$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa File: d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa (raw, json) Hash identifier: 1umFvRKS2ZcpGjHcHx0z8wactvdWkl+QkIErR6aUL40= Subject key identifier: B9:C8:26:D5:FC:1B:A7:00:24:9B:0B:6D:DE:B4:01:A3:FA:A3:CF:FA Certificate issuer: /CN=8d560541-dfe9-43df-8277-86d83aa610a1 Certificate serial: 010D0C9F4328584BCD9B0C3393D6117F180FA980 Authority key identifier: 8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 16509 IP address blocks: 204.11.174.0/24 maxlen: 24 204.11.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:0c:33:93:d6:11:7f:18:0f:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d560541-dfe9-43df-8277-86d83aa610a1 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=4b19510e-02d5-43b5-adf2-c94168713d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:e4:42:95:c0:a6:fa:fa:88:38:23:2c:77: 56:9c:b4:89:52:bd:34:e9:33:20:cc:18:b6:1a:76: 27:9e:6a:93:e2:1e:32:af:97:63:b1:41:f9:86:51: e9:ab:22:98:13:f3:51:c6:2f:e1:6e:05:17:ad:c7: 6f:16:1b:a4:f4:1e:c2:66:2d:b1:87:e9:e7:0c:a0: b6:22:5a:b0:01:00:31:62:8a:50:89:8e:e7:eb:76: 59:fe:f1:3d:68:29:f8:a0:b7:57:ce:e1:04:eb:d8: 1f:37:f2:bc:e8:0a:0d:82:1a:49:0c:ce:7d:e0:bb: 78:2d:75:25:20:e0:57:fe:71:9c:fe:e1:e3:e2:57: 87:74:33:85:39:d0:f6:42:37:2d:8f:45:7d:f1:68: d8:c8:2d:b6:0a:0a:54:b5:98:e7:64:b7:b3:b9:cc: 15:a4:33:28:3d:eb:ba:b9:f1:d9:e6:5b:7e:f1:a1: ae:54:ad:e5:b5:f4:fb:46:09:b3:ce:f6:ce:af:c0: 56:ab:d1:c2:63:9c:23:69:39:df:2c:cc:de:65:cd: c3:37:88:b2:a2:42:13:81:8f:85:a8:e1:65:ed:f0: 7b:c3:83:03:29:18:15:79:1d:57:29:e8:f6:b9:12: 15:27:61:fd:76:43:9f:a9:02:4c:09:22:50:3d:30: c5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C8:26:D5:FC:1B:A7:00:24:9B:0B:6D:DE:B4:01:A3:FA:A3:CF:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl X509v3 Authority Key Identifier: keyid:8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer sbgp-ipAddrBlock: critical IPv4: 204.11.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:7b:2a:18:dc:df:48:b9:00:21:b0:d3:7e:d3:68:3c:7b:c2: fa:7f:c7:d4:18:ce:49:6b:e8:cf:91:12:00:0c:57:0a:a1:b9: 70:7f:25:e6:94:eb:96:33:f1:af:d5:e6:56:e0:23:83:38:18: 83:3c:99:26:13:79:19:26:4a:f5:eb:0c:94:7b:86:80:de:7a: f0:c7:08:1f:97:4c:8f:51:8a:83:3e:4a:5d:c0:5f:98:35:f1: f3:91:80:be:5d:3f:1b:32:72:c0:5e:6e:ac:21:af:d7:69:ce: 69:0d:40:47:1e:d8:3d:cf:61:63:7e:5f:43:c1:9f:4c:8f:e0: 5a:f6:a4:5a:5a:d6:5d:97:2e:7a:7c:90:27:a0:74:25:01:d1: 6d:81:f5:2b:5d:d5:f0:ab:c7:0a:23:e3:85:2c:ac:38:50:0c: 75:a1:f7:cd:70:2e:98:4f:74:fd:e7:3a:7f:2c:7f:6a:fc:45: cd:e2:94:23:6f:64:17:02:c7:4a:1f:b7:e7:43:fa:e3:ee:84: 25:07:42:63:79:e3:c7:3c:ea:f9:7c:dd:be:e6:7b:e4:72:e5: d3:82:18:29:ad:f0:4b:4b:e5:b1:fa:c3:27:22:0e:fa:5d:fe: ff:1a:cf:89:8b:01:c9:cb:59:5d:e2:ab:0f:01:ae:43:85:bf: 6a:d2:3a:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmwwzk9YRfxgPqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ1NjA1NDEtZGZlOS00M2RmLTgyNzctODZkODNhYTYx MGExMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk NGIxOTUxMGUtMDJkNS00M2I1LWFkZjItYzk0MTY4NzEzZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8zkQpXApvr6iDgjLHdWnLSJUr006TMgzBi2 GnYnnmqT4h4yr5djsUH5hlHpqyKYE/NRxi/hbgUXrcdvFhuk9B7CZi2xh+nnDKC2 IlqwAQAxYopQiY7n63ZZ/vE9aCn4oLdXzuEE69gfN/K86AoNghpJDM594Lt4LXUl IOBX/nGc/uHj4leHdDOFOdD2Qjctj0V98WjYyC22CgpUtZjnZLezucwVpDMoPeu6 ufHZ5lt+8aGuVK3ltfT7RgmzzvbOr8BWq9HCY5wjaTnfLMzeZc3DN4iyokITgY+F qOFl7fB7w4MDKRgVeR1XKej2uRIVJ2H9dkOfqQJMCSJQPTDFdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnIJtX8G6cAJJsLbd60AaP6o8/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2 MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4M2FhNjEwYTEvZDkwMDE3YzMtYTc3ZC0z Y2QyLTljNjgtM2Q1MmY2ZWQ2MDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ1NjA1NDEtZGZlOS00M2RmLTgy NzctODZkODNhYTYxMGExLzhkNTYwNTQxLWRmZTktNDNkZi04Mjc3LTg2ZDgzYWE2 MTBhMS5jcmwwHwYDVR0jBBgwFoAUi7I9L4V+VkiemW6Bz6BLaUihXO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4 M2FhNjEwYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAuuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl7Khjc30i5ACGw037TaDx7wvp/x9QYzklr6M+REgAMVwqhuXB/JeaU 65Yz8a/V5lbgI4M4GIM8mSYTeRkmSvXrDJR7hoDeevDHCB+XTI9RioM+Sl3AX5g1 8fORgL5dPxsycsBebqwhr9dpzmkNQEce2D3PYWN+X0PBn0yP4Fr2pFpa1l2XLnp8 kCegdCUB0W2B9Std1fCrxwoj44UsrDhQDHWh981wLphPdP3nOn8sf2r8Rc3ilCNv ZBcCx0oft+dD+uPuhCUHQmN548c86vl83b7me+Ry5dOCGCmt8EtL5bH6wyciDvpd /v8az4mLAcnLWV3iqw8BrkOFv2rSOt8= -----END CERTIFICATE-----Generated at Tue Nov 18 08:23:34 2025 by rpki-client