$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/abe5c68f-c2dc-3ea6-945c-60690b54c5e9.roa File: abe5c68f-c2dc-3ea6-945c-60690b54c5e9.roa (raw, json) Hash identifier: adw7Ri3C7kYtExIyde4wZQiBGYZRm5+/A9wCMyxe/Qg= Subject key identifier: 9E:8C:16:FA:4C:44:06:A4:1D:79:78:E5:9F:14:2C:41:C9:B9:08:75 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584BAD624CA381D76018F1A19200 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/abe5c68f-c2dc-3ea6-945c-60690b54c5e9.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 6505 IP address blocks: 200.30.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:4c:a3:81:d7:60:18:f1:a1:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=b9683fa1-91d8-4b8d-be34-fefc39bc07d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:42:c6:ed:3f:47:4c:d4:9e:01:b0:6d:5b:29: 59:68:e1:73:7b:c8:b2:30:37:3c:82:be:e1:70:ca: 34:ab:c3:ab:e1:45:e6:fe:f6:4d:e2:0b:11:67:e2: e6:5b:02:de:ac:4a:c9:a1:e3:d4:eb:08:b0:1d:a4: 7d:ea:f8:a7:ab:32:22:77:fe:9e:1e:67:93:c1:4e: e6:62:0c:3a:58:ca:94:c6:cb:d7:ef:9e:51:4e:69: 29:d3:f1:ef:c6:d0:a6:ae:fd:c8:cb:dc:98:a2:02: ca:39:b0:51:9a:2c:ca:9b:38:3a:06:36:69:af:f4: 20:63:98:c6:ee:62:f7:97:7c:46:ed:ec:f6:e9:3e: e8:28:79:6f:2b:1b:61:d0:ad:cc:17:f7:98:50:30: e3:0b:db:22:83:bc:5d:3e:6c:83:5e:af:f2:88:c7: 82:48:24:25:43:aa:1c:7c:c6:27:fd:9c:d0:2f:2f: 02:0d:f4:45:b7:6f:5c:ba:ce:ab:b3:93:c1:48:ee: df:54:fc:e7:63:5b:aa:c5:15:44:c1:8c:98:40:39: 56:45:b8:bb:c2:c4:0d:1b:0c:a8:6f:60:3b:33:db: f0:30:a2:1f:f6:9e:ba:c6:84:f9:11:df:a7:02:a3: b2:76:78:e4:04:00:42:89:da:1e:c0:de:ad:0e:b6: cf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8C:16:FA:4C:44:06:A4:1D:79:78:E5:9F:14:2C:41:C9:B9:08:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/abe5c68f-c2dc-3ea6-945c-60690b54c5e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 200.30.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0a:3e:e9:87:80:36:f0:a8:10:07:e7:59:ab:c0:0a:32:09: 78:4d:01:f0:fd:90:b2:69:84:d3:d7:e1:b9:83:3c:4a:5a:36: 3c:c6:02:dd:d9:5e:a7:65:54:a1:2b:0d:07:07:6d:d2:ca:d7: 6c:c6:8f:ba:9b:d6:c5:2d:90:b8:f6:e2:f0:51:43:9a:09:21: 20:52:dd:64:92:f5:f9:db:68:1c:c4:c5:62:1d:0a:0c:35:f2: f1:10:59:0f:2f:c8:7c:ce:33:1f:87:f7:38:ce:fb:76:c9:d1: 07:a7:4f:e2:ce:03:10:8c:66:ed:39:e5:8e:1c:26:c2:b2:f8: c3:e7:d8:75:3a:a4:52:52:f5:a5:47:b4:d3:d2:26:59:2e:f0: 87:97:b7:7b:20:5a:37:57:48:23:2d:e1:49:38:e1:c9:f2:4e: e4:cd:50:3b:68:45:d7:ed:0b:53:49:4c:07:d8:2a:13:28:cb: 67:9a:e2:dd:f4:95:13:6a:88:22:e6:1d:b7:77:58:4e:75:4c: 07:9f:40:00:27:7a:c5:d2:f2:26:2e:13:74:b0:7c:3c:3d:8b: da:8e:50:d3:b0:57:3c:d8:59:52:24:54:e5:b8:1e:22:79:cd: bd:14:a6:2a:50:e2:7a:a2:67:0c:0d:00:67:7f:89:8a:88:c4: 75:b8:47:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYkyjgddgGPGhkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk Yjk2ODNmYTEtOTFkOC00YjhkLWJlMzQtZmVmYzM5YmMwN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiELG7T9HTNSeAbBtWylZaOFze8iyMDc8gr7h cMo0q8Or4UXm/vZN4gsRZ+LmWwLerErJoePU6wiwHaR96vinqzIid/6eHmeTwU7m Ygw6WMqUxsvX755RTmkp0/HvxtCmrv3Iy9yYogLKObBRmizKmzg6BjZpr/QgY5jG 7mL3l3xG7ez26T7oKHlvKxth0K3MF/eYUDDjC9sig7xdPmyDXq/yiMeCSCQlQ6oc fMYn/ZzQLy8CDfRFt29cus6rs5PBSO7fVPznY1uqxRVEwYyYQDlWRbi7wsQNGwyo b2A7M9vwMKIf9p66xoT5Ed+nAqOydnjkBABCidoewN6tDrbP6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6MFvpMRAakHXl45Z8ULEHJuQh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvYWJlNWM2OGYtYzJkYy0z ZWE2LTk0NWMtNjA2OTBiNTRjNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyB48MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4KPumHgDbwqBAH51mrwAoyCXhNAfD9kLJphNPX4bmDPEpaNjzGAt3Z XqdlVKErDQcHbdLK12zGj7qb1sUtkLj24vBRQ5oJISBS3WSS9fnbaBzExWIdCgw1 8vEQWQ8vyHzOMx+H9zjO+3bJ0QenT+LOAxCMZu055Y4cJsKy+MPn2HU6pFJS9aVH tNPSJlku8IeXt3sgWjdXSCMt4Uk44cnyTuTNUDtoRdftC1NJTAfYKhMoy2ea4t30 lRNqiCLmHbd3WE51TAefQAAnesXS8iYuE3SwfDw9i9qOUNOwVzzYWVIkVOW4HiJ5 zb0UpipQ4nqiZwwNAGd/iYqIxHW4RxE= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:29 2025 by rpki-client