$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4f492b8e-cba4-3d8e-aaf9-9dbc561c6709.roa File: 4f492b8e-cba4-3d8e-aaf9-9dbc561c6709.roa (raw, json) Hash identifier: r1KfjSlGrO0PpH3OFrZaci4bxpBbGkyyiFQcmmSXdrU= Subject key identifier: 59:DE:AF:DA:31:EB:E5:BF:5B:30:1E:FD:B5:B3:DB:EA:47:85:DD:D1 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584B6BC77706314F6E0570127A98 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4f492b8e-cba4-3d8e-aaf9-9dbc561c6709.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 11892 IP address blocks: 168.146.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:77:06:31:4f:6e:05:70:12:7a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=52dabe9d-f6c3-494a-a4e4-178c68d7b9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ad:9b:48:e9:7f:45:fe:e6:f2:f1:21:75:51: 7c:04:ee:1d:66:39:b2:9b:51:6d:37:4f:37:5a:73: cf:17:90:1b:35:e2:a3:b3:29:ee:bc:c2:f6:9e:e3: c8:15:94:35:39:29:04:70:bc:c0:a9:ef:31:58:c9: 36:b3:4d:3c:af:60:fa:0e:50:59:65:5b:80:43:34: 00:88:1f:e1:da:fd:49:4b:4c:77:72:83:87:81:e0: a6:a7:d9:ef:25:cc:4d:7d:bf:f8:1b:06:5c:0f:ba: 1c:d3:2f:5d:de:08:59:e5:e5:44:25:ef:66:a3:c9: 36:0f:d1:4c:98:88:60:0a:e5:42:d5:34:2d:4f:76: 2a:9b:bb:49:97:2b:81:82:5d:35:f3:5a:59:83:8d: ae:f4:ab:68:4b:b6:2f:1f:7e:d8:dd:17:d4:fe:e2: 45:c0:33:55:bb:99:41:52:2a:4e:c5:cf:65:f1:b0: f9:aa:4e:b4:7d:05:f8:9c:ac:bf:0e:3d:09:22:04: aa:83:34:e9:71:93:3a:e8:0b:57:27:e6:43:e7:01: 9e:fb:26:9a:26:e9:25:13:65:b6:b7:9e:73:85:77: 53:f8:7a:e1:10:40:15:c8:e3:81:7d:ca:ad:f5:da: a3:2b:9d:77:79:59:72:d8:69:4b:56:47:76:47:c7: dd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DE:AF:DA:31:EB:E5:BF:5B:30:1E:FD:B5:B3:DB:EA:47:85:DD:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4f492b8e-cba4-3d8e-aaf9-9dbc561c6709.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 168.146.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a3:f4:54:c3:17:13:81:b1:1f:e7:a7:ee:36:ef:ec:08:e9: f2:dd:62:12:63:e2:6c:28:9a:79:f4:48:00:41:84:a2:61:a5: 75:c8:43:e1:4e:3f:d8:37:d7:5b:f1:d2:03:84:59:bc:f0:c2: fb:44:5f:a4:4d:ec:35:3d:b5:85:73:08:d2:04:29:1d:0c:09: 4f:ed:5b:85:c4:23:2e:ac:57:57:f4:af:36:15:ac:eb:76:54: 9a:df:34:36:cd:d5:1c:cc:18:b0:9b:d4:bc:8b:41:80:0e:63: 59:ba:0f:12:32:da:80:49:94:df:a8:a4:d7:2c:62:d7:71:99: 71:9e:e7:17:30:b3:90:0d:96:0e:60:88:1c:88:30:d0:84:8c: b4:c6:2b:dd:b5:14:92:65:fc:07:84:a3:5e:8f:31:ca:04:bc: 50:a0:be:20:f8:d4:21:65:f1:bf:93:e1:67:56:1a:ed:8c:6e: 0f:72:7d:5d:59:85:40:22:69:d5:f1:59:87:fe:a6:3b:4d:71: 65:c0:78:0c:ca:4f:77:50:76:5e:2a:84:4d:f1:9f:d2:04:8a: 88:2e:c6:cd:79:81:4a:51:57:51:95:98:a2:51:8f:e4:16:d5: 4c:91:a4:c0:2a:74:d7:80:ad:ab:59:79:02:b9:41:86:1f:ed: 4a:29:71:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3cGMU9uBXASepgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NTJkYWJlOWQtZjZjMy00OTRhLWE0ZTQtMTc4YzY4ZDdiOWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg62bSOl/Rf7m8vEhdVF8BO4dZjmym1FtN083 WnPPF5AbNeKjsynuvML2nuPIFZQ1OSkEcLzAqe8xWMk2s008r2D6DlBZZVuAQzQA iB/h2v1JS0x3coOHgeCmp9nvJcxNfb/4GwZcD7oc0y9d3ghZ5eVEJe9mo8k2D9FM mIhgCuVC1TQtT3Yqm7tJlyuBgl0181pZg42u9KtoS7YvH37Y3RfU/uJFwDNVu5lB UipOxc9l8bD5qk60fQX4nKy/Dj0JIgSqgzTpcZM66AtXJ+ZD5wGe+yaaJuklE2W2 t55zhXdT+HrhEEAVyOOBfcqt9dqjK513eVly2GlLVkd2R8fdFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFner9ox6+W/WzAe/bWz2+pHhd3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvNGY0OTJiOGUtY2JhNC0z ZDhlLWFhZjktOWRiYzU2MWM2NzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqj9FTDFxOBsR/np+427+wI6fLdYhJj4mwomnn0SABBhKJhpXXIQ+FO P9g311vx0gOEWbzwwvtEX6RN7DU9tYVzCNIEKR0MCU/tW4XEIy6sV1f0rzYVrOt2 VJrfNDbN1RzMGLCb1LyLQYAOY1m6DxIy2oBJlN+opNcsYtdxmXGe5xcws5ANlg5g iByIMNCEjLTGK921FJJl/AeEo16PMcoEvFCgviD41CFl8b+T4WdWGu2Mbg9yfV1Z hUAiadXxWYf+pjtNcWXAeAzKT3dQdl4qhE3xn9IEioguxs15gUpRV1GVmKJRj+QW 1UyRpMAqdNeAratZeQK5QYYf7UopcSw= -----END CERTIFICATE-----Generated at Wed Nov 5 13:18:01 2025 by rpki-client