$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa File: 69d00425-cf12-3785-aecf-3a474d2c9aaf.roa (raw, json) Hash identifier: v05tPalths3rOzDYrMo59Ff16K1HgvmUcpfZq8Cw4WY= Subject key identifier: 5F:A4:D4:02:D3:33:73:76:DD:73:E8:8A:8E:0A:52:36:CB:7C:74:EC Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584BB2F7A4375E6A71A41C6BA900 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 9009 IP address blocks: 204.11.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a4:37:5e:6a:71:a4:1c:6b:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=bf4bd677-c627-4168-8462-427db0c4bafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:19:65:0e:ce:e2:1f:29:15:57:f9:b1:7b:2f: 48:70:1f:61:35:e9:44:c5:ad:3a:7a:6a:2c:48:5d: 7d:d8:92:5b:14:da:6e:d1:d3:c3:6c:c5:2c:1f:93: 60:c4:dc:0d:65:eb:cc:6a:03:31:48:d5:74:45:d8: 59:c0:a0:28:01:20:b0:72:36:c9:3b:5f:de:22:7d: 14:af:55:ff:19:4b:a0:20:24:a3:39:56:55:be:df: 85:30:1c:48:9b:f6:5e:c4:5a:cc:6b:fd:db:84:a6: 01:c4:f0:a8:ab:bd:d7:20:8e:49:f3:9f:80:c9:6c: 2e:ef:dc:17:32:3e:c9:12:01:81:2f:b6:5a:bd:bc: 35:59:6d:78:39:91:94:84:31:8a:14:da:c9:97:f9: df:d6:bd:2d:79:71:64:00:f5:a1:ba:57:c3:4d:68: 5e:0c:c2:4d:1f:48:c0:61:7c:4c:58:96:88:97:01: 14:a5:e3:eb:95:af:9a:7a:8e:e7:88:be:80:cb:de: 81:c1:01:46:1b:57:07:59:f9:0d:80:9e:62:bf:c7: f3:f6:7a:18:34:ab:fe:a1:e0:81:e2:6c:a1:69:06: 41:3f:02:27:f8:12:91:3a:f1:ca:b4:4d:be:dd:be: 6e:57:e9:98:e5:24:d2:82:a8:72:a2:ef:e4:cc:dc: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A4:D4:02:D3:33:73:76:DD:73:E8:8A:8E:0A:52:36:CB:7C:74:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 204.11.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b5:77:57:98:46:82:a2:03:4b:48:3e:c9:d8:7b:68:56:4a: 2b:de:2c:2d:4a:f8:0c:32:25:80:ff:5a:ff:1d:f7:51:f5:ed: f2:a1:f8:f1:21:18:80:70:a1:db:03:3b:b0:54:4b:20:7c:2e: c6:10:e0:77:5c:cc:1e:83:1a:63:ad:8c:09:23:59:42:b2:95: 29:ae:6f:c9:1f:f7:b6:0d:1b:e5:8c:87:5d:b5:83:1a:ac:c4: 71:9d:8e:55:4a:0c:fe:5c:93:4d:29:d7:47:ee:7f:83:75:fa: c6:0d:59:62:0e:2a:76:40:91:98:af:73:cb:53:d5:fc:31:44: bc:89:59:46:3c:9e:48:35:4c:cf:82:8a:57:51:8a:c3:d1:f4: ec:5b:f7:ba:ca:01:cb:db:88:b8:53:3e:9a:29:82:fb:34:1f: 3a:01:43:80:4e:51:64:fd:61:20:14:26:b9:96:2b:88:f2:4c: 06:8c:86:74:9c:1f:48:2c:0d:94:21:c4:8f:ee:cd:a5:f5:52: 00:55:8d:ca:6f:5a:e5:bc:85:54:2e:2d:0d:76:a1:0e:d4:00: e4:a1:81:4a:2a:08:e0:b0:88:5f:66:eb:5a:4e:be:cd:dc:68: a4:73:77:6e:e2:ba:df:b4:20:e5:f6:ee:dd:af:d5:2a:3d:ad: 4c:02:2d:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96Q3XmpxpBxrqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YmY0YmQ2NzctYzYyNy00MTY4LTg0NjItNDI3ZGIwYzRiYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRllDs7iHykVV/mxey9IcB9hNelExa06emos SF192JJbFNpu0dPDbMUsH5NgxNwNZevMagMxSNV0RdhZwKAoASCwcjbJO1/eIn0U r1X/GUugICSjOVZVvt+FMBxIm/ZexFrMa/3bhKYBxPCoq73XII5J85+AyWwu79wX Mj7JEgGBL7Zavbw1WW14OZGUhDGKFNrJl/nf1r0teXFkAPWhulfDTWheDMJNH0jA YXxMWJaIlwEUpePrla+aeo7niL6Ay96BwQFGG1cHWfkNgJ5iv8fz9noYNKv+oeCB 4myhaQZBPwIn+BKROvHKtE2+3b5uV+mY5STSgqhyou/kzNw2fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+k1ALTM3N23XPoio4KUjbLfHTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNjlkMDA0MjUtY2YxMi0z Nzg1LWFlY2YtM2E0NzRkMmM5YWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW1d1eYRoKiA0tIPsnYe2hWSiveLC1K+AwyJYD/Wv8d91H17fKh+PEh GIBwodsDO7BUSyB8LsYQ4HdczB6DGmOtjAkjWUKylSmub8kf97YNG+WMh121gxqs xHGdjlVKDP5ck00p10fuf4N1+sYNWWIOKnZAkZivc8tT1fwxRLyJWUY8nkg1TM+C ildRisPR9Oxb97rKAcvbiLhTPpopgvs0HzoBQ4BOUWT9YSAUJrmWK4jyTAaMhnSc H0gsDZQhxI/uzaX1UgBVjcpvWuW8hVQuLQ12oQ7UAOShgUoqCOCwiF9m61pOvs3c aKRzd27iut+0IOX27t2v1So9rUwCLY4= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:55 2025 by rpki-client