$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/9fd3a3e1-dfc7-34ed-8f84-1734d992ec4a.roa File: 9fd3a3e1-dfc7-34ed-8f84-1734d992ec4a.roa (raw, json) Hash identifier: ErzpHqeISbh6kCnugLnQMymGh+0OGulFKDVZ43lsLRw= Subject key identifier: C9:84:0A:36:2D:8C:EC:3B:F2:9B:25:D8:79:8C:99:75:2C:8A:8B:60 Certificate issuer: /CN=91294759-5da4-4acf-8f32-7c022824b443 Certificate serial: 010D0C9F4328584B2B91936C7F68994618248A80 Authority key identifier: 4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/9fd3a3e1-dfc7-34ed-8f84-1734d992ec4a.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 3477 IP address blocks: 204.193.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:93:6c:7f:68:99:46:18:24:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91294759-5da4-4acf-8f32-7c022824b443 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=a728261b-4857-43ec-bd32-c1364eb4a5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:b9:bd:0e:94:1f:5e:e8:b5:bc:c0:5e:0b: 2b:1e:69:a6:9a:d9:52:47:ec:06:20:6e:37:f4:4c: cb:50:7b:13:2e:a3:f3:07:35:37:09:c5:05:40:bd: c0:2c:e3:a7:a6:c2:b8:24:f3:60:2c:90:96:4a:55: 02:21:12:02:a2:f9:8c:dc:ff:39:e7:12:1f:b0:29: 27:52:f4:79:0c:87:8f:e1:c0:19:a1:bf:7a:89:c2: 05:4d:d0:5e:86:86:4c:fa:9c:41:66:c7:68:d4:b4: 4b:9b:90:4b:a2:56:82:b2:97:85:79:66:54:a4:9d: e4:a7:41:dd:d3:f3:31:e0:1a:63:7b:05:3d:cd:37: d1:4f:aa:3c:ea:c2:84:0a:00:3f:6f:86:ca:b0:02: 92:ca:b3:11:84:eb:66:3e:96:dc:1c:55:45:08:c8: 46:cb:43:ca:9c:b4:6c:af:1a:09:7c:3e:31:81:53: ee:9b:a7:c7:d5:b0:94:28:d9:25:8c:00:b8:05:c4: 05:e9:40:52:d0:b4:90:75:ab:ec:40:7f:12:dc:e2: a7:93:f2:7c:f8:38:fc:03:02:e2:65:c1:a7:c9:d5: d6:67:0e:9e:c4:af:d5:e0:43:75:d6:eb:d5:61:3f: 31:87:e3:03:fa:5b:ae:05:9a:1d:e9:d8:4d:0e:0d: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:84:0A:36:2D:8C:EC:3B:F2:9B:25:D8:79:8C:99:75:2C:8A:8B:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/9fd3a3e1-dfc7-34ed-8f84-1734d992ec4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl X509v3 Authority Key Identifier: keyid:4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer sbgp-ipAddrBlock: critical IPv4: 204.193.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b6:ae:92:06:e9:e2:ef:38:42:0a:94:d4:1f:28:1a:04:1f: 32:32:0f:5c:8c:28:3c:39:f6:8c:d7:73:e1:cd:d2:a0:c2:51: 3b:df:0a:1d:bd:d8:ae:3c:d1:d3:b4:2c:0e:01:0c:a2:f7:01: 9b:84:7e:df:85:24:df:4f:80:3b:e6:02:0d:ee:0d:40:5e:48: 94:e6:d7:41:b8:98:07:ed:17:ea:ea:21:2f:13:43:a8:a2:a7: cc:75:84:bd:55:aa:17:0d:85:56:e8:da:db:ed:c0:10:2e:7a: 7f:8e:34:5f:04:77:a7:ca:a8:b1:57:ce:1f:91:51:a2:19:9a: 87:2d:1a:88:f7:71:9a:47:fb:e2:83:a4:bf:0f:b2:fc:da:cb: 52:d1:9d:8e:2d:10:34:59:84:af:3f:59:4d:e0:23:be:fe:18: c0:2c:cc:d1:32:b1:04:d9:51:3f:2e:02:c0:f1:11:30:c3:80: f7:90:c1:f0:83:89:69:d1:3d:09:d5:5a:0c:7d:17:b7:e4:79: d8:a8:e6:1e:7a:73:df:74:2a:ce:3a:f6:91:04:9d:b5:39:e7: f8:84:47:30:99:87:26:6a:3c:c2:d3:c2:38:c7:e0:e4:c2:64: 1d:17:f4:47:ef:2d:84:95:58:74:8d:1a:f4:dc:ce:fa:d9:07: 17:0d:56:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZNsf2iZRhgkioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEyOTQ3NTktNWRhNC00YWNmLThmMzItN2MwMjI4MjRi NDQzMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk YTcyODI2MWItNDg1Ny00M2VjLWJkMzItYzEzNjRlYjRhNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF65vQ6UH17otbzAXgsrHmmmmtlSR+wGIG43 9EzLUHsTLqPzBzU3CcUFQL3ALOOnpsK4JPNgLJCWSlUCIRICovmM3P855xIfsCkn UvR5DIeP4cAZob96icIFTdBehoZM+pxBZsdo1LRLm5BLolaCspeFeWZUpJ3kp0Hd 0/Mx4BpjewU9zTfRT6o86sKECgA/b4bKsAKSyrMRhOtmPpbcHFVFCMhGy0PKnLRs rxoJfD4xgVPum6fH1bCUKNkljAC4BcQF6UBS0LSQdavsQH8S3OKnk/J8+Dj8AwLi ZcGnydXWZw6exK/V4EN11uvVYT8xh+MD+luuBZod6dhNDg18FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmECjYtjOw78psl2HmMmXUsiotgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MTI5 NDc1OS01ZGE0LTRhY2YtOGYzMi03YzAyMjgyNGI0NDMvOWZkM2EzZTEtZGZjNy0z NGVkLThmODQtMTczNGQ5OTJlYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTEyOTQ3NTktNWRhNC00YWNmLThm MzItN2MwMjI4MjRiNDQzLzkxMjk0NzU5LTVkYTQtNGFjZi04ZjMyLTdjMDIyODI0 YjQ0My5jcmwwHwYDVR0jBBgwFoAUSuN5k6zYRUipskeneD83OSfgDyIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85MTI5NDc1OS01ZGE0LTRhY2YtOGYzMi03YzAy MjgyNGI0NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS2rpIG6eLvOEIKlNQfKBoEHzIyD1yMKDw59ozXc+HN0qDCUTvfCh29 2K480dO0LA4BDKL3AZuEft+FJN9PgDvmAg3uDUBeSJTm10G4mAftF+rqIS8TQ6ii p8x1hL1VqhcNhVbo2tvtwBAuen+ONF8Ed6fKqLFXzh+RUaIZmoctGoj3cZpH++KD pL8Psvzay1LRnY4tEDRZhK8/WU3gI77+GMAszNEysQTZUT8uAsDxETDDgPeQwfCD iWnRPQnVWgx9F7fkedio5h56c990Ks469pEEnbU55/iERzCZhyZqPMLTwjjH4OTC ZB0X9EfvLYSVWHSNGvTczvrZBxcNVvM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:03 2025 by rpki-client