$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/781a9bc0-9963-3bc2-8c24-a13d0b293411.roa File: 781a9bc0-9963-3bc2-8c24-a13d0b293411.roa (raw, json) Hash identifier: fBdWz5k415xo6SSxblnKYXlHditcWAuPnPazTdOxxYM= Subject key identifier: 8A:1B:A5:97:A3:0D:03:26:BF:EF:2A:1B:7A:9E:41:55:BC:E8:3A:23 Certificate issuer: /CN=a1853cd3-3329-4b61-a321-f6705ea74197 Certificate serial: 010D0C9F4328584B9872452300FBE40C92583700 Authority key identifier: 2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/781a9bc0-9963-3bc2-8c24-a13d0b293411.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 400554 IP address blocks: 199.248.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:45:23:00:fb:e4:0c:92:58:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1853cd3-3329-4b61-a321-f6705ea74197 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=9720b86c-0074-4e89-942e-d19425ceeecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e8:c4:7e:bf:3d:cc:f0:1f:a6:b2:e6:ea:85: 42:83:03:61:eb:46:ca:5c:a8:aa:b6:66:32:57:22: 50:19:02:cb:fd:93:d6:81:b0:72:88:65:58:43:2f: e4:a4:ae:1c:9c:ce:dd:8d:3b:5d:33:6c:2b:bf:3f: 67:72:1e:a7:ff:dd:c1:bc:18:3b:35:f0:d5:2c:51: 11:d4:95:e3:79:0a:66:54:7d:0f:96:bb:fb:33:b7: 77:5e:0c:cb:ba:04:2e:25:58:d8:1b:fe:18:97:8d: de:c3:ec:38:b8:7e:44:e9:ca:a8:e5:0f:e8:d6:a4: ae:87:a9:8f:0b:fc:a2:48:ab:c1:f5:7c:f4:7f:d2: 20:a1:8d:e3:73:24:03:db:5e:c6:cb:2e:3d:39:e9: e9:92:b1:9a:f7:09:bf:f2:ba:a5:1f:67:57:34:ee: 52:50:0c:e0:7d:6f:c1:8b:df:ae:05:b3:0f:a0:2d: 8f:73:7c:15:94:4a:e0:cb:5d:c6:2e:a5:10:94:af: 6d:45:44:5e:7f:21:e0:7d:18:e6:2c:f8:4c:23:39: e3:15:f7:88:1a:b0:ab:af:c4:9c:ca:69:16:86:ff: 99:ee:1b:86:bb:1f:90:80:58:b0:6f:48:4b:c7:89: 49:f3:ef:7c:85:5d:8c:ce:f1:90:0f:cd:56:f0:8b: 93:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1B:A5:97:A3:0D:03:26:BF:EF:2A:1B:7A:9E:41:55:BC:E8:3A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/781a9bc0-9963-3bc2-8c24-a13d0b293411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl X509v3 Authority Key Identifier: keyid:2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer sbgp-ipAddrBlock: critical IPv4: 199.248.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:44:12:23:15:6b:e8:ea:c2:21:7c:96:b7:c2:96:ba:34:70: c0:d6:25:b6:4d:04:b0:a4:d9:e6:12:80:cd:dd:3f:92:c4:56: 53:9e:df:11:c0:6f:cc:c5:49:5b:cf:b9:41:55:a0:c1:a1:b2: 2b:e2:02:31:73:6d:2a:05:d8:49:85:0b:c7:7c:f4:a5:4a:a6: b6:f5:eb:83:27:28:d5:25:dd:dc:9e:25:a9:66:07:69:05:05: 42:7b:77:7b:a6:aa:b9:ae:66:7c:96:e4:a6:61:b7:ea:31:5b: ed:26:f0:3c:ab:a9:01:9e:bd:e3:47:de:bc:48:0b:65:4c:94: 80:11:64:7e:a5:31:9c:b0:d7:56:25:7e:66:08:e6:41:9b:ac: 64:c7:e7:e8:eb:95:25:47:77:f3:d9:da:f6:6e:61:2d:ed:b7: 85:df:5a:4a:f0:82:5e:98:26:d7:28:ba:ea:3e:a1:11:78:96: e7:3d:fe:12:9c:8e:a1:27:b7:3f:76:e4:c2:8d:48:c2:02:46: 0b:fd:ac:b5:dc:ca:a0:09:2b:a7:ef:09:69:7c:bd:e1:63:7d: cc:ca:7c:28:01:76:a6:45:39:48:db:ee:a5:53:98:63:a0:c4: 2d:5d:88:46:b4:1b:ac:66:32:86:d0:43:ee:dc:d5:22:e2:8a: 88:4a:9e:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckUjAPvkDJJYNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTE4NTNjZDMtMzMyOS00YjYxLWEzMjEtZjY3MDVlYTc0 MTk3MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OTcyMGI4NmMtMDA3NC00ZTg5LTk0MmUtZDE5NDI1Y2VlZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+jEfr89zPAfprLm6oVCgwNh60bKXKiqtmYy VyJQGQLL/ZPWgbByiGVYQy/kpK4cnM7djTtdM2wrvz9nch6n/93BvBg7NfDVLFER 1JXjeQpmVH0Plrv7M7d3XgzLugQuJVjYG/4Yl43ew+w4uH5E6cqo5Q/o1qSuh6mP C/yiSKvB9Xz0f9IgoY3jcyQD217Gyy49OenpkrGa9wm/8rqlH2dXNO5SUAzgfW/B i9+uBbMPoC2Pc3wVlErgy13GLqUQlK9tRURefyHgfRjmLPhMIznjFfeIGrCrr8Sc ymkWhv+Z7huGux+QgFiwb0hLx4lJ8+98hV2MzvGQD81W8IuTvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIobpZejDQMmv+8qG3qeQVW86DojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMTg1 M2NkMy0zMzI5LTRiNjEtYTMyMS1mNjcwNWVhNzQxOTcvNzgxYTliYzAtOTk2My0z YmMyLThjMjQtYTEzZDBiMjkzNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTE4NTNjZDMtMzMyOS00YjYxLWEz MjEtZjY3MDVlYTc0MTk3L2ExODUzY2QzLTMzMjktNGI2MS1hMzIxLWY2NzA1ZWE3 NDE5Ny5jcmwwHwYDVR0jBBgwFoAULRqm+IvbbR+NejRyQ7HyrW75zQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMTg1M2NkMy0zMzI5LTRiNjEtYTMyMS1mNjcw NWVhNzQxOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/jxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHREEiMVa+jqwiF8lrfClro0cMDWJbZNBLCk2eYSgM3dP5LEVlOe3xHA b8zFSVvPuUFVoMGhsiviAjFzbSoF2EmFC8d89KVKprb164MnKNUl3dyeJalmB2kF BUJ7d3umqrmuZnyW5KZht+oxW+0m8DyrqQGeveNH3rxIC2VMlIARZH6lMZyw11Yl fmYI5kGbrGTH5+jrlSVHd/PZ2vZuYS3tt4XfWkrwgl6YJtcouuo+oRF4luc9/hKc jqEntz925MKNSMICRgv9rLXcyqAJK6fvCWl8veFjfczKfCgBdqZFOUjb7qVTmGOg xC1diEa0G6xmMobQQ+7c1SLiiohKnu4= -----END CERTIFICATE-----Generated at Wed Nov 5 08:59:03 2025 by rpki-client