$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/f87d39b3-d007-34bf-8596-e763e004b91b.roa File: f87d39b3-d007-34bf-8596-e763e004b91b.roa (raw, json) Hash identifier: WByV3N20i+y1JY+ehA1WCkNWHY6fpwM7MFgo3KgLt8E= Subject key identifier: AC:1F:3B:18:D9:C2:A1:06:33:77:E6:AD:07:D8:A0:51:77:56:50:93 Certificate issuer: /CN=48b02ed2-f897-45be-b9fb-346294418ecb Certificate serial: 010D0C9F4328584B99D7887F6112E0DE28AAF180 Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/f87d39b3-d007-34bf-8596-e763e004b91b.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 19331 IP address blocks: 69.55.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:88:7f:61:12:e0:de:28:aa:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=56b9dc9a-2e03-4f92-b06d-817b47b9bea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:75:04:2d:09:df:20:bd:a4:1d:74:23:55:5b: a5:a0:71:39:7f:de:8f:0e:1e:87:df:1b:7e:12:26: ee:d7:a0:93:c8:7c:88:53:05:9f:80:0b:3b:1b:71: bf:ce:6d:80:0d:ce:88:a2:35:e2:b3:cf:a5:a4:db: 61:0b:1f:d4:08:0b:ec:48:f2:c0:de:d4:8a:ce:97: 0e:a4:1c:e8:66:6c:cc:7d:30:04:0a:1d:5f:87:2e: 92:48:5a:66:2a:d0:37:85:9a:35:7c:d1:7c:c2:f7: 35:7e:05:cd:d8:04:b3:c6:81:27:9f:23:de:62:ef: 33:b7:fd:0c:8a:d2:60:01:9a:85:17:46:3e:fa:9d: e5:59:f9:e6:f9:3f:85:79:ec:da:fc:b4:84:ec:73: 6c:4e:7b:4b:06:5e:11:55:e3:7d:0c:6b:cf:2b:f8: 64:27:41:5e:7b:e9:1e:b1:98:e9:29:e4:cd:b0:cc: ed:08:fc:e0:b9:7c:fa:5d:5a:09:a3:39:77:33:c2: ef:ed:80:2f:11:9e:60:38:15:85:20:6c:a4:2f:7e: 49:bc:25:93:c1:7f:98:ea:da:cc:36:42:fd:cb:32: 1c:0d:66:95:4b:4e:2a:bf:5e:52:8e:27:f3:ce:5d: a7:2e:d8:94:a0:4f:82:d1:8e:66:f6:df:15:56:cc: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1F:3B:18:D9:C2:A1:06:33:77:E6:AD:07:D8:A0:51:77:56:50:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/f87d39b3-d007-34bf-8596-e763e004b91b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl X509v3 Authority Key Identifier: keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer sbgp-ipAddrBlock: critical IPv4: 69.55.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:52:a8:81:8d:22:fc:fc:1a:91:85:a7:59:ce:01:48:a1:b5: 0d:0f:d4:77:c8:b5:d0:19:bd:d2:bb:bc:19:f0:1b:3f:be:53: 54:65:48:b7:c0:2b:05:e9:b5:c7:19:8c:82:6f:73:ed:c4:1e: 40:5c:98:cb:aa:43:42:b7:69:97:7e:44:42:eb:64:67:02:d8: 4e:7c:be:af:da:8f:b6:ca:0d:20:9d:2c:ac:c2:c2:30:cf:ee: 4e:c1:b0:48:4c:64:16:f3:e7:8d:f2:6e:aa:58:c4:bb:08:ce: 95:62:f5:6b:d8:d5:9c:4b:cf:2a:8a:cc:8e:06:d3:dc:90:38: c1:47:f3:b6:ca:1c:02:d3:69:c3:3d:ac:17:b8:70:da:ce:c7: cd:7f:cb:74:09:69:51:7f:70:fa:c8:57:be:29:60:c3:5b:47: a3:92:11:b5:11:be:d9:9e:0d:5d:ae:d6:65:4e:be:d1:52:82: 86:9e:c0:5e:65:0b:7f:01:41:1b:84:82:5f:11:71:e7:54:68: a4:8d:d0:9e:da:13:db:91:3b:12:13:f4:e0:c2:68:08:18:9e: 50:02:4e:26:f0:b1:40:31:e8:7b:88:98:53:03:0f:21:06:c1: f3:f5:37:1e:f0:4e:94:ef:fa:f7:1c:70:05:9f:2e:56:b5:3a: 59:ea:3c:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14h/YRLg3iiq8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhiMDJlZDItZjg5Ny00NWJlLWI5ZmItMzQ2Mjk0NDE4 ZWNiMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTZiOWRjOWEtMmUwMy00ZjkyLWIwNmQtODE3YjQ3YjliZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XUELQnfIL2kHXQjVVuloHE5f96PDh6H3xt+ Eibu16CTyHyIUwWfgAs7G3G/zm2ADc6IojXis8+lpNthCx/UCAvsSPLA3tSKzpcO pBzoZmzMfTAECh1fhy6SSFpmKtA3hZo1fNF8wvc1fgXN2ASzxoEnnyPeYu8zt/0M itJgAZqFF0Y++p3lWfnm+T+Feeza/LSE7HNsTntLBl4RVeN9DGvPK/hkJ0Fee+ke sZjpKeTNsMztCPzguXz6XVoJozl3M8Lv7YAvEZ5gOBWFIGykL35JvCWTwX+Y6trM NkL9yzIcDWaVS04qv15Sjifzzl2nLtiUoE+C0Y5m9t8VVsztWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwfOxjZwqEGM3fmrQfYoFF3VlCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80OGIw MmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYyOTQ0MThlY2IvZjg3ZDM5YjMtZDAwNy0z NGJmLTg1OTYtZTc2M2UwMDRiOTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDhiMDJlZDItZjg5Ny00NWJlLWI5 ZmItMzQ2Mjk0NDE4ZWNiLzQ4YjAyZWQyLWY4OTctNDViZS1iOWZiLTM0NjI5NDQx OGVjYi5jcmwwHwYDVR0jBBgwFoAU8ShDZzN0rvFkkge9rUVjecCogvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80OGIwMmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYy OTQ0MThlY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERTdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRSqIGNIvz8GpGFp1nOAUihtQ0P1HfItdAZvdK7vBnwGz++U1RlSLfA KwXptccZjIJvc+3EHkBcmMuqQ0K3aZd+RELrZGcC2E58vq/aj7bKDSCdLKzCwjDP 7k7BsEhMZBbz543ybqpYxLsIzpVi9WvY1ZxLzyqKzI4G09yQOMFH87bKHALTacM9 rBe4cNrOx81/y3QJaVF/cPrIV74pYMNbR6OSEbURvtmeDV2u1mVOvtFSgoaewF5l C38BQRuEgl8RcedUaKSN0J7aE9uROxIT9ODCaAgYnlACTibwsUAx6HuImFMDDyEG wfP1Nx7wTpTv+vcccAWfLla1OlnqPIE= -----END CERTIFICATE-----Generated at Wed Nov 5 22:16:13 2025 by rpki-client