$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/4719e3cc-8ace-3610-9dcc-3d8a237ada19.roa File: 4719e3cc-8ace-3610-9dcc-3d8a237ada19.roa (raw, json) Hash identifier: e6nm6PXev7QQa7DJJ/4Ro/edOJZeNTRSLjUC/md4yjM= Subject key identifier: 2A:BA:14:B8:83:C6:D9:08:01:F7:AA:59:02:82:FD:B5:E2:CB:51:89 Certificate issuer: /CN=12de60db-ef00-4011-ac2b-057362ea0602 Certificate serial: 010D0C9F4328584B4081A837B976161B08D7ED74 Authority key identifier: 34:ED:A5:18:F7:17:0E:8A:9E:0A:AB:34:70:1E:47:CD:00:50:B4:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/4719e3cc-8ace-3610-9dcc-3d8a237ada19.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 36849 IP address blocks: 216.181.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a8:37:b9:76:16:1b:08:d7:ed:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12de60db-ef00-4011-ac2b-057362ea0602 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=9e01862e-1afe-4198-9e86-811ff91bee01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:74:0c:c1:09:ae:70:c3:6b:7f:2c:6b:7f: 9f:77:91:24:45:9d:31:f0:90:d7:b1:c0:f8:74:eb: da:50:f0:de:d4:89:1c:75:f7:45:82:5f:4a:7c:2d: 82:80:88:a1:06:ea:9c:79:e5:e7:b4:22:b6:86:f3: 46:64:da:5e:3d:da:ed:f2:9a:4b:29:40:0a:e5:5a: dd:63:53:43:c0:47:02:9d:fb:3a:78:5b:9e:a7:56: 6d:77:ae:e3:28:81:42:a0:6c:ea:20:a6:62:94:0a: 01:a0:54:1b:32:21:55:80:59:0a:01:d9:99:d3:eb: ae:f3:70:5a:31:d6:1f:fa:57:1a:71:96:07:21:5f: cc:dc:ed:89:05:68:5e:84:91:21:b8:8e:99:45:8b: 19:77:d2:9e:7a:53:05:df:0e:84:eb:ca:28:4d:7d: 5e:45:47:1e:a4:2e:ff:e5:d9:7c:9d:c6:23:80:4d: aa:2f:1a:78:c7:26:a5:a1:0d:91:0f:c0:ba:05:56: 0d:a9:c7:ae:a9:e8:6b:dc:e1:57:25:1d:ce:8d:79: c1:ed:49:c2:ba:a6:a0:d8:2c:ad:32:4c:f9:5c:ca: 5e:76:f3:85:f7:89:80:cd:d9:2c:a6:6d:76:ae:f1: 36:cc:0c:02:ef:da:fc:c7:97:5b:23:fc:53:ce:b7: ed:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BA:14:B8:83:C6:D9:08:01:F7:AA:59:02:82:FD:B5:E2:CB:51:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/4719e3cc-8ace-3610-9dcc-3d8a237ada19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.crl X509v3 Authority Key Identifier: keyid:34:ED:A5:18:F7:17:0E:8A:9E:0A:AB:34:70:1E:47:CD:00:50:B4:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer sbgp-ipAddrBlock: critical IPv4: 216.181.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3f:3f:77:91:d9:74:5a:3e:95:6c:76:22:02:44:dd:f3:31: 21:73:f0:c3:8f:b7:84:8e:72:f5:5c:17:46:f8:b8:1a:61:59: a3:be:67:34:1d:46:a4:a5:a7:d7:77:71:b9:2d:3c:6d:2c:ef: 6d:3b:59:ce:37:b2:08:c7:91:9f:bc:c9:03:43:12:02:06:41: 6d:ad:a6:e2:fa:d3:06:77:03:27:72:fd:61:c5:1e:db:32:f3: 36:4a:6d:b7:83:21:88:8e:94:94:b4:a1:8f:b8:c8:8f:5b:07: 19:9d:fa:14:de:43:b5:6b:9e:3b:fe:c2:87:b9:44:bf:bc:c3: 12:fb:00:3b:d0:5d:b1:b0:13:d7:96:84:46:3b:c4:8c:49:46: 06:fd:73:76:13:47:c7:8b:ca:91:eb:b0:e2:72:df:76:14:72: fa:3a:cc:08:0a:54:19:23:5b:d7:a8:d6:7a:9c:ca:bb:f2:99: 7a:ef:aa:a3:ab:a8:0f:52:7e:e9:4d:a6:02:a5:3e:c3:cf:23: bc:87:d5:1d:4a:d9:86:be:b0:23:84:76:85:5d:f4:a9:87:8c: 79:ed:31:90:04:78:c6:d2:2f:36:dd:91:87:77:29:d5:55:96: 5a:6a:07:bc:39:8f:e7:a2:81:ed:c6:d1:f0:92:7e:cc:9b:c5: 73:a2:b2:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgag3uXYWGwjX7XQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJkZTYwZGItZWYwMC00MDExLWFjMmItMDU3MzYyZWEw NjAyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OWUwMTg2MmUtMWFmZS00MTk4LTllODYtODExZmY5MWJlZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7p0DMEJrnDDa38sa3+fd5EkRZ0x8JDXscD4 dOvaUPDe1IkcdfdFgl9KfC2CgIihBuqceeXntCK2hvNGZNpePdrt8ppLKUAK5Vrd Y1NDwEcCnfs6eFuep1Ztd67jKIFCoGzqIKZilAoBoFQbMiFVgFkKAdmZ0+uu83Ba MdYf+lcacZYHIV/M3O2JBWhehJEhuI6ZRYsZd9KeelMF3w6E68ooTX1eRUcepC7/ 5dl8ncYjgE2qLxp4xyaloQ2RD8C6BVYNqceuqehr3OFXJR3OjXnB7UnCuqag2Cyt Mkz5XMpedvOF94mAzdkspm12rvE2zAwC79r8x5dbI/xTzrft+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq6FLiDxtkIAfeqWQKC/bXiy1GJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMmRl NjBkYi1lZjAwLTQwMTEtYWMyYi0wNTczNjJlYTA2MDIvNDcxOWUzY2MtOGFjZS0z NjEwLTlkY2MtM2Q4YTIzN2FkYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTJkZTYwZGItZWYwMC00MDExLWFj MmItMDU3MzYyZWEwNjAyLzEyZGU2MGRiLWVmMDAtNDAxMS1hYzJiLTA1NzM2MmVh MDYwMi5jcmwwHwYDVR0jBBgwFoAUNO2lGPcXDoqeCqs0cB5HzQBQtHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMmRlNjBkYi1lZjAwLTQwMTEtYWMyYi0wNTcz NjJlYTA2MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4/P3eR2XRaPpVsdiICRN3zMSFz8MOPt4SOcvVcF0b4uBphWaO+ZzQd RqSlp9d3cbktPG0s7207Wc43sgjHkZ+8yQNDEgIGQW2tpuL60wZ3Aydy/WHFHtsy 8zZKbbeDIYiOlJS0oY+4yI9bBxmd+hTeQ7Vrnjv+woe5RL+8wxL7ADvQXbGwE9eW hEY7xIxJRgb9c3YTR8eLypHrsOJy33YUcvo6zAgKVBkjW9eo1nqcyrvymXrvqqOr qA9SfulNpgKlPsPPI7yH1R1K2Ya+sCOEdoVd9KmHjHntMZAEeMbSLzbdkYd3KdVV llpqB7w5j+eige3G0fCSfsybxXOisvY= -----END CERTIFICATE-----Generated at Wed Nov 5 06:28:44 2025 by rpki-client