$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa File: f45bc517-864a-32c1-b059-db26a9dffa20.roa (raw, json) Hash identifier: maaneVOKvqAb+NEEKIAxhDggZNtAOsWMi8OE5NvjN7c= Subject key identifier: AE:E6:11:B5:B6:A7:5F:FE:4C:A0:42:39:F1:B3:4B:D9:3F:4F:63:97 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B970CEF2BB7E87B5EF236F790 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 3938 IP address blocks: 204.141.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ef:2b:b7:e8:7b:5e:f2:36:f7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=bf93acbc-0a09-486d-b950-69acce2739d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:91:15:06:4d:68:25:bb:ec:66:a3:05:09:bb: 6f:5e:2d:1f:b9:8d:fe:21:15:7d:1a:e4:46:90:64: eb:80:45:53:7a:fb:dd:29:e9:02:04:bb:79:9e:4d: e9:b5:70:f6:09:d8:dc:e6:0b:65:ab:19:c0:5c:88: df:95:29:b0:78:c8:73:72:4e:f6:db:a7:6c:22:78: 89:67:c1:8f:9f:c4:72:cd:f1:aa:5b:af:65:d7:e9: b4:08:99:54:35:54:4f:f8:08:69:38:fc:0f:cb:5c: 55:ba:39:e5:58:40:da:80:5f:06:d3:d6:4c:55:24: e5:92:cc:b1:cd:c8:63:fc:7b:b4:b0:04:46:ae:0e: c2:2b:37:39:82:b6:e9:77:6a:07:9f:f2:36:27:dd: 49:bd:ed:b3:76:22:df:e4:2e:41:82:91:18:b0:84: 19:8d:8e:7e:bd:bc:03:a3:b2:ec:2c:2c:6e:47:db: b0:90:b1:17:ce:c3:77:ed:e0:58:41:3e:da:bb:72: f4:e8:05:46:97:b7:09:4f:25:b7:73:7d:4b:6d:65: 07:10:e2:90:b4:1a:77:8f:88:11:a1:cb:cd:76:fa: 3e:11:0a:fe:b2:42:73:e7:42:ab:1e:81:11:cb:44: a9:10:88:9f:42:ed:b9:f3:bf:29:e2:34:45:fb:85: 17:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E6:11:B5:B6:A7:5F:FE:4C:A0:42:39:F1:B3:4B:D9:3F:4F:63:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b6:88:8c:bf:72:09:5b:0c:95:ef:79:4d:1c:e4:55:b4:2e: 34:29:ef:31:ec:cf:8d:07:89:40:5b:2c:39:bd:49:ac:98:ef: 62:ae:cb:b3:c6:f6:22:dd:d1:8b:e8:eb:23:f8:bc:28:02:39: 93:ff:c7:73:4e:59:ec:3f:a4:fd:2b:31:7e:da:4a:71:1f:68: 0b:70:81:6c:2c:a8:50:3f:ee:b3:5a:84:da:94:45:34:0e:87: ca:54:2e:f4:6d:e3:cc:b2:a7:f1:c7:34:21:73:7c:7e:f7:0a: 66:df:78:d6:c1:53:33:42:cd:59:47:48:8f:cc:5c:3c:e7:36: 55:00:c5:78:76:77:17:46:a4:37:77:f7:d5:5f:84:24:b3:80: 3d:99:6f:c3:d3:54:43:1a:ea:46:7b:da:c7:1d:c8:52:3e:6d: 5e:11:55:c6:1e:8a:b1:2d:85:ac:e4:e6:23:af:00:40:08:ea: 5d:d3:36:a6:0a:9e:06:5f:00:45:3e:ee:5e:91:5f:fe:e0:e0: 85:91:c5:10:43:a8:d5:76:2b:b6:1b:10:96:4c:00:b2:24:13: cb:f7:eb:f5:f2:84:c8:ee:9e:e2:89:07:90:3d:91:7d:45:9d: 47:1b:e6:8c:cd:74:b6:38:df:f0:88:31:30:79:e2:36:65:01: 6a:2e:36:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDO8rt+h7XvI295AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YmY5M2FjYmMtMGEwOS00ODZkLWI5NTAtNjlhY2NlMjczOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJEVBk1oJbvsZqMFCbtvXi0fuY3+IRV9GuRG kGTrgEVTevvdKekCBLt5nk3ptXD2Cdjc5gtlqxnAXIjflSmweMhzck7226dsIniJ Z8GPn8RyzfGqW69l1+m0CJlUNVRP+AhpOPwPy1xVujnlWEDagF8G09ZMVSTlksyx zchj/Hu0sARGrg7CKzc5grbpd2oHn/I2J91Jve2zdiLf5C5BgpEYsIQZjY5+vbwD o7LsLCxuR9uwkLEXzsN37eBYQT7au3L06AVGl7cJTyW3c31LbWUHEOKQtBp3j4gR ocvNdvo+EQr+skJz50KrHoERy0SpEIifQu25878p4jRF+4UXWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7mEbW2p1/+TKBCOfGzS9k/T2OXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjQ1YmM1MTctODY0YS0z MmMxLWIwNTktZGIyNmE5ZGZmYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzI18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF62iIy/cglbDJXveU0c5FW0LjQp7zHsz40HiUBbLDm9SayY72Kuy7PG 9iLd0Yvo6yP4vCgCOZP/x3NOWew/pP0rMX7aSnEfaAtwgWwsqFA/7rNahNqURTQO h8pULvRt48yyp/HHNCFzfH73CmbfeNbBUzNCzVlHSI/MXDznNlUAxXh2dxdGpDd3 99VfhCSzgD2Zb8PTVEMa6kZ72scdyFI+bV4RVcYeirEthazk5iOvAEAI6l3TNqYK ngZfAEU+7l6RX/7g4IWRxRBDqNV2K7YbEJZMALIkE8v36/XyhMjunuKJB5A9kX1F nUcb5ozNdLY43/CIMTB54jZlAWouNgE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:48 2025 by rpki-client