$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/2cc71add-527b-33ca-bca3-3aed5a7256fb.roa File: 2cc71add-527b-33ca-bca3-3aed5a7256fb.roa (raw, json) Hash identifier: BfEGwG4Ap8GYE38lbxQeWU+iChSXWxbDX/r1+mgru4o= Subject key identifier: 37:4A:D4:78:2C:54:4D:76:04:26:A8:3B:C0:AF:47:C5:FE:5A:0D:57 Certificate issuer: /CN=e215a9e7-8c66-4e81-a077-2a73c903a0ac Certificate serial: 010D0C9F4328584BBB75901476833F251DB97000 Authority key identifier: BB:CC:6E:8F:71:EE:5B:79:1C:68:18:85:B1:3F:64:3F:01:D1:C8:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/2cc71add-527b-33ca-bca3-3aed5a7256fb.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 393705 IP address blocks: 169.224.192.0/19 maxlen: 24 2607:cdc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:90:14:76:83:3f:25:1d:b9:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e215a9e7-8c66-4e81-a077-2a73c903a0ac Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=9046a5a2-2266-42fc-ab58-c1bd9a836263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fc:ec:3a:30:ec:ba:08:32:a0:73:b9:fd:67: c7:7b:35:3e:69:f8:2f:cc:a8:ab:68:29:d4:a7:00: 4c:86:f3:fa:1b:5a:4c:a7:ff:23:57:e0:9b:62:60: e1:57:91:80:21:8b:26:12:dd:3a:02:34:ad:bb:c3: e5:24:d9:ed:c2:99:93:40:f1:d4:3c:e3:66:e0:a5: 4f:99:39:24:a4:b1:d9:8f:e8:80:4b:d0:42:e1:24: c1:e0:67:f4:f7:4a:06:b2:2e:93:f8:74:46:5b:52: 52:43:b3:03:46:08:28:6b:6f:09:28:f8:8e:90:00: e4:bc:a6:9c:35:b1:2e:65:9d:54:b5:3d:6c:3b:48: 3e:48:f8:30:f1:7a:27:37:78:fa:23:20:59:13:1f: 66:9b:e1:50:e5:5c:72:c3:06:ed:e6:0f:67:15:c3: 33:27:26:de:19:6a:3a:96:0f:35:04:c8:f9:51:b1: 4a:39:8f:54:4f:97:80:cb:7a:52:06:93:ed:de:e7: 3a:42:b2:f9:d6:c0:fc:d5:55:18:25:48:07:87:7d: 6a:32:ae:66:26:64:c6:c1:cf:e4:45:31:0c:85:6c: 04:ff:45:6d:9f:24:79:29:9b:ed:e8:87:24:d3:8d: 7f:1f:9f:ea:09:a3:46:1e:6f:fa:21:74:b3:ae:e2: 8d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4A:D4:78:2C:54:4D:76:04:26:A8:3B:C0:AF:47:C5:FE:5A:0D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/2cc71add-527b-33ca-bca3-3aed5a7256fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.crl X509v3 Authority Key Identifier: keyid:BB:CC:6E:8F:71:EE:5B:79:1C:68:18:85:B1:3F:64:3F:01:D1:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer sbgp-ipAddrBlock: critical IPv4: 169.224.192.0/19 IPv6: 2607:cdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:b3:be:db:66:72:a0:4c:4f:2b:82:bd:35:fb:d1:7f:06:7d: 6c:4d:b4:84:71:d0:6b:e1:06:5a:00:dc:5c:f6:55:64:25:ef: 27:c8:02:9e:9a:fc:3a:72:d3:4e:35:60:00:b4:cf:f8:bf:7c: bb:7e:17:70:05:13:20:cb:f8:a8:02:58:ca:b9:55:15:2a:95: 43:00:22:a6:68:a5:c7:7a:56:fe:27:3e:5d:38:c2:90:a7:40: 02:bd:a9:6b:29:e2:47:df:09:72:26:50:9a:c3:4d:d1:1b:a5: 6a:4c:62:7d:29:7e:6d:b4:85:81:35:45:6c:81:91:33:f7:fe: 4e:63:c6:a2:16:d0:66:3d:e4:66:e3:24:dd:22:e5:fd:cc:31: e5:d3:36:43:aa:ca:5d:13:db:9a:5b:cb:52:ee:e3:79:17:34: c5:c5:5d:cc:f8:b9:ff:be:ef:3b:1e:6f:ce:ad:cd:32:c6:0c: 01:0b:ba:c4:bb:da:07:47:b5:8c:0b:c8:bf:d9:7b:bd:8a:cc: a3:53:4d:b0:12:88:52:77:67:84:d3:2c:28:ad:3c:ff:fc:7c: cb:7e:c7:cf:e8:9a:bd:3f:f7:ff:56:6d:d5:99:5b:78:13:0e: 5d:13:75:12:38:d8:c3:02:01:b4:79:99:9e:91:09:9e:81:a9: a4:3c:18:92 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEu7dZAUdoM/JR25cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIxNWE5ZTctOGM2Ni00ZTgxLWEwNzctMmE3M2M5MDNh MGFjMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk OTA0NmE1YTItMjI2Ni00MmZjLWFiNTgtYzFiZDlhODM2MjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvzsOjDsuggyoHO5/WfHezU+afgvzKiraCnU pwBMhvP6G1pMp/8jV+CbYmDhV5GAIYsmEt06AjStu8PlJNntwpmTQPHUPONm4KVP mTkkpLHZj+iAS9BC4STB4Gf090oGsi6T+HRGW1JSQ7MDRggoa28JKPiOkADkvKac NbEuZZ1UtT1sO0g+SPgw8XonN3j6IyBZEx9mm+FQ5Vxywwbt5g9nFcMzJybeGWo6 lg81BMj5UbFKOY9UT5eAy3pSBpPt3uc6QrL51sD81VUYJUgHh31qMq5mJmTGwc/k RTEMhWwE/0VtnyR5KZvt6Ick041/H5/qCaNGHm/6IXSzruKNjwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDdK1HgsVE12BCaoO8CvR8X+Wg1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lMjE1 YTllNy04YzY2LTRlODEtYTA3Ny0yYTczYzkwM2EwYWMvMmNjNzFhZGQtNTI3Yi0z M2NhLWJjYTMtM2FlZDVhNzI1NmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTIxNWE5ZTctOGM2Ni00ZTgxLWEw NzctMmE3M2M5MDNhMGFjL2UyMTVhOWU3LThjNjYtNGU4MS1hMDc3LTJhNzNjOTAz YTBhYy5jcmwwHwYDVR0jBBgwFoAUu8xuj3HuW3kcaBiFsT9kPwHRyCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lMjE1YTllNy04YzY2LTRlODEtYTA3Ny0yYTcz YzkwM2EwYWMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFqeDAMA0E AgACMAcDBQAmB83AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAKuzvttmcqBMTyuCvTX70X8GfWxNtIRx0Gvh BloA3Fz2VWQl7yfIAp6a/Dpy0041YAC0z/i/fLt+F3AFEyDL+KgCWMq5VRUqlUMA IqZopcd6Vv4nPl04wpCnQAK9qWsp4kffCXImUJrDTdEbpWpMYn0pfm20hYE1RWyB kTP3/k5jxqIW0GY95GbjJN0i5f3MMeXTNkOqyl0T25pby1Lu43kXNMXFXcz4uf++ 7zseb86tzTLGDAELusS72gdHtYwLyL/Ze72KzKNTTbASiFJ3Z4TTLCitPP/8fMt+ x8/omr0/9/9WbdWZW3gTDl0TdRI42MMCAbR5mZ6RCZ6BqaQ8GJI= -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:08 2025 by rpki-client