$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a4aca5d9-3b7d-3a64-9525-72750142f185.roa File: a4aca5d9-3b7d-3a64-9525-72750142f185.roa (raw, json) Hash identifier: dqPSsVxKhk3DvHAp9b/CRCny3RWyLsHtCeAP6S3vIy0= Subject key identifier: 23:86:62:79:91:89:70:9A:C5:1E:5A:35:C8:7A:FC:AD:6E:89:FF:B1 Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Certificate serial: 010D0C9F4328584B970CDFE0B16B7103F1DBC180 Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a4aca5d9-3b7d-3a64-9525-72750142f185.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 1299 IP address blocks: 216.144.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:df:e0:b1:6b:71:03:f1:db:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=acc6ea7d-2f00-4fda-a76e-a386ac1895b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:5d:ba:e3:eb:23:26:cb:5d:f1:14:ce:71: ef:0d:90:5a:bc:ba:5a:f5:a6:30:bd:1f:c4:a1:ab: 5d:2f:61:2d:c6:d7:a6:0e:5b:4c:5f:52:f8:e2:d7: 9f:f5:a5:57:39:10:a2:44:a4:96:fc:7b:80:d6:e0: a6:dd:14:b1:44:e9:4a:b6:92:23:34:61:b2:0e:44: 9a:3c:eb:55:32:4e:68:e1:24:b0:02:cf:78:c3:31: 8c:fe:b4:5b:3e:c4:99:97:9f:a1:cd:e3:10:7b:98: d7:ab:b6:47:e9:87:59:8a:2b:38:4b:a9:1e:dd:47: 1c:e4:4c:d7:a9:bc:0b:ad:30:43:d3:a1:34:4a:9d: fc:15:3d:b7:ab:87:e6:96:45:f6:90:40:d9:73:b8: 65:05:e5:07:fa:88:76:d7:66:4c:4a:44:9e:be:0a: 44:15:42:63:10:39:e2:d0:bf:b1:fe:7a:cf:08:f9: ec:4f:61:f2:ab:8f:28:05:54:7e:3c:da:f4:ea:74: 69:4d:c2:d8:f0:89:57:43:28:09:c2:52:9d:e8:44: 64:2a:c5:60:91:61:51:a5:49:c4:88:69:12:09:87: c8:bc:b5:6b:5f:61:6e:b3:d0:53:06:ef:8a:f3:58: d8:08:ba:18:d0:65:36:5d:d7:89:9f:4c:1b:80:45: a0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:86:62:79:91:89:70:9A:C5:1E:5A:35:C8:7A:FC:AD:6E:89:FF:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a4aca5d9-3b7d-3a64-9525-72750142f185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl X509v3 Authority Key Identifier: keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer sbgp-ipAddrBlock: critical IPv4: 216.144.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:70:3f:e1:9f:88:71:d6:d3:32:22:a0:6e:be:84:0c:cc:fb: 1e:f7:e1:bd:d5:14:77:4e:10:6f:78:fd:86:ce:fe:ac:0e:81: fa:88:77:3d:13:6d:4b:36:31:08:cb:68:c9:e0:b3:98:a3:9e: 81:e7:a8:07:e3:94:49:6c:5f:c9:fa:66:c6:4a:27:c4:4e:8e: 75:06:ff:80:94:b0:75:6c:43:a7:ff:cc:57:c8:77:da:aa:cb: 1a:9a:7a:aa:a0:4d:ec:1f:2b:92:71:83:20:d9:28:50:96:33: 4c:68:5e:7f:29:21:5d:43:f2:b5:16:a2:4d:ec:f1:7f:1d:18: 2d:81:c9:44:e8:49:33:e1:5b:b6:a1:4b:da:fd:6d:35:2d:07: f2:f4:2c:2a:b7:f5:3a:f7:95:f1:57:98:c7:93:4f:e1:6b:57: 1c:85:38:f5:99:27:f7:66:eb:7e:69:bc:e5:0c:85:6a:a1:58: af:98:7b:f6:af:1f:ff:91:36:ce:50:2f:6a:7a:9f:e7:35:14: 5c:43:63:ee:23:b8:1a:86:81:d5:49:20:9c:06:5e:06:d2:fb: 25:81:da:ff:09:7e:15:09:4e:a1:62:a1:26:32:a7:5f:22:d4: 77:40:ce:48:a3:8a:84:8d:19:ea:84:16:37:d9:f7:fd:8c:08: c6:6a:05:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDN/gsWtxA/HbwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm NTZmMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YWNjNmVhN2QtMmYwMC00ZmRhLWE3NmUtYTM4NmFjMTg5NWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvElduuPrIybLXfEUznHvDZBavLpa9aYwvR/E oatdL2EtxtemDltMX1L44tef9aVXORCiRKSW/HuA1uCm3RSxROlKtpIjNGGyDkSa POtVMk5o4SSwAs94wzGM/rRbPsSZl5+hzeMQe5jXq7ZH6YdZiis4S6ke3Ucc5EzX qbwLrTBD06E0Sp38FT23q4fmlkX2kEDZc7hlBeUH+oh212ZMSkSevgpEFUJjEDni 0L+x/nrPCPnsT2Hyq48oBVR+PNr06nRpTcLY8IlXQygJwlKd6ERkKsVgkWFRpUnE iGkSCYfIvLVrX2Fus9BTBu+K81jYCLoY0GU2XdeJn0wbgEWgxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOGYnmRiXCaxR5aNch6/K1uif+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvYTRhY2E1ZDktM2I3ZC0z YTY0LTk1MjUtNzI3NTAxNDJmMTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1 NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0 ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5 YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2JCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhwP+GfiHHW0zIioG6+hAzM+x734b3VFHdOEG94/YbO/qwOgfqIdz0T bUs2MQjLaMngs5ijnoHnqAfjlElsX8n6ZsZKJ8ROjnUG/4CUsHVsQ6f/zFfId9qq yxqaeqqgTewfK5JxgyDZKFCWM0xoXn8pIV1D8rUWok3s8X8dGC2ByUToSTPhW7ah S9r9bTUtB/L0LCq39Tr3lfFXmMeTT+FrVxyFOPWZJ/dm635pvOUMhWqhWK+Ye/av H/+RNs5QL2p6n+c1FFxDY+4juBqGgdVJIJwGXgbS+yWB2v8JfhUJTqFioSYyp18i 1HdAzkijioSNGeqEFjfZ9/2MCMZqBR0= -----END CERTIFICATE-----Generated at Wed Oct 22 03:06:51 2025 by rpki-client