$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/fd95aa17-d91c-36a8-b5f3-5509f5380040.roa File: fd95aa17-d91c-36a8-b5f3-5509f5380040.roa (raw, json) Hash identifier: nJzBMxc9UHH3XLfolpp64/hYyB4oqDqpS4ufwf24Bv8= Subject key identifier: E6:C8:B0:04:45:42:DF:DE:5C:B8:1D:7F:30:C4:74:C6:42:E8:53:BE Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Certificate serial: 010D0C9F4328584AF686939FB6E3D804A0358F80 Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/fd95aa17-d91c-36a8-b5f3-5509f5380040.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 6407 IP address blocks: 204.48.5.0/24 maxlen: 24 204.48.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:93:9f:b6:e3:d8:04:a0:35:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=d1ead287-8b90-4c81-92f4-fb24cbce7a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bd:d6:a4:48:99:8c:e6:3f:b5:03:6f:c7:89: 5c:f6:d7:07:75:52:85:d7:79:8f:55:39:44:62:e8: fa:72:8f:89:b3:22:28:2c:e8:45:69:c9:bd:e9:63: 1d:78:da:22:de:a5:60:c3:49:a2:4b:8d:8b:a2:75: 30:5f:5f:42:7c:f2:ff:ee:6f:56:75:09:0b:23:bd: 38:7f:1b:8b:2d:35:41:d2:fe:3e:14:e8:8f:f4:ad: f0:99:cf:c8:55:01:a2:00:60:61:6b:40:75:2c:87: 47:62:bd:e7:af:91:40:b8:74:f2:12:7c:2a:03:24: b5:95:5f:91:61:68:a3:02:fd:09:7f:3a:e3:f9:89: a8:c8:be:29:e4:9d:b1:2e:03:b7:31:31:f8:60:b6: 42:20:f1:3d:2f:a6:5b:8b:3c:d7:ce:f7:b4:98:a2: 44:ea:2a:76:76:95:27:6c:23:95:c4:11:8a:9c:b9: 6e:40:f9:5b:ec:1c:a8:5e:6c:ae:5a:d1:85:4d:22: 7a:de:b1:c3:8a:8a:b9:7e:fd:62:9f:ff:1b:42:c3: c9:61:d5:16:e7:cb:bc:68:e9:e9:9e:4d:e1:d9:21: 12:92:3a:83:5b:80:7c:11:72:21:01:9d:08:58:27: 0f:d4:78:67:74:aa:d8:f3:2c:24:06:71:97:96:0f: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C8:B0:04:45:42:DF:DE:5C:B8:1D:7F:30:C4:74:C6:42:E8:53:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/fd95aa17-d91c-36a8-b5f3-5509f5380040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl X509v3 Authority Key Identifier: keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer sbgp-ipAddrBlock: critical IPv4: 204.48.5.0-204.48.6.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:96:91:f7:17:98:a1:64:a8:b6:c6:f7:42:b1:a3:dc:9a:12: 10:76:6a:f6:46:ca:cc:bc:b9:f5:0d:96:e6:5e:bd:92:2f:12: a7:61:ed:d5:f7:47:eb:73:2a:c0:a7:60:bf:6f:ff:74:8b:cd: c0:82:ff:b2:f7:7a:1d:b1:5a:26:4d:ec:c1:e1:e5:6e:bd:e2: f9:b7:65:6f:9b:8c:7c:a6:d5:ea:1b:2d:e5:a2:9d:93:0d:08: f3:87:f5:5e:14:18:0f:28:c6:bb:ee:b7:6f:7c:6b:11:a2:0a: ab:73:5c:7c:63:7a:e1:f1:18:76:a2:86:40:d6:19:f0:7d:ed: 8f:cd:5a:c4:d9:71:ce:fb:1b:e1:c6:41:92:f9:3b:39:e6:f9: 9c:4e:c1:c9:cb:48:ca:32:8b:76:88:f2:ed:40:b7:50:f9:61: 96:ef:4a:fc:d8:3d:9c:d3:6f:16:e6:73:1d:73:34:c8:ea:88: 8e:48:8b:eb:b1:ea:e1:9d:3e:33:b1:d2:d9:6b:0c:d9:2d:c0: ac:7a:99:61:db:2f:db:11:e1:37:8e:c6:49:da:b6:ce:47:cc: 1f:26:4a:8f:3e:72:cb:51:be:c5:b1:a8:74:a0:73:6a:c1:e8: bb:80:07:9b:df:46:01:4f:95:fa:c7:e0:5b:49:bc:32:86:4b: 65:a6:ed:b6 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEr2hpOftuPYBKA1j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj NzQ0MB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZDFlYWQyODctOGI5MC00YzgxLTkyZjQtZmIyNGNiY2U3YTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r3WpEiZjOY/tQNvx4lc9tcHdVKF13mPVTlE Yuj6co+JsyIoLOhFacm96WMdeNoi3qVgw0miS42LonUwX19CfPL/7m9WdQkLI704 fxuLLTVB0v4+FOiP9K3wmc/IVQGiAGBha0B1LIdHYr3nr5FAuHTyEnwqAyS1lV+R YWijAv0Jfzrj+YmoyL4p5J2xLgO3MTH4YLZCIPE9L6ZbizzXzve0mKJE6ip2dpUn bCOVxBGKnLluQPlb7ByoXmyuWtGFTSJ63rHDioq5fv1in/8bQsPJYdUW58u8aOnp nk3h2SESkjqDW4B8EXIhAZ0IWCcP1HhndKrY8ywkBnGXlg9MiQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFObIsARFQt/eXLgdfzDEdMZC6FO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5 NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvZmQ5NWFhMTctZDkxYy0z NmE4LWI1ZjMtNTUwOWY1MzgwMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl ODNjZGM3NDQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADMMAUD BADMMAYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAb5aR9xeYoWSotsb3QrGj3JoSEHZq9kbKzLy59Q2W5l69 ki8Sp2Ht1fdH63MqwKdgv2//dIvNwIL/svd6HbFaJk3sweHlbr3i+bdlb5uMfKbV 6hst5aKdkw0I84f1XhQYDyjGu+63b3xrEaIKq3NcfGN64fEYdqKGQNYZ8H3tj81a xNlxzvsb4cZBkvk7Oeb5nE7ByctIyjKLdojy7UC3UPlhlu9K/Ng9nNNvFuZzHXM0 yOqIjkiL67Hq4Z0+M7HS2WsM2S3ArHqZYdsv2xHhN47GSdq2zkfMHyZKjz5yy1G+ xbGodKBzasHou4AHm99GAU+V+sfgW0m8MoZLZabttg== -----END CERTIFICATE-----Generated at Fri Oct 10 17:30:15 2025 by rpki-client