$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/632ed596-c745-3b4c-bcc9-794802c128a8.roa File: 632ed596-c745-3b4c-bcc9-794802c128a8.roa (raw, json) Hash identifier: RYISZZeYSMUYxDwBX6sWsx5xgjieqsMPDChdS5oUlTE= Subject key identifier: 32:86:AB:45:DE:CE:C3:5B:EE:CD:79:29:AB:AC:53:2D:B8:C1:08:E3 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584AEB5BCEAB0737E01F767FE480 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/632ed596-c745-3b4c-bcc9-794802c128a8.roa Signing time: Wed 20 Aug 2025 13:00:41 +0000 ROA not before: Wed 20 Aug 2025 13:00:41 +0000 ROA not after: Tue 18 Nov 2025 14:00:41 +0000 asID: 16433 IP address blocks: 167.224.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:5b:ce:ab:07:37:e0:1f:76:7f:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Aug 20 13:00:41 2025 GMT Not After : Nov 18 14:00:41 2025 GMT Subject: CN=6b4c809f-44da-417a-9c03-c2783a8f4935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:b3:5c:8d:a8:0f:0e:46:c3:3f:2b:66:7c: f7:30:3e:c3:56:ff:a4:88:33:94:c2:b1:b8:15:b7: 59:7d:fd:ea:09:6b:8a:7f:fe:2a:37:1c:e5:47:e9: 71:e4:8a:31:87:f7:3f:0b:00:bd:c9:fc:af:d3:2b: 38:d3:81:0f:78:a1:c7:f6:0c:1c:f2:54:8c:c0:70: c2:13:e6:b2:98:f1:97:9a:27:b8:a0:9a:58:cc:11: ef:86:a4:c3:8b:92:2f:41:2c:c6:f6:4b:a6:a5:2a: 51:92:c0:ce:0e:20:fa:52:80:88:4d:79:96:d5:ad: 53:d1:c5:a7:14:49:f0:9c:d0:39:91:f3:ff:99:92: 0f:d4:57:b5:95:3a:b9:ea:ca:08:70:c7:6a:e7:6f: 48:a1:f8:8e:96:4b:8c:71:24:9a:ab:c5:34:32:c8: a4:c3:78:c6:df:f7:60:93:c9:dd:64:f8:49:25:d2: db:43:3d:85:7c:7e:eb:37:e0:5d:e8:63:21:28:1f: f1:39:8d:9e:b6:7f:56:28:0c:a5:da:52:9c:f9:60: 00:e1:f0:eb:93:c1:b2:08:cc:f9:29:e4:bc:2f:07: 2c:d3:fc:5f:5a:c7:3a:ca:da:e8:24:da:68:7e:3e: 20:94:48:25:b0:ef:08:65:8e:60:86:24:d5:59:38: 0d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:86:AB:45:DE:CE:C3:5B:EE:CD:79:29:AB:AC:53:2D:B8:C1:08:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/632ed596-c745-3b4c-bcc9-794802c128a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 167.224.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:12:87:ca:57:63:54:b8:24:95:01:d4:85:1d:50:33:de:f9: 93:ea:17:47:8c:65:ec:53:6d:07:ca:e8:f6:f3:ee:15:84:8d: ce:6f:f4:8a:d6:52:a9:38:00:f1:af:0e:03:6a:1d:a3:3b:7d: 5b:f5:ba:23:a8:9e:cf:46:80:0b:e2:6d:be:22:24:3b:71:dc: 32:24:88:8a:3f:e6:6b:d9:e0:31:81:04:29:8e:42:02:88:d5: b3:66:34:19:69:d4:44:2d:c1:24:fc:69:28:7e:4f:5e:36:0e: 2b:9c:54:30:72:0d:48:dd:06:a9:c0:02:e6:a4:e9:9c:db:41: 18:83:c0:8c:fd:71:95:ae:c4:a3:8d:e7:e2:00:01:45:fa:0b: 7a:8d:50:c6:d2:ed:fc:37:74:ef:9e:bf:0b:eb:9f:ea:30:20: 12:5c:6b:92:e1:77:f3:d9:26:5f:19:9e:73:4e:cc:d7:83:36: 26:67:72:5a:ee:e6:4d:61:3c:40:54:e3:0e:b6:06:5d:a9:14: be:2c:8e:40:d5:a7:1e:0b:c3:8a:47:0c:d5:09:b6:3a:27:57: ad:de:8e:86:22:d5:73:8f:02:54:98:d7:bb:db:5d:d8:79:24: 6f:e7:00:78:b0:3c:9f:dd:42:d0:1a:9a:72:db:34:5f:4d:6f: 39:23:0d:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrW86rBzfgH3Z/5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDgyMDEzMDA0MVoXDTI1MTExODE0MDA0MVowLzEtMCsGA1UEAxMk NmI0YzgwOWYtNDRkYS00MTdhLTljMDMtYzI3ODNhOGY0OTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApamzXI2oDw5Gwz8rZnz3MD7DVv+kiDOUwrG4 FbdZff3qCWuKf/4qNxzlR+lx5Ioxh/c/CwC9yfyv0ys404EPeKHH9gwc8lSMwHDC E+aymPGXmie4oJpYzBHvhqTDi5IvQSzG9kumpSpRksDODiD6UoCITXmW1a1T0cWn FEnwnNA5kfP/mZIP1Fe1lTq56soIcMdq529IofiOlkuMcSSaq8U0Msikw3jG3/dg k8ndZPhJJdLbQz2FfH7rN+Bd6GMhKB/xOY2etn9WKAyl2lKc+WAA4fDrk8GyCMz5 KeS8Lwcs0/xfWsc6ytroJNpofj4glEglsO8IZY5ghiTVWTgNHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKGq0XezsNb7s15KausUy24wQjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNjMyZWQ1OTYtYzc0NS0z YjRjLWJjYzktNzk0ODAyYzEyOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp+A4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8Sh8pXY1S4JJUB1IUdUDPe+ZPqF0eMZexTbQfK6Pbz7hWEjc5v9IrW Uqk4APGvDgNqHaM7fVv1uiOons9GgAvibb4iJDtx3DIkiIo/5mvZ4DGBBCmOQgKI 1bNmNBlp1EQtwST8aSh+T142DiucVDByDUjdBqnAAuak6ZzbQRiDwIz9cZWuxKON 5+IAAUX6C3qNUMbS7fw3dO+evwvrn+owIBJca5Lhd/PZJl8ZnnNOzNeDNiZnclru 5k1hPEBU4w62Bl2pFL4sjkDVpx4Lw4pHDNUJtjonV63ejoYi1XOPAlSY17vbXdh5 JG/nAHiwPJ/dQtAamnLbNF9NbzkjDbw= -----END CERTIFICATE-----Generated at Wed Nov 5 04:38:52 2025 by rpki-client