$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/1ba40751-0f06-3933-ad79-593be6c3f6ba.roa File: 1ba40751-0f06-3933-ad79-593be6c3f6ba.roa (raw, json) Hash identifier: gjCQxerkFAi/X30EOpT/jz2F5AaEcOlk9/DbrbflxlI= Subject key identifier: 9D:DA:FC:EF:67:94:CF:BC:11:36:62:C8:48:DA:97:DD:AE:69:8F:32 Certificate issuer: /CN=cdc373f2-7aee-4c17-9b33-e9d993543374 Certificate serial: 010D0C9F4328584AD3A0F9DD8B63FEF2F8178600 Authority key identifier: 4D:A6:67:E7:20:18:14:B4:1D:6F:2D:DD:D9:9C:D6:BA:8A:D7:C3:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/1ba40751-0f06-3933-ad79-593be6c3f6ba.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 13825 IP address blocks: 204.48.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f9:dd:8b:63:fe:f2:f8:17:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdc373f2-7aee-4c17-9b33-e9d993543374 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=c84be4f1-c321-4894-a898-0c83096fd2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ae:36:0a:0a:be:5c:bf:36:4f:b6:02:05:48: cf:da:f5:81:c2:06:d4:12:4f:a8:ee:ec:d0:98:03: 81:e0:a1:ff:da:3d:c1:64:cf:f9:62:60:3f:66:94: 44:4e:4d:cd:de:81:b5:5b:ee:45:0a:9e:13:92:4e: 58:05:9e:5f:df:06:94:f1:87:63:91:52:a6:37:96: b5:e3:54:67:30:59:d0:0e:63:5d:af:07:c6:59:c8: 29:3f:45:81:a9:eb:d9:08:fb:b3:a5:8a:4f:a0:1d: 75:ab:08:67:68:7c:90:19:cc:55:46:b6:a3:85:d3: 77:08:0f:69:13:55:5a:da:75:a5:1e:de:8e:35:ce: 47:e3:63:2d:14:44:31:fa:e5:33:dc:0b:73:f0:47: f0:de:e7:43:6a:a1:41:8f:b1:bb:7a:69:7a:1b:f5: 54:3d:95:85:25:71:81:5e:b8:cc:c2:a2:bf:47:39: a8:f4:46:02:eb:2c:96:68:bf:80:96:0f:ea:b6:4c: 89:6f:ce:9c:45:f3:ef:fa:a3:88:8f:bf:61:2e:97: ad:ab:59:2c:6e:3d:cc:95:cd:43:1a:2b:63:42:82: f0:7f:c3:db:a6:78:45:ff:2e:bf:0a:af:64:f6:ce: 4b:64:bf:2b:63:4d:fd:97:17:d7:69:b6:77:f9:7c: db:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DA:FC:EF:67:94:CF:BC:11:36:62:C8:48:DA:97:DD:AE:69:8F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/1ba40751-0f06-3933-ad79-593be6c3f6ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.crl X509v3 Authority Key Identifier: keyid:4D:A6:67:E7:20:18:14:B4:1D:6F:2D:DD:D9:9C:D6:BA:8A:D7:C3:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer sbgp-ipAddrBlock: critical IPv4: 204.48.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:9c:ef:c6:fd:2f:5c:8d:f3:81:19:a4:8e:3c:d0:b2:01:00: d8:4f:e2:0d:d9:7a:53:70:92:c3:5b:e9:1f:70:67:70:ef:99: 20:48:33:df:62:d7:0e:fd:88:3e:8a:ca:9b:85:9f:0d:da:5b: c3:28:ad:31:e3:fc:73:ca:c7:da:be:2a:c7:62:a7:c8:70:30: 32:cc:ac:3c:7b:c6:f1:ec:d8:2b:cc:4b:c2:f2:81:b4:9c:b8: 24:18:ec:c3:e6:e9:a9:33:ce:a9:43:19:6c:ef:b1:ae:13:f2: 95:96:79:41:8c:fb:c2:a2:15:ee:73:cd:5a:89:54:23:85:8c: 1c:1a:4f:39:2a:e1:a6:54:29:88:da:54:d1:9e:39:f1:fe:80: e7:cc:f4:7f:fe:6f:39:2d:dc:78:db:f0:d1:6c:64:8e:eb:0f: 53:33:3a:c1:5c:79:32:5e:81:8a:11:34:da:cd:2c:c2:9c:96: 0a:e2:13:03:60:87:4a:3d:37:dd:38:72:06:bf:36:24:bc:d4: 1c:fd:4f:9e:99:b5:9f:6e:cf:6c:3d:b1:af:91:ac:34:d2:f7: e1:4f:4f:1c:7b:7d:be:7f:93:fe:7a:6b:3e:8c:7d:70:58:15: 40:14:79:fe:75:ea:5e:c4:2f:c9:d8:8b:86:e8:83:10:b3:bd: 0c:67:d8:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPndi2P+8vgXhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RjMzczZjItN2FlZS00YzE3LTliMzMtZTlkOTkzNTQz Mzc0MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk Yzg0YmU0ZjEtYzMyMS00ODk0LWE4OTgtMGM4MzA5NmZkMmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja42Cgq+XL82T7YCBUjP2vWBwgbUEk+o7uzQ mAOB4KH/2j3BZM/5YmA/ZpRETk3N3oG1W+5FCp4Tkk5YBZ5f3waU8YdjkVKmN5a1 41RnMFnQDmNdrwfGWcgpP0WBqevZCPuzpYpPoB11qwhnaHyQGcxVRrajhdN3CA9p E1Va2nWlHt6ONc5H42MtFEQx+uUz3Atz8Efw3udDaqFBj7G7eml6G/VUPZWFJXGB XrjMwqK/Rzmo9EYC6yyWaL+Alg/qtkyJb86cRfPv+qOIj79hLpetq1ksbj3Mlc1D GitjQoLwf8PbpnhF/y6/Cq9k9s5LZL8rY039lxfXabZ3+XzbcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3a/O9nlM+8ETZiyEjal92uaY8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZGMz NzNmMi03YWVlLTRjMTctOWIzMy1lOWQ5OTM1NDMzNzQvMWJhNDA3NTEtMGYwNi0z OTMzLWFkNzktNTkzYmU2YzNmNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2RjMzczZjItN2FlZS00YzE3LTli MzMtZTlkOTkzNTQzMzc0L2NkYzM3M2YyLTdhZWUtNGMxNy05YjMzLWU5ZDk5MzU0 MzM3NC5jcmwwHwYDVR0jBBgwFoAUTaZn5yAYFLQdby3d2ZzWuorXw94wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZGMzNzNmMi03YWVlLTRjMTctOWIzMy1lOWQ5 OTM1NDMzNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDA9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmc78b9L1yN84EZpI480LIBANhP4g3ZelNwksNb6R9wZ3DvmSBIM99i 1w79iD6KypuFnw3aW8MorTHj/HPKx9q+Ksdip8hwMDLMrDx7xvHs2CvMS8LygbSc uCQY7MPm6akzzqlDGWzvsa4T8pWWeUGM+8KiFe5zzVqJVCOFjBwaTzkq4aZUKYja VNGeOfH+gOfM9H/+bzkt3Hjb8NFsZI7rD1MzOsFceTJegYoRNNrNLMKclgriEwNg h0o9N904cga/NiS81Bz9T56ZtZ9uz2w9sa+RrDTS9+FPTxx7fb5/k/56az6MfXBY FUAUef516l7EL8nYi4bogxCzvQxn2Gk= -----END CERTIFICATE-----Generated at Tue Oct 28 01:45:26 2025 by rpki-client