$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/04416291-d3d4-3bd7-a5e6-c378f705767e.roa File: 04416291-d3d4-3bd7-a5e6-c378f705767e.roa (raw, json) Hash identifier: qB+KItP948UPd/HBj661p6afdA7EQG9MAhTdLVfKw+Q= Subject key identifier: 20:B9:6C:BE:3A:71:92:79:EF:FB:78:59:18:9F:24:04:0D:7F:F0:46 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D1791CE7F67AEAF66C3BDC0 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/04416291-d3d4-3bd7-a5e6-c378f705767e.roa Signing time: Thu 18 Sep 2025 19:39:30 +0000 ROA not before: Thu 18 Sep 2025 19:39:30 +0000 ROA not after: Wed 17 Dec 2025 20:39:30 +0000 asID: 11377 IP address blocks: 216.20.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:91:ce:7f:67:ae:af:66:c3:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:30 2025 GMT Not After : Dec 17 20:39:30 2025 GMT Subject: CN=7cd74fe4-d21b-4a5e-8e09-d7af81a1e380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:a0:d6:95:7e:27:41:45:9a:4f:60:69:9c: 1d:96:5d:b5:53:93:bf:07:db:56:c3:9b:24:c5:84: f2:2f:cf:d4:8f:28:f8:5d:38:b6:49:78:6a:60:4a: 4c:de:84:95:30:38:25:25:89:ed:07:ed:cb:2b:9b: b2:7c:42:96:be:26:11:4d:f8:99:4a:92:26:a5:7d: a3:c7:23:e7:3e:0f:8a:27:11:0d:2a:06:d2:c9:84: ba:24:6f:92:29:da:b1:3c:09:2e:62:96:b6:54:12: a0:d1:67:a9:78:1f:d7:d6:6c:9c:7a:da:20:44:35: a7:c9:62:9c:08:95:a8:87:0a:c6:6a:47:6f:00:eb: e5:ff:e7:d5:ac:6f:e6:e4:59:15:d7:76:da:13:fb: e0:36:e4:34:bf:bd:bd:1b:6c:dd:34:14:bc:2a:2a: 23:3d:40:8e:76:f8:22:90:4d:c7:d6:8d:c4:82:07: 6e:fc:b0:8c:01:a5:f1:dc:c7:fb:04:08:e0:e2:6b: b2:b9:fa:bc:41:a8:79:44:44:02:bc:5f:c3:1c:62: 2a:cd:e1:64:82:55:e1:29:65:df:cc:0c:99:0e:72: c3:94:88:de:f6:41:d3:4f:f4:7c:4c:55:29:05:68: 80:44:46:5f:10:69:a7:c2:33:12:3a:2b:69:2c:03: d3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B9:6C:BE:3A:71:92:79:EF:FB:78:59:18:9F:24:04:0D:7F:F0:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/04416291-d3d4-3bd7-a5e6-c378f705767e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:2e:55:b9:00:42:5e:27:1c:20:fe:57:fe:cb:64:0d:b8:82: 5d:60:3a:28:81:31:4b:b9:e8:44:6c:1d:ef:7e:df:c4:a6:05: d8:e8:e9:c4:fe:fd:01:43:68:ee:18:e0:d5:f9:98:02:e3:ad: 3d:cb:b7:6f:76:85:05:16:ab:3e:b8:b7:e4:e5:55:c9:50:e6: d3:c0:43:f4:3e:fd:6e:85:b0:36:fc:a9:29:fa:f8:c0:6f:22: 77:28:c9:9c:71:94:cc:68:f1:64:f9:0b:7f:04:bd:4e:10:ae: 27:c3:30:29:e3:2c:eb:c9:2c:e4:25:6e:1d:45:c0:3a:38:ca: 84:1a:73:22:57:f3:a4:df:9e:e6:63:3f:61:8f:f9:7f:c6:8a: 04:5e:eb:eb:45:6c:66:df:41:ff:03:e2:62:43:28:0b:f6:8b: 26:cf:89:d4:ed:c1:9b:5c:35:f9:2a:ea:1d:a3:1c:a5:c1:ba: 4d:cb:92:af:5f:fc:3f:e2:ae:4e:c9:31:c6:51:cd:19:6e:0e: 71:3d:eb:62:d6:dd:52:7e:4a:19:98:c4:8e:d9:5c:f5:ff:67: 45:9b:61:18:87:5b:cc:df:bf:3c:3d:54:0f:95:d9:f5:bb:2c: a1:c9:c0:88:a8:b8:5f:99:33:22:a5:5d:36:2b:be:62:54:a7: 21:03:8d:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F5HOf2eur2bDvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5MzkzMFoXDTI1MTIxNzIwMzkzMFowLzEtMCsGA1UEAxMk N2NkNzRmZTQtZDIxYi00YTVlLThlMDktZDdhZjgxYTFlMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVmg1pV+J0FFmk9gaZwdll21U5O/B9tWw5sk xYTyL8/Ujyj4XTi2SXhqYEpM3oSVMDglJYntB+3LK5uyfEKWviYRTfiZSpImpX2j xyPnPg+KJxENKgbSyYS6JG+SKdqxPAkuYpa2VBKg0WepeB/X1mycetogRDWnyWKc CJWohwrGakdvAOvl/+fVrG/m5FkV13baE/vgNuQ0v729G2zdNBS8KiojPUCOdvgi kE3H1o3Eggdu/LCMAaXx3Mf7BAjg4muyufq8Qah5REQCvF/DHGIqzeFkglXhKWXf zAyZDnLDlIje9kHTT/R8TFUpBWiAREZfEGmnwjMSOitpLAPTjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCC5bL46cZJ57/t4WRifJAQNf/BGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvMDQ0MTYyOTEtZDNkNC0z YmQ3LWE1ZTYtYzM3OGY3MDU3NjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHouVbkAQl4nHCD+V/7LZA24gl1gOiiBMUu56ERsHe9+38SmBdjo6cT+ /QFDaO4Y4NX5mALjrT3Lt292hQUWqz64t+TlVclQ5tPAQ/Q+/W6FsDb8qSn6+MBv IncoyZxxlMxo8WT5C38EvU4QrifDMCnjLOvJLOQlbh1FwDo4yoQacyJX86TfnuZj P2GP+X/GigRe6+tFbGbfQf8D4mJDKAv2iybPidTtwZtcNfkq6h2jHKXBuk3Lkq9f /D/irk7JMcZRzRluDnE962LW3VJ+ShmYxI7ZXPX/Z0WbYRiHW8zfvzw9VA+V2fW7 LKHJwIiouF+ZMyKlXTYrvmJUpyEDjdI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:19:06 2025 by rpki-client