$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/0bfdcce3-bf0c-3c99-8e69-783195d18590.roa File: 0bfdcce3-bf0c-3c99-8e69-783195d18590.roa (raw, json) Hash identifier: Lipov3oaJ+k1uhoo/twYKITG3/Co9JhK1BVct709Qx8= Subject key identifier: 71:EA:1D:C2:81:CB:FE:63:BA:3F:EA:8B:02:2D:A6:ED:FA:A9:28:00 Certificate issuer: /CN=06b2da7d-ae03-4c12-bd29-f0c285888740 Certificate serial: 010D0C9F4328584BA0D24FD20CC45717C306FC40 Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/0bfdcce3-bf0c-3c99-8e69-783195d18590.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 206.195.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:4f:d2:0c:c4:57:17:c3:06:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=35625cb2-333c-49a3-ab49-d9c7a458f1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:22:d7:d0:6b:ad:5b:f0:3e:40:61:09:c7:42: d9:27:f4:cc:a4:43:8a:eb:76:c1:50:a6:ca:38:d4: 1e:71:a9:53:72:59:fa:93:cc:a3:6e:b8:f1:3c:f9: 1e:50:8b:0d:e1:74:99:4e:ba:2f:e7:8b:60:c0:e1: 91:a8:a4:ed:a0:16:aa:a7:5e:ff:9d:a8:81:e0:18: 05:c4:25:78:84:38:f5:ba:0d:88:25:7d:67:c9:76: 66:67:90:7a:a0:d7:fd:cb:a4:e9:ab:18:7d:df:a1: ef:23:8d:88:d6:b6:ab:a2:8d:91:00:58:b5:cf:4d: 44:b4:65:53:7c:ce:01:1f:a4:de:30:b2:89:8d:bb: 1c:6d:21:3e:77:72:a3:eb:e1:38:dc:83:9d:9c:d6: 68:e7:ed:69:cb:e6:0a:e2:00:e7:52:4a:c7:d9:e9: 2e:61:c1:eb:46:71:6d:8c:78:90:15:6f:02:f6:d9: ba:9b:df:28:60:89:fe:c5:19:24:c4:bb:42:ee:49: d5:13:65:07:5e:47:71:8e:1d:5f:98:35:5c:89:86: 86:a9:a0:6e:56:fe:ad:a1:15:b2:d5:00:0b:6c:26: 10:4f:54:58:0f:18:20:97:e0:e9:d4:1e:8b:3b:4b: 97:7a:e4:07:1a:6e:8f:7b:c2:a9:9f:b8:9a:d1:1e: 13:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EA:1D:C2:81:CB:FE:63:BA:3F:EA:8B:02:2D:A6:ED:FA:A9:28:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/0bfdcce3-bf0c-3c99-8e69-783195d18590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl X509v3 Authority Key Identifier: keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer sbgp-ipAddrBlock: critical IPv4: 206.195.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:52:86:d2:a7:ca:95:57:73:6b:67:a5:d3:8a:e5:27:ba:c0: cf:56:38:bb:27:a1:a0:7c:d5:b8:11:ce:f1:d1:61:dc:9e:2e: 6e:00:d8:21:17:35:8d:03:5a:1e:16:4a:68:ee:c1:ee:65:b8: 54:52:16:c6:32:9d:2c:8f:2a:1a:b3:66:0a:e4:34:00:20:3d: 97:2e:f9:72:73:26:8b:e9:de:2c:42:44:77:99:68:1c:b6:53: a3:7c:85:71:a6:82:aa:f4:02:a9:89:d6:40:99:21:7b:4c:b6: a8:32:71:94:a1:1f:44:13:e3:45:5f:f8:a6:36:9e:dd:66:63: 5c:97:6c:26:6d:e1:23:a7:dd:98:1c:18:4b:65:a5:51:78:19: 1d:34:d7:fa:0f:37:ec:3f:69:81:ec:14:d5:5c:48:34:9b:ac: de:e4:1f:d9:24:a0:0a:e7:e2:3d:cb:87:95:ab:dc:a4:2c:ed: 3d:dd:de:58:aa:ab:0e:5d:0b:bd:cb:38:19:be:bc:de:a9:04: d8:5e:fd:84:93:ae:d9:9c:18:ef:e7:dc:44:bb:5b:ff:70:d3: e0:41:d3:8b:15:b5:8a:1f:86:c5:76:6b:b7:d2:f3:67:14:36: ec:58:75:6c:15:84:ed:30:d6:59:b0:38:60:39:26:ce:e7:a4: f3:24:27:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0k/SDMRXF8MG/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZiMmRhN2QtYWUwMy00YzEyLWJkMjktZjBjMjg1ODg4 NzQwMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MzU2MjVjYjItMzMzYy00OWEzLWFiNDktZDljN2E0NThmMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yLX0GutW/A+QGEJx0LZJ/TMpEOK63bBUKbK ONQecalTcln6k8yjbrjxPPkeUIsN4XSZTrov54tgwOGRqKTtoBaqp17/naiB4BgF xCV4hDj1ug2IJX1nyXZmZ5B6oNf9y6Tpqxh936HvI42I1raroo2RAFi1z01EtGVT fM4BH6TeMLKJjbscbSE+d3Kj6+E43IOdnNZo5+1py+YK4gDnUkrH2ekuYcHrRnFt jHiQFW8C9tm6m98oYIn+xRkkxLtC7knVE2UHXkdxjh1fmDVciYaGqaBuVv6toRWy 1QALbCYQT1RYDxggl+Dp1B6LO0uXeuQHGm6Pe8Kpn7ia0R4TBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHqHcKBy/5juj/qiwItpu36qSgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wNmIy ZGE3ZC1hZTAzLTRjMTItYmQyOS1mMGMyODU4ODg3NDAvMGJmZGNjZTMtYmYwYy0z Yzk5LThlNjktNzgzMTk1ZDE4NTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDZiMmRhN2QtYWUwMy00YzEyLWJk MjktZjBjMjg1ODg4NzQwLzA2YjJkYTdkLWFlMDMtNGMxMi1iZDI5LWYwYzI4NTg4 ODc0MC5jcmwwHwYDVR0jBBgwFoAUuP2JS4hPUxYYiJCHbrgbB00nSmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wNmIyZGE3ZC1hZTAzLTRjMTItYmQyOS1mMGMy ODU4ODg3NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzsPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNShtKnypVXc2tnpdOK5Se6wM9WOLsnoaB81bgRzvHRYdyeLm4A2CEX NY0DWh4WSmjuwe5luFRSFsYynSyPKhqzZgrkNAAgPZcu+XJzJovp3ixCRHeZaBy2 U6N8hXGmgqr0AqmJ1kCZIXtMtqgycZShH0QT40Vf+KY2nt1mY1yXbCZt4SOn3Zgc GEtlpVF4GR001/oPN+w/aYHsFNVcSDSbrN7kH9kkoArn4j3Lh5Wr3KQs7T3d3liq qw5dC73LOBm+vN6pBNhe/YSTrtmcGO/n3ES7W/9w0+BB04sVtYofhsV2a7fS82cU NuxYdWwVhO0w1lmwOGA5Js7npPMkJ8U= -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:38 2025 by rpki-client