$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d72a9570-1471-376b-ab21-ae1ce32b9ec1.roa File: d72a9570-1471-376b-ab21-ae1ce32b9ec1.roa (raw, json) Hash identifier: aJ6gukdORMN2T6J15J+c7Zp4rWjrbtxe3t1ZK6iyisc= Subject key identifier: BA:E3:85:97:4D:46:8F:70:D9:2F:09:D2:AA:53:95:06:84:A7:F0:FC Certificate issuer: /CN=acfb2995-9ee5-423c-a521-8d6490303e2d Certificate serial: 010D0C9F4328584B7C875D42C1F4EF49BFBDC680 Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d72a9570-1471-376b-ab21-ae1ce32b9ec1.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 32277 IP address blocks: 204.50.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:5d:42:c1:f4:ef:49:bf:bd:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=afed2fad-a0eb-45e8-9769-3bbaed7ff4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:ae:52:2b:24:82:31:07:4e:68:1c:da:06: c2:2c:85:83:50:06:8a:c4:cf:36:4e:de:a4:0b:31: de:27:f1:4b:c2:a5:dd:0b:33:cc:ee:82:ad:2e:48: cc:21:5a:a7:74:c2:88:d3:d6:0b:95:bc:d4:a3:e8: 7e:d9:e1:a5:aa:25:00:53:05:45:b7:9d:df:66:57: 21:53:d7:5c:2c:e0:ca:08:43:64:2a:a9:c1:21:ec: 13:bb:1e:27:f9:7e:82:04:88:29:59:cb:a5:93:84: c3:34:43:7b:0e:a2:2a:02:e7:35:01:36:23:69:d0: 3c:f8:3e:9c:7f:78:9b:2e:65:57:32:b3:91:ef:be: b2:82:45:af:f6:16:5d:06:99:bf:66:9a:7b:3a:14: 62:b4:eb:03:f5:a1:ca:51:1b:f4:ae:01:05:ac:8a: a7:88:20:4e:b2:7b:c8:9b:8a:3d:85:dc:e7:1b:58: 77:6b:3c:db:78:b2:76:a9:0b:e8:d9:b6:57:1c:b9: 25:eb:b9:85:5d:d2:86:7f:7c:3d:d4:ac:5c:a4:74: 42:4a:3b:ea:af:5e:3b:68:8b:52:bf:30:7c:99:98: 14:76:d4:38:13:0c:ab:ac:7a:00:31:07:e3:c9:5f: ea:d9:55:f8:dc:49:85:d6:6f:ed:0b:94:67:76:73: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E3:85:97:4D:46:8F:70:D9:2F:09:D2:AA:53:95:06:84:A7:F0:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d72a9570-1471-376b-ab21-ae1ce32b9ec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl X509v3 Authority Key Identifier: keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer sbgp-ipAddrBlock: critical IPv4: 204.50.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:33:bd:65:e4:07:ea:f5:9e:9f:d7:6e:4f:61:38:76:8e:38: 18:27:df:e0:71:0d:71:70:e1:e0:54:69:e1:79:25:94:8a:96: 2d:33:ed:e5:63:3d:14:d5:09:31:c1:54:1b:46:21:95:15:27: e1:ae:3e:68:79:cf:ff:72:92:6e:8d:ec:63:6b:7a:2a:80:39: 23:ea:0a:b2:77:6d:7c:04:f2:2f:be:5f:66:24:06:8a:98:eb: bc:31:29:17:59:7e:b5:e2:5b:8f:fa:1f:1c:f2:ce:32:c1:af: 46:26:51:b8:05:f7:f9:3c:52:df:45:fc:d1:fe:89:1f:4f:c5: cd:39:07:62:08:9d:55:a2:71:8e:fe:5e:07:73:b3:d6:fb:f9: 7b:87:be:f8:be:a5:3c:cf:b9:0d:9a:a7:22:e6:01:78:63:f9: b5:6c:af:c8:0c:d8:14:21:e1:a2:05:fd:16:9d:8f:c4:e0:d2: 59:e6:e8:77:e2:f6:c0:37:b0:74:99:e0:36:38:1d:a4:59:07: 69:7e:49:b8:00:6c:34:cb:a8:ce:c6:ef:9c:a4:f0:da:3c:ff: a8:0a:24:ca:fb:1f:b5:3d:c2:54:1a:9c:48:ea:bf:8b:da:71: 54:4a:67:83:75:be:fd:e7:a8:8e:47:05:7a:f8:b5:b2:7e:c8: 97:42:2c:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h11CwfTvSb+9xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNmYjI5OTUtOWVlNS00MjNjLWE1MjEtOGQ2NDkwMzAz ZTJkMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk YWZlZDJmYWQtYTBlYi00NWU4LTk3NjktM2JiYWVkN2ZmNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+6uUiskgjEHTmgc2gbCLIWDUAaKxM82Tt6k CzHeJ/FLwqXdCzPM7oKtLkjMIVqndMKI09YLlbzUo+h+2eGlqiUAUwVFt53fZlch U9dcLODKCENkKqnBIewTux4n+X6CBIgpWculk4TDNEN7DqIqAuc1ATYjadA8+D6c f3ibLmVXMrOR776ygkWv9hZdBpm/Zpp7OhRitOsD9aHKURv0rgEFrIqniCBOsnvI m4o9hdznG1h3azzbeLJ2qQvo2bZXHLkl67mFXdKGf3w91KxcpHRCSjvqr147aItS vzB8mZgUdtQ4EwyrrHoAMQfjyV/q2VX43EmF1m/tC5RndnM23QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrjhZdNRo9w2S8J0qpTlQaEp/D8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hY2Zi Mjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0OTAzMDNlMmQvZDcyYTk1NzAtMTQ3MS0z NzZiLWFiMjEtYWUxY2UzMmI5ZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWNmYjI5OTUtOWVlNS00MjNjLWE1 MjEtOGQ2NDkwMzAzZTJkL2FjZmIyOTk1LTllZTUtNDIzYy1hNTIxLThkNjQ5MDMw M2UyZC5jcmwwHwYDVR0jBBgwFoAUehSoKkY4vznA/kUKxvqKtp/wp5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hY2ZiMjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0 OTAzMDNlMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDKNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwzvWXkB+r1np/Xbk9hOHaOOBgn3+BxDXFw4eBUaeF5JZSKli0z7eVj PRTVCTHBVBtGIZUVJ+GuPmh5z/9ykm6N7GNreiqAOSPqCrJ3bXwE8i++X2YkBoqY 67wxKRdZfrXiW4/6HxzyzjLBr0YmUbgF9/k8Ut9F/NH+iR9Pxc05B2IInVWicY7+ Xgdzs9b7+XuHvvi+pTzPuQ2apyLmAXhj+bVsr8gM2BQh4aIF/Radj8Tg0lnm6Hfi 9sA3sHSZ4DY4HaRZB2l+SbgAbDTLqM7G75yk8No8/6gKJMr7H7U9wlQanEjqv4va cVRKZ4N1vv3nqI5HBXr4tbJ+yJdCLIE= -----END CERTIFICATE-----Generated at Mon Nov 3 14:44:56 2025 by rpki-client