$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa File: 58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa (raw, json) Hash identifier: Rg2ezLfC5NV/OxZ8XO3qYk3uX9q9kfiyJVOde1dZFYk= Subject key identifier: 92:6A:E7:27:F8:2C:0C:C8:DC:77:62:C6:6B:3E:C0:83:BE:31:1C:60 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B99D789F79CCA77E419AC9D00 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 1280 IP address blocks: 204.152.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:89:f7:9c:ca:77:e4:19:ac:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=3ce2a3f6-c4f1-4275-9427-9a52ed1ceb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3f:a1:b3:46:85:3f:b5:af:c3:d0:99:6e:50: b8:78:63:2b:bb:97:e7:80:f5:99:6b:7e:52:d8:1d: 12:06:88:b8:12:cf:fe:d5:46:bb:7c:38:ea:c1:98: 76:6c:f3:b3:c8:02:76:93:c8:18:bd:f5:a9:e5:f2: b7:cb:8a:ee:95:0c:1b:15:08:d0:78:5d:45:54:69: 9a:88:e9:1c:8c:fd:08:fc:c4:44:a3:5d:06:70:f3: 56:73:88:90:e4:51:9f:99:30:83:04:ef:73:6c:18: 0b:1c:47:ec:db:09:2f:9d:28:99:a8:55:ed:61:b1: de:ca:4a:17:5f:9a:65:37:7c:55:34:2e:77:b0:13: 3a:cf:82:26:d4:df:1a:b6:25:f1:f4:b3:3b:e6:12: a5:26:3e:06:ed:4c:20:cf:e5:f9:46:36:9d:87:bb: e1:d1:1a:0c:59:39:51:98:3d:47:58:88:c8:4e:fd: d4:00:a4:1a:a1:0c:a1:00:3e:f8:b9:cf:a5:51:75: 60:4c:4a:6e:5f:35:11:b8:ae:95:25:27:26:02:ee: fc:48:a9:ac:6e:11:29:51:ac:de:41:31:be:08:88: 9b:6d:41:75:2c:6d:81:90:32:01:14:72:df:ae:62: a2:b0:f3:ca:9e:bb:b0:72:1e:64:85:4d:97:cc:6c: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6A:E7:27:F8:2C:0C:C8:DC:77:62:C6:6B:3E:C0:83:BE:31:1C:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b8:76:0a:9d:3d:3f:72:a8:90:d3:cc:71:d3:4b:8f:ef:2f: 53:99:3b:ee:d2:39:06:ea:10:b0:91:8e:52:ae:fa:5d:49:50: 0e:01:92:ce:1b:51:53:6a:44:b5:ee:d9:b2:f0:04:1a:72:b9: c9:af:07:42:ce:6d:56:39:91:56:31:e0:e7:4a:96:d0:be:62: 3a:46:d7:1c:6a:66:1f:97:f7:a7:16:47:ca:89:ae:e1:75:e8: 17:a1:fa:3b:16:02:ed:2a:89:b8:b5:bd:87:d6:53:94:c2:9e: 62:02:c9:22:69:4f:c3:0b:94:d3:24:61:6c:8e:85:7d:01:3a: d1:aa:92:f5:ac:42:50:30:00:c5:ad:8f:b4:fd:83:e3:c0:7a: fc:32:71:cd:31:78:99:c4:56:bd:fd:f2:62:5c:d0:d8:73:2f: 56:75:16:36:41:a5:d3:61:17:b8:14:d9:ee:9f:c3:b2:41:03: b5:b2:b9:fa:5b:38:20:ce:32:25:03:aa:ff:12:79:a9:c9:b4: 4a:2c:aa:03:4d:10:9e:b7:8b:a3:22:23:e2:41:2d:51:84:de: 7d:10:a5:46:e6:9e:4a:69:14:0d:0b:15:1f:b9:56:ba:2d:07: 2b:84:09:67:62:48:2a:6e:4f:98:c8:28:ee:fe:d3:b1:4f:37: 88:a6:78:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14n3nMp35BmsnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk M2NlMmEzZjYtYzRmMS00Mjc1LTk0MjctOWE1MmVkMWNlYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz+hs0aFP7Wvw9CZblC4eGMru5fngPWZa35S 2B0SBoi4Es/+1Ua7fDjqwZh2bPOzyAJ2k8gYvfWp5fK3y4rulQwbFQjQeF1FVGma iOkcjP0I/MREo10GcPNWc4iQ5FGfmTCDBO9zbBgLHEfs2wkvnSiZqFXtYbHeykoX X5plN3xVNC53sBM6z4Im1N8atiXx9LM75hKlJj4G7Uwgz+X5Rjadh7vh0RoMWTlR mD1HWIjITv3UAKQaoQyhAD74uc+lUXVgTEpuXzURuK6VJScmAu78SKmsbhEpUaze QTG+CIibbUF1LG2BkDIBFHLfrmKisPPKnruwch5khU2XzGwrswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJq5yf4LAzI3Hdixms+wIO+MRxgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNThkZTQ1NTctMmFlZi0z N2I2LWIyN2EtM2Q3MGRhMWViNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq4dgqdPT9yqJDTzHHTS4/vL1OZO+7SOQbqELCRjlKu+l1JUA4Bks4b UVNqRLXu2bLwBBpyucmvB0LObVY5kVYx4OdKltC+YjpG1xxqZh+X96cWR8qJruF1 6Beh+jsWAu0qibi1vYfWU5TCnmICySJpT8MLlNMkYWyOhX0BOtGqkvWsQlAwAMWt j7T9g+PAevwycc0xeJnEVr398mJc0NhzL1Z1FjZBpdNhF7gU2e6fw7JBA7Wyufpb OCDOMiUDqv8SeanJtEosqgNNEJ63i6MiI+JBLVGE3n0QpUbmnkppFA0LFR+5Vrot ByuECWdiSCpuT5jIKO7+07FPN4imeGM= -----END CERTIFICATE-----Generated at Sun Oct 26 01:47:41 2025 by rpki-client