$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/4842beb7-f2ea-31f5-9ded-6eafa7953373.roa File: 4842beb7-f2ea-31f5-9ded-6eafa7953373.roa (raw, json) Hash identifier: UZqVy6yawKMI/4efMocH36qFfGnqEzpzaOxEava1LuY= Subject key identifier: 6B:03:11:26:03:7B:33:E9:B0:F2:59:91:E0:CC:6D:26:3E:25:5B:1A Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B28C6DCEF926A76D90E86F340 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/4842beb7-f2ea-31f5-9ded-6eafa7953373.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 174 IP address blocks: 204.94.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:dc:ef:92:6a:76:d9:0e:86:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=3a77f08e-d4a2-4a59-8276-75f2a01a0a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:c7:89:42:75:5f:20:2b:97:eb:a7:a2:52: 15:46:97:1a:c2:bb:31:61:1b:e7:e8:27:2e:9d:5b: a8:6c:e4:a3:c5:9d:fe:b6:d4:20:87:ad:7c:79:6b: 9e:e6:d9:49:29:40:23:20:fe:07:7b:d0:0c:3b:f8: 1c:26:3c:66:74:94:32:bf:15:32:df:7d:1e:8b:4f: f1:64:56:8b:cc:36:c6:91:79:87:cc:c8:39:3a:a6: 11:10:19:96:17:75:39:2c:b2:e6:cc:38:55:f8:7b: 2b:57:8c:b0:6e:b0:06:28:6a:a1:da:28:e8:c5:12: d5:21:0c:d0:50:ae:04:11:dc:c0:d7:e3:39:0e:43: 39:1b:4e:4d:26:62:c4:a6:24:64:5e:bf:fb:81:bb: 1c:46:d8:65:cf:99:be:e9:81:3f:9d:ab:64:80:32: 19:18:73:72:3d:03:78:f0:71:de:fb:3b:54:ee:9b: 49:a1:2e:42:6d:fe:5f:25:b8:9e:c8:f9:42:e1:60: 35:dd:54:32:d9:93:1d:6d:ff:a8:ca:2e:e9:23:25: da:86:9b:2e:42:87:41:2c:5c:a9:f5:13:5e:ed:14: 1b:8c:ba:8a:45:1c:64:ab:c1:79:ca:27:c6:a3:51: 7f:89:d2:17:e3:a5:f6:df:37:87:ce:bb:a6:3d:ea: f2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:03:11:26:03:7B:33:E9:B0:F2:59:91:E0:CC:6D:26:3E:25:5B:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/4842beb7-f2ea-31f5-9ded-6eafa7953373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.94.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d9:44:6f:b6:b1:b6:45:21:18:a4:6e:19:25:e6:be:6e:ab: 7f:d6:a8:19:2d:7c:da:c1:2d:d9:71:a8:d0:41:a3:24:f8:bd: 75:16:09:e9:c6:48:c6:f2:a7:41:83:55:a5:21:fc:49:83:8e: 94:c2:27:84:b1:9c:da:7f:d8:a8:e0:ce:5f:07:a5:80:1d:61: b7:82:7a:a0:ee:b5:2e:da:14:d4:f3:85:6e:1b:d9:8e:7d:e6: 68:52:8f:d9:ce:c2:31:f0:e8:65:ac:05:a8:b6:9a:ca:c2:cd: 25:44:95:30:53:0d:7f:4e:c5:22:df:ec:18:fb:32:ed:dc:9d: 93:9a:c5:a3:c4:14:ef:1a:c6:e3:23:cf:bd:8c:68:51:d8:98: bd:26:55:e7:eb:8b:6f:2f:22:82:fa:47:15:45:d7:52:11:0f: e5:ea:ce:73:87:b2:bd:2e:35:64:52:6b:4f:4f:ad:f2:cb:15: 4c:a4:d1:2b:23:36:b8:a9:3d:d7:ff:80:7b:c7:10:8c:d3:3d: 4d:f5:a5:54:ac:81:da:b1:53:88:0d:00:c4:86:8e:9f:74:bc: ac:8b:e3:ff:50:d4:b3:bd:7f:20:3b:26:be:11:7c:8c:0b:7a: d0:bb:4c:e4:f6:fd:23:55:d1:2c:db:38:99:96:6a:84:34:ad: e3:2b:2b:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxtzvkmp22Q6G80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk M2E3N2YwOGUtZDRhMi00YTU5LTgyNzYtNzVmMmEwMWEwYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6bHiUJ1XyArl+unolIVRpcawrsxYRvn6Ccu nVuobOSjxZ3+ttQgh618eWue5tlJKUAjIP4He9AMO/gcJjxmdJQyvxUy330ei0/x ZFaLzDbGkXmHzMg5OqYREBmWF3U5LLLmzDhV+HsrV4ywbrAGKGqh2ijoxRLVIQzQ UK4EEdzA1+M5DkM5G05NJmLEpiRkXr/7gbscRthlz5m+6YE/natkgDIZGHNyPQN4 8HHe+ztU7ptJoS5Cbf5fJbieyPlC4WA13VQy2ZMdbf+oyi7pIyXahpsuQodBLFyp 9RNe7RQbjLqKRRxkq8F5yifGo1F/idIX46X23zeHzrumPerylQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsDESYDezPpsPJZkeDMbSY+JVsaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNDg0MmJlYjctZjJlYS0z MWY1LTlkZWQtNmVhZmE3OTUzMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzF5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3ZRG+2sbZFIRikbhkl5r5uq3/WqBktfNrBLdlxqNBBoyT4vXUWCenG SMbyp0GDVaUh/EmDjpTCJ4SxnNp/2Kjgzl8HpYAdYbeCeqDutS7aFNTzhW4b2Y59 5mhSj9nOwjHw6GWsBai2msrCzSVElTBTDX9OxSLf7Bj7Mu3cnZOaxaPEFO8axuMj z72MaFHYmL0mVefri28vIoL6RxVF11IRD+XqznOHsr0uNWRSa09PrfLLFUyk0Ssj NripPdf/gHvHEIzTPU31pVSsgdqxU4gNAMSGjp90vKyL4/9Q1LO9fyA7Jr4RfIwL etC7TOT2/SNV0SzbOJmWaoQ0reMrK2k= -----END CERTIFICATE-----Generated at Fri Oct 10 17:32:04 2025 by rpki-client