$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa File: d6030c72-d137-34d3-8372-1abef2623fce.roa (raw, json) Hash identifier: lBq87e0nEBiih/VyVx3aKTwaneT+ucPenQD/RRzS41g= Subject key identifier: 60:28:BD:24:03:BD:9F:01:3C:6D:41:0A:18:21:B3:2C:8E:2B:83:67 Certificate issuer: /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Certificate serial: 010D0C9F4328584BAEC7BBF6732B927E18346480 Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 26564 IP address blocks: 167.206.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:bb:f6:73:2b:92:7e:18:34:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=d455c89b-2d1c-4713-a229-519d9ce37fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:8b:1b:3d:8f:6b:43:0a:f0:ee:d6:1f:0d: a0:fe:6c:50:a0:3e:c2:0f:85:6d:35:55:bf:a9:b0: fe:d3:8a:fb:d2:90:24:4b:01:75:c0:18:26:14:a1: 5c:6f:db:f8:fd:7f:cf:75:75:5e:19:ec:a9:24:27: c6:59:ac:67:db:52:7e:ff:cc:4c:cd:03:99:cf:9f: 0f:3a:fb:00:78:01:b7:f9:30:fc:f8:89:dc:fd:ae: 0f:fb:6a:f2:be:27:54:ba:24:65:81:ab:cd:ae:a7: 76:bc:85:fc:c2:fa:3c:a6:a0:82:6a:cc:b5:e1:5f: dc:5e:f6:c5:c9:7e:94:6f:31:63:88:ee:b7:1e:2a: 81:6f:67:6a:16:d3:9e:49:6c:36:ac:72:e8:cf:fe: 17:16:54:64:57:36:92:f6:1c:c0:de:91:e6:c1:26: 5e:e4:d0:61:b1:4e:57:0f:5c:a5:ef:61:f2:6f:56: ef:ed:a1:1b:18:a3:14:88:da:0a:d9:a5:42:1d:12: c0:ea:a3:78:e4:9d:60:99:91:b0:8f:6c:b5:14:07: f6:31:08:0f:08:fa:b8:ad:89:6c:9d:38:cb:c6:a9: f1:b1:b5:6d:95:e6:27:9d:32:b5:44:fc:a1:86:d4: f4:6e:8b:65:b0:ef:0c:db:00:e0:45:1c:db:c3:51: 8f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:28:BD:24:03:BD:9F:01:3C:6D:41:0A:18:21:B3:2C:8E:2B:83:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl X509v3 Authority Key Identifier: keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer sbgp-ipAddrBlock: critical IPv4: 167.206.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c4:07:5e:68:81:50:9f:74:fd:d9:ba:21:56:b0:c5:4e:99: 4e:8c:c5:25:1a:fa:1a:66:d9:e4:f0:93:51:06:95:32:86:21: 30:00:20:8f:85:3c:94:84:d7:86:58:79:8d:ec:a5:43:43:be: 42:a0:02:0d:41:45:6c:f1:9a:e5:9d:62:bf:93:47:e4:23:d7: 80:44:5c:08:64:1e:93:7f:64:34:b2:49:ad:7d:dd:d5:38:15: 53:41:f0:4a:09:b3:72:25:e4:a3:61:f2:10:83:be:ba:55:0e: 7f:28:10:95:b4:e2:0c:19:02:f7:50:68:66:68:42:5f:56:f2: 62:d6:3b:ae:5b:cd:05:1a:96:c4:f9:b4:41:e6:c2:5d:f4:b8: 96:21:28:39:a8:a5:f0:d4:36:2d:21:3d:76:7d:f0:7a:ec:da: c5:82:8a:d2:90:ef:6d:76:99:78:e7:23:90:05:10:1e:9d:c9: 13:b4:6d:0b:39:23:72:be:33:d6:a8:14:e2:79:71:27:04:c7: 64:eb:3a:b6:86:cb:b1:1f:49:a2:81:14:0e:cf:dc:76:07:8c: 85:a5:60:90:a6:d4:d8:6b:8e:bb:99:bb:80:77:fe:bc:7c:84: 15:ed:3c:dd:8d:35:ac:b0:3c:2c:53:0f:96:bf:17:f8:5d:62: 0f:a8:f7:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7v2cyuSfhg0ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmMWM4YzItMTlmOS00ZjYyLWJmZTMtZDE0MjhkMWEw MDVlMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZDQ1NWM4OWItMmQxYy00NzEzLWEyMjktNTE5ZDljZTM3ZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+CLGz2Pa0MK8O7WHw2g/mxQoD7CD4VtNVW/ qbD+04r70pAkSwF1wBgmFKFcb9v4/X/PdXVeGeypJCfGWaxn21J+/8xMzQOZz58P OvsAeAG3+TD8+Inc/a4P+2ryvidUuiRlgavNrqd2vIX8wvo8pqCCasy14V/cXvbF yX6UbzFjiO63HiqBb2dqFtOeSWw2rHLoz/4XFlRkVzaS9hzA3pHmwSZe5NBhsU5X D1yl72Hyb1bv7aEbGKMUiNoK2aVCHRLA6qN45J1gmZGwj2y1FAf2MQgPCPq4rYls nTjLxqnxsbVtleYnnTK1RPyhhtT0botlsO8M2wDgRRzbw1GP5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAovSQDvZ8BPG1BChghsyyOK4NnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMWYx YzhjMi0xOWY5LTRmNjItYmZlMy1kMTQyOGQxYTAwNWUvZDYwMzBjNzItZDEzNy0z NGQzLTgzNzItMWFiZWYyNjIzZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDFmMWM4YzItMTlmOS00ZjYyLWJm ZTMtZDE0MjhkMWEwMDVlL2QxZjFjOGMyLTE5ZjktNGY2Mi1iZmUzLWQxNDI4ZDFh MDA1ZS5jcmwwHwYDVR0jBBgwFoAULSJwcepBQBbOhUU6hlK+/ghcybAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMWYxYzhjMi0xOWY5LTRmNjItYmZlMy1kMTQy OGQxYTAwNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp86+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPEB15ogVCfdP3ZuiFWsMVOmU6MxSUa+hpm2eTwk1EGlTKGITAAII+F PJSE14ZYeY3spUNDvkKgAg1BRWzxmuWdYr+TR+Qj14BEXAhkHpN/ZDSySa193dU4 FVNB8EoJs3Il5KNh8hCDvrpVDn8oEJW04gwZAvdQaGZoQl9W8mLWO65bzQUalsT5 tEHmwl30uJYhKDmopfDUNi0hPXZ98Hrs2sWCitKQ7212mXjnI5AFEB6dyRO0bQs5 I3K+M9aoFOJ5cScEx2TrOraGy7EfSaKBFA7P3HYHjIWlYJCm1NhrjruZu4B3/rx8 hBXtPN2NNaywPCxTD5a/F/hdYg+o95k= -----END CERTIFICATE-----Generated at Tue Nov 4 18:49:12 2025 by rpki-client