$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/3311b045-820d-3d18-8dff-c3037c633202.roa File: 3311b045-820d-3d18-8dff-c3037c633202.roa (raw, json) Hash identifier: gj48yaoCkVO/L6ul9O+Fu/2tKDuwNEKhWcr3n1o1ngc= Subject key identifier: 7B:03:89:77:16:47:73:27:A9:CF:96:E8:5A:89:E6:98:DA:75:0C:89 Certificate issuer: /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Certificate serial: 010D0C9F4328584B4081AF26930E4AE24F157DA0 Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/3311b045-820d-3d18-8dff-c3037c633202.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 393981 IP address blocks: 204.239.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:af:26:93:0e:4a:e2:4f:15:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=58e00bcb-dc03-4792-8c02-abbef47b23ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:59:1f:bf:39:39:91:b8:f5:9a:ec:c5:a4:f4: e9:e5:94:16:9f:3b:9d:ce:37:ae:3e:c6:8a:a0:34: 25:88:04:09:44:9f:5f:3d:c3:cf:aa:23:87:fa:81: f3:89:75:71:a7:d3:92:9a:2f:50:2d:61:68:ed:ed: 13:de:ad:25:7e:ba:1d:ff:6b:7c:42:d1:9a:5b:3c: 08:36:f6:2e:f4:4b:95:1f:5c:ba:cd:21:81:42:bb: b1:66:86:e6:c3:22:73:c1:47:5a:03:3e:74:b2:6f: 26:95:e5:a8:53:d6:76:46:df:b3:70:13:ee:a4:84: e0:76:3b:a7:d1:b1:58:b1:73:3c:e3:18:1f:19:bd: ef:7d:6f:99:cb:77:9a:ba:62:4d:a4:16:cd:cb:67: 40:4f:35:46:88:5f:4f:8d:f4:1e:cd:90:bb:50:5f: 96:b9:65:34:93:31:d3:49:7c:6e:f8:3b:56:cf:0f: 06:68:a5:0d:1a:93:86:29:84:1c:25:f6:4e:af:aa: 23:cb:91:78:c8:dc:5d:3e:17:12:fa:e5:8a:f1:0d: 2a:63:a8:0e:c3:ae:b3:cb:d8:65:73:a1:62:d3:5c: 2f:37:b6:39:40:e6:64:79:72:15:8d:94:a5:bf:b7: 26:5e:03:d6:31:65:fe:91:67:61:c5:2f:78:da:e6: 5a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:03:89:77:16:47:73:27:A9:CF:96:E8:5A:89:E6:98:DA:75:0C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/3311b045-820d-3d18-8dff-c3037c633202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl X509v3 Authority Key Identifier: keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer sbgp-ipAddrBlock: critical IPv4: 204.239.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:27:2a:72:b1:bc:59:b5:a8:92:e9:05:51:81:ff:0a:67:cc: 3b:1c:0c:fa:41:91:0c:19:ba:d7:67:a4:99:31:fc:61:8f:67: f8:1d:10:e2:61:6a:cf:c5:1a:1e:79:b6:23:5c:d2:81:f1:61: 5a:e9:90:cd:fc:32:d0:47:a9:4b:5f:f1:98:0e:a8:93:01:6c: 6d:1f:8a:7c:46:20:38:4c:0f:d4:c1:74:75:48:92:df:d5:a1: 72:32:0f:97:16:8f:af:48:c5:f4:bc:56:f7:26:a3:a2:4d:4e: be:45:c5:a9:67:8c:fd:79:a0:40:1a:6d:b7:fa:65:2c:03:70: a5:dd:cf:17:84:e0:73:01:1f:6c:6b:c2:00:05:a3:ee:47:ec: f1:6a:d2:54:bf:0b:d2:89:db:8a:b6:fd:17:24:fe:46:13:db: 07:81:78:57:0d:34:2c:ff:50:09:70:27:3e:69:6e:35:99:c6: 19:e2:00:e5:31:ee:20:dd:3f:08:76:32:ed:17:a2:66:5f:92: f1:5d:9a:d2:de:9c:f4:46:85:61:7a:6a:f7:0a:db:1c:83:9f: 40:f9:77:98:ed:c0:a0:88:64:1a:7f:a9:c2:cd:a8:c2:08:6a: 7b:8a:9d:61:24:e5:35:ad:a7:88:83:7b:bd:33:32:cd:69:08: 52:4c:1e:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAga8mkw5K4k8VfaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQxMGFjNjctZDhmZi00ZTJlLTkyZTktOTliOGFhMjcx OGVmMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NThlMDBiY2ItZGMwMy00NzkyLThjMDItYWJiZWY0N2IyM2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFkfvzk5kbj1muzFpPTp5ZQWnzudzjeuPsaK oDQliAQJRJ9fPcPPqiOH+oHziXVxp9OSmi9QLWFo7e0T3q0lfrod/2t8QtGaWzwI NvYu9EuVH1y6zSGBQruxZobmwyJzwUdaAz50sm8mleWoU9Z2Rt+zcBPupITgdjun 0bFYsXM84xgfGb3vfW+Zy3eaumJNpBbNy2dATzVGiF9PjfQezZC7UF+WuWU0kzHT SXxu+DtWzw8GaKUNGpOGKYQcJfZOr6ojy5F4yNxdPhcS+uWK8Q0qY6gOw66zy9hl c6Fi01wvN7Y5QOZkeXIVjZSlv7cmXgPWMWX+kWdhxS942uZauwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsDiXcWR3Mnqc+W6FqJ5pjadQyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZDEw YWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4YWEyNzE4ZWYvMzMxMWIwNDUtODIwZC0z ZDE4LThkZmYtYzMwMzdjNjMzMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGQxMGFjNjctZDhmZi00ZTJlLTky ZTktOTliOGFhMjcxOGVmLzRkMTBhYzY3LWQ4ZmYtNGUyZS05MmU5LTk5YjhhYTI3 MThlZi5jcmwwHwYDVR0jBBgwFoAUL4RfQ6yTgW/6VJUXKva2p0MINvkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZDEwYWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4 YWEyNzE4ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzO9UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYnKnKxvFm1qJLpBVGB/wpnzDscDPpBkQwZutdnpJkx/GGPZ/gdEOJh as/FGh55tiNc0oHxYVrpkM38MtBHqUtf8ZgOqJMBbG0finxGIDhMD9TBdHVIkt/V oXIyD5cWj69IxfS8Vvcmo6JNTr5FxalnjP15oEAabbf6ZSwDcKXdzxeE4HMBH2xr wgAFo+5H7PFq0lS/C9KJ24q2/Rck/kYT2weBeFcNNCz/UAlwJz5pbjWZxhniAOUx 7iDdPwh2Mu0XomZfkvFdmtLenPRGhWF6avcK2xyDn0D5d5jtwKCIZBp/qcLNqMII anuKnWEk5TWtp4iDe70zMs1pCFJMHmQ= -----END CERTIFICATE-----Generated at Wed Oct 8 19:36:45 2025 by rpki-client