$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/dee2880f-49c5-3f2a-8c41-4384493eed4f.roa File: dee2880f-49c5-3f2a-8c41-4384493eed4f.roa (raw, json) Hash identifier: nz5GuTlaj5T+hgAYCSdkxdjUUPOeNoL5WnAmhEYfhVo= Subject key identifier: 7B:11:97:4A:92:69:F3:0A:7F:5F:A9:B9:EE:20:66:77:A6:31:59:42 Certificate issuer: /CN=9d948f00-81b9-4e48-b4ec-8b2a1272c17b Certificate serial: 010D0C9F4328584B2496CCFB5670D092FEECFD80 Authority key identifier: C9:65:92:2C:3A:B0:AD:1F:B3:FE:08:61:5C:BF:BA:2B:23:DB:10:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/dee2880f-49c5-3f2a-8c41-4384493eed4f.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 399968 IP address blocks: 204.126.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:cc:fb:56:70:d0:92:fe:ec:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d948f00-81b9-4e48-b4ec-8b2a1272c17b Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=5773c097-040b-4bda-88d5-5f01d310ad57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e9:58:ce:5b:ee:53:e0:bf:20:74:1f:fb:72: 71:98:94:4f:90:db:74:13:09:1b:4e:fa:08:f5:0e: a9:06:c6:f1:8d:43:f7:0f:83:26:c3:a1:30:4a:56: 21:b9:18:a5:50:8a:52:bc:12:b3:2e:04:77:3c:44: b4:bf:30:6f:ab:ca:6a:71:af:70:4d:41:d2:c0:cd: 48:63:68:8c:e2:c5:d9:5d:02:93:bd:bf:e4:dd:7a: 8e:b3:df:b9:6e:e1:76:fe:51:8d:7f:d3:d3:02:7e: 2a:5c:4b:06:a7:a1:26:60:0d:6b:6c:55:c7:d9:12: 82:ff:f6:c8:f6:42:8f:6e:39:c1:d3:eb:f8:7c:cb: f4:f6:fd:81:24:22:cc:b8:bd:74:fe:79:e3:53:21: 8f:cb:51:c4:62:f9:ef:11:21:9e:d5:26:c9:a3:97: 03:bb:41:ff:72:37:83:eb:00:39:2a:b4:44:d9:3a: db:db:d6:2a:8f:49:18:6c:24:ee:fb:13:be:e3:57: f2:c6:7b:56:6b:89:0a:12:77:4d:a8:73:e9:58:61: 68:5d:15:f6:67:0b:9c:ae:4b:8d:67:62:a4:0e:08: 60:b2:14:6f:12:15:16:16:e5:67:69:e3:68:2b:ad: bc:e3:84:7c:73:cf:6c:a4:39:04:31:d6:aa:48:09: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:11:97:4A:92:69:F3:0A:7F:5F:A9:B9:EE:20:66:77:A6:31:59:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/dee2880f-49c5-3f2a-8c41-4384493eed4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.crl X509v3 Authority Key Identifier: keyid:C9:65:92:2C:3A:B0:AD:1F:B3:FE:08:61:5C:BF:BA:2B:23:DB:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9d948f00-81b9-4e48-b4ec-8b2a1272c17b.cer sbgp-ipAddrBlock: critical IPv4: 204.126.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:19:1f:cd:2a:59:b8:4c:da:fb:9b:67:a3:b0:05:bf:bb:d9: c1:9a:1d:42:34:23:34:e5:b3:0c:83:41:64:c7:07:08:cb:49: 86:81:3d:4c:e6:8b:89:34:5a:9e:90:c9:5f:c3:eb:f4:4e:37: 6c:92:6c:16:a7:3c:b0:18:24:fb:ef:ec:f2:b0:23:17:d1:6a: 77:d8:7f:5e:e1:3d:0c:08:6c:3a:57:a4:28:07:12:00:bd:78: 82:dd:17:e2:b9:b7:df:37:9d:ea:d8:16:1e:d0:2e:1e:f7:ea: 51:50:24:41:fb:d5:a5:c4:da:16:01:22:f4:0c:30:c5:d7:90: d8:2c:02:59:be:c5:09:99:20:7b:05:d1:e2:a9:25:90:89:9a: c8:d1:5c:c4:b5:3e:25:85:59:d7:ea:3f:d3:d7:b7:13:9a:c3: 45:dd:94:74:ca:ff:ec:46:cd:a2:2d:b7:40:cf:b1:15:13:44: e8:5d:1b:4c:f1:90:1e:d6:02:13:2e:ab:4f:91:e7:9b:a9:ef: d4:61:9a:fa:da:5d:d6:7c:99:95:83:43:22:80:f7:35:a9:e4: 63:df:bb:8a:e3:0e:b3:42:fb:72:c5:e7:77:1b:70:58:8d:c4: 69:74:18:2b:3b:c5:30:b2:c5:e2:c6:25:2b:1d:77:06:75:6a: 30:71:1a:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsz7VnDQkv7s/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQ5NDhmMDAtODFiOS00ZTQ4LWI0ZWMtOGIyYTEyNzJj MTdiMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NTc3M2MwOTctMDQwYi00YmRhLTg4ZDUtNWYwMWQzMTBhZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+lYzlvuU+C/IHQf+3JxmJRPkNt0EwkbTvoI 9Q6pBsbxjUP3D4Mmw6EwSlYhuRilUIpSvBKzLgR3PES0vzBvq8pqca9wTUHSwM1I Y2iM4sXZXQKTvb/k3XqOs9+5buF2/lGNf9PTAn4qXEsGp6EmYA1rbFXH2RKC//bI 9kKPbjnB0+v4fMv09v2BJCLMuL10/nnjUyGPy1HEYvnvESGe1SbJo5cDu0H/cjeD 6wA5KrRE2Trb29Yqj0kYbCTu+xO+41fyxntWa4kKEndNqHPpWGFoXRX2ZwucrkuN Z2KkDghgshRvEhUWFuVnaeNoK62844R8c89spDkEMdaqSAl67wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsRl0qSafMKf1+pue4gZnemMVlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZDk0 OGYwMC04MWI5LTRlNDgtYjRlYy04YjJhMTI3MmMxN2IvZGVlMjg4MGYtNDljNS0z ZjJhLThjNDEtNDM4NDQ5M2VlZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWQ5NDhmMDAtODFiOS00ZTQ4LWI0 ZWMtOGIyYTEyNzJjMTdiLzlkOTQ4ZjAwLTgxYjktNGU0OC1iNGVjLThiMmExMjcy YzE3Yi5jcmwwHwYDVR0jBBgwFoAUyWWSLDqwrR+z/ghhXL+6KyPbEF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZDk0OGYwMC04MWI5LTRlNDgtYjRlYy04YjJh MTI3MmMxN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzH78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUZH80qWbhM2vubZ6OwBb+72cGaHUI0IzTlswyDQWTHBwjLSYaBPUzm i4k0Wp6QyV/D6/RON2ySbBanPLAYJPvv7PKwIxfRanfYf17hPQwIbDpXpCgHEgC9 eILdF+K5t983nerYFh7QLh736lFQJEH71aXE2hYBIvQMMMXXkNgsAlm+xQmZIHsF 0eKpJZCJmsjRXMS1PiWFWdfqP9PXtxOaw0XdlHTK/+xGzaItt0DPsRUTROhdG0zx kB7WAhMuq0+R55up79RhmvraXdZ8mZWDQyKA9zWp5GPfu4rjDrNC+3LF53cbcFiN xGl0GCs7xTCyxeLGJSsddwZ1ajBxGtI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:10:31 2025 by rpki-client