$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa File: 04820b76-4425-3cac-b7e3-17376625637b.roa (raw, json) Hash identifier: 6EH8PJS9b8irK67/za0m1jAnXwVRCDKovakLqPb1BBs= Subject key identifier: C2:75:1C:9E:97:5D:53:6B:91:58:F5:16:AC:7A:C9:61:39:B5:90:54 Certificate issuer: /CN=260cabab-b89d-4556-b9b1-e5a87b9523b9 Certificate serial: 010D0C9F4328584B33F1A20DFFD38582D453F2C0 Authority key identifier: 80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 12119 IP address blocks: 23.249.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a2:0d:ff:d3:85:82:d4:53:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260cabab-b89d-4556-b9b1-e5a87b9523b9 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=55a098b8-ef6d-4b36-bc69-3471f123c4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e1:2f:3d:30:c8:83:11:54:b6:77:74:97:15: 1d:b4:f0:1b:d0:47:bc:ac:64:3d:49:bd:85:e9:a6: c5:3a:c4:df:15:6d:6b:07:3b:15:2d:1d:8a:f4:c3: 06:11:20:70:f2:e0:e0:b5:f8:89:ae:fd:6b:34:a8: 3f:e6:b7:fa:a6:32:54:83:3d:b3:51:35:aa:3c:24: b7:91:b7:a1:8d:60:49:d2:5e:2b:bc:30:8c:7d:de: d2:63:fc:cb:0f:7c:ee:4e:5a:34:3d:89:6c:53:a4: 6c:ed:f8:cb:5b:c4:91:10:37:77:15:9a:a7:e9:5e: 1f:00:cb:1d:f3:bf:77:f1:b9:74:bb:f5:3e:27:cb: 09:23:26:95:f9:1a:27:86:d6:02:d4:93:bb:b1:79: a8:58:27:b8:00:4c:12:cd:de:0f:31:57:e1:66:66: 2f:4a:46:d2:d5:ea:67:a2:a0:71:1a:be:dc:a3:13: 46:65:d1:3c:e0:97:b9:25:7d:01:07:f5:80:4d:09: f1:24:21:8c:7b:51:b1:6f:37:f3:79:6b:32:e4:85: 28:be:05:d0:73:04:a6:38:1d:56:b4:6e:65:53:4f: 4e:01:86:ca:51:7a:f4:53:b7:57:e4:b5:20:63:8c: 77:87:29:51:d4:aa:57:ea:54:4c:b2:c1:34:62:05: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:75:1C:9E:97:5D:53:6B:91:58:F5:16:AC:7A:C9:61:39:B5:90:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl X509v3 Authority Key Identifier: keyid:80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer sbgp-ipAddrBlock: critical IPv4: 23.249.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:19:ae:ff:04:c1:8d:64:59:d3:bf:30:7c:df:69:eb:0e:9c: 7d:46:89:91:0d:ba:93:8c:e3:27:fe:ac:74:9e:9d:22:1d:75: f4:72:53:5c:27:16:26:bb:a8:1c:4a:2b:4c:44:f3:9a:51:f7: 33:fc:15:00:ba:ad:8d:fa:bd:d5:f0:4c:a9:7b:5d:91:21:4f: e1:b1:fd:d5:6b:fb:27:2a:16:dd:1e:e0:3d:be:5c:61:3a:08: b3:8b:b9:a8:61:b7:02:3f:95:02:08:86:c0:1a:46:03:dc:73: 8a:fa:14:f0:a3:76:55:ac:22:dc:28:34:49:98:a6:d4:8a:25: c5:0c:ac:62:17:fd:85:77:e2:fa:46:a7:05:de:bd:83:91:84: 7f:5f:dd:66:1c:16:0b:69:b4:41:61:61:12:71:73:80:68:22: 14:34:98:cd:ed:c7:fd:ce:cc:df:99:d3:d9:05:19:4c:23:e1: a2:1b:8a:91:55:9f:28:0d:83:be:c5:d5:32:2a:c9:b7:cb:67: b8:07:c3:de:de:08:20:58:2f:61:77:ff:8c:51:85:8b:d4:f3: 91:27:22:f8:4c:de:b8:9f:1b:5b:83:df:b9:35:d9:45:7c:bb: 63:40:2f:81:81:be:53:b5:4e:2f:e9:63:23:c8:97:b8:30:d1: db:8e:12:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aIN/9OFgtRT8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjYwY2FiYWItYjg5ZC00NTU2LWI5YjEtZTVhODdiOTUy M2I5MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NTVhMDk4YjgtZWY2ZC00YjM2LWJjNjktMzQ3MWYxMjNjNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eEvPTDIgxFUtnd0lxUdtPAb0Ee8rGQ9Sb2F 6abFOsTfFW1rBzsVLR2K9MMGESBw8uDgtfiJrv1rNKg/5rf6pjJUgz2zUTWqPCS3 kbehjWBJ0l4rvDCMfd7SY/zLD3zuTlo0PYlsU6Rs7fjLW8SREDd3FZqn6V4fAMsd 87938bl0u/U+J8sJIyaV+RonhtYC1JO7sXmoWCe4AEwSzd4PMVfhZmYvSkbS1epn oqBxGr7coxNGZdE84Je5JX0BB/WATQnxJCGMe1GxbzfzeWsy5IUovgXQcwSmOB1W tG5lU09OAYbKUXr0U7dX5LUgY4x3hylR1KpX6lRMssE0YgU1EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJ1HJ6XXVNrkVj1Fqx6yWE5tZBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBj YWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4N2I5NTIzYjkvMDQ4MjBiNzYtNDQyNS0z Y2FjLWI3ZTMtMTczNzY2MjU2MzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjYwY2FiYWItYjg5ZC00NTU2LWI5 YjEtZTVhODdiOTUyM2I5LzI2MGNhYmFiLWI4OWQtNDU1Ni1iOWIxLWU1YTg3Yjk1 MjNiOS5jcmwwHwYDVR0jBBgwFoAUgIfDxBAO821kmz+sgmdIQ3Tl7u4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBjYWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4 N2I5NTIzYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIZrv8EwY1kWdO/MHzfaesOnH1GiZENupOM4yf+rHSenSIddfRyU1wn Fia7qBxKK0xE85pR9zP8FQC6rY36vdXwTKl7XZEhT+Gx/dVr+ycqFt0e4D2+XGE6 CLOLuahhtwI/lQIIhsAaRgPcc4r6FPCjdlWsItwoNEmYptSKJcUMrGIX/YV34vpG pwXevYORhH9f3WYcFgtptEFhYRJxc4BoIhQ0mM3tx/3OzN+Z09kFGUwj4aIbipFV nygNg77F1TIqybfLZ7gHw97eCCBYL2F3/4xRhYvU85EnIvhM3rifG1uD37k12UV8 u2NAL4GBvlO1Ti/pYyPIl7gw0duOElc= -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:01 2025 by rpki-client