$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/843d57d7-14a7-3349-a57b-8157cba92880.roa File: 843d57d7-14a7-3349-a57b-8157cba92880.roa (raw, json) Hash identifier: kcLIhHr3ss1dlWI7Vs4XgDAbgctXClLpeWH8UaVJ+BM= Subject key identifier: 54:93:AC:1C:C8:A0:E3:B4:40:C3:69:4B:59:EE:20:E8:33:66:4F:EB Certificate issuer: /CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317 Certificate serial: 010D0C9F4328584B398716E7E6D56911E667F880 Authority key identifier: 49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/843d57d7-14a7-3349-a57b-8157cba92880.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 10840 IP address blocks: 204.235.48.0/21 maxlen: 21 204.235.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:16:e7:e6:d5:69:11:e6:67:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=28916507-e570-4482-b120-4127065e35e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:5b:ee:b4:f3:f7:1d:4a:28:f5:49:0d:9f: 9d:33:e8:b4:10:1d:7c:6e:62:97:1b:e4:b5:21:4c: 96:f3:32:5e:8f:7d:70:85:1f:08:26:78:39:d6:ae: 8c:5c:39:42:90:9e:8c:71:3c:4e:97:12:54:24:5a: ba:12:96:43:ff:06:3e:b9:28:91:29:c6:d9:0d:1a: 9c:5c:23:81:39:56:94:dc:ea:f1:ed:bb:61:38:1e: 9e:0f:6d:1c:f9:72:d5:ec:94:2e:fe:77:a5:8b:14: 40:0f:e3:9c:26:6c:8b:05:0b:bd:f5:11:a1:47:75: 00:18:06:7f:8f:ad:f1:41:39:c4:90:b3:04:ff:26: 35:2b:76:d2:4f:50:c7:38:39:47:3e:b6:4c:55:f5: d6:53:fd:4c:0e:ea:9d:d2:fd:d8:a9:2c:5d:b3:3b: 37:c9:c2:d5:d2:e7:de:7b:62:a1:57:f6:ca:5e:d3: 9d:2b:2f:d5:c6:35:f9:1d:4f:35:64:ce:a0:75:d6: e4:2d:a6:fe:7a:70:52:b6:cf:7c:71:2c:e1:d4:6a: 36:c6:bb:6f:ad:7a:f0:15:4c:68:77:1d:c4:c3:db: 37:0f:77:64:c0:8c:a9:34:b2:fb:38:62:d7:d6:9d: d1:9d:32:1a:c1:0d:57:7d:e6:0d:3d:2d:71:48:c6: 1e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:93:AC:1C:C8:A0:E3:B4:40:C3:69:4B:59:EE:20:E8:33:66:4F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/843d57d7-14a7-3349-a57b-8157cba92880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl X509v3 Authority Key Identifier: keyid:49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer sbgp-ipAddrBlock: critical IPv4: 204.235.48.0-204.235.59.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:31:89:cd:28:e5:dc:fb:1e:91:a3:b6:84:ef:9f:e1:31:7c: 90:4e:8f:bd:93:a2:da:88:da:19:bc:a6:9a:0c:77:2d:b5:f3: 52:d3:66:ea:18:74:b2:f2:f0:30:6a:b2:49:84:2a:f6:33:c5: 94:f6:90:fa:28:d8:fb:e8:94:e1:a1:e0:4a:15:55:13:81:c0: 57:b4:1d:97:b5:d8:d2:e6:9c:e8:cd:2a:88:04:1c:9f:d6:a1: 05:16:30:00:81:57:d6:b5:47:c8:14:fa:c1:4a:b5:78:f2:15: 81:45:37:05:e0:23:bc:10:48:79:8d:92:c5:53:7d:00:18:81: 9e:1c:da:7f:a8:ed:e2:a4:2a:70:3d:c8:5a:c1:ac:e2:49:1c: c4:0c:1d:f9:82:51:5c:4d:a3:73:77:9e:61:57:ba:22:f0:f5: fb:c3:6e:b9:04:fb:32:b3:d8:db:02:a4:fb:c3:0e:40:2e:0f: e5:6e:ee:08:b1:52:e6:f0:ff:22:42:b7:f1:ea:65:c9:56:62: 25:77:a7:46:e2:43:db:e6:cb:7d:5e:e5:e2:4e:3c:29:72:ec: a1:66:37:13:f4:4d:ec:e1:ce:a1:70:6c:52:91:5c:95:ee:b6: 53:7d:57:07:a6:0a:72:0b:97:69:56:9f:7c:1c:b8:40:aa:b2: 29:a1:72:21 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEs5hxbn5tVpEeZn+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZiNDhjZTUtMjFhMy00YjYwLTliY2YtZjFlMGQ2YTQw MzE3MB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk Mjg5MTY1MDctZTU3MC00NDgyLWIxMjAtNDEyNzA2NWUzNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIFb7rTz9x1KKPVJDZ+dM+i0EB18bmKXG+S1 IUyW8zJej31whR8IJng51q6MXDlCkJ6McTxOlxJUJFq6EpZD/wY+uSiRKcbZDRqc XCOBOVaU3Orx7bthOB6eD20c+XLV7JQu/nelixRAD+OcJmyLBQu99RGhR3UAGAZ/ j63xQTnEkLME/yY1K3bST1DHODlHPrZMVfXWU/1MDuqd0v3YqSxdszs3ycLV0ufe e2KhV/bKXtOdKy/VxjX5HU81ZM6gddbkLab+enBSts98cSzh1Go2xrtvrXrwFUxo dx3Ew9s3D3dkwIypNLL7OGLX1p3RnTIawQ1XfeYNPS1xSMYeCwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFSTrBzIoOO0QMNpS1nuIOgzZk/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZmI0 OGNlNS0yMWEzLTRiNjAtOWJjZi1mMWUwZDZhNDAzMTcvODQzZDU3ZDctMTRhNy0z MzQ5LWE1N2ItODE1N2NiYTkyODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGZiNDhjZTUtMjFhMy00YjYwLTli Y2YtZjFlMGQ2YTQwMzE3LzBmYjQ4Y2U1LTIxYTMtNGI2MC05YmNmLWYxZTBkNmE0 MDMxNy5jcmwwHwYDVR0jBBgwFoAUSeRcJ/V6Cl/cyJrf5ya/olsFDeUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZmI0OGNlNS0yMWEzLTRiNjAtOWJjZi1mMWUw ZDZhNDAzMTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATM6zAD BALM6zgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEALjGJzSjl3PsekaO2hO+f4TF8kE6PvZOi2ojaGbymmgx3 LbXzUtNm6hh0svLwMGqySYQq9jPFlPaQ+ijY++iU4aHgShVVE4HAV7Qdl7XY0uac 6M0qiAQcn9ahBRYwAIFX1rVHyBT6wUq1ePIVgUU3BeAjvBBIeY2SxVN9ABiBnhza f6jt4qQqcD3IWsGs4kkcxAwd+YJRXE2jc3eeYVe6IvD1+8NuuQT7MrPY2wKk+8MO QC4P5W7uCLFS5vD/IkK38eplyVZiJXenRuJD2+bLfV7l4k48KXLsoWY3E/RN7OHO oXBsUpFcle62U31XB6YKcguXaVaffBy4QKqyKaFyIQ== -----END CERTIFICATE-----Generated at Tue Oct 28 13:08:04 2025 by rpki-client