$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4da48b61-b86f-364f-8202-7a45652e7804.roa File: 4da48b61-b86f-364f-8202-7a45652e7804.roa (raw, json) Hash identifier: pCw6GvDrOn1Vz2CoYn15QdBGILhdVBBqUdgwBFzPg8o= Subject key identifier: F2:BB:1D:C1:43:07:B6:0C:BB:1C:37:DB:1F:2F:01:77:3F:04:40:6F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B5F37228B6806DBF3B6501000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4da48b61-b86f-364f-8202-7a45652e7804.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 8.8.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:22:8b:68:06:db:f3:b6:50:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=cfca7b72-d5a6-4271-b03f-3a27cc357f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:06:0f:32:bc:85:81:78:d3:ce:50:a9:54: 8c:e2:ae:2c:ad:94:09:d6:de:75:c8:9a:8b:37:5a: 0c:a2:2d:d9:46:c2:0f:ac:a9:2d:49:0c:f9:30:fa: ad:f9:af:f5:d9:5e:ad:4c:bd:a5:15:a7:82:7c:87: 6b:4d:4d:9a:04:e4:a2:da:fd:c3:b3:50:86:62:06: 2e:8e:3f:24:91:24:9b:fc:c5:8f:8c:90:52:f5:c8: 47:c8:36:35:79:09:e4:e8:08:5a:c2:d7:47:06:4d: d3:98:ce:95:c9:7a:5b:6b:dc:91:39:ca:77:97:fc: a4:ff:75:3d:be:8a:b0:23:f2:55:eb:5f:20:17:8f: dc:eb:b6:86:ec:90:3d:68:b7:24:53:86:3d:6e:ed: 34:d2:0c:90:28:85:6b:4b:16:fe:3d:ca:ad:1b:7e: da:58:5d:62:1d:23:c2:95:41:2f:74:00:2f:91:22: 84:5a:73:68:86:f2:a5:d7:9c:e1:c0:d9:a0:06:fa: 97:f4:5c:eb:0e:f8:4a:36:ef:1d:56:f5:cf:4a:c8: d9:2a:73:8f:93:7f:f9:e9:ab:42:c8:e1:b1:3a:ab: e1:8f:84:a3:d1:cc:15:39:f0:7b:04:bb:61:cc:fc: 45:22:6d:74:05:8a:f0:dc:fa:15:e7:d9:25:30:12: be:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BB:1D:C1:43:07:B6:0C:BB:1C:37:DB:1F:2F:01:77:3F:04:40:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4da48b61-b86f-364f-8202-7a45652e7804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 8.8.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:30:57:8c:c0:a4:bf:ce:ff:b1:b5:dd:43:61:a4:da:00:7f: f6:2f:09:29:2c:86:82:90:76:c7:ca:2f:40:a2:cc:c7:cd:7e: 05:aa:a9:c0:59:ab:fa:64:ff:a2:78:c5:47:21:79:0d:42:1e: 39:6c:ae:d6:ee:e5:cf:4c:36:da:06:dc:11:bc:ef:bc:d4:b9: 8b:b3:6f:38:87:fe:d1:ff:d4:ca:d7:94:a4:c4:83:f6:37:43: 25:63:df:19:46:9f:e2:5e:df:1a:0c:12:3f:95:69:c0:cd:41: 80:0e:18:4c:8c:47:9e:21:f0:e5:9f:b5:46:72:8f:b4:bc:6d: 21:c4:55:c5:5f:ee:7c:54:f4:14:a8:ef:0b:88:3d:d2:61:c0: 71:fb:e4:ed:e6:4f:e5:e6:80:8d:0d:9c:d4:01:0c:e6:8c:14: 2e:48:54:de:b5:0e:03:1a:72:be:de:17:5b:b0:8c:a9:37:28: 5c:4e:5c:72:f9:fe:39:2d:14:7c:cd:6d:57:d1:44:ce:8f:b8: 34:77:b8:f6:a4:63:a5:4b:92:65:91:c5:21:f0:ca:3c:10:f9: bd:9b:f2:e9:e1:af:cd:fd:06:59:91:11:ec:8b:67:65:ab:c1: 04:45:29:97:ce:97:4d:41:20:8f:b8:32:f7:49:fd:cc:99:ee: 72:57:79:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyKLaAbb87ZQEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Y2ZjYTdiNzItZDVhNi00MjcxLWIwM2YtM2EyN2NjMzU3Zjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowEGDzK8hYF4085QqVSM4q4srZQJ1t51yJqL N1oMoi3ZRsIPrKktSQz5MPqt+a/12V6tTL2lFaeCfIdrTU2aBOSi2v3Ds1CGYgYu jj8kkSSb/MWPjJBS9chHyDY1eQnk6AhawtdHBk3TmM6VyXpba9yROcp3l/yk/3U9 voqwI/JV618gF4/c67aG7JA9aLckU4Y9bu000gyQKIVrSxb+PcqtG37aWF1iHSPC lUEvdAAvkSKEWnNohvKl15zhwNmgBvqX9FzrDvhKNu8dVvXPSsjZKnOPk3/56atC yOGxOqvhj4Sj0cwVOfB7BLthzPxFIm10BYrw3PoV59klMBK+twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPK7HcFDB7YMuxw32x8vAXc/BEBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGRhNDhiNjEtYjg2Zi0z NjRmLTgyMDItN2E0NTY1MmU3ODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAwV4zApL/O/7G13UNhpNoAf/YvCSkshoKQdsfKL0CizMfNfgWqqcBZ q/pk/6J4xUcheQ1CHjlsrtbu5c9MNtoG3BG877zUuYuzbziH/tH/1MrXlKTEg/Y3 QyVj3xlGn+Je3xoMEj+VacDNQYAOGEyMR54h8OWftUZyj7S8bSHEVcVf7nxU9BSo 7wuIPdJhwHH75O3mT+XmgI0NnNQBDOaMFC5IVN61DgMacr7eF1uwjKk3KFxOXHL5 /jktFHzNbVfRRM6PuDR3uPakY6VLkmWRxSHwyjwQ+b2b8unhr839BlmREeyLZ2Wr wQRFKZfOl01BII+4MvdJ/cyZ7nJXedg= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:27 2025 by rpki-client