$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa File: a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa (raw, json) Hash identifier: Q/768fd5Dzm+mWkFE4R10gJeOytK41yFbDUWdK6waSk= Subject key identifier: A2:00:81:69:00:E9:50:0A:2D:EB:BB:51:05:C0:3D:27:B4:E7:55:F4 Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584B6BC75B0D0EC0318EAE28A700 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 398203 IP address blocks: 169.150.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5b:0d:0e:c0:31:8e:ae:28:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=fc89cd2d-5d5d-46d0-a1e5-fc7d9089b969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:1d:37:6a:a1:57:2c:c2:3f:8b:c1:7d:1c: c7:22:13:23:ab:9b:0c:0b:86:3c:c1:04:81:37:0a: a6:29:e3:c9:0e:7d:d1:7e:b8:ae:e0:47:7a:09:a0: e0:93:1e:df:4f:fe:35:21:68:af:32:c5:b2:dc:9b: 79:a4:f4:c5:07:bc:28:9f:81:7b:f3:c2:89:93:a2: e6:6e:d6:5b:2a:4b:4b:6e:e1:da:2f:14:c9:b6:dc: a8:30:b1:51:ae:c2:35:c4:5a:94:d9:45:3d:d5:d6: d7:8c:38:ec:a4:fb:49:65:75:cc:cd:f3:30:9e:40: 39:3f:56:2a:b6:77:1d:aa:ba:7a:f8:f7:49:14:05: 89:af:c9:a5:8a:e8:65:20:9b:9d:d3:6d:bc:90:a4: 30:31:d3:ba:03:81:15:f5:24:c3:02:ad:43:19:e7: a8:22:44:6f:b6:df:5f:c4:6b:7a:f6:87:ff:6f:d8: 63:69:5a:f0:84:07:83:df:ca:de:62:54:30:e9:99: 53:80:5a:1c:9b:30:13:d6:cf:cd:33:c3:74:5e:9a: 3f:92:1d:1b:00:6c:a1:d2:c3:33:db:44:5e:4c:83: 0a:50:61:e7:f0:97:ec:9d:9c:43:89:5b:fd:b3:98: bc:5e:37:9a:58:19:cf:44:54:1a:7d:df:d9:75:d8: 17:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:00:81:69:00:E9:50:0A:2D:EB:BB:51:05:C0:3D:27:B4:E7:55:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: 169.150.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ee:54:31:56:d5:c5:f9:0a:34:ff:f0:75:b8:7f:e9:24:a8: f4:91:8e:f5:58:f0:1a:d7:ff:c4:b1:b0:2e:d4:38:35:9f:22: 3d:46:8a:fc:c9:e3:31:c0:00:75:eb:c3:4c:eb:a9:75:79:15: 61:1f:5b:05:d7:08:e8:27:e2:2e:dd:af:97:07:99:81:c5:bd: 19:10:9b:45:0d:83:5c:dc:8c:a0:fa:ed:75:31:a4:b2:8c:a0: 7a:6d:1f:a9:3c:00:d3:73:8d:a7:06:7c:a4:7b:be:a5:48:79: 71:b5:e7:7b:a4:cd:71:15:f3:3e:19:56:de:bb:70:70:f6:be: 29:07:8b:c8:78:03:37:04:d6:99:20:5e:f2:34:f0:1a:48:d5: 89:a2:31:f6:61:cd:a7:79:79:b7:15:70:fc:e5:b4:ac:6a:8a: e4:7d:2c:47:8d:1c:8d:65:7a:f4:91:d8:03:45:4b:f4:46:3f: f0:cf:c2:d7:be:70:ba:34:ce:40:a4:c0:16:4c:6d:17:10:df: dd:b8:5b:e7:fb:78:21:c6:16:cd:d8:d5:f8:60:e0:e2:60:1e: d2:4e:cb:dc:77:92:95:4f:e2:54:b2:59:9f:35:d9:43:80:e6: 25:36:5b:1e:67:c2:ca:66:31:bf:43:fc:4c:c2:63:5a:c8:54: 69:a0:30:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1sNDsAxjq4opwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZmM4OWNkMmQtNWQ1ZC00NmQwLWExZTUtZmM3ZDkwODliOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8kdN2qhVyzCP4vBfRzHIhMjq5sMC4Y8wQSB NwqmKePJDn3Rfriu4Ed6CaDgkx7fT/41IWivMsWy3Jt5pPTFB7won4F788KJk6Lm btZbKktLbuHaLxTJttyoMLFRrsI1xFqU2UU91dbXjDjspPtJZXXMzfMwnkA5P1Yq tncdqrp6+PdJFAWJr8mliuhlIJud0228kKQwMdO6A4EV9STDAq1DGeeoIkRvtt9f xGt69of/b9hjaVrwhAeD38reYlQw6ZlTgFocmzAT1s/NM8N0Xpo/kh0bAGyh0sMz 20ReTIMKUGHn8JfsnZxDiVv9s5i8XjeaWBnPRFQafd/ZddgXAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIAgWkA6VAKLeu7UQXAPSe051X0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvYTZhNzNlNTUtYmZhZi0z ODNlLWIwNDQtYjlkMDEyMGNlNGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqZaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3uVDFW1cX5CjT/8HW4f+kkqPSRjvVY8BrX/8SxsC7UODWfIj1GivzJ 4zHAAHXrw0zrqXV5FWEfWwXXCOgn4i7dr5cHmYHFvRkQm0UNg1zcjKD67XUxpLKM oHptH6k8ANNzjacGfKR7vqVIeXG153ukzXEV8z4ZVt67cHD2vikHi8h4AzcE1pkg XvI08BpI1YmiMfZhzad5ebcVcPzltKxqiuR9LEeNHI1levSR2ANFS/RGP/DPwte+ cLo0zkCkwBZMbRcQ3924W+f7eCHGFs3Y1fhg4OJgHtJOy9x3kpVP4lSyWZ812UOA 5iU2Wx5nwspmMb9D/EzCY1rIVGmgMJc= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:22 2025 by rpki-client