$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa File: a810c427-52bf-3069-889e-49d7c3d307dd.roa (raw, json) Hash identifier: fc12SW6JpFKNow7CPY+xHsFQCRyIvwZz0Qt78oDEYJI= Subject key identifier: 6E:67:3C:64:9A:34:F0:27:4F:4B:B2:7E:B1:83:FF:93:45:ED:65:85 Certificate issuer: /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Certificate serial: 010D0C9F4328584B4E771A921AF416377311CB40 Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 8075 IP address blocks: 204.209.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:1a:92:1a:f4:16:37:73:11:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=c5be894e-2a35-4bad-bfeb-66de9c806c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:83:11:8a:61:bf:8b:0e:55:5b:b6:b0:9b: 9a:a2:93:d3:b1:2d:fd:17:79:49:b5:23:e8:45:f4: ad:4c:cc:02:28:ae:f1:2d:3b:a3:7a:c6:ce:ab:d8: 47:b1:7c:c1:7e:84:ca:2c:43:2d:19:f0:8c:92:eb: c3:5c:17:15:dd:49:af:53:6e:b9:99:35:b2:b6:31: a6:e6:05:81:87:20:5a:f8:57:8a:42:1a:07:84:4d: d9:89:34:49:55:a2:83:86:10:63:af:0b:cf:25:b7: 14:d1:da:d7:7b:ba:53:a9:04:7a:61:11:19:98:6c: db:41:13:27:9a:c1:36:bc:ec:a9:fd:89:08:46:15: d9:49:65:fa:80:62:79:6d:75:0b:8f:df:aa:14:a6: 60:53:e3:26:23:fa:12:c9:e1:eb:32:4b:36:7c:31: 3c:4a:55:49:64:c5:57:66:57:cb:b2:fb:96:e8:9b: 0a:31:3c:fb:5a:c2:08:04:0e:86:7e:60:3d:6b:9c: b3:95:13:5d:c7:9f:62:f7:05:0c:e8:e4:2f:92:8e: de:93:a0:34:35:84:09:a4:c0:6b:64:6e:76:65:a4: eb:9f:1f:d8:15:0f:77:f7:9d:07:44:38:c6:ea:d4: 87:6b:cf:f7:6c:a5:69:3b:47:d0:25:27:f7:ae:87: e8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:67:3C:64:9A:34:F0:27:4F:4B:B2:7E:B1:83:FF:93:45:ED:65:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl X509v3 Authority Key Identifier: keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer sbgp-ipAddrBlock: critical IPv4: 204.209.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:11:4e:a5:9e:22:ec:a1:ae:ab:7c:24:c9:6b:62:b1:95:32: c8:ec:c0:f5:85:bd:48:df:3f:e0:ca:13:a8:f7:e5:c4:3e:e2: e1:b9:9f:44:69:07:e1:7a:69:87:e9:6b:c2:50:e2:d4:85:37: 16:df:94:75:b7:4b:b4:1f:5b:16:69:0a:b2:20:1a:15:39:65: 15:f6:c8:c9:10:c3:a6:2e:eb:eb:1a:1e:4e:cf:e0:4d:06:d8: 50:43:a6:2f:23:80:fd:ff:d3:f5:13:9c:35:ce:a1:59:b9:14: 64:3e:77:84:ae:aa:3e:b6:6f:c0:83:7e:42:a6:7a:97:42:f6: ec:8b:c7:d9:85:5f:84:f9:54:60:c4:0b:aa:7f:ed:b2:a1:6a: 17:fe:ec:72:bb:09:5c:0e:0a:09:6b:9f:8a:df:b4:51:17:94: ee:d6:58:70:ce:cf:e0:fe:f0:8a:fb:7f:85:61:b3:f1:c4:d1: 79:24:80:52:88:f1:66:e8:f1:18:49:5f:e4:53:eb:7f:0e:6f: 7b:8f:85:46:af:dc:b1:0f:77:b0:a9:b9:0b:c3:e6:1d:b8:b0: 73:fe:99:c0:99:b1:29:f0:ae:ef:a3:ed:0b:25:83:57:81:8e: 2c:ef:39:81:2c:31:94:fa:ea:f8:4a:e4:ac:14:65:3f:ff:93: 6f:d3:34:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxqSGvQWN3MRy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZDhjZjgtNGNjYS00Mjk1LThmM2ItOTE2ZGNkNTBi NjczMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YzViZTg5NGUtMmEzNS00YmFkLWJmZWItNjZkZTljODA2Yzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRODEYphv4sOVVu2sJuaopPTsS39F3lJtSPo RfStTMwCKK7xLTujesbOq9hHsXzBfoTKLEMtGfCMkuvDXBcV3UmvU265mTWytjGm 5gWBhyBa+FeKQhoHhE3ZiTRJVaKDhhBjrwvPJbcU0drXe7pTqQR6YREZmGzbQRMn msE2vOyp/YkIRhXZSWX6gGJ5bXULj9+qFKZgU+MmI/oSyeHrMks2fDE8SlVJZMVX ZlfLsvuW6JsKMTz7WsIIBA6GfmA9a5yzlRNdx59i9wUM6OQvko7ek6A0NYQJpMBr ZG52ZaTrnx/YFQ93950HRDjG6tSHa8/3bKVpO0fQJSf3rofoJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5nPGSaNPAnT0uyfrGD/5NF7WWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDFk OGNmOC00Y2NhLTQyOTUtOGYzYi05MTZkY2Q1MGI2NzMvYTgxMGM0MjctNTJiZi0z MDY5LTg4OWUtNDlkN2MzZDMwN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAxZDhjZjgtNGNjYS00Mjk1LThm M2ItOTE2ZGNkNTBiNjczLzYwMWQ4Y2Y4LTRjY2EtNDI5NS04ZjNiLTkxNmRjZDUw YjY3My5jcmwwHwYDVR0jBBgwFoAUtfu5dULYLw99YW7jd6Gh7U33ILswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDFkOGNmOC00Y2NhLTQyOTUtOGYzYi05MTZk Y2Q1MGI2NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNESMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYRTqWeIuyhrqt8JMlrYrGVMsjswPWFvUjfP+DKE6j35cQ+4uG5n0Rp B+F6aYfpa8JQ4tSFNxbflHW3S7QfWxZpCrIgGhU5ZRX2yMkQw6Yu6+saHk7P4E0G 2FBDpi8jgP3/0/UTnDXOoVm5FGQ+d4Suqj62b8CDfkKmepdC9uyLx9mFX4T5VGDE C6p/7bKhahf+7HK7CVwOCglrn4rftFEXlO7WWHDOz+D+8Ir7f4Vhs/HE0XkkgFKI 8Wbo8RhJX+RT638Ob3uPhUav3LEPd7CpuQvD5h24sHP+mcCZsSnwru+j7Qslg1eB jizvOYEsMZT66vhK5KwUZT//k2/TNE8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:59:59 2025 by rpki-client