$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c601183c-c50b-3996-a472-3386d4586ad1.roa File: c601183c-c50b-3996-a472-3386d4586ad1.roa (raw, json) Hash identifier: IoPtkEp2JanxQZ9spOUuvdvn663mXDlc/CjFcoT6EK0= Subject key identifier: F9:A0:72:9E:AD:BD:B9:71:93:91:0E:AC:4C:0A:EE:3A:17:8C:5D:BD Certificate issuer: /CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf Certificate serial: 010D0C9F4328584AF95141ACDDD7AB953E90E600 Authority key identifier: 67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c601183c-c50b-3996-a472-3386d4586ad1.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 54070 IP address blocks: 205.211.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:41:ac:dd:d7:ab:95:3e:90:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=cec4c6f5-17fb-4a42-9b79-47730c458642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:60:f5:2c:f6:96:90:5d:86:21:cf:9c:72:28: 14:b0:37:84:8d:74:93:d9:6f:d4:8c:49:2a:98:e5: 1b:f8:48:d1:82:ec:ed:0a:fa:33:80:b6:f1:c6:5d: 5c:28:03:17:42:98:82:f8:7b:c9:b9:02:c3:3c:2d: 2d:a6:62:a1:fb:32:66:b7:60:d0:4e:ae:64:8d:d0: 85:93:6b:46:75:fe:f2:de:97:0e:9d:53:51:cf:b6: 1b:8e:58:89:68:40:27:f2:9c:49:cd:e5:86:9f:48: 0e:76:b3:a7:3a:18:c2:2c:98:50:5e:47:2b:9b:d5: 9b:ce:08:7a:d4:d5:b3:18:99:3c:b5:92:3d:1d:b9: 3c:25:4f:0e:3b:8a:97:70:58:22:45:a9:f4:ff:13: e7:7c:57:a3:1d:09:f5:db:5d:09:de:35:77:e4:49: 32:5a:26:c2:9b:d6:9f:dd:2f:0f:89:67:ef:9a:32: 60:7c:78:86:03:bd:ad:a9:fa:49:84:60:9c:01:35: b5:c3:da:38:34:e0:9b:db:a7:93:5d:92:6e:f1:19: 00:e6:f0:da:05:a8:0c:64:40:83:92:85:ed:20:41: 7e:ee:56:2f:bc:23:f3:60:f1:cf:d8:40:ab:cf:c1: e3:64:76:dc:5e:97:5c:a1:f6:34:f4:70:12:37:78: c7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A0:72:9E:AD:BD:B9:71:93:91:0E:AC:4C:0A:EE:3A:17:8C:5D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c601183c-c50b-3996-a472-3386d4586ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.crl X509v3 Authority Key Identifier: keyid:67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer sbgp-ipAddrBlock: critical IPv4: 205.211.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:49:8a:11:65:e5:97:f8:aa:1b:6a:ad:94:50:0f:e4:ff:72: 99:d4:07:b6:c3:75:c7:0b:a3:ca:b8:27:04:94:14:4a:c7:ce: 7e:2d:b9:fa:cc:ae:67:f5:ad:fd:f7:7d:69:fb:9e:12:dc:22: 7b:c0:89:19:8b:62:48:ad:cf:a3:1c:d1:13:ca:49:6d:42:cc: a0:e3:00:da:f8:1a:3a:b5:f9:24:82:41:9f:36:91:5f:8d:97: ea:74:38:9b:8a:7a:80:d1:c8:16:99:c0:5a:59:c7:0d:f5:1c: 3a:be:25:85:4b:a0:53:10:df:72:b3:85:11:5b:72:7e:55:4b: e7:e8:30:50:be:a0:a7:00:1d:12:07:fb:09:0e:99:00:40:e7: 57:c2:08:72:a1:ac:09:84:a9:f4:57:47:a0:c6:dd:a5:6e:8d: ac:7a:9f:8f:10:42:4d:93:9e:f9:03:a8:98:d9:6c:12:6b:64: 92:e7:ef:1f:e2:d5:0f:09:54:cc:28:09:ad:c8:14:70:d8:eb: be:ad:da:fa:94:0e:39:73:e1:09:7e:06:91:64:71:f0:a7:aa: f7:af:f6:63:8d:b7:0e:b3:08:7c:b6:d7:2c:36:b6:b7:81:35: 23:d7:11:dc:ad:dc:0f:6b:e6:0c:12:ee:7c:e2:a1:61:60:e2: cd:42:78:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUGs3derlT6Q5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ2MDhjYjgtYTFkMC00MGFhLThiMDUtYTU5NzE1N2Ji MWJmMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Y2VjNGM2ZjUtMTdmYi00YTQyLTliNzktNDc3MzBjNDU4NjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmD1LPaWkF2GIc+ccigUsDeEjXST2W/UjEkq mOUb+EjRguztCvozgLbxxl1cKAMXQpiC+HvJuQLDPC0tpmKh+zJmt2DQTq5kjdCF k2tGdf7y3pcOnVNRz7YbjliJaEAn8pxJzeWGn0gOdrOnOhjCLJhQXkcrm9Wbzgh6 1NWzGJk8tZI9Hbk8JU8OO4qXcFgiRan0/xPnfFejHQn1210J3jV35EkyWibCm9af 3S8PiWfvmjJgfHiGA72tqfpJhGCcATW1w9o4NOCb26eTXZJu8RkA5vDaBagMZECD koXtIEF+7lYvvCPzYPHP2ECrz8HjZHbcXpdcofY09HASN3jHuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmgcp6tvblxk5EOrEwK7joXjF29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDYw OGNiOC1hMWQwLTQwYWEtOGIwNS1hNTk3MTU3YmIxYmYvYzYwMTE4M2MtYzUwYi0z OTk2LWE0NzItMzM4NmQ0NTg2YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQ2MDhjYjgtYTFkMC00MGFhLThi MDUtYTU5NzE1N2JiMWJmL2M0NjA4Y2I4LWExZDAtNDBhYS04YjA1LWE1OTcxNTdi YjFiZi5jcmwwHwYDVR0jBBgwFoAUZyrj657tRjzudv/uwruG7Cqm4tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDYwOGNiOC1hMWQwLTQwYWEtOGIwNS1hNTk3 MTU3YmIxYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9JihFl5Zf4qhtqrZRQD+T/cpnUB7bDdccLo8q4JwSUFErHzn4tufrM rmf1rf33fWn7nhLcInvAiRmLYkitz6Mc0RPKSW1CzKDjANr4Gjq1+SSCQZ82kV+N l+p0OJuKeoDRyBaZwFpZxw31HDq+JYVLoFMQ33KzhRFbcn5VS+foMFC+oKcAHRIH +wkOmQBA51fCCHKhrAmEqfRXR6DG3aVujax6n48QQk2TnvkDqJjZbBJrZJLn7x/i 1Q8JVMwoCa3IFHDY676t2vqUDjlz4Ql+BpFkcfCnqvev9mONtw6zCHy21yw2treB NSPXEdyt3A9r5gwS7nzioWFg4s1CeNg= -----END CERTIFICATE-----Generated at Wed Nov 5 14:24:32 2025 by rpki-client