$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa File: da2805f3-2f45-37d2-81ac-675892bd2fa3.roa (raw, json) Hash identifier: ujIl+jZqvbWPdv9IThEezRpO/iSdJgqLzqiOMWo0Q4Q= Subject key identifier: D5:54:80:83:D4:6D:5A:05:A5:16:CC:CB:FB:25:AC:1F:E0:F5:87:55 Certificate issuer: /CN=82d0f472-6865-4d16-9252-e75f7b91368a Certificate serial: 010D0C9F4328584B6F03175CE5E1519449408D00 Authority key identifier: 91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 401382 IP address blocks: 64.190.20.0/24 maxlen: 24 167.150.24.0/22 maxlen: 22 2602:f7e7::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:03:17:5c:e5:e1:51:94:49:40:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82d0f472-6865-4d16-9252-e75f7b91368a Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=f87019be-78dc-4cb3-bb88-b1c0bba3b894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fd:7e:4c:da:22:da:a3:b1:43:82:02:bb:05: a3:3f:7b:7e:86:40:64:a5:af:1c:d8:74:ba:17:2d: d9:4b:a2:0a:87:97:6e:57:e6:ec:cc:7f:da:73:0b: 30:ad:b0:fb:f3:00:72:f7:78:84:dd:ef:98:fe:c8: ee:fb:38:7c:65:5f:90:88:1a:26:d5:d6:9a:01:f0: b6:3b:86:c2:97:01:4a:a8:cc:27:be:12:22:aa:b1: e5:0f:ca:4a:74:66:9b:a9:99:5e:f0:b5:87:03:82: 84:9c:99:f7:0b:42:4f:1f:25:6c:ec:8b:4a:74:c1: f7:2c:f7:8a:dd:5f:26:d6:19:f6:30:87:4a:4e:6f: 6a:43:90:20:0d:fa:70:5a:1e:eb:4b:d0:4a:f0:26: ee:45:74:4e:60:e3:22:b7:07:37:d7:a4:85:71:17: 32:a8:8d:a1:a5:47:83:cf:58:6d:ef:cd:83:da:ec: c3:45:28:d4:b6:3b:40:d3:c8:62:4a:54:2e:26:d8: 8e:60:ba:37:28:ee:fc:fc:c4:1c:8c:ba:a8:b2:a1: 84:24:0a:7a:1c:34:93:12:7b:0e:eb:15:7e:b1:d6: c2:11:84:cf:b4:b4:37:7e:ff:8f:f2:3d:21:ea:5e: bf:28:ce:1a:e6:98:62:8c:f6:aa:e8:e1:c8:9f:75: e6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:54:80:83:D4:6D:5A:05:A5:16:CC:CB:FB:25:AC:1F:E0:F5:87:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl X509v3 Authority Key Identifier: keyid:91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer sbgp-ipAddrBlock: critical IPv4: 64.190.20.0/24 167.150.24.0/22 IPv6: 2602:f7e7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:76:b9:a0:ed:c2:9c:bb:68:0a:1a:a2:e2:0b:da:74:31:08: 6e:0f:2a:8f:df:9a:7d:a6:d2:dd:eb:cb:80:25:d9:d4:1c:d8: 50:99:3f:2f:9a:4a:30:c9:81:bb:14:a8:d1:2a:b4:08:48:77: eb:f7:1d:99:12:6a:85:f3:b4:58:bd:0c:26:12:2c:9e:f4:d4: 87:2e:0d:3b:fe:09:d1:ea:d6:da:85:c4:58:3a:c3:46:f4:c5: 92:86:81:80:80:c5:75:8a:df:8c:d0:3d:af:ad:08:12:64:8b: 75:cd:aa:0b:a7:8f:2c:e6:d5:f5:94:56:9a:d5:b9:aa:26:74: e4:47:e8:f4:13:20:e9:3a:95:fd:d3:08:4f:57:a5:fc:80:78: 7a:db:9f:5a:eb:1f:d6:59:86:95:80:e1:33:75:49:3e:bc:be: 8f:6e:d4:6f:cf:0d:72:6c:bb:80:ea:ae:a4:89:4e:bc:6b:40: b5:c4:91:7a:37:66:e7:88:cf:70:2e:01:ab:d1:00:fb:87:f1: 23:5e:a8:30:d2:65:8d:36:45:67:aa:6c:6a:db:11:97:98:c1: 77:c5:68:e7:1c:df:0f:38:bc:c6:90:76:41:02:14:de:c1:a9: a8:02:49:28:d1:40:88:cf:63:4a:c7:3a:04:f3:99:b5:a5:24: 93:df:0f:f4 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEtvAxdc5eFRlElAjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODJkMGY0NzItNjg2NS00ZDE2LTkyNTItZTc1ZjdiOTEz NjhhMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk Zjg3MDE5YmUtNzhkYy00Y2IzLWJiODgtYjFjMGJiYTNiODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8P1+TNoi2qOxQ4ICuwWjP3t+hkBkpa8c2HS6 Fy3ZS6IKh5duV+bszH/acwswrbD78wBy93iE3e+Y/sju+zh8ZV+QiBom1daaAfC2 O4bClwFKqMwnvhIiqrHlD8pKdGabqZle8LWHA4KEnJn3C0JPHyVs7ItKdMH3LPeK 3V8m1hn2MIdKTm9qQ5AgDfpwWh7rS9BK8CbuRXROYOMitwc316SFcRcyqI2hpUeD z1ht782D2uzDRSjUtjtA08hiSlQuJtiOYLo3KO78/MQcjLqosqGEJAp6HDSTEnsO 6xV+sdbCEYTPtLQ3fv+P8j0h6l6/KM4a5phijPaq6OHIn3XmEQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFNVUgIPUbVoFpRbMy/slrB/g9YdVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MmQw ZjQ3Mi02ODY1LTRkMTYtOTI1Mi1lNzVmN2I5MTM2OGEvZGEyODA1ZjMtMmY0NS0z N2QyLTgxYWMtNjc1ODkyYmQyZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODJkMGY0NzItNjg2NS00ZDE2LTky NTItZTc1ZjdiOTEzNjhhLzgyZDBmNDcyLTY4NjUtNGQxNi05MjUyLWU3NWY3Yjkx MzY4YS5jcmwwHwYDVR0jBBgwFoAUkfJo9ZIoQMeG0bKiWLeu+U2evCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MmQwZjQ3Mi02ODY1LTRkMTYtOTI1Mi1lNzVm N2I5MTM2OGEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAQL4UAwQC p5YYMA4EAgACMAgDBgAmAvfnADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcdrmg7cKcu2gKGqLiC9p0MQhu DyqP35p9ptLd68uAJdnUHNhQmT8vmkowyYG7FKjRKrQISHfr9x2ZEmqF87RYvQwm Eiye9NSHLg07/gnR6tbahcRYOsNG9MWShoGAgMV1it+M0D2vrQgSZIt1zaoLp48s 5tX1lFaa1bmqJnTkR+j0EyDpOpX90whPV6X8gHh6259a6x/WWYaVgOEzdUk+vL6P btRvzw1ybLuA6q6kiU68a0C1xJF6N2bniM9wLgGr0QD7h/EjXqgw0mWNNkVnqmxq 2xGXmMF3xWjnHN8POLzGkHZBAhTewamoAkko0UCIz2NKxzoE85m1pSST3w/0 -----END CERTIFICATE-----Generated at Wed Nov 5 11:57:41 2025 by rpki-client