$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa File: 0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa (raw, json) Hash identifier: nBs1AI+m2G8SGOYIS6tg2YNURZG1QdMIbCRIIPEI7FU= Subject key identifier: 32:7D:19:5B:81:00:71:4C:66:B8:DC:61:9B:53:EF:14:2C:0F:09:40 Certificate issuer: /CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Certificate serial: 010D0C9F4328584B5571E2BD162DF21599300D40 Authority key identifier: 5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 25222 IP address blocks: 192.40.224.0/22 maxlen: 24 216.86.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e2:bd:16:2d:f2:15:99:30:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=b3866d3e-869a-43e9-a7a3-0eb1a108d1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:de:c2:83:7b:07:d4:f8:9d:11:52:d3:c8: ba:a0:d4:3a:bc:c6:63:f7:0e:f5:06:de:91:70:65: 13:b6:ba:a5:eb:44:60:4a:a9:ab:1d:35:5d:be:b1: 3f:ce:62:aa:1c:49:fe:ab:d0:d8:51:41:e4:f4:7f: 24:a9:3f:7e:cc:01:33:8b:62:8d:f8:1a:15:58:af: 12:34:41:e0:f5:7d:af:99:e2:5b:4f:e1:e5:61:68: 66:27:a9:4e:95:f8:08:20:be:af:f5:e4:9b:34:83: 13:5b:d0:98:b7:87:23:21:f2:da:30:90:67:9d:53: cd:38:6c:28:2c:7e:da:02:d2:19:c6:15:d6:23:7e: a3:e0:f6:0a:0d:95:6b:d5:cc:81:a1:d9:9e:97:39: ee:6c:e9:29:e1:57:7c:70:40:42:3f:c9:9c:0b:d5: d7:bf:25:33:e9:a0:42:06:9e:cc:4e:e0:af:db:17: 32:3e:ee:b5:81:b9:85:f2:ff:d1:07:8e:2a:7a:e9: 52:1a:73:15:6d:bc:ae:f4:f1:0c:10:b5:97:58:24: 08:7c:97:20:1f:17:79:88:8b:f2:18:32:e8:bb:3e: fe:8d:77:d0:75:ad:d2:c4:5b:2f:4e:e0:b0:6e:c9: 75:d6:f2:ff:0f:13:61:78:42:45:9f:ac:03:53:0d: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7D:19:5B:81:00:71:4C:66:B8:DC:61:9B:53:EF:14:2C:0F:09:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl X509v3 Authority Key Identifier: keyid:5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer sbgp-ipAddrBlock: critical IPv4: 192.40.224.0/22 216.86.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:71:12:6e:c5:47:e9:a9:bd:75:97:4f:8b:5b:85:52:db:d0: 6f:f9:cd:be:b5:d3:4a:0a:46:72:1d:08:d8:ca:f9:d7:a3:62: 89:a0:6c:bc:aa:09:81:5b:2b:10:74:12:55:de:01:89:76:dc: 8e:4c:12:79:74:aa:f4:67:52:8c:c9:fd:53:af:2f:60:38:6c: 88:5d:9e:fd:4b:38:84:41:bd:ab:b7:2e:71:6f:09:58:02:7b: 73:5a:1c:22:70:0d:a6:ad:29:31:ba:41:5b:19:74:6c:30:c2: 0e:d4:7e:9d:e1:55:b3:0e:bf:8b:bc:ec:fa:de:d1:04:ab:e7: 8b:7c:dc:89:9f:b2:8d:59:ee:cf:38:0e:b6:a1:6f:86:b9:a6: 3b:37:1a:f0:b8:e6:66:26:e3:c8:bb:0c:17:9a:60:38:96:99: c7:87:a2:19:49:3a:81:1b:a9:dd:84:d8:c0:9f:fc:71:09:b1: d1:2b:f3:17:12:e4:e8:af:54:aa:04:d7:b4:b9:54:be:04:fc: f8:22:a4:26:41:83:9b:81:24:64:2e:d0:e1:85:2c:9d:41:ac: a0:13:05:ba:db:62:3e:b5:54:f9:64:ea:07:2e:d6:75:1a:0e: 44:3d:44:5a:f5:9d:32:8e:4c:7a:f0:28:39:26:e2:a6:6f:88: c8:ae:86:e1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtVceK9Fi3yFZkwDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3OTY1NTgtODJkNi00MWE1LWI4ZWMtNWRmZGJkODlk NWQ3MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk YjM4NjZkM2UtODY5YS00M2U5LWE3YTMtMGViMWExMDhkMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3rewoN7B9T4nRFS08i6oNQ6vMZj9w71Bt6R cGUTtrql60RgSqmrHTVdvrE/zmKqHEn+q9DYUUHk9H8kqT9+zAEzi2KN+BoVWK8S NEHg9X2vmeJbT+HlYWhmJ6lOlfgIIL6v9eSbNIMTW9CYt4cjIfLaMJBnnVPNOGwo LH7aAtIZxhXWI36j4PYKDZVr1cyBodmelznubOkp4Vd8cEBCP8mcC9XXvyUz6aBC Bp7MTuCv2xcyPu61gbmF8v/RB44qeulSGnMVbbyu9PEMELWXWCQIfJcgHxd5iIvy GDLouz7+jXfQda3SxFsvTuCwbsl11vL/DxNheEJFn6wDUw0BkQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDJ9GVuBAHFMZrjcYZtT7xQsDwlAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5 NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZkYmQ4OWQ1ZDcvMGExYzM5MDctZjdkNy0z NjkxLTgwNDQtNmYxM2U2ZDFjZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWU3OTY1NTgtODJkNi00MWE1LWI4 ZWMtNWRmZGJkODlkNWQ3L2VlNzk2NTU4LTgyZDYtNDFhNS1iOGVjLTVkZmRiZDg5 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUXKPtievnlv+HCDJGhWB6bKFGHdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZk YmQ4OWQ1ZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwCjgAwQE 2FbwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAENxEm7FR+mpvXWXT4tbhVLb0G/5zb6100oKRnIdCNjK+dej YomgbLyqCYFbKxB0ElXeAYl23I5MEnl0qvRnUozJ/VOvL2A4bIhdnv1LOIRBvau3 LnFvCVgCe3NaHCJwDaatKTG6QVsZdGwwwg7Ufp3hVbMOv4u87Pre0QSr54t83Imf so1Z7s84Drahb4a5pjs3GvC45mYm48i7DBeaYDiWmceHohlJOoEbqd2E2MCf/HEJ sdEr8xcS5OivVKoE17S5VL4E/PgipCZBg5uBJGQu0OGFLJ1BrKATBbrbYj61VPlk 6gcu1nUaDkQ9RFr1nTKOTHrwKDkm4qZviMiuhuE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:16:21 2025 by rpki-client