$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa File: ca248d62-3f50-35a2-9999-0258d4f72f02.roa (raw, json) Hash identifier: raS7c7kjiMwxBm1nD+2lGBeSCIr7m97gIc5Mb45mCUY= Subject key identifier: C3:98:75:39:EB:46:C7:6A:B9:88:08:43:05:E0:1F:7D:28:C3:B9:05 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584B9E07C0B1B413CF7F90384AA0 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 8014 IP address blocks: 204.236.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c0:b1:b4:13:cf:7f:90:38:4a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=f1182edd-be69-4932-b8ca-4f11769a347e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:66:4b:f9:06:a7:fd:8c:24:33:d3:5b:1d:5e: 69:49:4b:30:91:e9:39:81:2b:44:2c:37:85:8a:37: a3:1b:a0:18:5a:fb:4c:5c:73:c6:6c:c1:00:07:5c: 68:41:8d:b7:08:9f:81:62:f5:15:f7:0d:4f:e1:ef: 42:c9:f6:ae:b6:37:d1:03:87:8d:dd:a2:85:07:e4: ce:00:ae:bd:88:fe:d0:8f:a3:fa:62:29:aa:76:4a: 70:2b:f7:9b:19:13:37:ce:6a:c8:82:1a:e2:cf:e9: 91:17:e5:fb:ba:b3:44:30:a1:32:c3:16:52:58:5f: 82:3d:61:9d:95:f5:11:b4:f6:98:33:2d:69:85:5f: 9f:47:2a:f4:c6:3e:84:6a:44:13:22:97:06:1c:fe: 10:09:5e:00:7c:27:e2:de:4d:fb:72:92:dc:fc:72: 29:35:db:d4:80:a3:2e:85:f2:44:e5:0b:76:2b:fa: 19:e6:b7:aa:68:b5:80:76:cb:e4:b8:bb:89:34:51: b1:b6:da:7e:ed:d9:05:38:09:b7:df:30:db:29:b6: 29:1f:ae:67:60:e3:89:ad:c9:68:ae:d9:ad:a6:14: 6d:da:af:e0:b4:b1:e1:74:33:83:ee:88:41:d8:95: 29:00:c0:1b:f0:ba:de:23:11:d0:be:cc:e4:55:be: 88:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:98:75:39:EB:46:C7:6A:B9:88:08:43:05:E0:1F:7D:28:C3:B9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:6e:26:40:24:61:6b:e5:d7:36:c9:90:49:a7:aa:6f:71:b8: 6b:e5:a2:68:98:d8:1c:60:10:fa:e7:71:6f:bf:93:86:39:10: 16:ab:15:e1:1f:29:2e:9f:6e:8b:34:29:72:08:87:4d:77:39: 9e:58:0e:c9:5b:41:53:5d:3b:1a:c9:3b:1d:f3:a5:30:dd:a6: d2:83:76:a1:d0:b7:6e:97:1f:81:36:c0:19:fb:b2:0b:40:9a: bf:af:65:5a:c1:b9:cb:94:b0:07:76:ad:1e:26:ef:36:87:3c: fd:2f:56:9a:a8:0f:70:eb:f3:6b:dc:3a:6e:50:09:ff:b5:f6: 4b:42:8d:d7:b7:27:ea:5a:25:42:a3:f3:68:12:e2:89:b5:47: 25:dc:02:85:0c:25:ab:e5:ca:f5:ed:2a:b8:ec:5a:e4:00:55: 3d:24:af:0c:4e:73:3b:47:c0:10:5e:a2:6a:fe:a0:fa:6d:d0: b8:02:f7:f9:b8:ad:d0:31:ee:0c:c6:a3:52:06:5a:6f:35:13: e3:cb:5e:b6:b8:a8:e8:97:a5:6d:4d:c4:38:9c:db:72:98:a6: 67:01:c9:45:56:b2:ab:34:15:4d:d5:06:cb:fc:bf:20:c9:4d: df:34:ca:e8:2d:87:7a:d0:22:e5:c1:c2:c3:54:15:45:22:51: 23:f4:5e:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8CxtBPPf5A4SqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZjExODJlZGQtYmU2OS00OTMyLWI4Y2EtNGYxMTc2OWEzNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmZL+Qan/YwkM9NbHV5pSUswkek5gStELDeF ijejG6AYWvtMXHPGbMEAB1xoQY23CJ+BYvUV9w1P4e9CyfautjfRA4eN3aKFB+TO AK69iP7Qj6P6YimqdkpwK/ebGRM3zmrIghriz+mRF+X7urNEMKEywxZSWF+CPWGd lfURtPaYMy1phV+fRyr0xj6EakQTIpcGHP4QCV4AfCfi3k37cpLc/HIpNdvUgKMu hfJE5Qt2K/oZ5reqaLWAdsvkuLuJNFGxttp+7dkFOAm33zDbKbYpH65nYOOJrclo rtmtphRt2q/gtLHhdDOD7ohB2JUpAMAb8LreIxHQvszkVb6I1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOYdTnrRsdquYgIQwXgH30ow7kFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvY2EyNDhkNjItM2Y1MC0z NWEyLTk5OTktMDI1OGQ0ZjcyZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVuJkAkYWvl1zbJkEmnqm9xuGvlomiY2BxgEPrncW+/k4Y5EBarFeEf KS6fbos0KXIIh013OZ5YDslbQVNdOxrJOx3zpTDdptKDdqHQt26XH4E2wBn7sgtA mr+vZVrBucuUsAd2rR4m7zaHPP0vVpqoD3Dr82vcOm5QCf+19ktCjde3J+paJUKj 82gS4om1RyXcAoUMJavlyvXtKrjsWuQAVT0krwxOcztHwBBeomr+oPpt0LgC9/m4 rdAx7gzGo1IGWm81E+PLXra4qOiXpW1NxDic23KYpmcByUVWsqs0FU3VBsv8vyDJ Td80yugth3rQIuXBwsNUFUUiUSP0Xj4= -----END CERTIFICATE-----Generated at Fri Oct 24 00:51:41 2025 by rpki-client