$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/9d06dada-6d76-32ae-8388-ee9247df3591.roa File: 9d06dada-6d76-32ae-8388-ee9247df3591.roa (raw, json) Hash identifier: DnlZx5IbXqDxEVjYwJGOvXFzjVhb+nyzYGpJeXgh2fY= Subject key identifier: A3:1F:9C:DC:42:F4:27:00:D8:FB:92:95:D9:8C:33:51:C5:58:E3:10 Certificate issuer: /CN=1f8437cb-088c-4f24-b728-2e13ad3df4df Certificate serial: 010D0C9F4328584B7C8764040D96CFC7AEBFE4A0 Authority key identifier: 5E:83:41:68:0C:95:84:9A:82:A6:5C:83:1B:1A:D9:F2:C0:60:85:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/9d06dada-6d76-32ae-8388-ee9247df3591.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 40008 IP address blocks: 206.168.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/1f8437cb-088c-4f24-b728-2e13ad3df4df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/1f8437cb-088c-4f24-b728-2e13ad3df4df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:64:04:0d:96:cf:c7:ae:bf:e4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f8437cb-088c-4f24-b728-2e13ad3df4df Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=596558dc-8e12-42d6-bc66-e9264ff2c098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1b:78:b5:f1:d0:fe:1e:cc:3f:81:ce:8d:75: 3b:80:d5:17:cd:d3:61:ce:64:f5:f7:c0:50:ce:b3: 06:7d:f2:67:cd:7d:fc:fa:a0:99:97:36:c3:4e:db: 02:1a:9f:3e:26:8b:20:f7:eb:9c:94:5c:69:b5:32: c9:60:78:f3:c0:40:1b:2e:d6:1d:15:59:d7:db:d3: 9a:18:a3:ff:c9:c7:2f:5f:27:27:38:4f:d2:85:85: 0d:9f:3a:e4:f3:f5:59:6e:05:1a:1c:8d:88:13:82: 8a:96:64:a7:2b:f4:69:a0:ed:66:bd:1c:71:48:af: 60:be:38:73:5d:10:c3:f5:cb:0a:5b:a8:22:ec:1d: e3:26:df:17:72:bd:bf:7a:88:c7:3f:16:ee:94:22: ad:52:49:9a:76:ad:39:06:bf:b1:33:f0:aa:a2:7e: 18:8e:a4:b2:20:4a:21:6a:ed:dd:0a:4b:3c:c4:b0: 40:c8:2d:dd:a1:5f:5f:64:5a:c6:29:11:51:44:f6: ad:22:af:24:33:74:bd:35:4d:f1:33:bd:43:31:aa: 3e:c4:a6:ea:70:5a:aa:57:13:24:73:7e:ee:0b:f4: c9:0d:46:61:11:0a:cb:5b:66:35:8f:c0:07:de:9a: 3b:92:ea:fb:44:32:cb:74:b2:fb:00:78:f6:76:e5: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1F:9C:DC:42:F4:27:00:D8:FB:92:95:D9:8C:33:51:C5:58:E3:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/9d06dada-6d76-32ae-8388-ee9247df3591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/1f8437cb-088c-4f24-b728-2e13ad3df4df.crl X509v3 Authority Key Identifier: keyid:5E:83:41:68:0C:95:84:9A:82:A6:5C:83:1B:1A:D9:F2:C0:60:85:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df.cer sbgp-ipAddrBlock: critical IPv4: 206.168.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:04:58:e6:37:75:2d:10:8d:f4:a8:9b:16:88:ac:e6:fe:54: 1c:4f:d5:f2:2f:51:85:37:09:ca:84:63:24:a4:93:b7:8c:29: aa:9d:dd:6c:a3:2b:23:64:09:ef:ae:02:59:60:90:9b:cb:c2: 2d:61:f7:19:c0:d1:81:ab:4a:21:bc:68:72:9d:6a:d9:e9:8c: 3a:af:38:e9:5b:cf:73:d7:8b:bd:dc:69:99:09:e3:61:3c:4c: ca:fd:7e:73:aa:d9:dd:b1:ac:c4:d3:65:ef:b6:c9:24:05:ea: a4:18:f2:2f:08:9f:d8:96:e7:c2:17:a0:43:75:db:e9:07:ef: 27:24:19:e2:50:64:b1:1a:61:cb:46:c3:07:37:d6:16:e9:99: a5:1b:38:9d:8f:c6:45:c4:8a:ed:b9:2d:f1:fa:85:72:6f:3e: f9:f2:07:a3:98:97:1f:4c:8a:6a:1d:ae:51:6d:a7:75:46:fe: 73:2b:40:6d:18:5c:c7:ff:71:d1:03:32:35:0e:8c:97:09:0d: 82:15:c5:86:78:fb:43:08:19:26:8c:07:44:82:8d:85:28:3a: 0b:b4:90:6e:05:91:87:95:a9:12:e8:4e:10:28:5a:67:85:6d: 97:d5:ca:e5:11:ce:5d:32:b6:57:18:c9:3a:82:a2:6c:93:47: 04:9d:10:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2QEDZbPx66/5KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY4NDM3Y2ItMDg4Yy00ZjI0LWI3MjgtMmUxM2FkM2Rm NGRmMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk NTk2NTU4ZGMtOGUxMi00MmQ2LWJjNjYtZTkyNjRmZjJjMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRt4tfHQ/h7MP4HOjXU7gNUXzdNhzmT198BQ zrMGffJnzX38+qCZlzbDTtsCGp8+Josg9+uclFxptTLJYHjzwEAbLtYdFVnX29Oa GKP/yccvXycnOE/ShYUNnzrk8/VZbgUaHI2IE4KKlmSnK/RpoO1mvRxxSK9gvjhz XRDD9csKW6gi7B3jJt8Xcr2/eojHPxbulCKtUkmadq05Br+xM/Cqon4YjqSyIEoh au3dCks8xLBAyC3doV9fZFrGKRFRRPatIq8kM3S9NU3xM71DMao+xKbqcFqqVxMk c37uC/TJDUZhEQrLW2Y1j8AH3po7kur7RDLLdLL7AHj2duXuzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMfnNxC9CcA2PuSldmMM1HFWOMQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjg0 MzdjYi0wODhjLTRmMjQtYjcyOC0yZTEzYWQzZGY0ZGYvOWQwNmRhZGEtNmQ3Ni0z MmFlLTgzODgtZWU5MjQ3ZGYzNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY4NDM3Y2ItMDg4Yy00ZjI0LWI3 MjgtMmUxM2FkM2RmNGRmLzFmODQzN2NiLTA4OGMtNGYyNC1iNzI4LTJlMTNhZDNk ZjRkZi5jcmwwHwYDVR0jBBgwFoAUXoNBaAyVhJqCplyDGxrZ8sBghckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjg0MzdjYi0wODhjLTRmMjQtYjcyOC0yZTEz YWQzZGY0ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqh0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUEWOY3dS0QjfSomxaIrOb+VBxP1fIvUYU3CcqEYySkk7eMKaqd3Wyj KyNkCe+uAllgkJvLwi1h9xnA0YGrSiG8aHKdatnpjDqvOOlbz3PXi73caZkJ42E8 TMr9fnOq2d2xrMTTZe+2ySQF6qQY8i8In9iW58IXoEN12+kH7yckGeJQZLEaYctG wwc31hbpmaUbOJ2PxkXEiu25LfH6hXJvPvnyB6OYlx9MimodrlFtp3VG/nMrQG0Y XMf/cdEDMjUOjJcJDYIVxYZ4+0MIGSaMB0SCjYUoOgu0kG4FkYeVqRLoThAoWmeF bZfVyuURzl0ytlcYyTqComyTRwSdEPs= -----END CERTIFICATE-----Generated at Wed Nov 5 19:27:58 2025 by rpki-client