$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5e09b4be-660c-32d7-905a-93080ed41e33.roa File: 5e09b4be-660c-32d7-905a-93080ed41e33.roa (raw, json) Hash identifier: 3Qc7VFMvKZo87SKBKPWaRs59sRgZVs9WY7VxLWvecKA= Subject key identifier: 5A:F1:90:CB:0B:4C:82:68:34:3B:5F:DD:3B:CF:76:82:69:7D:90:34 Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Certificate serial: 010D0C9F4328584BA39D08C4DE45F32889E724A0 Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5e09b4be-660c-32d7-905a-93080ed41e33.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 1273 IP address blocks: 206.128.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:08:c4:de:45:f3:28:89:e7:24:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=21e59ca3-64df-4018-ad0d-316a2acc6b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9e:b7:d3:ce:41:9c:a0:58:ca:fa:e1:93:fb: 59:6d:25:51:5d:bc:82:3e:12:77:bd:a0:05:9e:2f: 9b:9e:00:2a:d5:2e:5b:df:30:3c:af:5d:d4:47:9b: 22:93:bf:d6:3d:52:4b:54:a9:45:33:14:65:a1:50: 49:8d:fd:a3:a8:41:ed:d8:3a:6d:00:4b:21:c9:f0: 0a:8b:c6:c7:93:6e:c7:b8:05:33:6c:cb:8e:b5:44: 45:c8:eb:34:0d:d2:77:1f:65:10:52:7b:8a:4c:f1: ff:05:39:60:35:6d:a1:7b:ad:6d:f7:59:e1:90:7b: c9:b9:7c:5e:2c:5f:09:6f:cc:dc:e7:71:54:4c:e3: f8:7f:44:5b:33:af:ef:a8:65:a6:eb:94:82:2c:65: 36:c5:48:75:e7:ff:5e:3b:75:cc:bc:63:4e:67:f8: 0c:47:d1:f4:b8:0c:61:95:3d:d3:e6:11:59:40:66: 1e:fd:18:67:ca:59:e6:9b:0a:e4:af:38:e0:e3:55: 37:45:ba:17:a0:87:96:8c:1d:52:1f:0e:af:41:b4: 00:03:8f:95:27:d2:a4:92:90:2e:fb:f0:2f:58:3a: 35:b5:25:71:22:a4:2e:e6:bb:f8:d6:59:88:1c:3e: 32:72:a9:21:12:db:cd:de:26:d1:c4:86:0e:f5:43: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F1:90:CB:0B:4C:82:68:34:3B:5F:DD:3B:CF:76:82:69:7D:90:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5e09b4be-660c-32d7-905a-93080ed41e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl X509v3 Authority Key Identifier: keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer sbgp-ipAddrBlock: critical IPv4: 206.128.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:6c:19:2c:b7:bd:d4:0b:c3:bd:07:71:55:80:62:7e:71:f0: e5:34:4b:0d:62:13:6e:cd:67:e7:50:99:44:ac:24:b9:82:fe: f8:1b:91:f9:c1:ad:52:95:35:73:f5:2a:56:4e:03:5c:0c:ef: 70:d9:33:18:2f:16:d3:b1:82:0f:0d:0b:fe:de:22:97:26:62: ec:2e:a4:71:25:fa:ff:c1:38:b5:82:3c:9e:fd:a5:0e:45:69: 58:a0:32:b8:d6:de:36:97:c9:47:38:2c:2e:8e:8e:89:cb:42: 0e:c8:9d:b8:46:c8:bb:37:cc:2e:c5:be:08:89:53:58:b6:f1: bd:7c:55:39:0b:f9:0f:e1:2b:75:9d:74:45:38:df:67:02:8e: 14:90:5d:80:f5:b4:bc:28:f9:f3:d9:2e:63:26:e9:cf:c8:ad: 50:0e:38:b6:6f:02:ba:b1:37:6a:e2:d9:c5:15:73:f5:07:91: e8:7c:9d:7a:78:8a:63:81:c2:03:1c:78:56:3c:8f:c5:42:55: e4:74:21:20:75:02:39:9f:57:08:88:96:c0:72:3f:e6:21:0e: 93:f3:12:5b:5f:05:3a:6c:27:ae:d0:73:f9:7c:6d:99:ad:2e: ba:b4:da:8d:dd:13:6a:ee:99:74:90:73:24:20:17:fe:ee:16: 94:5a:2d:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQjE3kXzKInnJKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4 NTgyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MjFlNTljYTMtNjRkZi00MDE4LWFkMGQtMzE2YTJhY2M2YjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ63085BnKBYyvrhk/tZbSVRXbyCPhJ3vaAF ni+bngAq1S5b3zA8r13UR5sik7/WPVJLVKlFMxRloVBJjf2jqEHt2DptAEshyfAK i8bHk27HuAUzbMuOtURFyOs0DdJ3H2UQUnuKTPH/BTlgNW2he61t91nhkHvJuXxe LF8Jb8zc53FUTOP4f0RbM6/vqGWm65SCLGU2xUh15/9eO3XMvGNOZ/gMR9H0uAxh lT3T5hFZQGYe/Rhnylnmmwrkrzjg41U3RboXoIeWjB1SHw6vQbQAA4+VJ9KkkpAu +/AvWDo1tSVxIqQu5rv41lmIHD4ycqkhEtvN3ibRxIYO9UNqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrxkMsLTIJoNDtf3TvPdoJpfZA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvNWUwOWI0YmUtNjYwYy0z MmQ3LTkwNWEtOTMwODBlZDQxZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3 NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzoDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFsGSy3vdQLw70HcVWAYn5x8OU0Sw1iE27NZ+dQmUSsJLmC/vgbkfnB rVKVNXP1KlZOA1wM73DZMxgvFtOxgg8NC/7eIpcmYuwupHEl+v/BOLWCPJ79pQ5F aVigMrjW3jaXyUc4LC6OjonLQg7InbhGyLs3zC7FvgiJU1i28b18VTkL+Q/hK3Wd dEU432cCjhSQXYD1tLwo+fPZLmMm6c/IrVAOOLZvArqxN2ri2cUVc/UHkeh8nXp4 imOBwgMceFY8j8VCVeR0ISB1AjmfVwiIlsByP+YhDpPzEltfBTpsJ67Qc/l8bZmt Lrq02o3dE2rumXSQcyQgF/7uFpRaLfQ= -----END CERTIFICATE-----Generated at Wed Nov 5 13:10:15 2025 by rpki-client