$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/87d0acb5-93e2-396b-9698-d729bf36220e.roa File: 87d0acb5-93e2-396b-9698-d729bf36220e.roa (raw, json) Hash identifier: Q+ACU+v7QEigx3mLd9P5xra5zDDqe2K/KPu+VaGraFA= Subject key identifier: F9:87:0C:AB:50:64:89:BF:51:FD:83:23:DB:1D:4D:8F:F9:0B:86:E1 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584BDCF5E57EAF2566BB14A20EC0 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/87d0acb5-93e2-396b-9698-d729bf36220e.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 174 IP address blocks: 204.117.94.0/24 maxlen: 24 204.117.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:e5:7e:af:25:66:bb:14:a2:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=1e7ff372-36ba-4c9e-9ec6-10468000b8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:38:6c:28:74:54:a5:9c:43:d8:01:54:77: 15:d9:f6:43:67:c2:cb:56:6d:5a:06:51:47:8b:cf: ce:4d:c1:5b:59:78:61:f6:43:64:05:be:d5:7d:e0: 12:47:ab:9f:22:76:e6:15:b3:52:2b:89:8b:a7:a0: ac:cd:1b:83:e9:0d:c0:3c:af:67:32:eb:15:3e:ee: 6b:78:4f:37:00:d6:22:6d:04:bb:19:1f:3c:c3:94: 60:f1:1f:fd:c2:a8:ff:d2:a8:6d:1a:4a:1d:ed:25: c0:8a:a8:7f:44:d8:bc:03:9c:d4:6a:94:b5:62:19: 9f:a8:dd:f9:5a:ef:8a:9d:8a:19:29:fe:74:1f:f8: 1f:83:45:36:50:3b:5e:30:15:16:9b:ef:c1:3b:48: 64:67:da:61:06:a8:5a:63:c2:52:76:2e:2f:04:85: a6:e1:57:10:87:eb:3e:d7:39:da:e7:36:ee:40:a9: ec:e2:ba:e7:99:0a:21:b0:29:a1:33:b9:c0:5a:4f: 50:b5:eb:66:f2:66:24:a2:a8:a4:b0:0f:fe:ea:fd: a7:5e:a4:4a:39:b8:1a:f4:74:8c:ab:dc:e0:8b:20: bd:15:b0:05:bb:54:f4:be:e0:4d:1f:71:fe:d3:3d: 00:c4:2f:cd:29:7c:77:c9:21:f3:4f:ad:1c:1f:a9: 89:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:87:0C:AB:50:64:89:BF:51:FD:83:23:DB:1D:4D:8F:F9:0B:86:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/87d0acb5-93e2-396b-9698-d729bf36220e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.117.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c0:67:f1:bf:98:fc:49:5a:81:45:aa:12:7f:1f:51:5a:ca: 1b:9f:d9:d9:6b:af:14:a1:25:fa:65:8e:fd:e6:8d:e2:de:83: 82:a5:c2:c5:1c:02:28:39:08:94:f6:d7:bc:04:93:a2:87:af: df:69:5d:97:f4:b8:3c:10:16:dc:41:15:ac:6d:30:dc:b5:ea: bb:3d:34:23:2f:3f:6d:2d:82:9b:b4:04:e3:49:df:95:b7:cc: ce:4c:1d:c7:a5:01:e5:c4:40:32:4b:be:e7:cf:e1:a0:a7:5d: 0e:3c:6f:ad:cf:88:e5:e5:08:e5:2d:13:45:22:3d:ad:3d:34: e7:90:c6:b2:17:8f:aa:ae:f4:ef:51:d8:06:29:f9:72:50:76: 6a:06:55:47:0b:53:09:43:b1:49:99:95:e4:c8:95:06:2f:93: 24:1f:73:32:2f:81:73:c5:40:00:45:58:81:75:c2:c0:15:6e: 7c:14:fd:14:5f:56:0d:c8:38:29:fb:b9:36:65:b5:86:f3:ed: 88:32:93:01:dd:f5:8e:39:90:3f:b2:99:a8:b2:3f:5e:9c:f8: 56:af:92:ae:ef:39:3f:e5:02:da:dc:c9:52:bb:46:31:fa:b5: f8:04:75:6f:f7:35:2a:0e:2b:fc:fc:c3:bd:d3:47:ac:72:a6: 5d:76:d3:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9eV+ryVmuxSiDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk MWU3ZmYzNzItMzZiYS00YzllLTllYzYtMTA0NjgwMDBiOGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gw4bCh0VKWcQ9gBVHcV2fZDZ8LLVm1aBlFH i8/OTcFbWXhh9kNkBb7VfeASR6ufInbmFbNSK4mLp6CszRuD6Q3APK9nMusVPu5r eE83ANYibQS7GR88w5Rg8R/9wqj/0qhtGkod7SXAiqh/RNi8A5zUapS1YhmfqN35 Wu+KnYoZKf50H/gfg0U2UDteMBUWm+/BO0hkZ9phBqhaY8JSdi4vBIWm4VcQh+s+ 1zna5zbuQKns4rrnmQohsCmhM7nAWk9Qtetm8mYkoqiksA/+6v2nXqRKObga9HSM q9zgiyC9FbAFu1T0vuBNH3H+0z0AxC/NKXx3ySHzT60cH6mJQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmHDKtQZIm/Uf2DI9sdTY/5C4bhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvODdkMGFjYjUtOTNlMi0z OTZiLTk2OTgtZDcyOWJmMzYyMjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzHVeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbAZ/G/mPxJWoFFqhJ/H1Fayhuf2dlrrxShJfpljv3mjeLeg4KlwsUc Aig5CJT217wEk6KHr99pXZf0uDwQFtxBFaxtMNy16rs9NCMvP20tgpu0BONJ35W3 zM5MHcelAeXEQDJLvufP4aCnXQ48b63PiOXlCOUtE0UiPa09NOeQxrIXj6qu9O9R 2AYp+XJQdmoGVUcLUwlDsUmZleTIlQYvkyQfczIvgXPFQABFWIF1wsAVbnwU/RRf Vg3IOCn7uTZltYbz7YgykwHd9Y45kD+ymaiyP16c+Favkq7vOT/lAtrcyVK7RjH6 tfgEdW/3NSoOK/z8w73TR6xypl120/s= -----END CERTIFICATE-----Generated at Mon Nov 17 04:26:37 2025 by rpki-client