$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70c29b76-8502-4384-8bf0-51f554d35783/d887f010-9ba7-3ee4-9d1b-c5ceb5755a9c.roa File: d887f010-9ba7-3ee4-9d1b-c5ceb5755a9c.roa (raw, json) Hash identifier: XtZ60UkVeNkO5ZaLuWqbt2DAQw6bilb2B8J69snJNH0= Subject key identifier: 03:BA:FB:1A:E0:8A:1C:D1:7C:C5:A5:1F:8F:1C:C0:77:43:4B:F8:B4 Certificate issuer: /CN=70c29b76-8502-4384-8bf0-51f554d35783 Certificate serial: 010D0C9F4328584B9E07B66095B7BF6654B67B80 Authority key identifier: 25:1D:03:6A:BD:2F:FB:37:CC:7A:2C:F4:0F:27:32:D8:1D:A2:F2:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70c29b76-8502-4384-8bf0-51f554d35783.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70c29b76-8502-4384-8bf0-51f554d35783/d887f010-9ba7-3ee4-9d1b-c5ceb5755a9c.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 36155 IP address blocks: 204.10.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70c29b76-8502-4384-8bf0-51f554d35783/70c29b76-8502-4384-8bf0-51f554d35783.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70c29b76-8502-4384-8bf0-51f554d35783/70c29b76-8502-4384-8bf0-51f554d35783.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70c29b76-8502-4384-8bf0-51f554d35783.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b6:60:95:b7:bf:66:54:b6:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70c29b76-8502-4384-8bf0-51f554d35783 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=1c5a035b-2796-4828-b9a6-6013c4005d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:52:96:45:ac:d3:cd:aa:0f:89:fa:7a:f6:57: 8b:c8:eb:62:b2:0d:fd:51:70:81:e3:f3:26:77:54: 46:d3:8f:ac:ad:cb:23:aa:71:d1:5a:32:3b:d5:80: 52:a3:c4:72:79:3f:4e:49:d0:b8:ae:7d:38:a3:83: 9a:3e:ae:22:22:48:ba:1f:5c:d6:bd:30:ec:24:9c: 1c:d7:03:45:7a:87:bd:2c:23:83:50:2c:55:f3:df: f9:fc:51:50:1f:ca:e0:fa:a3:44:15:2b:d6:ba:31: cf:75:f0:6d:b1:b0:da:08:00:c3:15:35:da:5b:4c: 1d:d7:51:a7:46:ff:c5:9a:88:c8:42:64:41:9c:aa: 11:a1:96:36:32:dd:82:db:58:bd:b8:66:c1:fb:43: ea:12:02:19:71:25:4b:2b:1b:02:62:fd:cd:87:2e: 04:0c:86:01:bc:93:6c:81:ce:ea:91:ea:ed:e5:20: 3e:81:78:73:92:7c:39:14:32:7a:84:92:52:7b:4e: a6:60:c5:54:39:ca:a1:0f:ab:b2:b2:10:dd:15:e4: 4d:23:ce:85:48:58:5b:f9:49:13:06:1c:97:01:06: c9:df:ba:d2:09:38:18:1d:62:51:42:7d:5f:75:84: 74:be:fb:a2:43:0a:30:a5:30:20:3c:e8:a8:e4:1c: 3a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BA:FB:1A:E0:8A:1C:D1:7C:C5:A5:1F:8F:1C:C0:77:43:4B:F8:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70c29b76-8502-4384-8bf0-51f554d35783/d887f010-9ba7-3ee4-9d1b-c5ceb5755a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70c29b76-8502-4384-8bf0-51f554d35783/70c29b76-8502-4384-8bf0-51f554d35783.crl X509v3 Authority Key Identifier: keyid:25:1D:03:6A:BD:2F:FB:37:CC:7A:2C:F4:0F:27:32:D8:1D:A2:F2:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70c29b76-8502-4384-8bf0-51f554d35783.cer sbgp-ipAddrBlock: critical IPv4: 204.10.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b3:7c:4e:54:16:ee:33:53:f1:98:fe:7a:4a:ae:98:07:dc: 72:55:5a:2a:d7:04:4f:27:58:ec:fc:21:cd:d4:c7:bf:34:50: 00:a3:a9:3d:c8:45:fe:e9:a6:30:d1:b9:7f:42:a9:8c:18:c5: 60:78:f2:18:c6:a4:5b:35:77:b2:66:25:d1:12:fe:73:2a:1e: 81:59:44:93:d7:c7:5d:3d:ed:4c:61:78:08:0f:9c:f6:1a:72: 5b:11:60:c8:e4:47:0e:fe:9b:df:40:ff:d0:4c:db:23:2a:c2: 68:3c:53:2d:2d:1b:aa:0a:06:e3:3a:42:ce:3e:29:f7:61:95: 6a:3c:0a:10:f6:6f:25:7f:95:8c:21:54:78:e6:78:fc:36:d8: a2:7a:7b:93:03:45:1a:14:82:03:45:b3:40:76:a6:81:af:54: 8d:a4:ea:8b:3e:36:4e:fa:1e:8d:e9:94:95:5c:d0:2b:ee:af: 8b:b8:ac:02:a8:d9:4d:ad:1c:e0:95:ff:68:4c:7e:0e:5e:78: e2:cc:ba:ae:c1:04:e6:93:5b:a8:9f:63:85:c9:60:9a:8a:d4: e3:45:7d:68:61:5d:63:ec:12:c0:45:ea:46:41:a4:e7:45:e8: 38:18:8a:46:7c:ab:06:ad:36:b9:c7:2b:d6:6f:30:db:8b:b6: 7b:df:81:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7Zglbe/ZlS2e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBjMjliNzYtODUwMi00Mzg0LThiZjAtNTFmNTU0ZDM1 NzgzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MWM1YTAzNWItMjc5Ni00ODI4LWI5YTYtNjAxM2M0MDA1ZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lKWRazTzaoPifp69leLyOtisg39UXCB4/Mm d1RG04+srcsjqnHRWjI71YBSo8RyeT9OSdC4rn04o4OaPq4iIki6H1zWvTDsJJwc 1wNFeoe9LCODUCxV89/5/FFQH8rg+qNEFSvWujHPdfBtsbDaCADDFTXaW0wd11Gn Rv/FmojIQmRBnKoRoZY2Mt2C21i9uGbB+0PqEgIZcSVLKxsCYv3Nhy4EDIYBvJNs gc7qkert5SA+gXhzknw5FDJ6hJJSe06mYMVUOcqhD6uyshDdFeRNI86FSFhb+UkT BhyXAQbJ37rSCTgYHWJRQn1fdYR0vvuiQwowpTAgPOio5Bw6FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAO6+xrgihzRfMWlH48cwHdDS/i0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MGMy OWI3Ni04NTAyLTQzODQtOGJmMC01MWY1NTRkMzU3ODMvZDg4N2YwMTAtOWJhNy0z ZWU0LTlkMWItYzVjZWI1NzU1YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzBjMjliNzYtODUwMi00Mzg0LThi ZjAtNTFmNTU0ZDM1NzgzLzcwYzI5Yjc2LTg1MDItNDM4NC04YmYwLTUxZjU1NGQz NTc4My5jcmwwHwYDVR0jBBgwFoAUJR0Dar0v+zfMeiz0Dycy2B2i8oIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83MGMyOWI3Ni04NTAyLTQzODQtOGJmMC01MWY1 NTRkMzU3ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAq5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOzfE5UFu4zU/GY/npKrpgH3HJVWirXBE8nWOz8Ic3Ux780UACjqT3I Rf7ppjDRuX9CqYwYxWB48hjGpFs1d7JmJdES/nMqHoFZRJPXx1097UxheAgPnPYa clsRYMjkRw7+m99A/9BM2yMqwmg8Uy0tG6oKBuM6Qs4+KfdhlWo8ChD2byV/lYwh VHjmePw22KJ6e5MDRRoUggNFs0B2poGvVI2k6os+Nk76Ho3plJVc0Cvur4u4rAKo 2U2tHOCV/2hMfg5eeOLMuq7BBOaTW6ifY4XJYJqK1ONFfWhhXWPsEsBF6kZBpOdF 6DgYikZ8qwatNrnHK9ZvMNuLtnvfgVI= -----END CERTIFICATE-----Generated at Wed Nov 5 23:02:56 2025 by rpki-client