$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609/8486755a-62b2-3566-9ce6-635db082ca4c.roa File: 8486755a-62b2-3566-9ce6-635db082ca4c.roa (raw, json) Hash identifier: aXKJ6mXyEW/zSr2LGHJbEXlY9s2xmPKOC2mSvOvdFTo= Subject key identifier: 60:3A:8B:64:60:1A:0C:A1:5B:3A:8A:18:05:B4:4E:30:24:60:A0:DD Certificate issuer: /CN=7455b21a-a7e4-4b9f-b734-3a4f05530609 Certificate serial: 010D0C9F4328584BA122B61D8C4F7F5FB47F0C50 Authority key identifier: 8A:4F:D6:5D:51:EF:F9:C5:B1:4E:D4:DA:F4:E7:71:F5:13:CD:E8:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609/8486755a-62b2-3566-9ce6-635db082ca4c.roa Signing time: Fri 24 Oct 2025 15:42:47 +0000 ROA not before: Fri 24 Oct 2025 15:42:47 +0000 ROA not after: Thu 22 Jan 2026 16:42:47 +0000 asID: 395748 IP address blocks: 144.249.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609/7455b21a-a7e4-4b9f-b734-3a4f05530609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609/7455b21a-a7e4-4b9f-b734-3a4f05530609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a1:22:b6:1d:8c:4f:7f:5f:b4:7f:0c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7455b21a-a7e4-4b9f-b734-3a4f05530609 Validity Not Before: Oct 24 15:42:47 2025 GMT Not After : Jan 22 16:42:47 2026 GMT Subject: CN=121013ae-cb8b-429b-896c-7cd0f10f70a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1d:42:73:ad:5c:27:56:40:7f:59:6e:b9:0f: 77:c2:ee:4a:b5:b5:b6:2a:a2:5a:04:39:db:4e:df: c2:9f:03:77:5d:86:46:10:8b:b3:cb:53:25:42:4e: 47:bb:0e:dd:49:55:5f:ec:7d:d7:c2:be:8a:c0:e3: b4:e4:e3:b2:8e:fb:ac:06:51:f8:19:b2:0a:e5:ba: 41:26:84:1c:9d:24:22:28:cc:03:14:5a:27:02:91: 13:94:da:74:89:57:55:b6:ba:98:d7:23:94:00:01: b4:f3:fd:c9:f6:25:64:5b:b6:e1:0a:60:bb:b4:7b: c3:87:53:5e:88:3b:a0:21:8f:34:66:33:87:ea:94: 43:05:a7:cc:00:ac:8d:02:74:31:1e:d3:97:cc:47: d3:2d:03:e7:c5:94:74:4b:29:53:d6:55:cc:94:46: 3c:9c:bb:d6:27:a6:9c:aa:67:8b:2a:6e:f3:6d:c2: 03:41:15:bc:04:3d:16:bb:33:55:52:11:fe:1d:9b: 01:5d:73:58:63:c4:75:14:ad:e7:8e:92:26:3e:9a: 16:7c:43:07:8f:bc:a9:f9:8a:98:c0:9a:77:28:96: 2d:07:9a:bb:64:55:59:06:46:a0:f8:7d:ce:8f:c4: 97:cc:1d:3f:4f:25:60:d1:a3:59:08:38:3d:40:4b: e6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3A:8B:64:60:1A:0C:A1:5B:3A:8A:18:05:B4:4E:30:24:60:A0:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609/8486755a-62b2-3566-9ce6-635db082ca4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609/7455b21a-a7e4-4b9f-b734-3a4f05530609.crl X509v3 Authority Key Identifier: keyid:8A:4F:D6:5D:51:EF:F9:C5:B1:4E:D4:DA:F4:E7:71:F5:13:CD:E8:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609.cer sbgp-ipAddrBlock: critical IPv4: 144.249.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e8:5a:16:f7:86:47:23:16:5e:7e:dd:90:ec:43:d4:5f:23: 82:e5:fb:34:1a:d3:12:9d:17:01:da:d4:32:f7:6b:15:30:a0: 79:82:57:57:e4:2b:ac:f4:07:0b:a5:06:12:57:00:8d:05:44: ce:38:68:a1:2a:09:36:fe:c2:6b:f7:9b:cf:ab:73:91:6f:71: 1d:4e:a9:89:38:de:ae:20:a9:ec:e4:7b:8e:88:57:ef:75:b0: 4f:45:ce:cd:f2:3b:c8:a0:64:b5:67:47:8f:cd:b1:dc:08:5c: f1:c0:95:53:12:07:57:06:f3:e4:89:3a:31:a5:83:98:b3:71: ad:04:4a:22:aa:39:51:45:5c:8e:ba:47:66:0e:90:a0:57:7a: 9a:92:c5:5b:dd:07:1e:26:9f:11:07:2c:df:64:49:50:55:90: f7:c8:a0:aa:44:2e:7e:2c:69:43:d8:6d:5d:0f:3a:0d:c0:94: ce:e4:ca:7b:fa:e9:32:c7:d6:34:82:35:fe:4c:6c:59:b7:c2: 70:22:50:2d:7d:9a:59:ab:a7:9e:ec:b8:0c:37:25:26:fd:b2: fe:60:d2:40:12:00:50:e8:83:9d:d2:31:58:7e:f7:e2:ae:a0: 2e:a2:e3:94:0a:a7:c0:b9:bd:3f:90:01:0a:81:28:39:12:d2: c2:b5:41:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuhIrYdjE9/X7R/DFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ1NWIyMWEtYTdlNC00YjlmLWI3MzQtM2E0ZjA1NTMw NjA5MB4XDTI1MTAyNDE1NDI0N1oXDTI2MDEyMjE2NDI0N1owLzEtMCsGA1UEAxMk MTIxMDEzYWUtY2I4Yi00MjliLTg5NmMtN2NkMGYxMGY3MGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7R1Cc61cJ1ZAf1luuQ93wu5KtbW2KqJaBDnb Tt/CnwN3XYZGEIuzy1MlQk5Huw7dSVVf7H3Xwr6KwOO05OOyjvusBlH4GbIK5bpB JoQcnSQiKMwDFFonApETlNp0iVdVtrqY1yOUAAG08/3J9iVkW7bhCmC7tHvDh1Ne iDugIY80ZjOH6pRDBafMAKyNAnQxHtOXzEfTLQPnxZR0SylT1lXMlEY8nLvWJ6ac qmeLKm7zbcIDQRW8BD0WuzNVUhH+HZsBXXNYY8R1FK3njpImPpoWfEMHj7yp+YqY wJp3KJYtB5q7ZFVZBkag+H3Oj8SXzB0/TyVg0aNZCDg9QEvmgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGA6i2RgGgyhWzqKGAW0TjAkYKDdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDU1 YjIxYS1hN2U0LTRiOWYtYjczNC0zYTRmMDU1MzA2MDkvODQ4Njc1NWEtNjJiMi0z NTY2LTljZTYtNjM1ZGIwODJjYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzQ1NWIyMWEtYTdlNC00YjlmLWI3 MzQtM2E0ZjA1NTMwNjA5Lzc0NTViMjFhLWE3ZTQtNGI5Zi1iNzM0LTNhNGYwNTUz MDYwOS5jcmwwHwYDVR0jBBgwFoAUik/WXVHv+cWxTtTa9Odx9RPN6FAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83NDU1YjIxYS1hN2U0LTRiOWYtYjczNC0zYTRm MDU1MzA2MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkPnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjoWhb3hkcjFl5+3ZDsQ9RfI4Ll+zQa0xKdFwHa1DL3axUwoHmCV1fk K6z0BwulBhJXAI0FRM44aKEqCTb+wmv3m8+rc5FvcR1OqYk43q4gqezke46IV+91 sE9Fzs3yO8igZLVnR4/NsdwIXPHAlVMSB1cG8+SJOjGlg5izca0ESiKqOVFFXI66 R2YOkKBXepqSxVvdBx4mnxEHLN9kSVBVkPfIoKpELn4saUPYbV0POg3AlM7kynv6 6TLH1jSCNf5MbFm3wnAiUC19mlmrp57suAw3JSb9sv5g0kASAFDog53SMVh+9+Ku oC6i45QKp8C5vT+QAQqBKDkS0sK1QSo= -----END CERTIFICATE-----Generated at Sat Oct 25 13:43:20 2025 by rpki-client