$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/94d78e80-6902-346e-b310-45f257fd76f1.roa File: 94d78e80-6902-346e-b310-45f257fd76f1.roa (raw, json) Hash identifier: 1mNomSiAvtChr3psxO5lKJ3Vc3Y+sL68tSyuFJrZze8= Subject key identifier: C7:9B:82:95:47:0E:65:9A:72:72:42:84:6B:95:B0:40:AD:22:3D:CA Certificate issuer: /CN=d6b690dc-d325-42b2-9834-06e4a779b209 Certificate serial: 010D0C9F4328584B609C8E0CF3FFD0484F84E000 Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/94d78e80-6902-346e-b310-45f257fd76f1.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 53281 IP address blocks: 204.152.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:8e:0c:f3:ff:d0:48:4f:84:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=76078211-51d1-44f6-9f98-893773b3ef98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5b:6b:f0:48:c6:13:be:57:26:a6:2b:43:ab: f6:a1:8d:48:d9:f8:15:bc:a0:d9:48:67:c5:a2:ae: 60:5b:9c:c8:23:bd:59:f7:66:d1:2a:67:0f:49:ec: 57:9e:93:f7:3b:f8:1f:86:db:5d:9e:15:f5:ff:4f: 2e:65:fd:a8:cc:1f:c1:77:5d:80:a1:75:9f:57:e9: 50:e6:b9:ce:43:9f:af:02:4e:3f:84:1f:b2:0f:45: 0c:bf:05:b6:5d:e1:26:de:e3:b8:3a:3b:19:92:af: db:32:f9:e2:4d:78:7c:45:9e:c8:9d:7c:f5:93:4e: d4:dd:69:f1:34:fd:28:c0:4f:23:58:f4:57:76:7e: 10:21:c3:41:5f:c2:76:a1:7c:76:b2:99:d5:e8:95: 03:ba:1a:f3:73:ff:44:95:8a:31:90:9a:a1:34:0a: 57:9f:8f:fc:ad:4b:b3:05:f6:8b:e1:12:ac:d2:eb: 8a:b3:70:22:0a:2d:07:d1:64:c2:79:d2:be:09:76: 76:da:df:09:7c:c1:9f:d7:32:7c:eb:36:d2:02:6a: 72:98:9e:9d:d9:17:fa:fc:16:c1:23:c0:ad:45:9e: bb:9f:81:b1:c3:f7:92:99:ad:8d:c7:d8:42:36:48: af:f2:80:95:2e:2b:a2:1c:c6:59:22:c3:23:f6:a3: cf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9B:82:95:47:0E:65:9A:72:72:42:84:6B:95:B0:40:AD:22:3D:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/94d78e80-6902-346e-b310-45f257fd76f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl X509v3 Authority Key Identifier: keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer sbgp-ipAddrBlock: critical IPv4: 204.152.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9d:ea:9d:e8:fa:2a:1b:0e:ac:86:54:22:9e:cf:ad:5e:4b: 3f:c6:73:8d:15:65:b9:0a:0d:32:69:3c:c9:e1:2a:cc:2a:fd: 37:25:7b:75:39:99:f5:11:09:13:5b:1a:0e:90:06:ed:46:80: 24:a6:3a:f1:5e:dc:ff:e0:8b:46:8c:f1:4e:c8:63:8f:61:09: 1e:82:6f:f9:91:25:d1:d2:6a:a7:63:0d:7f:ba:ac:ee:f0:e4: 0c:e9:cf:03:67:99:ef:e9:32:45:91:cb:26:23:b8:68:de:8e: 2a:0b:dc:2b:35:65:86:40:0f:4b:7d:cf:ed:a4:d9:38:38:59: 94:e6:03:e4:f9:1a:a0:71:b3:c9:66:9b:ab:d4:b1:c5:d9:e5: 2d:db:1c:3b:1b:96:87:ea:72:bd:1f:44:f3:25:96:d8:8e:3e: a8:38:ea:03:5c:e9:c1:c9:b6:8e:d8:c1:b9:8e:71:13:2a:df: d0:a7:fd:8b:b2:7f:d8:ef:f0:17:33:e2:f7:89:8c:0a:ae:7c: e8:15:d0:83:4a:16:a6:bb:15:ed:31:53:97:32:41:d6:ac:49: 9f:39:92:97:af:8a:d8:d5:1e:15:d6:cb:ef:c5:e6:03:76:0e: 5e:fd:50:c1:37:6c:cb:c8:74:d7:31:2d:55:ac:66:d5:0f:1a: 5d:69:41:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnI4M8//QSE+E4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNjkwZGMtZDMyNS00MmIyLTk4MzQtMDZlNGE3Nzli MjA5MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NzYwNzgyMTEtNTFkMS00NGY2LTlmOTgtODkzNzczYjNlZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1tr8EjGE75XJqYrQ6v2oY1I2fgVvKDZSGfF oq5gW5zII71Z92bRKmcPSexXnpP3O/gfhttdnhX1/08uZf2ozB/Bd12AoXWfV+lQ 5rnOQ5+vAk4/hB+yD0UMvwW2XeEm3uO4OjsZkq/bMvniTXh8RZ7InXz1k07U3Wnx NP0owE8jWPRXdn4QIcNBX8J2oXx2spnV6JUDuhrzc/9ElYoxkJqhNApXn4/8rUuz BfaL4RKs0uuKs3AiCi0H0WTCedK+CXZ22t8JfMGf1zJ86zbSAmpymJ6d2Rf6/BbB I8CtRZ67n4Gxw/eSma2Nx9hCNkiv8oCVLiuiHMZZIsMj9qPPAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMebgpVHDmWacnJChGuVsECtIj3KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2 OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0YTc3OWIyMDkvOTRkNzhlODAtNjkwMi0z NDZlLWIzMTAtNDVmMjU3ZmQ3NmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDZiNjkwZGMtZDMyNS00MmIyLTk4 MzQtMDZlNGE3NzliMjA5L2Q2YjY5MGRjLWQzMjUtNDJiMi05ODM0LTA2ZTRhNzc5 YjIwOS5jcmwwHwYDVR0jBBgwFoAU7UQThqHLnfMmsjfCW7+YxO/SX4wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0 YTc3OWIyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJh2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKd6p3o+iobDqyGVCKez61eSz/Gc40VZbkKDTJpPMnhKswq/Tcle3U5 mfURCRNbGg6QBu1GgCSmOvFe3P/gi0aM8U7IY49hCR6Cb/mRJdHSaqdjDX+6rO7w 5AzpzwNnme/pMkWRyyYjuGjejioL3Cs1ZYZAD0t9z+2k2Tg4WZTmA+T5GqBxs8lm m6vUscXZ5S3bHDsblofqcr0fRPMlltiOPqg46gNc6cHJto7YwbmOcRMq39Cn/Yuy f9jv8Bcz4veJjAqufOgV0INKFqa7Fe0xU5cyQdasSZ85kpevitjVHhXWy+/F5gN2 Dl79UME3bMvIdNcxLVWsZtUPGl1pQek= -----END CERTIFICATE-----Generated at Sat Oct 11 05:21:53 2025 by rpki-client