$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa File: bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa (raw, json) Hash identifier: g1T+x2G9OkVU1lhz/58sQF8W5Tx0nlwqsfx9Xer98uY= Subject key identifier: 15:53:D1:26:59:74:06:7D:DA:FC:98:9E:76:12:9C:50:CC:FF:7F:DD Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Certificate serial: 010D0C9F4328584B92DCFABFD914DD712F7C33D8 Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 1299 IP address blocks: 204.15.220.0/22 maxlen: 24 208.86.120.0/21 maxlen: 24 2606:3840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:fa:bf:d9:14:dd:71:2f:7c:33:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=9b6830c0-a39f-4b79-b130-276283d2f28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:88:25:de:8b:ff:35:e4:8c:5a:fa:ad:8e:4b: 86:81:c9:1f:34:20:72:5e:2b:6c:61:e7:b1:2a:62: d1:5e:6c:59:35:13:30:56:9c:11:51:a6:d2:06:f3: a9:5e:3b:f8:df:a5:4c:7a:59:5a:ac:f1:fa:2d:63: 4e:86:6a:c7:62:a6:d5:88:91:3d:78:b1:ba:42:aa: 95:02:4e:59:2c:4d:49:88:0d:96:ba:eb:41:44:04: 8f:4a:ab:b9:cc:ad:f7:03:b1:b4:8d:ec:27:0e:ac: e1:62:ba:c6:eb:10:2e:80:12:79:8d:31:a8:dd:94: 77:a5:82:c4:93:57:b5:fb:96:9b:d7:58:5a:8c:94: 3b:b0:31:c9:bc:84:8b:5c:25:3b:af:8e:f8:80:aa: 7a:b6:32:6b:89:63:52:79:19:dd:da:25:c2:8b:d0: 61:b0:1a:80:b3:b4:eb:64:db:9a:db:ed:4b:ea:21: f0:88:09:ca:3e:3f:ec:be:7c:39:e6:6f:3e:14:4b: a1:7d:33:e1:60:03:e0:a8:72:4d:8d:6c:19:a7:76: 57:68:0d:ce:2f:a9:7f:cf:90:95:18:b4:b9:f4:1f: 86:9a:92:67:74:ad:6e:08:9e:01:aa:b2:1d:f0:c3: 1a:b0:e9:d3:e3:48:16:fe:1d:d4:f2:4e:5f:cf:f2: 74:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:53:D1:26:59:74:06:7D:DA:FC:98:9E:76:12:9C:50:CC:FF:7F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl X509v3 Authority Key Identifier: keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer sbgp-ipAddrBlock: critical IPv4: 204.15.220.0/22 208.86.120.0/21 IPv6: 2606:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e7:84:69:d5:60:0b:5a:ce:4a:e3:d1:0c:cf:9a:53:ef:f1: 0c:4b:ff:e6:47:35:13:02:87:50:86:eb:1e:5e:6a:36:da:f7: 03:ce:d0:d9:fa:5e:6f:a0:1f:e5:e5:9a:2a:ad:9e:ae:a7:93: 9d:95:f0:3e:b0:b6:2e:b0:ee:89:2f:75:67:41:fa:82:dc:01: 92:5d:df:76:32:1e:89:cf:4c:39:a8:8f:2b:e9:bf:9d:e0:11: 9f:f3:95:78:c5:f9:a0:40:52:8f:cc:36:aa:eb:83:28:d4:e9: 53:35:4d:43:55:b5:b5:29:d9:ad:6d:6b:c2:b6:22:17:9a:59: 39:6c:b2:d7:b6:b9:d7:21:32:12:ac:64:6c:1b:0b:a0:cb:18: f8:7b:4c:67:cd:59:7f:06:19:8b:7e:4c:bf:24:dc:9d:89:82: 23:83:88:76:15:c4:9d:64:08:b4:0e:81:cb:da:2a:f3:0c:4e: fa:5c:c4:01:c8:c6:59:1c:21:be:f5:51:9b:65:41:5b:65:62: 60:54:aa:68:0e:35:21:69:e8:e8:9c:30:33:ee:50:07:98:05: 34:de:a2:32:68:2a:e4:b7:86:b4:a9:ae:11:ac:57:60:f0:f5: b7:9e:33:27:67:45:b1:5b:14:da:fe:99:c4:86:ac:aa:ee:1e: 90:65:07:41 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEuS3Pq/2RTdcS98M9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz ZjcxMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk OWI2ODMwYzAtYTM5Zi00Yjc5LWIxMzAtMjc2MjgzZDJmMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlogl3ov/NeSMWvqtjkuGgckfNCByXitsYeex KmLRXmxZNRMwVpwRUabSBvOpXjv436VMellarPH6LWNOhmrHYqbViJE9eLG6QqqV Ak5ZLE1JiA2WuutBRASPSqu5zK33A7G0jewnDqzhYrrG6xAugBJ5jTGo3ZR3pYLE k1e1+5ab11hajJQ7sDHJvISLXCU7r474gKp6tjJriWNSeRnd2iXCi9BhsBqAs7Tr ZNua2+1L6iHwiAnKPj/svnw55m8+FEuhfTPhYAPgqHJNjWwZp3ZXaA3OL6l/z5CV GLS59B+GmpJndK1uCJ4BqrId8MMasOnT40gW/h3U8k5fz/J0QwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFBVT0SZZdAZ92vyYnnYSnFDM/3/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5 NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvYmQ4OWRhOGItYmQzMi0z M2EyLTgwOTMtMWI1ZjQ0YmM3YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD 0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIDnhGnVYAtazkrj0QzPmlPv8QxL /+ZHNRMCh1CG6x5eajba9wPO0Nn6Xm+gH+Xlmiqtnq6nk52V8D6wti6w7okvdWdB +oLcAZJd33YyHonPTDmojyvpv53gEZ/zlXjF+aBAUo/MNqrrgyjU6VM1TUNVtbUp 2a1ta8K2IheaWTlsste2udchMhKsZGwbC6DLGPh7TGfNWX8GGYt+TL8k3J2JgiOD iHYVxJ1kCLQOgcvaKvMMTvpcxAHIxlkcIb71UZtlQVtlYmBUqmgONSFp6OicMDPu UAeYBTTeojJoKuS3hrSprhGsV2Dw9beeMydnRbFbFNr+mcSGrKruHpBlB0E= -----END CERTIFICATE-----Generated at Wed Nov 5 00:44:59 2025 by rpki-client