$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa File: d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa (raw, json) Hash identifier: pT6WVwkedyVivK5PQN7+mUUIfZlC/CU3dr1ZSXTt+GY= Subject key identifier: BC:58:4B:E9:7F:58:DC:6E:16:93:11:94:CC:02:4E:3F:D9:8E:F9:65 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584B52A7722E801B372770751964 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 14618 IP address blocks: 192.28.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:72:2e:80:1b:37:27:70:75:19:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=58ece3d5-7bb4-4e30-bcb3-08356af679da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:77:c2:18:41:a2:d3:59:d9:9b:f8:07:26:44: e4:d2:03:42:57:4f:74:e9:b9:b4:96:fb:0b:34:6b: 64:d0:29:86:c6:98:df:e7:64:00:d4:c3:97:8c:2e: e5:37:48:c5:fb:b9:42:ea:ae:4e:59:28:78:0d:4c: 59:52:07:94:8a:c5:40:64:ea:2d:c4:c4:59:ef:be: 1b:6c:1b:a1:d1:d9:61:cb:88:8d:2e:0b:87:d1:10: a1:a9:f1:c1:27:09:d4:f4:dd:26:3c:e6:43:74:c6: 2d:8a:22:99:d3:7c:c8:00:1a:d8:1f:9e:b0:e6:d9: 89:53:46:67:12:f6:a0:49:f9:db:56:c6:89:c3:ee: d0:8d:ed:63:9c:f3:a5:74:3e:cb:9f:1d:9a:59:4a: 64:ce:98:6e:07:bc:cc:4e:5a:46:7f:1e:8a:c8:3f: 69:9f:17:79:9f:40:fb:16:b2:90:da:18:a3:b7:60: 23:b6:2c:4c:25:0f:80:0d:16:f4:97:45:26:4f:81: e7:7e:8e:4c:39:1a:65:0e:04:c2:c2:e8:cd:20:ce: 0c:ce:e1:2a:f5:db:04:dc:10:fd:86:fa:f6:8c:44: 12:7d:f6:cc:94:b8:8d:93:c8:0e:a3:4b:3a:12:ff: f7:56:c1:b7:fc:bd:e0:78:fd:3a:bf:7c:dc:70:96: 9f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:58:4B:E9:7F:58:DC:6E:16:93:11:94:CC:02:4E:3F:D9:8E:F9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:62:f5:9c:f8:43:69:e0:c1:51:d1:6a:59:3e:44:83:14:a9: 3f:6e:65:b7:1d:78:27:d9:29:e3:6a:e3:d3:6b:9d:9d:77:43: 71:31:24:f2:67:36:27:95:29:92:7e:f9:c1:fc:94:0b:ea:ad: d8:a9:68:5f:04:6e:1c:8d:df:4b:3f:6e:2b:70:f5:30:c5:05: 48:a8:55:11:81:ed:76:06:99:69:23:2a:47:4c:69:ac:62:96: dc:66:f9:1d:04:0d:62:23:19:69:41:91:ad:f5:b0:24:57:f3: 3e:3a:9c:40:11:a2:3c:2e:22:cd:ea:91:75:0c:c6:9c:b8:54: 00:b0:15:6d:1e:46:fc:67:60:05:7d:ae:22:1f:54:00:39:34: 06:6e:33:3f:f0:fd:3e:3e:f0:bd:f3:00:15:85:4f:62:8e:b5: 6e:b9:cf:dd:06:6d:8c:e3:08:08:6c:23:d5:29:4d:3b:60:6d: 92:5c:65:92:e4:02:e0:23:d7:d5:8f:fc:f6:af:21:4f:95:89: f7:bc:20:f3:0e:d6:ad:f1:37:47:ea:89:02:7c:62:84:28:4a: 1e:12:89:ad:0b:25:78:81:d0:7f:30:1b:67:7f:14:43:8b:d5: 35:40:93:54:60:a6:cd:c6:0f:8f:37:02:f5:29:e6:fd:1b:64: 58:da:55:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp3IugBs3J3B1GWQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NThlY2UzZDUtN2JiNC00ZTMwLWJjYjMtMDgzNTZhZjY3OWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHfCGEGi01nZm/gHJkTk0gNCV0906bm0lvsL NGtk0CmGxpjf52QA1MOXjC7lN0jF+7lC6q5OWSh4DUxZUgeUisVAZOotxMRZ774b bBuh0dlhy4iNLguH0RChqfHBJwnU9N0mPOZDdMYtiiKZ03zIABrYH56w5tmJU0Zn EvagSfnbVsaJw+7Qje1jnPOldD7Lnx2aWUpkzphuB7zMTlpGfx6KyD9pnxd5n0D7 FrKQ2hijt2AjtixMJQ+ADRb0l0UmT4Hnfo5MORplDgTCwujNIM4MzuEq9dsE3BD9 hvr2jEQSffbMlLiNk8gOo0s6Ev/3VsG3/L3geP06v3zccJafQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxYS+l/WNxuFpMRlMwCTj/ZjvllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZDk0YzY2NmMtYWI1Ni0z Yjk0LThkM2EtMWM0MWVmYTM0OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJi9Zz4Q2ngwVHRalk+RIMUqT9uZbcdeCfZKeNq49NrnZ13Q3ExJPJn NieVKZJ++cH8lAvqrdipaF8EbhyN30s/bitw9TDFBUioVRGB7XYGmWkjKkdMaaxi ltxm+R0EDWIjGWlBka31sCRX8z46nEARojwuIs3qkXUMxpy4VACwFW0eRvxnYAV9 riIfVAA5NAZuMz/w/T4+8L3zABWFT2KOtW65z90GbYzjCAhsI9UpTTtgbZJcZZLk AuAj19WP/PavIU+Vife8IPMO1q3xN0fqiQJ8YoQoSh4Sia0LJXiB0H8wG2d/FEOL 1TVAk1Rgps3GD483AvUp5v0bZFjaVbk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:09:12 2025 by rpki-client