$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa File: d01de867-d842-3f15-838a-d66341794f48.roa (raw, json) Hash identifier: 1ZfEVcg5cDDjvz/8iZ+l/drzbknylGzVLHCcmQ+2EnI= Subject key identifier: 59:8B:DD:3D:08:0F:0A:D8:DD:B2:55:31:3A:2C:4D:57:C6:9C:96:04 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584B52A77A0F240CD6001D520D80 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 16509 IP address blocks: 192.28.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:7a:0f:24:0c:d6:00:1d:52:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=113c9e2f-8b2e-4bd1-a853-53d4d9aac038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:24:04:7e:6d:22:16:37:7c:8a:64:a2:7b:a5: 55:e5:47:8f:e5:a6:3d:1a:cf:22:2a:a8:da:2e:4b: 17:55:c6:c4:a6:ed:c9:34:f1:f7:96:81:2a:c3:c3: 0e:e5:e7:27:40:38:23:b9:a8:b8:7a:4f:99:16:4b: 95:82:af:27:31:c1:73:e0:a8:d7:1a:7b:7c:cf:b4: 92:9a:c3:a7:8b:a5:f5:30:71:31:45:85:9f:57:ba: 08:b1:f5:06:83:df:1a:40:aa:0c:4b:f2:cd:2d:4f: a9:cc:81:9d:93:b5:d0:10:5f:4b:30:20:1f:c9:94: 9c:c1:2c:35:44:43:b6:4f:fd:23:27:55:d7:da:39: 4f:5a:e6:03:d5:9c:ba:c3:f9:ef:03:0f:7e:9c:87: 99:5a:22:6e:ea:3c:b8:95:13:ef:6e:20:7c:d6:cd: 0b:7e:fc:70:4f:ae:d7:1f:81:af:e1:db:23:40:3d: b8:97:9c:45:f3:80:e0:23:2f:3c:57:b9:de:a8:3f: 43:6f:47:e4:fe:40:15:c7:55:fb:77:12:a6:d4:86: e6:bb:71:4a:9c:42:fd:66:ad:fa:70:6a:7d:98:bd: 5a:75:61:11:82:65:2a:e6:66:3a:28:d1:c5:44:4e: 37:90:a7:d1:df:ba:0c:71:55:83:d5:fb:fc:e8:65: 27:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8B:DD:3D:08:0F:0A:D8:DD:B2:55:31:3A:2C:4D:57:C6:9C:96:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5e:c1:e6:68:3f:98:16:66:7f:1a:9f:7e:c7:19:38:d2:3c: f2:cc:c0:f0:1e:47:3a:7a:f3:b2:3a:17:86:12:75:3e:3a:89: ed:e8:a6:c6:c6:e6:ae:6a:25:46:80:91:bc:da:4e:06:8c:1e: 60:69:d3:ae:5e:11:c9:04:4b:11:59:f6:d7:16:fb:3d:8c:b3: 62:65:d1:77:0e:92:c2:c7:c1:49:e9:78:8a:49:07:2a:6d:e0: 03:22:36:87:a6:da:54:8b:72:12:b6:76:3d:37:66:fd:55:3c: 18:19:58:18:4a:f8:13:3d:c6:79:13:31:6c:2e:08:27:e1:1d: 0e:db:b5:d4:a0:bc:73:38:85:8a:5a:df:6f:2f:a8:aa:de:74: 77:3b:ae:a2:08:43:68:65:3b:b8:fd:94:a8:ea:7e:ba:e3:c6: 9c:d3:f8:3f:44:30:80:eb:b2:a4:e4:f3:60:5c:50:66:f2:1d: f6:ea:9f:c9:b7:93:93:16:71:71:48:42:a2:d6:8b:e1:86:ed: 12:ac:98:13:9e:b2:eb:48:fe:cf:72:a2:d4:a1:54:5f:4d:02: 3a:a1:a7:2c:ff:81:3f:63:a7:b9:75:a6:bf:28:45:f3:2d:62: 7e:f2:53:ee:96:f0:6a:57:96:77:d9:9b:ac:b2:b2:e0:89:34: d7:d2:6c:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp3oPJAzWAB1SDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MTEzYzllMmYtOGIyZS00YmQxLWE4NTMtNTNkNGQ5YWFjMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiQEfm0iFjd8imSie6VV5UeP5aY9Gs8iKqja LksXVcbEpu3JNPH3loEqw8MO5ecnQDgjuai4ek+ZFkuVgq8nMcFz4KjXGnt8z7SS msOni6X1MHExRYWfV7oIsfUGg98aQKoMS/LNLU+pzIGdk7XQEF9LMCAfyZScwSw1 REO2T/0jJ1XX2jlPWuYD1Zy6w/nvAw9+nIeZWiJu6jy4lRPvbiB81s0LfvxwT67X H4Gv4dsjQD24l5xF84DgIy88V7neqD9Db0fk/kAVx1X7dxKm1Ibmu3FKnEL9Zq36 cGp9mL1adWERgmUq5mY6KNHFRE43kKfR37oMcVWD1fv86GUnbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmL3T0IDwrY3bJVMTosTVfGnJYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZDAxZGU4NjctZDg0Mi0z ZjE1LTgzOGEtZDY2MzQxNzk0ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVeweZoP5gWZn8an37HGTjSPPLMwPAeRzp687I6F4YSdT46ie3opsbG 5q5qJUaAkbzaTgaMHmBp065eEckESxFZ9tcW+z2Ms2Jl0XcOksLHwUnpeIpJBypt 4AMiNoem2lSLchK2dj03Zv1VPBgZWBhK+BM9xnkTMWwuCCfhHQ7btdSgvHM4hYpa 328vqKredHc7rqIIQ2hlO7j9lKjqfrrjxpzT+D9EMIDrsqTk82BcUGbyHfbqn8m3 k5MWcXFIQqLWi+GG7RKsmBOesutI/s9yotShVF9NAjqhpyz/gT9jp7l1pr8oRfMt Yn7yU+6W8GpXlnfZm6yysuCJNNfSbNY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:09:12 2025 by rpki-client