$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3e5f7689-0ac5-3013-a3be-588929f3eeac.roa File: 3e5f7689-0ac5-3013-a3be-588929f3eeac.roa (raw, json) Hash identifier: /MzPKXfBJGpXQkZZbVDoBrgWTsdHnAjGDITMsvdD79g= Subject key identifier: 0F:F4:D6:74:F5:BE:F9:71:23:B5:1C:8A:F0:A5:E2:80:3C:99:C9:B9 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B970CE525FAD3110C3D9B9700 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3e5f7689-0ac5-3013-a3be-588929f3eeac.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 4760 IP address blocks: 205.252.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e5:25:fa:d3:11:0c:3d:9b:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=b45906c4-c952-4d9b-b305-fe930b478fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:ec:7f:8a:37:69:ec:58:ab:4f:98:3f:c6: 67:75:63:40:63:c9:8c:b8:b7:d5:22:0b:8e:ce:fd: 70:72:be:79:1d:35:75:df:a7:bb:2c:90:e9:10:cc: 51:6c:05:28:a0:6f:4b:7b:77:86:81:99:ec:50:3f: ff:e1:98:bd:16:dd:23:55:79:4f:b3:b4:5d:09:f6: 0a:7d:3e:0a:bf:8e:cb:d4:b5:0d:9e:02:d4:4e:74: 6d:ac:52:e5:f8:34:27:49:e0:bc:3a:cf:79:c4:e7: ac:42:a3:78:0e:a7:cb:03:12:d3:0b:b4:31:d2:e1: e2:e5:37:5c:87:2f:c7:dc:4f:3c:8c:52:30:16:b0: 0e:dd:0a:32:5d:fa:a3:96:67:5f:d6:ad:22:33:88: 10:fb:f0:f3:9d:0e:36:d1:a1:22:3c:f7:67:b4:74: 05:a2:85:72:cd:a6:30:b0:b1:8b:0c:31:2b:c3:dc: 18:2c:f2:41:e3:d4:8f:55:7e:21:b4:97:16:e6:2e: bb:b4:b7:41:50:76:70:82:8b:25:c1:59:23:f6:d0: 75:e3:58:f0:11:f3:40:de:6f:5a:20:cc:04:38:ec: e0:9e:96:98:d3:2f:07:de:60:d0:24:cf:e7:f6:c9: 07:22:ed:1a:0d:c3:17:23:3d:6a:71:d9:2e:3b:5b: ec:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F4:D6:74:F5:BE:F9:71:23:B5:1C:8A:F0:A5:E2:80:3C:99:C9:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3e5f7689-0ac5-3013-a3be-588929f3eeac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 205.252.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:fa:6f:9e:1c:b2:b6:f7:c9:9c:e5:54:f8:fe:e1:73:ce:23: 2d:c0:00:f8:30:9c:f0:2b:d4:10:fe:c9:50:37:79:d1:0e:11: 13:6d:62:c5:b4:72:55:e8:8c:09:17:2b:75:b9:78:42:3e:e6: 4c:ce:a4:ad:60:ce:6d:a7:5a:a2:12:5d:41:f7:e1:f4:54:e9: bd:13:bd:ec:59:c5:4a:22:d1:78:33:9d:29:ae:58:24:72:91: 34:de:31:29:56:2a:0b:d1:f0:14:11:2b:e2:1c:4b:5f:37:5d: 7d:d9:be:6e:b6:df:23:1d:17:e7:5f:2f:9a:ef:16:ed:a2:54: f7:14:6b:4c:9d:8a:01:e8:10:d5:10:67:31:3a:86:e9:fc:33: 2b:ad:47:67:40:40:65:63:9f:b5:9c:b2:ba:29:0f:91:d4:f7: 42:e7:7a:ee:44:9d:ae:7d:33:8b:a9:c1:dd:94:89:b7:d6:6c: 4e:9d:68:55:1f:a7:89:41:4d:1a:98:44:f6:05:45:36:6a:dd: 6a:9b:a3:de:79:96:76:b1:a7:8c:fd:c5:17:13:1a:fd:2f:2f: 03:84:d5:39:4a:28:5c:aa:dc:73:87:7a:70:70:66:1f:55:a0: da:37:53:c9:49:90:20:d0:d7:7b:63:f9:25:d1:57:ac:78:aa: 5f:37:9a:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOUl+tMRDD2blwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YjQ1OTA2YzQtYzk1Mi00ZDliLWIzMDUtZmU5MzBiNDc4ZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3Lsf4o3aexYq0+YP8ZndWNAY8mMuLfVIguO zv1wcr55HTV136e7LJDpEMxRbAUooG9Le3eGgZnsUD//4Zi9Ft0jVXlPs7RdCfYK fT4Kv47L1LUNngLUTnRtrFLl+DQnSeC8Os95xOesQqN4DqfLAxLTC7Qx0uHi5Tdc hy/H3E88jFIwFrAO3QoyXfqjlmdf1q0iM4gQ+/DznQ420aEiPPdntHQFooVyzaYw sLGLDDErw9wYLPJB49SPVX4htJcW5i67tLdBUHZwgoslwVkj9tB141jwEfNA3m9a IMwEOOzgnpaY0y8H3mDQJM/n9skHIu0aDcMXIz1qcdkuO1vsdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/01nT1vvlxI7UcivCl4oA8mcm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvM2U1Zjc2ODktMGFjNS0z MDEzLWEzYmUtNTg4OTI5ZjNlZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzfyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD6b54csrb3yZzlVPj+4XPOIy3AAPgwnPAr1BD+yVA3edEOERNtYsW0 clXojAkXK3W5eEI+5kzOpK1gzm2nWqISXUH34fRU6b0TvexZxUoi0XgznSmuWCRy kTTeMSlWKgvR8BQRK+IcS183XX3Zvm623yMdF+dfL5rvFu2iVPcUa0ydigHoENUQ ZzE6hun8MyutR2dAQGVjn7WcsropD5HU90Lneu5Ena59M4upwd2UibfWbE6daFUf p4lBTRqYRPYFRTZq3Wqbo955lnaxp4z9xRcTGv0vLwOE1TlKKFyq3HOHenBwZh9V oNo3U8lJkCDQ13tj+SXRV6x4ql83mp0= -----END CERTIFICATE-----Generated at Fri Oct 24 13:00:57 2025 by rpki-client