$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa File: 20551fed-8091-3df7-8169-f36d6f164c32.roa (raw, json) Hash identifier: a4ngNSqTo9nSDvoSTH7jHqcukWULIrLd+FOXrsiMORI= Subject key identifier: 13:1D:C0:B6:12:F8:12:CA:38:8F:B5:FD:FB:C1:DA:9C:3D:0A:DC:D2 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584BBE4043FA57BEA9090EBDF7C0 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 11650 IP address blocks: 216.176.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:43:fa:57:be:a9:09:0e:bd:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=3aa2741c-210c-4fc7-84a9-14a579fd2f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:2c:7f:4c:1d:c3:05:58:e2:26:d7:2e:e5: d1:12:16:02:79:67:4b:a5:ea:d6:d3:22:86:ac:67: 0b:3e:78:cf:ad:d7:35:90:a4:c5:0e:4a:96:b8:4e: 67:b6:9d:ce:b0:53:1a:01:3a:40:4a:77:35:09:38: 23:c8:d0:23:32:05:86:cd:7c:5a:32:1a:c4:76:30: 41:3d:35:6a:43:40:cc:f7:ed:58:3a:46:8d:0f:ef: cf:58:14:7e:00:d2:3a:95:9d:bd:45:f3:db:d7:0b: 6a:4e:ff:5e:10:6d:61:d9:fa:4c:d8:c1:be:86:70: dc:46:6d:63:3d:31:3b:b2:a9:5e:98:ab:bd:67:c8: 1b:76:90:2b:95:7c:7a:f4:a1:78:02:f4:76:5b:f4: 47:24:90:e5:b6:29:29:89:c4:c4:a9:04:d7:eb:ce: 52:ec:48:65:66:45:1e:90:57:48:d2:ab:07:eb:85: 8c:7b:89:99:0b:40:3e:7c:1e:13:b3:3e:35:53:fe: fe:cc:4f:43:f7:f2:31:95:07:d6:92:cb:e0:7c:10: 5a:42:10:d0:4c:de:90:a3:df:f2:c0:8e:9d:d9:a1: 36:89:18:45:a1:00:73:6d:61:82:a3:f8:47:4e:93: 14:1f:91:9c:be:10:f5:24:0c:e7:b4:ec:6c:1d:01: d8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1D:C0:B6:12:F8:12:CA:38:8F:B5:FD:FB:C1:DA:9C:3D:0A:DC:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 216.176.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:6c:03:87:d1:1d:e2:1f:fc:36:80:c2:ac:63:41:14:92:9e: e8:09:89:ee:7c:dd:2c:2a:ad:c2:60:17:34:e9:c8:ee:dd:e9: d4:b7:61:01:f3:e7:2d:f0:1b:93:1e:59:b9:30:de:a7:72:f2: 2d:52:0b:2e:f3:9c:8b:27:e8:40:92:e8:21:dc:50:a5:72:4a: 58:2f:cd:a0:a2:31:c5:90:c7:a8:bb:cb:97:59:ed:fe:f2:13: d7:56:3f:19:a9:80:c7:04:e9:bb:ec:cf:04:f0:1f:f3:61:70: 70:55:3a:47:3c:b9:81:25:4d:33:fc:c6:5d:8e:18:a4:fc:77: 0e:2e:e9:4e:22:af:d6:1e:19:63:da:87:e0:45:d5:8f:ec:3c: 8f:fb:26:80:6b:df:de:4c:df:fd:5c:f0:c1:3a:c7:30:bf:bb: 80:68:98:70:36:54:0d:3f:51:e0:70:e1:84:fe:88:28:ba:2d: 92:04:48:f1:d5:cf:11:8a:41:b4:93:3b:49:0a:45:75:e6:82: 44:9c:61:4a:78:a1:b9:b0:b7:bb:ef:7f:e3:f8:48:14:2e:79: 6e:52:45:a1:3b:2c:08:8c:9f:37:72:68:75:e3:59:97:f2:95: 17:08:78:40:25:fe:ce:8e:76:c6:21:69:68:51:b3:28:df:bd: 3f:d0:af:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEP6V76pCQ6998AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk M2FhMjc0MWMtMjEwYy00ZmM3LTg0YTktMTRhNTc5ZmQyZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXIsf0wdwwVY4ibXLuXREhYCeWdLperW0yKG rGcLPnjPrdc1kKTFDkqWuE5ntp3OsFMaATpASnc1CTgjyNAjMgWGzXxaMhrEdjBB PTVqQ0DM9+1YOkaND+/PWBR+ANI6lZ29RfPb1wtqTv9eEG1h2fpM2MG+hnDcRm1j PTE7sqlemKu9Z8gbdpArlXx69KF4AvR2W/RHJJDltikpicTEqQTX685S7EhlZkUe kFdI0qsH64WMe4mZC0A+fB4Tsz41U/7+zE9D9/IxlQfWksvgfBBaQhDQTN6Qo9/y wI6d2aE2iRhFoQBzbWGCo/hHTpMUH5GcvhD1JAzntOxsHQHYLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMdwLYS+BLKOI+1/fvB2pw9CtzSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvMjA1NTFmZWQtODA5MS0z ZGY3LTgxNjktZjM2ZDZmMTY0YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2LCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhsA4fRHeIf/DaAwqxjQRSSnugJie583SwqrcJgFzTpyO7d6dS3YQHz 5y3wG5MeWbkw3qdy8i1SCy7znIsn6ECS6CHcUKVySlgvzaCiMcWQx6i7y5dZ7f7y E9dWPxmpgMcE6bvszwTwH/NhcHBVOkc8uYElTTP8xl2OGKT8dw4u6U4ir9YeGWPa h+BF1Y/sPI/7JoBr395M3/1c8ME6xzC/u4BomHA2VA0/UeBw4YT+iCi6LZIESPHV zxGKQbSTO0kKRXXmgkScYUp4obmwt7vvf+P4SBQueW5SRaE7LAiMnzdyaHXjWZfy lRcIeEAl/s6OdsYhaWhRsyjfvT/Qr6w= -----END CERTIFICATE-----Generated at Wed Nov 5 23:35:36 2025 by rpki-client