$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/1e592f07-9e8d-314e-a936-c681a7544c06.roa File: 1e592f07-9e8d-314e-a936-c681a7544c06.roa (raw, json) Hash identifier: rTffm6dCO1zkGiWWUx8N/oxELjZH+QPAb1wSIBX4fxQ= Subject key identifier: 35:16:31:88:A1:BC:A7:C7:5E:24:E8:60:EB:DF:2C:20:4C:5C:8A:31 Certificate issuer: /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Certificate serial: 010D0C9F4328584B5E5CE16DB67D244F9BBD6510 Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/1e592f07-9e8d-314e-a936-c681a7544c06.roa Signing time: Tue 30 Sep 2025 17:40:50 +0000 ROA not before: Tue 30 Sep 2025 17:40:50 +0000 ROA not after: Mon 29 Dec 2025 18:40:50 +0000 asID: 992 IP address blocks: 204.52.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:5c:e1:6d:b6:7d:24:4f:9b:bd:65:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Validity Not Before: Sep 30 17:40:50 2025 GMT Not After : Dec 29 18:40:50 2025 GMT Subject: CN=4c7315fb-a7d9-46e0-b45f-ac2d502e17f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:8a:a0:4e:69:8e:97:21:33:1e:4f:1d:5d: 58:9f:44:09:39:c9:8e:9e:be:7a:3e:16:16:1d:2e: 2c:86:7f:38:0a:e7:ed:c4:bc:54:76:60:be:60:ad: ba:ca:f9:b4:16:4f:d4:5e:aa:fc:7f:c1:f0:02:d1: 31:e1:60:9d:73:8b:bf:9d:2c:1d:57:25:69:a9:27: 9c:3a:ce:a4:f3:e4:42:2a:cd:bd:6f:b9:8c:87:91: 70:5c:a0:87:75:40:e9:11:61:13:92:bb:54:28:ba: 58:ea:89:b1:34:d5:54:75:a6:34:e9:33:1a:b6:dc: 66:54:90:b7:c3:fe:ec:bb:48:63:94:35:02:0b:bb: 58:d1:8b:ab:0a:c5:a6:b6:4c:e9:28:53:b2:32:b5: 0c:ab:6c:c4:d3:30:7a:a7:da:35:03:d8:17:f7:87: 08:03:cd:ec:cc:ca:19:8d:2e:c3:3f:81:d0:65:0a: 1f:3e:34:8c:10:2d:b2:6c:3f:44:8e:28:3e:72:38: a0:7e:3d:4e:4d:b1:7f:26:e9:8b:4e:91:47:d5:89: bc:88:41:36:bc:ef:27:23:21:34:94:22:84:ab:40: bd:a8:a6:e6:fb:f3:85:9b:5a:fd:48:34:9f:5d:67: b9:f8:b9:28:ad:24:f7:c5:71:e1:62:a4:75:de:20: 88:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:16:31:88:A1:BC:A7:C7:5E:24:E8:60:EB:DF:2C:20:4C:5C:8A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/1e592f07-9e8d-314e-a936-c681a7544c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl X509v3 Authority Key Identifier: keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer sbgp-ipAddrBlock: critical IPv4: 204.52.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:fd:b6:39:a9:60:e3:01:42:4e:98:7c:2f:09:5c:b7:51:89: 74:c2:16:7a:2d:19:7d:43:6d:22:35:7b:d3:64:36:68:b2:3a: d7:46:bc:fb:d9:86:8d:c0:55:84:45:af:34:07:d2:54:05:ae: 53:52:28:2a:ed:cf:82:0e:63:a3:9e:ee:5b:1b:f7:7c:b8:ef: 08:4e:ec:3e:e7:c5:c2:ee:52:5c:40:5d:52:5d:ba:c6:e2:1d: fb:af:f5:bf:b0:9e:63:f0:4e:8b:ee:97:22:4b:e9:91:9e:2d: c1:da:0a:df:23:3f:b5:7a:a3:bb:e7:76:40:74:1d:6a:79:d5: 3c:19:8b:b6:2f:57:f7:4b:23:35:0a:21:46:d8:94:9c:94:0f: 36:c6:18:cc:be:8f:f2:76:c7:0e:62:a4:91:01:76:8d:36:0f: b7:27:98:9c:df:d4:7d:c0:14:cc:5a:fb:82:b1:3e:3c:65:b4: d7:45:75:ff:19:12:f0:5f:eb:7a:a7:dc:d8:d5:ee:74:1c:d7: a2:73:58:74:4b:96:b6:ba:a0:13:28:b2:14:46:5b:23:01:d9: f3:97:b6:80:51:19:1c:de:0d:6c:7e:85:cf:5a:59:5b:49:19: f8:01:5f:3d:ca:a5:90:48:0e:f2:d0:86:d9:c3:1b:56:9c:a1: 87:f9:d2:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEteXOFttn0kT5u9ZRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5NzQyZTgtOGQwYy00MjA5LWI3NmYtNDAzNTU0YjBl NmI0MB4XDTI1MDkzMDE3NDA1MFoXDTI1MTIyOTE4NDA1MFowLzEtMCsGA1UEAxMk NGM3MzE1ZmItYTdkOS00NmUwLWI0NWYtYWMyZDUwMmUxN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsyKoE5pjpchMx5PHV1Yn0QJOcmOnr56PhYW HS4shn84CuftxLxUdmC+YK26yvm0Fk/UXqr8f8HwAtEx4WCdc4u/nSwdVyVpqSec Os6k8+RCKs29b7mMh5FwXKCHdUDpEWETkrtUKLpY6omxNNVUdaY06TMattxmVJC3 w/7su0hjlDUCC7tY0YurCsWmtkzpKFOyMrUMq2zE0zB6p9o1A9gX94cIA83szMoZ jS7DP4HQZQofPjSMEC2ybD9Ejig+cjigfj1OTbF/JumLTpFH1Ym8iEE2vO8nIyE0 lCKEq0C9qKbm+/OFm1r9SDSfXWe5+LkorST3xXHhYqR13iCI+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUWMYihvKfHXiToYOvfLCBMXIoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3 NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1NTRiMGU2YjQvMWU1OTJmMDctOWU4ZC0z MTRlLWE5MzYtYzY4MWE3NTQ0YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5NzQyZTgtOGQwYy00MjA5LWI3 NmYtNDAzNTU0YjBlNmI0L2Q0OTc0MmU4LThkMGMtNDIwOS1iNzZmLTQwMzU1NGIw ZTZiNC5jcmwwHwYDVR0jBBgwFoAUyXTCOGJ1ZdT2dzWU5jbMl87yC+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1 NTRiMGU2YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzDTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL9tjmpYOMBQk6YfC8JXLdRiXTCFnotGX1DbSI1e9NkNmiyOtdGvPvZ ho3AVYRFrzQH0lQFrlNSKCrtz4IOY6Oe7lsb93y47whO7D7nxcLuUlxAXVJdusbi Hfuv9b+wnmPwTovulyJL6ZGeLcHaCt8jP7V6o7vndkB0HWp51TwZi7YvV/dLIzUK IUbYlJyUDzbGGMy+j/J2xw5ipJEBdo02D7cnmJzf1H3AFMxa+4KxPjxltNdFdf8Z EvBf63qn3NjV7nQc16JzWHRLlra6oBMoshRGWyMB2fOXtoBRGRzeDWx+hc9aWVtJ GfgBXz3KpZBIDvLQhtnDG1acoYf50iI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:28 2025 by rpki-client