERTIFICATE-----Generated at Wed Nov 5 11:25:49 2025 by rpki-client