$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/20cae094-9392-3adc-8e5e-50d8acca91d7.roa File: 20cae094-9392-3adc-8e5e-50d8acca91d7.roa (raw, json) Hash identifier: C/5ifFkpWL6H/BDWD/Yz1KgszpnQGOE+0ydkOLJ5LV0= Subject key identifier: B9:2C:C2:3E:C4:F1:34:21:8C:E0:85:40:AB:62:20:55:F6:A7:B8:8F Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584B86737413CACA35172D7ED080 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/20cae094-9392-3adc-8e5e-50d8acca91d7.roa Signing time: Wed 15 Oct 2025 02:18:39 +0000 ROA not before: Wed 15 Oct 2025 02:18:39 +0000 ROA not after: Tue 13 Jan 2026 03:18:39 +0000 asID: 63023 IP address blocks: 216.106.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:73:74:13:ca:ca:35:17:2d:7e:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 15 02:18:39 2025 GMT Not After : Jan 13 03:18:39 2026 GMT Subject: CN=71ac5024-4ac0-4fe3-ae91-4e014147e3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:65:67:04:76:14:08:d4:c8:e8:eb:5e:05:cf: ff:9a:99:5e:16:a9:4b:87:26:22:06:77:f0:ba:bb: a0:63:30:fb:0a:4b:ec:28:f0:f6:32:6a:a7:f5:f5: 11:b7:8e:e4:50:18:78:9e:67:ec:fc:8b:83:61:5b: 2c:9c:6a:11:cd:79:4b:d6:74:05:bb:ce:5e:d0:8c: f9:78:ac:80:65:fa:c8:4a:47:48:f0:4e:1d:64:d9: 9f:06:1a:19:ad:7d:25:1b:7d:f6:0a:c5:bd:5a:8d: ad:a3:12:96:32:83:d7:31:de:70:17:63:59:26:70: 1b:82:e6:cb:be:36:51:2d:7e:1d:0d:1e:4d:30:7d: 4b:bb:95:1d:91:37:63:75:50:08:f3:e9:30:dc:95: bf:5c:60:75:d7:a1:ca:4d:be:f0:83:fd:ea:26:48: 52:31:7d:87:bd:d6:00:34:d4:f2:8f:9c:5c:3e:b0: 70:15:f0:d5:b4:72:d5:08:c1:be:07:53:e7:01:db: a3:dc:96:df:d5:2b:0f:bc:5a:2e:fb:03:d6:ea:8d: e2:68:17:2c:c5:d8:38:25:96:3d:25:b4:17:81:90: 6b:ac:d5:ca:db:67:63:03:6e:74:ba:9d:6e:ae:35: 03:c9:0e:3f:3c:74:f4:bb:64:d7:86:2c:9b:44:ce: 10:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2C:C2:3E:C4:F1:34:21:8C:E0:85:40:AB:62:20:55:F6:A7:B8:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/20cae094-9392-3adc-8e5e-50d8acca91d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.106.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ec:69:3e:4e:bf:b7:1f:4a:34:46:20:f3:8e:3e:a9:9e:64: 7f:83:85:bb:6b:be:7e:9d:d1:43:e5:f4:73:36:d8:c8:22:d8: 20:ac:7d:1a:70:f5:eb:e6:8f:99:62:28:60:6d:43:fc:99:1f: ff:7b:86:4d:bb:e4:b8:05:c0:b0:84:47:d0:e0:37:cd:62:de: 2a:79:4e:9e:14:27:6d:07:ac:87:b2:69:19:34:19:55:b3:c1: 8e:65:21:36:bf:7f:ba:c9:6f:3c:ae:1c:7e:67:5a:f1:75:24: 10:0d:f3:e9:d4:ab:84:46:50:f3:58:a5:b8:e5:17:ee:96:15: eb:3e:9b:74:36:79:72:fa:de:96:97:c1:a6:f5:b8:a1:80:9a: 77:51:97:50:a1:41:ff:63:da:22:42:0b:4b:a0:69:d4:79:fd: cd:8e:b7:60:2a:05:72:d6:22:66:b3:b4:df:01:71:d1:f8:61: 5d:1f:1d:32:0f:5d:c2:5a:3e:fc:11:72:a6:a5:69:c6:5a:b8: 82:f5:fc:65:bd:d8:e4:3c:f1:07:d7:9d:a0:60:3c:55:c8:b8: 84:ab:c4:b3:02:23:be:fc:3b:c8:20:a8:5b:3e:77:21:51:0c: 62:11:81:8f:d7:15:7f:6f:ad:b9:d1:c2:8f:80:10:95:8a:a3: 56:01:8b:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGc3QTyso1Fy1+0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI1MTAxNTAyMTgzOVoXDTI2MDExMzAzMTgzOVowLzEtMCsGA1UEAxMk NzFhYzUwMjQtNGFjMC00ZmUzLWFlOTEtNGUwMTQxNDdlM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGVnBHYUCNTI6OteBc//mpleFqlLhyYiBnfw urugYzD7CkvsKPD2Mmqn9fURt47kUBh4nmfs/IuDYVssnGoRzXlL1nQFu85e0Iz5 eKyAZfrISkdI8E4dZNmfBhoZrX0lG332CsW9Wo2toxKWMoPXMd5wF2NZJnAbgubL vjZRLX4dDR5NMH1Lu5UdkTdjdVAI8+kw3JW/XGB116HKTb7wg/3qJkhSMX2HvdYA NNTyj5xcPrBwFfDVtHLVCMG+B1PnAduj3Jbf1SsPvFou+wPW6o3iaBcsxdg4JZY9 JbQXgZBrrNXK22djA250up1urjUDyQ4/PHT0u2TXhiybRM4Q6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkswj7E8TQhjOCFQKtiIFX2p7iPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMjBjYWUwOTQtOTM5Mi0z YWRjLThlNWUtNTBkOGFjY2E5MWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Gq9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfsaT5Ov7cfSjRGIPOOPqmeZH+Dhbtrvn6d0UPl9HM22Mgi2CCsfRpw 9evmj5liKGBtQ/yZH/97hk275LgFwLCER9DgN81i3ip5Tp4UJ20HrIeyaRk0GVWz wY5lITa/f7rJbzyuHH5nWvF1JBAN8+nUq4RGUPNYpbjlF+6WFes+m3Q2eXL63paX wab1uKGAmndRl1ChQf9j2iJCC0ugadR5/c2Ot2AqBXLWImaztN8BcdH4YV0fHTIP XcJaPvwRcqalacZauIL1/GW92OQ88QfXnaBgPFXIuISrxLMCI778O8ggqFs+dyFR DGIRgY/XFX9vrbnRwo+AEJWKo1YBi5c= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:13 2025 by rpki-client