$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a20dbb5e-4a93-35ea-9168-80bc471cf901.roa File: a20dbb5e-4a93-35ea-9168-80bc471cf901.roa (raw, json) Hash identifier: joXryxobkrcPIuvyfy70XlwIVS8YQ7Bmsys6AINZxBc= Subject key identifier: 90:05:75:81:54:E2:41:BE:93:86:1E:1B:EF:5C:09:CE:D9:53:D5:9B Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B970CE5BC1E61FAC75EE11C60 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a20dbb5e-4a93-35ea-9168-80bc471cf901.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 3491 IP address blocks: 206.161.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e5:bc:1e:61:fa:c7:5e:e1:1c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=4fec33ac-13e1-4dfc-8ae3-f89af7a475cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e8:9a:3c:f3:78:42:e4:1b:c9:89:f6:47:be: 5c:ae:5f:4e:97:03:23:6d:0d:a4:c9:02:50:95:40: 65:8e:1b:8e:83:0b:ac:79:7e:a4:e8:92:83:33:4f: 6b:07:71:70:23:db:72:ec:57:82:9e:f0:8e:bb:56: a3:aa:1b:0a:15:2d:a3:39:9a:48:fe:a5:2f:2e:de: 0e:90:56:04:5c:16:a5:04:73:57:a0:2d:1a:9b:ac: f0:89:27:6d:73:8b:48:4e:02:e9:cd:9b:f1:bd:46: 98:7f:d3:4d:39:df:13:d2:62:af:89:73:1a:64:10: 9d:cc:14:3d:dc:a0:57:86:ae:39:0b:43:d7:e7:f4: 8e:48:61:9e:cf:bb:13:e4:db:df:c7:1b:63:43:28: 9a:47:d6:26:b5:db:10:97:d8:72:9b:7c:11:4e:fc: fc:21:41:67:f2:ca:29:5e:d7:15:ed:b9:0b:48:b6: d7:4f:cc:9e:e3:80:ca:a6:6f:b4:bc:17:dd:d5:0c: 7a:b7:e5:ea:e3:58:54:92:cb:bb:69:4c:98:8c:df: 50:18:7c:51:31:bf:4e:51:e0:23:10:9a:79:89:84: 2a:52:65:96:24:57:1b:2f:78:89:97:fb:76:e7:9d: d9:dd:97:f6:73:05:68:ac:18:35:77:1d:b5:96:50: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:75:81:54:E2:41:BE:93:86:1E:1B:EF:5C:09:CE:D9:53:D5:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a20dbb5e-4a93-35ea-9168-80bc471cf901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 206.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:11:2f:10:a2:b3:1d:6f:52:57:31:55:ea:4b:91:43:06:9b: 79:cb:bb:6d:49:0e:bf:1a:aa:38:a7:03:f2:51:50:33:11:57: 35:b4:23:33:68:47:6b:57:5e:12:8c:45:5b:20:07:cc:00:d7: 50:3a:62:ac:48:ed:36:1e:e5:7a:69:1e:7c:8d:01:aa:b2:c4: 7a:2b:e1:ad:92:63:d8:08:3b:65:ff:a5:74:d1:c1:3d:f1:f9: 13:04:dc:e3:a7:6b:a8:ee:8b:c8:1e:82:c2:31:d3:07:8c:bf: e7:83:c0:bf:cf:d0:cb:27:7f:3b:20:bc:27:55:00:b3:6c:3f: 36:ee:4a:ef:f7:77:8c:70:2e:96:ff:a0:75:bb:db:07:86:6c: 30:38:ce:e4:ef:9e:62:f6:cc:4a:ba:95:bf:40:c9:2f:9d:df: 3a:e2:a8:14:81:ab:01:99:a0:06:ab:b9:5f:ba:8f:37:1f:12: 3d:54:71:83:6c:cb:b0:c2:f5:e1:0d:03:f9:ab:0b:40:22:8e: 22:cc:8b:b7:50:6e:35:32:46:54:df:8c:b8:0c:24:89:3a:13: c8:d3:f9:5e:ad:25:39:7b:08:85:9c:e5:b2:fa:8c:e1:c0:eb: 18:89:34:9e:47:84:1a:42:ed:a8:c3:f2:ed:f9:3d:4c:04:08: 20:75:34:9a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuXDOW8HmH6x17hHGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NGZlYzMzYWMtMTNlMS00ZGZjLThhZTMtZjg5YWY3YTQ3NWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeiaPPN4QuQbyYn2R75crl9OlwMjbQ2kyQJQ lUBljhuOgwuseX6k6JKDM09rB3FwI9ty7FeCnvCOu1ajqhsKFS2jOZpI/qUvLt4O kFYEXBalBHNXoC0am6zwiSdtc4tITgLpzZvxvUaYf9NNOd8T0mKviXMaZBCdzBQ9 3KBXhq45C0PX5/SOSGGez7sT5NvfxxtjQyiaR9YmtdsQl9hym3wRTvz8IUFn8sop XtcV7bkLSLbXT8ye44DKpm+0vBfd1Qx6t+Xq41hUksu7aUyYjN9QGHxRMb9OUeAj EJp5iYQqUmWWJFcbL3iJl/t2553Z3Zf2cwVorBg1dx21llDGLwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJAFdYFU4kG+k4YeG+9cCc7ZU9WbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvYTIwZGJiNWUtNGE5My0z NWVhLTkxNjgtODBiYzQ3MWNmOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzqEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAqxEvEKKzHW9SVzFV6kuRQwabecu7bUkOvxqqOKcD8lFQMxFXNbQjM2hH a1deEoxFWyAHzADXUDpirEjtNh7lemkefI0BqrLEeivhrZJj2Ag7Zf+ldNHBPfH5 EwTc46drqO6LyB6CwjHTB4y/54PAv8/Qyyd/OyC8J1UAs2w/Nu5K7/d3jHAulv+g dbvbB4ZsMDjO5O+eYvbMSrqVv0DJL53fOuKoFIGrAZmgBqu5X7qPNx8SPVRxg2zL sML14Q0D+asLQCKOIsyLt1BuNTJGVN+MuAwkiToTyNP5Xq0lOXsIhZzlsvqM4cDr GIk0nkeEGkLtqMPy7fk9TAQIIHU0mg== -----END CERTIFICATE-----Generated at Sat Oct 25 13:36:07 2025 by rpki-client