$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/4fc98cd7-4077-3cec-a289-2f027a718339.roa File: 4fc98cd7-4077-3cec-a289-2f027a718339.roa (raw, json) Hash identifier: IOFGuKxF49UaIDKxLCMy+YL9BA9bjW1azYUvTcDe8h4= Subject key identifier: ED:A5:10:69:C5:5C:5C:D2:01:9F:B9:57:5E:74:56:C3:E0:D3:2B:3B Certificate issuer: /CN=15115143-11c8-4b06-80a1-a991fa50f2fa Certificate serial: 010D0C9F4328584BBA1042AF0D43F991E1327300 Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/4fc98cd7-4077-3cec-a289-2f027a718339.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 33711 IP address blocks: 128.254.224.0/24 maxlen: 24 128.254.226.0/24 maxlen: 24 128.254.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:42:af:0d:43:f9:91:e1:32:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=4b8e6517-e4dd-4b88-bb71-9bba1bb63b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:eb:4b:6d:1c:9e:61:61:e9:c8:ce:6c:43: 1b:38:d4:f4:2f:8b:83:dc:82:06:52:2a:5b:55:f5: 07:d3:b8:93:c7:95:0e:75:c3:aa:92:a6:bc:20:ea: 5f:4a:57:ed:b2:01:01:41:9f:b1:98:dd:b0:77:48: b3:06:77:7e:39:05:ae:22:1f:02:b2:a5:cd:a9:a8: b6:c5:4b:32:25:52:1c:72:82:a3:73:14:a7:dc:85: e3:73:db:fd:2d:25:f4:31:a7:15:e9:70:65:f9:c6: 59:b4:3b:d1:84:0b:c4:83:0a:e5:06:42:c9:c8:7a: 69:72:50:1d:d9:d4:84:e4:48:e4:d8:95:78:9f:f5: 64:ed:67:ac:d1:fa:d1:9d:f1:d1:4b:2e:bf:e1:af: 58:99:aa:25:30:58:44:73:9c:b2:d7:6c:31:41:67: c2:2c:58:db:1f:a6:81:a3:f8:5a:35:b7:8d:f6:42: 29:0c:9f:8a:bc:38:7a:2e:c5:e2:ed:99:88:d8:e9: 33:9e:1b:3c:23:79:8f:5e:32:be:b2:72:02:41:c4: f6:97:9a:60:c5:14:c4:84:f9:c7:45:70:33:64:57: 9f:52:ae:53:d8:fb:4c:39:88:90:4f:7f:5f:2f:02: 74:65:26:73:56:ed:68:28:b7:08:d1:21:78:5e:b4: 83:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A5:10:69:C5:5C:5C:D2:01:9F:B9:57:5E:74:56:C3:E0:D3:2B:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/4fc98cd7-4077-3cec-a289-2f027a718339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl X509v3 Authority Key Identifier: keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer sbgp-ipAddrBlock: critical IPv4: 128.254.224.0/24 128.254.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:63:86:a9:26:62:89:9c:9c:92:7d:d8:52:a5:7b:a7:38:81: b4:12:e7:cd:58:f3:b4:ee:e4:93:49:89:b9:68:df:fb:b9:55: 53:01:27:96:81:a5:0f:5d:f1:89:24:9c:0b:68:4a:6f:1b:ef: bd:df:d2:dd:ca:98:ce:38:99:d2:50:f6:f0:78:ef:77:87:85: 05:5b:6e:4b:0b:71:af:96:59:17:08:c3:d3:2b:39:4a:72:cd: e7:56:22:bf:4e:9d:d1:8c:16:49:e9:a0:99:f0:09:18:8a:bd: 71:df:f1:96:a8:bd:93:d8:91:cb:d5:c9:26:b8:bd:81:e0:dd: 95:5c:27:86:45:3d:78:a1:32:c1:8a:95:72:7d:c0:dd:85:3e: 87:e0:90:11:4a:83:83:14:fc:49:ca:44:be:74:51:fd:de:7c: 15:d2:f1:86:2f:e8:1c:50:2a:c7:30:19:8d:a8:83:5e:6a:74: eb:e4:5f:5f:bc:48:a5:0b:a3:c6:8a:e4:e7:23:d5:ba:70:64: 94:fd:27:bf:4c:f4:9e:8c:0b:f8:29:d8:3f:d1:a0:ff:7e:e3: 69:af:38:69:7e:90:8a:a9:c1:66:d5:bc:84:c6:38:93:5a:70: 82:af:31:46:e9:e0:6e:a7:07:67:1b:56:28:f0:3f:bd:74:24: 74:2f:ea:98 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEu6EEKvDUP5keEycwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUxMTUxNDMtMTFjOC00YjA2LTgwYTEtYTk5MWZhNTBm MmZhMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NGI4ZTY1MTctZTRkZC00Yjg4LWJiNzEtOWJiYTFiYjYzYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYLrS20cnmFh6cjObEMbONT0L4uD3IIGUipb VfUH07iTx5UOdcOqkqa8IOpfSlftsgEBQZ+xmN2wd0izBnd+OQWuIh8CsqXNqai2 xUsyJVIccoKjcxSn3IXjc9v9LSX0MacV6XBl+cZZtDvRhAvEgwrlBkLJyHppclAd 2dSE5Ejk2JV4n/Vk7Wes0frRnfHRSy6/4a9YmaolMFhEc5yy12wxQWfCLFjbH6aB o/haNbeN9kIpDJ+KvDh6LsXi7ZmI2Okznhs8I3mPXjK+snICQcT2l5pgxRTEhPnH RXAzZFefUq5T2PtMOYiQT39fLwJ0ZSZzVu1oKLcI0SF4XrSDkwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFO2lEGnFXFzSAZ+5V150VsPg0ys7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNTEx NTE0My0xMWM4LTRiMDYtODBhMS1hOTkxZmE1MGYyZmEvNGZjOThjZDctNDA3Ny0z Y2VjLWEyODktMmYwMjdhNzE4MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTUxMTUxNDMtMTFjOC00YjA2LTgw YTEtYTk5MWZhNTBmMmZhLzE1MTE1MTQzLTExYzgtNGIwNi04MGExLWE5OTFmYTUw ZjJmYS5jcmwwHwYDVR0jBBgwFoAUVxb9oR0aCplObiedKLlylvm9hkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNTExNTE0My0xMWM4LTRiMDYtODBhMS1hOTkx ZmE1MGYyZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgP7gAwQB gP7iMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABVjhqkmYomcnJJ92FKle6c4gbQS581Y87Tu5JNJiblo3/u5 VVMBJ5aBpQ9d8YkknAtoSm8b773f0t3KmM44mdJQ9vB473eHhQVbbksLca+WWRcI w9MrOUpyzedWIr9OndGMFknpoJnwCRiKvXHf8ZaovZPYkcvVySa4vYHg3ZVcJ4ZF PXihMsGKlXJ9wN2FPofgkBFKg4MU/EnKRL50Uf3efBXS8YYv6BxQKscwGY2og15q dOvkX1+8SKULo8aK5Ocj1bpwZJT9J79M9J6MC/gp2D/RoP9+42mvOGl+kIqpwWbV vITGOJNacIKvMUbp4G6nB2cbVijwP710JHQv6pg= -----END CERTIFICATE-----Generated at Wed Nov 5 03:49:59 2025 by rpki-client