$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa File: 8a599c8a-6f69-352a-9eff-d9583500ded1.roa (raw, json) Hash identifier: ql92TnhyaPK/MQet9DW3ajoDIV2TRAXyChcnKmqY8dY= Subject key identifier: AD:22:E5:FE:9E:43:44:DF:0D:CE:08:70:0B:8B:13:59:BD:17:4E:EC Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584B6A61F1B9E873E3709CB77400 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 33322 IP address blocks: 204.10.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:f1:b9:e8:73:e3:70:9c:b7:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=1cf2ff06-822d-4c5b-a0d5-d33d8e88a6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:9b:94:03:44:c4:69:0c:00:7d:11:a3:e9: 71:3a:4a:24:73:70:dd:f5:e6:4f:14:e1:91:d6:f5: 0d:a7:0b:07:2b:6f:d2:08:e5:7f:90:4b:ff:2c:14: 82:05:6a:dc:b3:b8:4f:01:52:1b:d0:40:57:f6:ce: 8f:dc:17:18:7c:df:13:e0:e6:56:d8:9a:45:46:58: 26:80:97:38:77:94:f8:0a:f6:d7:52:6e:a2:72:85: fc:a9:30:c5:a5:71:65:fa:a5:09:50:0f:66:df:c5: c6:97:a7:e8:76:3f:98:fb:84:8b:02:f7:b3:5c:d9: 32:ea:4f:29:dd:8a:eb:b5:ee:22:e5:70:fd:18:8e: d4:ca:1c:90:b9:df:c0:af:18:29:6e:0d:65:7f:79: 84:ce:e2:49:29:f2:a3:78:af:af:7d:6f:ae:10:1f: 90:a1:8a:ac:e9:d5:15:23:c8:e5:bf:6d:8c:08:f6: a8:e2:24:ef:96:2e:32:28:be:50:01:47:64:ee:e7: 2b:2b:31:31:92:ea:c1:96:80:e8:6e:4c:b5:41:3a: 01:7e:c8:f4:ed:47:09:53:e8:24:f2:c9:d3:9f:31: 48:96:d7:ee:53:06:91:0c:5a:5a:55:20:8b:e3:eb: 77:f1:f2:68:39:29:83:1e:91:28:76:d6:9b:9b:c1: 6e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:22:E5:FE:9E:43:44:DF:0D:CE:08:70:0B:8B:13:59:BD:17:4E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.10.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:50:f5:3d:71:7b:5a:91:f0:b8:dd:44:7c:b3:11:58:48:df: 13:70:ca:11:e7:f2:89:8b:f9:b8:c0:b2:68:82:39:8f:4d:1f: 96:3c:b0:61:42:39:e5:98:ea:d8:f6:9b:65:87:bb:da:f1:4f: 7a:f4:4a:92:95:f1:a5:f8:4d:ce:5e:6c:c9:7b:88:68:83:63: 8f:e6:1e:dc:35:4e:13:5c:51:ed:28:6c:f7:8d:cf:01:d4:42: e7:98:e1:6f:68:8f:03:42:14:8f:ce:62:fd:b1:a4:fe:5e:65: 45:8a:bc:76:2a:a1:48:dc:02:7a:3e:1b:4d:c3:79:f1:4d:e8: 42:05:da:42:28:7c:02:39:90:b2:cb:32:93:0e:89:d8:bc:53: 1d:ec:ff:c6:34:d7:82:4e:f0:d6:3c:ac:09:74:19:50:78:86: 51:12:69:11:5a:ad:cd:29:b8:aa:db:20:1a:27:61:5d:26:59: 63:9a:35:16:73:ce:67:ca:33:30:af:6b:9b:47:b6:d7:65:e9: 67:0d:91:9d:35:f1:ea:f7:24:40:16:34:87:a6:85:06:14:12: 12:c6:78:84:a7:e4:3c:45:eb:18:fc:2a:cc:92:e4:e3:ee:04: 0c:e5:b7:1a:ed:1e:dd:d6:0b:8b:75:b6:68:76:83:9c:34:88: a7:f1:f0:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYfG56HPjcJy3dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MWNmMmZmMDYtODIyZC00YzViLWEwZDUtZDMzZDhlODhhNmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVmblANExGkMAH0Ro+lxOkokc3Dd9eZPFOGR 1vUNpwsHK2/SCOV/kEv/LBSCBWrcs7hPAVIb0EBX9s6P3BcYfN8T4OZW2JpFRlgm gJc4d5T4CvbXUm6icoX8qTDFpXFl+qUJUA9m38XGl6fodj+Y+4SLAvezXNky6k8p 3Yrrte4i5XD9GI7UyhyQud/Arxgpbg1lf3mEzuJJKfKjeK+vfW+uEB+QoYqs6dUV I8jlv22MCPao4iTvli4yKL5QAUdk7ucrKzExkurBloDobky1QToBfsj07UcJU+gk 8snTnzFIltfuUwaRDFpaVSCL4+t38fJoOSmDHpEodtabm8Fu4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0i5f6eQ0TfDc4IcAuLE1m9F07sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvOGE1OTljOGEtNmY2OS0z NTJhLTllZmYtZDk1ODM1MDBkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9Q9T1xe1qR8LjdRHyzEVhI3xNwyhHn8omL+bjAsmiCOY9NH5Y8sGFC OeWY6tj2m2WHu9rxT3r0SpKV8aX4Tc5ebMl7iGiDY4/mHtw1ThNcUe0obPeNzwHU QueY4W9ojwNCFI/OYv2xpP5eZUWKvHYqoUjcAno+G03DefFN6EIF2kIofAI5kLLL MpMOidi8Ux3s/8Y014JO8NY8rAl0GVB4hlESaRFarc0puKrbIBonYV0mWWOaNRZz zmfKMzCva5tHttdl6WcNkZ018er3JEAWNIemhQYUEhLGeISn5DxF6xj8KsyS5OPu BAzltxrtHt3WC4t1tmh2g5w0iKfx8Jo= -----END CERTIFICATE-----Generated at Wed Nov 5 16:18:43 2025 by rpki-client