$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa File: 18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa (raw, json) Hash identifier: C/3X/HKTMc3bewApTqGF4mfsmiVIGUKFOogdyM2naoo= Subject key identifier: A9:E1:02:2A:1A:F5:88:6B:F0:64:BF:0A:60:31:D9:38:DB:BC:3A:33 Certificate issuer: /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Certificate serial: 010D0C9F4328584BAEC7BC1A331001305A60BCC0 Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 20398 IP address blocks: 167.206.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:bc:1a:33:10:01:30:5a:60:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=f2216a86-2a18-4521-884b-bb1d125b352c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:77:af:f4:90:eb:d4:9a:f0:9a:b4:38:c0:14: 81:96:89:45:9c:fe:b8:35:cb:d1:41:5b:6b:72:7a: 9a:2e:e2:a4:36:83:77:40:1a:f5:f2:22:79:be:83: 47:a3:52:bf:87:02:e8:b8:ff:62:4f:ee:0c:ec:d3: cd:51:b5:14:5b:11:1d:6f:e6:de:56:b4:ce:3a:6a: de:bb:ad:fe:86:3e:70:8a:df:f9:7e:96:3d:53:b1: b1:fb:5d:ed:29:cf:5d:bc:f7:6c:85:34:8f:3f:70: 82:54:ab:94:2a:12:d0:9d:18:13:94:20:c3:62:c4: cb:97:91:ef:d9:91:28:1c:f3:ee:6b:d3:db:60:c5: e7:3f:14:ba:84:39:92:8f:f5:28:23:97:9e:0a:9d: a6:e4:55:8d:2c:fb:04:81:5b:95:d5:27:26:4d:c2: 54:83:40:70:1e:a6:a5:a5:f7:83:36:d1:4c:ee:ea: 6c:7e:f4:41:ba:4a:06:29:39:a7:f8:0f:18:9e:cd: 2c:bf:33:77:9e:b1:7f:92:10:92:f4:48:88:38:be: 06:dd:8a:41:d1:66:13:0f:0e:c3:bd:29:21:f5:c6: a5:7c:62:9c:71:1a:35:78:8a:ec:5b:32:bb:f6:8b: ee:8e:23:63:88:86:2a:ba:96:ce:52:80:0f:8e:4d: 93:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E1:02:2A:1A:F5:88:6B:F0:64:BF:0A:60:31:D9:38:DB:BC:3A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl X509v3 Authority Key Identifier: keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer sbgp-ipAddrBlock: critical IPv4: 167.206.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:19:75:e1:eb:23:61:e7:2e:5a:2e:67:28:48:76:b1:00:c0: 82:2e:76:52:b9:c7:5c:67:42:79:3a:6b:c6:e0:11:9b:20:81: df:7f:88:67:e0:fb:01:26:96:0d:bf:3e:d8:8f:8a:13:d5:87: 25:f0:ba:f0:c0:8f:96:67:8c:50:13:36:18:cd:ae:41:78:82: 79:96:cb:e0:cc:c4:10:4a:30:f1:10:2a:34:ea:2e:33:f0:f6: 3f:e8:f2:0b:07:e3:d1:40:db:86:0f:d0:38:98:3c:88:25:73: 3b:36:0b:81:5c:09:d3:82:ef:f9:8e:81:4b:f4:8d:b9:69:2e: d1:13:0f:c8:9b:a3:17:38:22:95:c4:e4:be:ef:0e:11:3e:a0: 9f:b0:2d:3c:4e:c6:0e:0f:e0:50:9c:ec:ad:b1:6c:b4:18:2e: 10:b8:4c:9e:cd:99:e4:54:21:c9:f6:97:62:7f:fb:98:c2:85: b4:bf:49:e7:23:25:e0:9c:c1:4f:50:81:9b:4c:8c:56:74:2c: de:22:fa:61:81:32:41:09:af:83:78:c5:91:e8:3f:12:f7:8e: cc:b8:bc:48:1d:b6:6d:2d:1f:32:22:33:e9:55:d2:d3:a6:ea: 5f:f1:c9:48:f7:1e:cc:f3:5b:e4:fa:bb:f4:0e:db:43:a2:e4: b6:93:7c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7waMxABMFpgvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmMWM4YzItMTlmOS00ZjYyLWJmZTMtZDE0MjhkMWEw MDVlMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZjIyMTZhODYtMmExOC00NTIxLTg4NGItYmIxZDEyNWIzNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHev9JDr1JrwmrQ4wBSBlolFnP64NcvRQVtr cnqaLuKkNoN3QBr18iJ5voNHo1K/hwLouP9iT+4M7NPNUbUUWxEdb+beVrTOOmre u63+hj5wit/5fpY9U7Gx+13tKc9dvPdshTSPP3CCVKuUKhLQnRgTlCDDYsTLl5Hv 2ZEoHPPua9PbYMXnPxS6hDmSj/UoI5eeCp2m5FWNLPsEgVuV1ScmTcJUg0BwHqal pfeDNtFM7upsfvRBukoGKTmn+A8Yns0svzN3nrF/khCS9EiIOL4G3YpB0WYTDw7D vSkh9calfGKccRo1eIrsWzK79ovujiNjiIYqupbOUoAPjk2TtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnhAioa9Yhr8GS/CmAx2TjbvDozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMWYx YzhjMi0xOWY5LTRmNjItYmZlMy1kMTQyOGQxYTAwNWUvMThhYjQyYjMtYTY5ZS0z ZjBjLWEwNzEtNzkyM2JkMzllNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDFmMWM4YzItMTlmOS00ZjYyLWJm ZTMtZDE0MjhkMWEwMDVlL2QxZjFjOGMyLTE5ZjktNGY2Mi1iZmUzLWQxNDI4ZDFh MDA1ZS5jcmwwHwYDVR0jBBgwFoAULSJwcepBQBbOhUU6hlK+/ghcybAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMWYxYzhjMi0xOWY5LTRmNjItYmZlMy1kMTQy OGQxYTAwNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp85WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsZdeHrI2HnLlouZyhIdrEAwIIudlK5x1xnQnk6a8bgEZsggd9/iGfg +wEmlg2/PtiPihPVhyXwuvDAj5ZnjFATNhjNrkF4gnmWy+DMxBBKMPEQKjTqLjPw 9j/o8gsH49FA24YP0DiYPIglczs2C4FcCdOC7/mOgUv0jblpLtETD8iboxc4IpXE 5L7vDhE+oJ+wLTxOxg4P4FCc7K2xbLQYLhC4TJ7NmeRUIcn2l2J/+5jChbS/Secj JeCcwU9QgZtMjFZ0LN4i+mGBMkEJr4N4xZHoPxL3jsy4vEgdtm0tHzIiM+lV0tOm 6l/xyUj3HszzW+T6u/QO20Oi5LaTfMM= -----END CERTIFICATE-----Generated at Tue Nov 4 13:52:09 2025 by rpki-client