$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/87d0acb5-93e2-396b-9698-d729bf36220e.roa File: 87d0acb5-93e2-396b-9698-d729bf36220e.roa (raw, json) Hash identifier: 68iVdFfMd1oJo8b+RKo8aeYg6YZjLsWJqOVN5cVRzh8= Subject key identifier: 86:70:72:AD:4E:57:16:36:5D:12:CE:25:21:84:38:49:F3:0C:57:74 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584AFC88E1138C9EED1FFF37C980 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/87d0acb5-93e2-396b-9698-d729bf36220e.roa Signing time: Tue 26 Aug 2025 16:40:16 +0000 ROA not before: Tue 26 Aug 2025 16:40:16 +0000 ROA not after: Mon 24 Nov 2025 17:40:16 +0000 asID: 174 IP address blocks: 204.117.94.0/24 maxlen: 24 204.117.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:88:e1:13:8c:9e:ed:1f:ff:37:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Aug 26 16:40:16 2025 GMT Not After : Nov 24 17:40:16 2025 GMT Subject: CN=cb4405b2-fa68-486d-aece-66ee5ef924e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cf:51:6a:a6:1e:1d:4b:7f:c7:04:20:35:d8: ea:c9:2a:fb:ad:fc:71:77:a0:86:a7:26:c5:5d:34: 05:be:40:47:17:3c:96:da:42:05:31:e9:3f:cf:37: 7f:26:14:7a:7b:fa:83:bf:8a:60:a3:49:ee:a2:b9: f7:6d:ba:53:1a:2a:97:f2:81:42:a0:4c:5f:f5:ac: 88:f1:10:ab:0a:6f:8b:7b:52:f7:b1:bf:b2:85:5e: 36:0e:a2:42:c3:6d:a7:f4:4f:67:0c:f7:e2:b6:03: 7b:c7:7a:23:fb:81:2a:1e:e1:ff:ef:11:79:52:85: 9c:1b:17:bc:f3:04:9a:2b:92:ea:1f:bd:cc:d5:b3: 2d:ee:1a:27:41:e3:81:67:5d:52:78:b0:80:84:ac: d8:a3:4e:ea:56:9c:e3:5c:d6:b0:9b:e4:0b:dd:89: da:ee:f1:ce:c9:df:1c:1a:66:64:7f:a1:39:2b:b7: 96:01:9a:97:58:c4:20:98:ff:7a:69:d9:40:a8:9c: 49:e2:fa:40:43:7c:84:d9:21:f0:cf:2d:f8:f4:78: 8a:07:ae:18:41:f1:20:79:2f:95:ba:b3:f3:7c:47: 69:b6:af:9a:9f:2a:87:0c:e6:85:28:50:bb:80:d0: 82:c6:1d:de:78:4c:4e:6f:ad:c0:bf:02:44:41:44: 8a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:70:72:AD:4E:57:16:36:5D:12:CE:25:21:84:38:49:F3:0C:57:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/87d0acb5-93e2-396b-9698-d729bf36220e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.117.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:43:5b:5b:da:38:0e:59:98:2b:09:e0:3e:d0:4b:16:ac:58: 46:37:f4:a5:7f:af:bf:88:d4:f9:9c:d6:84:a8:88:da:e1:e5: 2b:a9:30:b3:72:6e:54:c3:a4:66:75:d3:11:04:b7:c2:d7:3d: 12:17:f8:21:e2:70:ed:d2:91:2d:3a:d0:b9:f3:a1:c7:63:6c: e1:78:f9:2a:e2:db:8c:34:f4:0f:9f:18:2d:a7:70:8f:76:07: 6d:26:ee:2f:53:d1:7c:24:03:68:1b:24:8c:35:9f:cb:02:38: ba:6e:78:e8:e4:9f:f6:96:ed:fb:03:1e:21:e1:47:3f:35:7e: cc:d5:ad:7b:9c:43:68:54:bf:43:58:75:01:aa:f7:32:d3:07: 34:a2:be:5f:02:72:2a:b2:0a:6b:81:68:3f:d5:7a:72:2e:69: 01:b4:ec:21:58:77:9f:eb:0c:e3:d9:3c:a3:7a:03:9a:ee:02: d1:ee:96:d9:73:16:42:f8:7a:39:87:a1:50:7e:2f:e0:f4:d5: 47:f4:f0:e6:e5:49:e9:c9:41:84:96:df:b2:2f:ec:6f:dc:4c: 93:c4:e4:0b:72:6c:f1:84:bd:27:5f:da:e4:9f:d5:cd:6e:2b: d4:e8:59:e1:c6:eb:49:d2:0b:37:47:9b:80:28:72:b5:49:ce: 1c:f5:83:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8iOETjJ7tH/83yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDgyNjE2NDAxNloXDTI1MTEyNDE3NDAxNlowLzEtMCsGA1UEAxMk Y2I0NDA1YjItZmE2OC00ODZkLWFlY2UtNjZlZTVlZjkyNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM9RaqYeHUt/xwQgNdjqySr7rfxxd6CGpybF XTQFvkBHFzyW2kIFMek/zzd/JhR6e/qDv4pgo0nuorn3bbpTGiqX8oFCoExf9ayI 8RCrCm+Le1L3sb+yhV42DqJCw22n9E9nDPfitgN7x3oj+4EqHuH/7xF5UoWcGxe8 8wSaK5LqH73M1bMt7honQeOBZ11SeLCAhKzYo07qVpzjXNawm+QL3Yna7vHOyd8c GmZkf6E5K7eWAZqXWMQgmP96adlAqJxJ4vpAQ3yE2SHwzy349HiKB64YQfEgeS+V urPzfEdptq+anyqHDOaFKFC7gNCCxh3eeExOb63AvwJEQUSKDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZwcq1OVxY2XRLOJSGEOEnzDFd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvODdkMGFjYjUtOTNlMi0z OTZiLTk2OTgtZDcyOWJmMzYyMjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzHVeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpDW1vaOA5ZmCsJ4D7QSxasWEY39KV/r7+I1Pmc1oSoiNrh5SupMLNy blTDpGZ10xEEt8LXPRIX+CHicO3SkS060LnzocdjbOF4+Sri24w09A+fGC2ncI92 B20m7i9T0XwkA2gbJIw1n8sCOLpueOjkn/aW7fsDHiHhRz81fszVrXucQ2hUv0NY dQGq9zLTBzSivl8CciqyCmuBaD/VenIuaQG07CFYd5/rDOPZPKN6A5ruAtHultlz FkL4ejmHoVB+L+D01Uf08OblSenJQYSW37Iv7G/cTJPE5AtybPGEvSdf2uSf1c1u K9ToWeHG60nSCzdHm4AocrVJzhz1g3I= -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:25 2025 by rpki-client