$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa File: 95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa (raw, json) Hash identifier: Sd8EUeIetyNGVsrSJZj23rc71QX6X4/SzH1mhosVFUo= Subject key identifier: A1:2F:D7:F9:6D:4A:37:1E:F3:36:1D:51:C5:17:67:F0:27:E5:BD:D6 Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e Certificate serial: 010D0C9F4328584BB88D2BFABDA15B40D1225690 Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 33211 IP address blocks: 206.41.120.0/22 maxlen: 22 206.41.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:2b:fa:bd:a1:5b:40:d1:22:56:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=8973145f-4cf5-4453-bcdb-2e4f5d510a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:7b:69:0e:62:cf:f3:0e:cf:c1:84:88:90: e8:89:6b:04:50:49:c1:80:51:f6:f1:31:3e:a0:73: 4d:d0:e0:ce:2d:e7:e0:e1:12:cc:0a:d5:77:87:84: 0c:0c:c7:0b:60:03:85:02:c9:a8:5c:f7:77:1d:ff: c0:f4:08:7f:f2:36:a5:02:9c:74:f4:69:67:dc:90: 59:63:f2:e5:f9:f4:5b:8d:b4:e9:8a:e3:32:22:9e: 1a:35:e2:c4:a8:23:c6:d1:6e:7e:c6:f0:fe:ab:74: 1b:fb:ef:2c:c2:16:3b:c1:cb:fc:f3:a3:cf:1e:2b: aa:d3:e8:d8:88:5c:2d:ea:09:03:62:22:97:a2:72: 48:8f:d8:e8:9f:ae:ce:8f:e4:6e:95:24:b7:cc:a7: 71:1d:97:fa:f0:4b:ab:4f:8d:6a:66:44:af:01:3a: 58:17:a3:bc:29:ec:04:d3:a9:74:76:0b:c2:72:6d: 8b:54:05:28:66:43:3e:81:39:5c:2d:7a:1a:a5:70: ca:79:9d:5e:e0:39:5c:6a:81:f1:3f:30:4b:c1:6a: 32:5d:38:92:09:25:74:43:98:85:d3:52:8b:cc:81: 11:a6:8a:dc:1c:c2:66:f6:53:f3:b9:56:fa:e3:16: cf:b4:f2:bb:4b:d2:93:8e:46:3a:4d:5b:d4:e5:9c: b9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2F:D7:F9:6D:4A:37:1E:F3:36:1D:51:C5:17:67:F0:27:E5:BD:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl X509v3 Authority Key Identifier: keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer sbgp-ipAddrBlock: critical IPv4: 206.41.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4a:f5:68:cd:46:54:c4:b0:36:4b:ba:56:8f:b6:96:ed:e9: 55:d3:5a:40:73:75:30:09:4d:09:cb:8b:b9:c9:5c:e3:b6:ee: c3:0f:7b:a0:64:cb:ae:f2:37:05:84:3d:77:97:2c:dc:c9:c9: 84:b1:1a:a7:73:96:b5:dc:89:82:00:ba:45:53:7f:96:a1:8f: fa:dd:33:31:85:7c:5b:63:c0:a5:0e:ba:c5:d4:0e:a9:0c:1c: 9e:23:d2:f3:4d:81:82:6b:a2:dc:b6:79:c6:7b:85:b6:ad:4e: 67:c7:0c:9f:32:1f:ac:38:23:66:17:58:d2:7c:84:98:47:1d: c7:f8:e6:b8:14:ec:9e:8a:96:f0:fa:52:f8:54:05:01:f4:11: 67:97:7c:13:de:eb:f0:a5:8c:84:b4:3d:ed:d0:2a:9e:58:9e: f9:d4:2f:c1:33:b1:5e:e2:ab:dd:b4:26:7a:31:59:ac:b7:f4: 01:0d:21:48:3a:3a:6e:c6:7f:e7:74:c2:8a:ed:5b:87:6a:91: 39:10:0c:04:c5:56:a3:0e:4e:42:a7:cf:3d:c0:34:80:f3:50: f0:d6:0f:49:1f:cd:86:ca:38:04:51:83:01:b8:a1:74:a2:24: 18:39:ca:8d:ec:bf:b9:86:71:90:81:ca:6f:44:72:6c:e4:c7: db:bd:29:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSv6vaFbQNEiVpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0 ZDZlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ODk3MzE0NWYtNGNmNS00NDUzLWJjZGItMmU0ZjVkNTEwYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMx7aQ5iz/MOz8GEiJDoiWsEUEnBgFH28TE+ oHNN0ODOLefg4RLMCtV3h4QMDMcLYAOFAsmoXPd3Hf/A9Ah/8jalApx09Gln3JBZ Y/Ll+fRbjbTpiuMyIp4aNeLEqCPG0W5+xvD+q3Qb++8swhY7wcv886PPHiuq0+jY iFwt6gkDYiKXonJIj9jon67Oj+RulSS3zKdxHZf68EurT41qZkSvATpYF6O8KewE 06l0dgvCcm2LVAUoZkM+gTlcLXoapXDKeZ1e4DlcaoHxPzBLwWoyXTiSCSV0Q5iF 01KLzIERporcHMJm9lPzuVb64xbPtPK7S9KTjkY6TVvU5Zy5cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEv1/ltSjce8zYdUcUXZ/An5b3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvOTVkZWMxNzQtZDBiMi0z Yzc3LWFhNzAtYWFlM2MxZjg2MjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy MDJhZTRkNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzil4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5K9WjNRlTEsDZLulaPtpbt6VXTWkBzdTAJTQnLi7nJXOO27sMPe6Bk y67yNwWEPXeXLNzJyYSxGqdzlrXciYIAukVTf5ahj/rdMzGFfFtjwKUOusXUDqkM HJ4j0vNNgYJroty2ecZ7hbatTmfHDJ8yH6w4I2YXWNJ8hJhHHcf45rgU7J6KlvD6 UvhUBQH0EWeXfBPe6/CljIS0Pe3QKp5YnvnUL8EzsV7iq920JnoxWay39AENIUg6 Om7Gf+d0wortW4dqkTkQDATFVqMOTkKnzz3ANIDzUPDWD0kfzYbKOARRgwG4oXSi JBg5yo3sv7mGcZCBym9Ecmzkx9u9KZo= -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:50 2025 by rpki-client