$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa File: 79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa (raw, json) Hash identifier: qSPyArfpgMyyi4McIu9sgRGxntG02y61kgHEJLBz/rg= Subject key identifier: 5A:64:8D:C2:E6:66:EF:59:28:C5:22:1E:7E:8D:3F:98:00:5B:8A:D4 Certificate issuer: /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Certificate serial: 010D0C9F4328584B9E07BA5AAE23F68812E26B00 Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 204.79.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ba:5a:ae:23:f6:88:12:e2:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=51dd4431-9064-408a-9f29-39f58f188ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a3:2c:dd:58:71:53:a7:1d:ff:ee:30:53:eb: 1f:e1:d1:11:16:7c:32:92:5f:5a:5f:cc:e0:60:48: a3:17:83:95:22:cd:12:51:26:84:4c:5a:fd:f9:c2: b3:10:38:2b:37:04:11:cd:fc:d3:b7:45:78:9a:96: 44:9e:d6:2c:0d:0d:e4:67:7f:82:47:ac:bc:72:a7: fc:f5:00:36:3b:13:9a:62:5f:67:40:6f:5f:5b:b1: 8a:52:fe:c5:60:3d:40:3e:8e:a6:e1:ea:3f:9b:65: ce:53:22:da:d3:31:0a:75:29:b1:8a:be:68:f3:dd: 45:65:0b:f8:a3:0f:b6:87:ab:61:ee:f8:70:03:11: b1:80:39:09:46:49:e6:61:c8:72:65:90:05:b1:8e: 72:06:a5:23:2f:0b:04:4e:94:7c:7b:e0:eb:ad:c2: bc:a4:24:7b:34:e0:7a:b9:58:81:df:58:1e:48:86: 9a:57:56:73:d1:f3:4e:ed:3d:e4:84:23:6b:c0:55: 04:da:cb:41:ff:17:8f:db:9c:31:7c:e8:aa:e9:20: 15:0a:e6:2e:06:7c:0b:56:0c:74:17:5a:d0:80:2a: e5:1c:88:18:96:65:d9:42:75:91:1b:14:3a:21:d0: 11:06:db:b3:c7:02:6a:0a:5d:7c:f2:72:7b:8e:85: a8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:64:8D:C2:E6:66:EF:59:28:C5:22:1E:7E:8D:3F:98:00:5B:8A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl X509v3 Authority Key Identifier: keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer sbgp-ipAddrBlock: critical IPv4: 204.79.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:49:db:07:5f:05:53:87:16:9b:2a:4e:f7:70:b1:c8:be:8d: f6:78:39:9e:69:7a:8d:bc:f7:62:48:f3:d4:9d:9d:8b:1e:20: 1d:50:33:af:b5:f5:bc:25:92:80:1d:20:e7:b1:54:04:d2:1b: f9:4b:53:3f:8d:f2:f6:dd:3c:33:33:a1:d3:0e:08:66:c3:24: 28:ad:a3:a6:06:72:e3:16:88:26:ce:bb:8b:19:71:99:3b:ab: fd:d3:0c:b3:72:bf:55:fa:72:c4:fe:d3:52:14:fb:9d:36:c1: e9:a2:7e:a4:f9:a6:1c:35:22:aa:11:bf:9b:7c:0f:16:f0:d9: e2:9f:10:b8:4d:80:b5:c6:11:f4:8d:35:cc:20:e2:89:7e:dc: 57:22:cd:f2:ac:0f:fe:31:7e:6b:0d:85:95:25:49:ef:22:a5: f9:9a:d4:b7:e8:93:e8:3e:33:5e:41:e8:da:da:2d:cf:e0:43: ab:cf:52:22:e4:d2:06:57:7d:89:6b:f9:32:b2:9e:da:b2:3f: a6:b7:4f:90:6b:08:a3:6d:e8:fe:2d:e4:69:33:60:7f:68:88: 55:20:fb:55:1c:89:4f:60:6f:53:a2:83:d3:b6:98:a3:03:a8: df:3a:18:7a:21:29:69:68:75:a9:45:b8:b2:0f:92:10:99:60: 3e:cb:49:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7pariP2iBLiawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxNGY4ZDctNTQwYi00YTRhLWI1YWUtMGFmMTQ3Zjdj MWU0MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NTFkZDQ0MzEtOTA2NC00MDhhLTlmMjktMzlmNThmMTg4ZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KMs3VhxU6cd/+4wU+sf4dERFnwykl9aX8zg YEijF4OVIs0SUSaETFr9+cKzEDgrNwQRzfzTt0V4mpZEntYsDQ3kZ3+CR6y8cqf8 9QA2OxOaYl9nQG9fW7GKUv7FYD1APo6m4eo/m2XOUyLa0zEKdSmxir5o891FZQv4 ow+2h6th7vhwAxGxgDkJRknmYchyZZAFsY5yBqUjLwsETpR8e+DrrcK8pCR7NOB6 uViB31geSIaaV1Zz0fNO7T3khCNrwFUE2stB/xeP25wxfOiq6SAVCuYuBnwLVgx0 F1rQgCrlHIgYlmXZQnWRGxQ6IdARBtuzxwJqCl188nJ7joWohwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpkjcLmZu9ZKMUiHn6NP5gAW4rUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0 ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdmN2MxZTQvNzljNWY0M2QtNzg0Yi0z ZjNlLThhMGItZDk0ZTEyOWJkNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGYxNGY4ZDctNTQwYi00YTRhLWI1 YWUtMGFmMTQ3ZjdjMWU0LzhmMTRmOGQ3LTU0MGItNGE0YS1iNWFlLTBhZjE0N2Y3 YzFlNC5jcmwwHwYDVR0jBBgwFoAUT0s4jV9dhOfRkQSO1EfrBXSzPhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYx NDdmN2MxZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVJ2wdfBVOHFpsqTvdwsci+jfZ4OZ5peo2892JI89SdnYseIB1QM6+1 9bwlkoAdIOexVATSG/lLUz+N8vbdPDMzodMOCGbDJCito6YGcuMWiCbOu4sZcZk7 q/3TDLNyv1X6csT+01IU+502wemifqT5phw1IqoRv5t8Dxbw2eKfELhNgLXGEfSN Ncwg4ol+3FcizfKsD/4xfmsNhZUlSe8ipfma1Lfok+g+M15B6NraLc/gQ6vPUiLk 0gZXfYlr+TKyntqyP6a3T5BrCKNt6P4t5GkzYH9oiFUg+1UciU9gb1Oig9O2mKMD qN86GHohKWlodalFuLIPkhCZYD7LSQc= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:19 2025 by rpki-client