$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/daf81975-b5e4-386a-ad75-9c616d2d967a.roa File: daf81975-b5e4-386a-ad75-9c616d2d967a.roa (raw, json) Hash identifier: nhLAx/RuWCRH9unRTKNyq6M7VE4N06jSwc1pDStAydk= Subject key identifier: 2A:20:13:C9:01:89:79:2C:98:88:D4:69:A8:27:47:5E:9C:59:41:1B Certificate issuer: /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Certificate serial: 010D0C9F4328584B891775FB811076B8EC387000 Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/daf81975-b5e4-386a-ad75-9c616d2d967a.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 399646 IP address blocks: 209.135.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:75:fb:81:10:76:b8:ec:38:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=5aad2091-ae74-4d84-9022-16b9808f8c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:0f:4b:f8:47:40:9f:4d:c9:96:68:bf:4c: 93:47:8b:d1:fd:7f:5b:12:ad:be:46:ed:21:5e:5e: 44:96:14:34:56:82:25:7c:62:47:92:2e:18:c8:59: 02:a2:11:81:40:c5:3f:95:e3:86:37:5b:24:fb:08: e7:13:1c:04:7e:83:b7:4b:d7:e3:81:5c:71:6d:2d: dc:dc:28:89:cb:c7:66:a3:18:f9:05:9e:88:37:7a: 4d:58:ea:60:dd:33:28:06:59:dd:44:61:0c:89:eb: 15:a5:07:86:79:1b:2a:9f:11:d4:a3:4b:35:66:de: 73:e5:37:e4:f5:8f:20:41:b7:fd:5c:b8:14:53:42: ea:27:f2:d0:2b:e1:6a:c0:7b:b6:98:90:e5:75:a6: 96:cf:e2:15:b8:47:d6:e9:69:c4:d1:cd:e9:05:60: 8e:ac:d5:4a:d7:50:fb:da:ce:26:7b:29:3f:82:77: d0:66:24:81:a2:79:66:e2:9b:a9:74:f5:05:47:9b: fb:bc:b3:96:22:55:af:70:e9:8e:e0:97:f0:78:fb: bc:6a:a9:ea:3f:ee:b9:99:42:1c:6c:bf:86:96:87: 36:e0:41:c9:45:6e:6e:2a:f9:3a:dc:b6:e4:e3:ed: a5:32:04:41:12:83:ca:5b:aa:3c:63:d1:11:86:13: 13:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:20:13:C9:01:89:79:2C:98:88:D4:69:A8:27:47:5E:9C:59:41:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/daf81975-b5e4-386a-ad75-9c616d2d967a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl X509v3 Authority Key Identifier: keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer sbgp-ipAddrBlock: critical IPv4: 209.135.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:54:22:2c:43:3c:ed:ba:5b:cd:ed:b4:35:a3:c6:87:7c:35: 56:b4:7b:fa:ce:24:61:60:3c:b9:b9:e4:a8:64:58:99:56:a9: b8:e5:eb:21:c5:8e:b0:bb:29:8c:d8:79:4a:98:d6:ba:33:0e: 16:cf:5e:72:96:2e:cf:1d:53:be:95:cd:cd:24:60:ad:14:1f: 68:a4:6c:7f:66:99:5d:e0:7f:06:e8:07:70:c9:39:16:e0:3b: c9:bd:84:56:6d:b8:ce:f6:d5:e1:ba:f5:1f:4f:63:44:12:48: 27:71:d9:7f:91:e6:00:ae:cc:c6:9f:0e:32:b9:8c:b4:a3:28: 40:6c:26:dc:cf:3b:9a:c5:d9:78:5b:ed:d1:42:6b:37:7b:da: 8e:14:bb:3d:a1:4a:6e:30:6f:84:80:7a:f0:9a:db:9a:19:c5: 9a:28:0e:7c:ae:5c:e4:0a:c5:77:67:8d:39:01:cb:12:ff:9d: da:d5:58:45:ad:76:4e:75:bf:2f:cb:12:86:fd:d2:d2:59:da: 8f:2a:45:e4:a1:a2:07:f0:d6:74:4f:6e:3a:59:61:a4:a5:8e: 79:27:79:f6:83:99:81:fb:6a:81:aa:66:1b:f3:c0:cc:1a:2d: 53:fd:84:ab:27:26:5c:12:f9:e8:7e:e5:3e:ce:09:58:be:f1: 9a:49:6a:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3X7gRB2uOw4cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2MThjYzgtOTIzMi00ZGE4LThiZjUtZGNjMDM4NmUx M2M0MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NWFhZDIwOTEtYWU3NC00ZDg0LTkwMjItMTZiOTgwOGY4YzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYgPS/hHQJ9NyZZov0yTR4vR/X9bEq2+Ru0h Xl5ElhQ0VoIlfGJHki4YyFkCohGBQMU/leOGN1sk+wjnExwEfoO3S9fjgVxxbS3c 3CiJy8dmoxj5BZ6IN3pNWOpg3TMoBlndRGEMiesVpQeGeRsqnxHUo0s1Zt5z5Tfk 9Y8gQbf9XLgUU0LqJ/LQK+FqwHu2mJDldaaWz+IVuEfW6WnE0c3pBWCOrNVK11D7 2s4meyk/gnfQZiSBonlm4pupdPUFR5v7vLOWIlWvcOmO4JfwePu8aqnqP+65mUIc bL+Gloc24EHJRW5uKvk63Lbk4+2lMgRBEoPKW6o8Y9ERhhMTTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCogE8kBiXksmIjUaagnR16cWUEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYx OGNjOC05MjMyLTRkYTgtOGJmNS1kY2MwMzg2ZTEzYzQvZGFmODE5NzUtYjVlNC0z ODZhLWFkNzUtOWM2MTZkMmQ5NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQ2MThjYzgtOTIzMi00ZGE4LThi ZjUtZGNjMDM4NmUxM2M0LzE0NjE4Y2M4LTkyMzItNGRhOC04YmY1LWRjYzAzODZl MTNjNC5jcmwwHwYDVR0jBBgwFoAUliL1hIIsuSIXyfgcHVDhpAiPYyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYxOGNjOC05MjMyLTRkYTgtOGJmNS1kY2Mw Mzg2ZTEzYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0YeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVUIixDPO26W83ttDWjxod8NVa0e/rOJGFgPLm55KhkWJlWqbjl6yHF jrC7KYzYeUqY1rozDhbPXnKWLs8dU76Vzc0kYK0UH2ikbH9mmV3gfwboB3DJORbg O8m9hFZtuM721eG69R9PY0QSSCdx2X+R5gCuzMafDjK5jLSjKEBsJtzPO5rF2Xhb 7dFCazd72o4Uuz2hSm4wb4SAevCa25oZxZooDnyuXOQKxXdnjTkByxL/ndrVWEWt dk51vy/LEob90tJZ2o8qReShogfw1nRPbjpZYaSljnknefaDmYH7aoGqZhvzwMwa LVP9hKsnJlwS+eh+5T7OCVi+8ZpJagQ= -----END CERTIFICATE-----Generated at Wed Nov 5 01:19:58 2025 by rpki-client