$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d3ebc08b-a6eb-3df3-bb70-a864a2584a63.roa File: d3ebc08b-a6eb-3df3-bb70-a864a2584a63.roa (raw, json) Hash identifier: b4rHV8UMhOmppA1d+15xo+6kzwzueDCfZNBU+sovzOM= Subject key identifier: BA:55:44:8C:27:25:09:EB:20:99:6C:23:7E:21:6D:A1:DA:0D:F6:83 Certificate issuer: /CN=acfb2995-9ee5-423c-a521-8d6490303e2d Certificate serial: 010D0C9F4328584BB1990067597A0EC8CA56F580 Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d3ebc08b-a6eb-3df3-bb70-a864a2584a63.roa Signing time: Thu 30 Oct 2025 13:14:03 +0000 ROA not before: Thu 30 Oct 2025 13:14:03 +0000 ROA not after: Wed 28 Jan 2026 14:14:03 +0000 asID: 812 IP address blocks: 204.50.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:99:00:67:59:7a:0e:c8:ca:56:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d Validity Not Before: Oct 30 13:14:03 2025 GMT Not After : Jan 28 14:14:03 2026 GMT Subject: CN=732cfb65-7d57-4586-a843-8f82a6842900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:9f:3a:db:35:f8:71:9b:c9:1e:0d:91:15: 27:a8:26:e4:72:07:d4:d0:72:e6:84:c4:68:26:05: 33:a3:ab:55:e9:1b:77:c9:e2:a4:09:49:87:6a:08: 71:db:61:77:d4:f5:e7:99:9b:57:c9:8f:21:76:1e: 9c:ff:c9:9d:65:8e:6e:96:c3:d1:bd:31:e9:e6:cb: a8:0d:41:ed:ba:fe:11:15:e5:f4:56:49:93:2b:19: b1:de:5f:2e:d3:af:0d:72:4f:3f:f6:9f:c5:09:29: e6:28:e0:22:67:de:8f:99:b8:5e:a4:3d:20:cb:69: c1:f1:a7:10:6f:8a:5d:8d:07:25:6a:c1:33:21:44: 8a:e6:28:ec:4f:45:44:00:37:b9:f0:ee:94:35:68: 14:b3:77:40:9a:3c:9f:1a:9e:a6:c2:28:69:0e:18: ed:d2:79:bd:74:14:1e:1a:ba:60:a5:b4:77:8c:40: b1:f7:03:b3:c9:ec:4c:4b:9d:f0:88:2c:67:ae:7a: ac:33:05:1c:8a:d5:33:32:33:81:49:f7:39:27:28: d5:b0:37:3e:bd:09:5b:91:71:3d:38:ec:95:9a:f2: 48:b9:30:60:d1:8a:13:3f:19:7c:36:49:1c:bb:86: ba:ec:8c:f6:f4:53:40:2d:bd:33:07:6a:d9:9e:53: e6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:55:44:8C:27:25:09:EB:20:99:6C:23:7E:21:6D:A1:DA:0D:F6:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d3ebc08b-a6eb-3df3-bb70-a864a2584a63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl X509v3 Authority Key Identifier: keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer sbgp-ipAddrBlock: critical IPv4: 204.50.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:65:82:93:d9:36:4b:e6:e1:ce:02:43:e5:5f:17:67:e7:be: 89:c3:55:12:1f:f5:96:6f:f9:40:1a:3d:f7:0f:1c:bf:93:8e: cf:30:de:f0:92:ed:39:ba:8c:21:7d:01:4b:cf:9a:81:6e:ab: f7:8d:da:03:82:ad:c6:7d:b1:d7:35:72:35:32:6a:ca:30:85: 4c:73:3b:30:39:4d:8c:6b:74:5f:b9:b7:f8:c2:60:0c:3b:4b: 67:d0:3d:eb:80:aa:14:9d:e4:bf:3b:fa:50:4a:71:d8:29:a8: 06:d6:27:cf:3c:28:1e:dc:57:67:02:b4:b4:bc:65:90:11:5d: 3a:14:7a:6c:4f:d2:1d:ed:8d:5a:0e:0a:19:c9:90:f7:24:92: 7e:f0:2a:5d:17:c1:7d:75:95:ee:b2:69:59:33:63:d2:ae:25: bb:f0:f2:7a:48:7a:31:a3:81:68:75:6f:73:66:df:15:ec:b3: 5c:fe:fc:2d:22:26:77:a6:8b:13:47:4f:aa:32:f9:d0:58:7a: 1c:68:30:da:25:55:3f:ab:6f:92:d2:c7:1b:e2:ab:59:02:15: fb:02:eb:e0:c7:49:f2:fd:ba:b5:28:b7:b3:dc:6b:9a:91:98: 6c:42:ec:0d:28:d9:a6:05:dc:57:32:a0:9c:73:84:7f:22:58: a5:a8:24:ed -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuxmQBnWXoOyMpW9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNmYjI5OTUtOWVlNS00MjNjLWE1MjEtOGQ2NDkwMzAz ZTJkMB4XDTI1MTAzMDEzMTQwM1oXDTI2MDEyODE0MTQwM1owLzEtMCsGA1UEAxMk NzMyY2ZiNjUtN2Q1Ny00NTg2LWE4NDMtOGY4MmE2ODQyOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMefOts1+HGbyR4NkRUnqCbkcgfU0HLmhMRo JgUzo6tV6Rt3yeKkCUmHaghx22F31PXnmZtXyY8hdh6c/8mdZY5ulsPRvTHp5suo DUHtuv4RFeX0VkmTKxmx3l8u068Nck8/9p/FCSnmKOAiZ96PmbhepD0gy2nB8acQ b4pdjQclasEzIUSK5ijsT0VEADe58O6UNWgUs3dAmjyfGp6mwihpDhjt0nm9dBQe GrpgpbR3jECx9wOzyexMS53wiCxnrnqsMwUcitUzMjOBSfc5JyjVsDc+vQlbkXE9 OOyVmvJIuTBg0YoTPxl8Nkkcu4a67Iz29FNALb0zB2rZnlPmrQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLpVRIwnJQnrIJlsI34hbaHaDfaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hY2Zi Mjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0OTAzMDNlMmQvZDNlYmMwOGItYTZlYi0z ZGYzLWJiNzAtYTg2NGEyNTg0YTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWNmYjI5OTUtOWVlNS00MjNjLWE1 MjEtOGQ2NDkwMzAzZTJkL2FjZmIyOTk1LTllZTUtNDIzYy1hNTIxLThkNjQ5MDMw M2UyZC5jcmwwHwYDVR0jBBgwFoAUehSoKkY4vznA/kUKxvqKtp/wp5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hY2ZiMjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0 OTAzMDNlMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzDIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXGWCk9k2S+bhzgJD5V8XZ+e+icNVEh/1lm/5QBo99w8cv5OOzzDe8JLt ObqMIX0BS8+agW6r943aA4Ktxn2x1zVyNTJqyjCFTHM7MDlNjGt0X7m3+MJgDDtL Z9A964CqFJ3kvzv6UEpx2CmoBtYnzzwoHtxXZwK0tLxlkBFdOhR6bE/SHe2NWg4K GcmQ9ySSfvAqXRfBfXWV7rJpWTNj0q4lu/Dyekh6MaOBaHVvc2bfFeyzXP78LSIm d6aLE0dPqjL50Fh6HGgw2iVVP6tvktLHG+KrWQIV+wLr4MdJ8v26tSi3s9xrmpGY bELsDSjZpgXcVzKgnHOEfyJYpagk7Q== -----END CERTIFICATE-----Generated at Mon Nov 3 14:49:22 2025 by rpki-client