$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa File: d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa (raw, json) Hash identifier: /kKBeqwkDrkhdKcbZiUiaXddbtsB9KtRaAI6cqdNaxc= Subject key identifier: CF:BE:0F:C0:99:3B:A6:F6:1A:88:7A:DF:4A:61:9B:20:1C:1C:BF:D3 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D179B3826B09BEE7EA5C700 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa Signing time: Thu 18 Sep 2025 19:39:34 +0000 ROA not before: Thu 18 Sep 2025 19:39:34 +0000 ROA not after: Wed 17 Dec 2025 20:39:34 +0000 asID: 11377 IP address blocks: 216.20.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:9b:38:26:b0:9b:ee:7e:a5:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:34 2025 GMT Not After : Dec 17 20:39:34 2025 GMT Subject: CN=8bbbcc16-8441-4553-8702-03722bd76da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:70:dd:24:f0:b9:0a:ae:56:19:14:34:cc:de: 8b:08:da:08:31:c8:4e:2a:f3:e4:03:6c:27:e2:7e: ec:4c:ff:fb:80:95:a8:b4:c1:5b:48:dc:a3:4b:42: 11:ff:7e:d9:5b:d6:d8:dc:63:0c:de:81:b4:89:6b: e0:a3:bf:48:69:f8:3b:37:7c:2d:7d:8c:f7:7a:8f: eb:ae:a8:e5:b5:7a:bb:55:dd:f0:f1:c3:5e:9f:e9: 5e:e9:0f:8b:97:ed:b8:17:80:69:a1:25:3e:9d:3d: b8:07:2f:c0:a2:c2:ab:48:e9:6d:e9:c0:85:d2:e9: 7d:ac:4a:e0:72:a7:bf:b4:12:12:39:1a:7c:5c:df: c8:04:68:2f:38:12:23:a3:75:28:86:64:09:5e:1f: ff:2d:97:71:6c:d6:94:7c:6e:10:ad:c0:b2:04:25: d5:f3:86:5b:47:4b:ed:e3:a8:89:11:d0:c0:02:cb: c4:5b:37:8f:dd:c6:ce:89:bd:96:2f:a8:07:0d:f1: d8:a5:66:00:d6:79:cf:05:9f:eb:da:77:f1:8e:7e: c0:f3:61:24:4f:91:6e:98:fa:88:9a:c9:f0:9a:c5: b9:03:48:d8:c1:16:80:7d:12:bf:f7:cf:bf:f1:01: 13:b7:38:e5:9d:78:64:d9:f7:cf:59:ba:97:74:39: 54:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BE:0F:C0:99:3B:A6:F6:1A:88:7A:DF:4A:61:9B:20:1C:1C:BF:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/d80ef02b-cec6-37d9-b0c8-a74861f7e1d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ff:1a:31:13:72:13:30:53:bd:b6:35:b8:fa:8e:35:38:b5: 25:de:20:5f:7f:1f:ad:9a:1e:5e:44:cc:12:91:26:d9:b1:21: f0:4d:d8:2e:4d:5a:a2:e4:3f:18:23:4a:b0:51:ee:2d:65:e5: d8:f1:4b:4f:cc:bc:dd:f5:c3:33:cb:2e:9b:bb:c8:0e:0b:c9: e2:b2:30:4b:11:b1:ca:e4:05:b8:d7:f0:89:b3:d8:d9:f5:78: 71:43:06:04:c8:f5:84:e7:58:4f:d7:a9:61:0c:d1:f3:14:61: b3:a7:e2:6c:61:29:ab:eb:b8:bd:56:da:12:9d:2e:df:3b:99: d5:46:2c:01:bc:88:5f:17:63:47:35:b8:e1:78:89:7e:01:f6: 47:88:b1:aa:28:02:7f:94:1e:97:8b:9e:ed:ae:ad:8e:fe:6d: a9:bd:9c:26:4a:3a:5a:d2:a4:18:09:2c:0d:44:d9:3c:d5:87: 22:e1:21:c8:bc:23:fb:ec:dd:1f:77:b5:2e:eb:41:37:01:62: 64:5a:76:cd:e9:aa:40:e0:4f:20:2c:18:01:95:27:01:d9:c9: f0:fa:4b:a3:f7:a5:54:17:64:b4:86:e8:13:19:fb:58:5b:86: 7f:56:ba:e2:c9:d8:ae:a0:7e:ef:cc:bf:77:4f:14:a9:e9:ec: 03:17:e5:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F5s4JrCb7n6lxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5MzkzNFoXDTI1MTIxNzIwMzkzNFowLzEtMCsGA1UEAxMk OGJiYmNjMTYtODQ0MS00NTUzLTg3MDItMDM3MjJiZDc2ZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHDdJPC5Cq5WGRQ0zN6LCNoIMchOKvPkA2wn 4n7sTP/7gJWotMFbSNyjS0IR/37ZW9bY3GMM3oG0iWvgo79Iafg7N3wtfYz3eo/r rqjltXq7Vd3w8cNen+le6Q+Ll+24F4BpoSU+nT24By/AosKrSOlt6cCF0ul9rErg cqe/tBISORp8XN/IBGgvOBIjo3UohmQJXh//LZdxbNaUfG4QrcCyBCXV84ZbR0vt 46iJEdDAAsvEWzeP3cbOib2WL6gHDfHYpWYA1nnPBZ/r2nfxjn7A82EkT5FumPqI msnwmsW5A0jYwRaAfRK/98+/8QETtzjlnXhk2ffPWbqXdDlU/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM++D8CZO6b2Goh630phmyAcHL/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvZDgwZWYwMmItY2VjNi0z N2Q5LWIwYzgtYTc0ODYxZjdlMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn/GjETchMwU722Nbj6jjU4tSXeIF9/H62aHl5EzBKRJtmxIfBN2C5N WqLkPxgjSrBR7i1l5djxS0/MvN31wzPLLpu7yA4LyeKyMEsRscrkBbjX8Imz2Nn1 eHFDBgTI9YTnWE/XqWEM0fMUYbOn4mxhKavruL1W2hKdLt87mdVGLAG8iF8XY0c1 uOF4iX4B9keIsaooAn+UHpeLnu2urY7+bam9nCZKOlrSpBgJLA1E2TzVhyLhIci8 I/vs3R93tS7rQTcBYmRads3pqkDgTyAsGAGVJwHZyfD6S6P3pVQXZLSG6BMZ+1hb hn9WuuLJ2K6gfu/Mv3dPFKnp7AMX5ZU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:41:06 2025 by rpki-client