$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa File: 8edc1a27-c324-3d26-be3c-15679ecee128.roa (raw, json) Hash identifier: ILqA+fhoaBgkgfsG29y3gl5uftWqUGYBhKkcb7Gnvf8= Subject key identifier: 46:DF:F2:8F:88:A9:8D:7A:57:33:51:EB:88:9D:DA:1A:16:1A:CE:F9 Certificate issuer: /CN=d3de683a-04b1-4e1c-94c5-cb45e983323d Certificate serial: 010D0C9F4328584B434C6D6CD0C78F6A77F08B80 Authority key identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 398888 IP address blocks: 128.254.220.0/24 maxlen: 24 163.123.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:6d:6c:d0:c7:8f:6a:77:f0:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3de683a-04b1-4e1c-94c5-cb45e983323d Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=e51b4c5b-57e5-4a56-85b6-7bed0a398961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:05:b7:c3:60:4c:98:b2:29:47:12:91:78: d9:48:bc:7a:2e:f0:7a:d5:8b:5e:5b:75:c8:18:0e: d2:63:30:70:15:e1:1a:83:b4:a7:02:de:ba:d3:26: b9:d6:b7:81:15:7c:fb:86:f0:58:ca:89:15:65:10: 7b:99:71:c3:eb:c6:48:ca:6c:11:50:dd:0c:4e:61: 14:60:be:a3:d3:f3:60:f0:5f:8b:74:18:36:cd:6e: 16:e7:66:e6:a4:5a:2c:78:ca:24:8a:73:47:11:17: e6:4e:22:3f:d6:e0:1b:ee:ac:80:18:40:a7:f1:1b: fb:1d:9d:eb:05:8e:8d:5e:b9:13:ab:68:3b:67:e9: 44:73:4b:bc:92:ad:de:fa:28:c4:b3:e5:ba:cb:fe: d1:c5:b4:22:e2:35:95:5f:3f:e7:9a:49:43:e2:58: eb:e6:95:d7:f0:3d:c5:9d:86:6b:81:55:f0:72:56: 89:75:e2:35:2d:0e:b5:30:99:53:43:33:6a:72:91: 62:7d:0d:01:b3:61:fb:4f:0e:84:34:11:86:fc:24: 29:ab:57:b9:8e:37:38:6b:ae:3a:88:d5:7a:cf:c4: 21:f1:76:8f:45:6e:c6:9c:3c:11:b0:94:66:bf:a8: 0b:63:75:0b:4f:e3:47:be:5b:e8:8b:80:07:2e:09: 29:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DF:F2:8F:88:A9:8D:7A:57:33:51:EB:88:9D:DA:1A:16:1A:CE:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl X509v3 Authority Key Identifier: keyid:21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer sbgp-ipAddrBlock: critical IPv4: 128.254.220.0/24 163.123.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:ef:27:09:da:d8:00:48:a3:7a:a4:a9:69:8b:ba:37:85:c5: 1f:b0:fb:c2:5a:4c:d1:e8:6b:c3:05:fc:38:82:6c:52:c0:35: ec:ac:05:8b:27:3e:65:6a:1e:be:f9:d3:06:a0:e0:a0:42:08: 30:6e:51:bf:69:1c:d1:27:9e:14:3e:7d:ac:a8:f6:4e:dc:de: 1d:56:3f:17:4c:81:f6:85:a8:62:84:cc:bc:3b:67:88:74:c2: ee:4c:a2:f5:21:40:8e:c3:5b:f0:a5:2d:64:87:80:d1:34:f7: c0:d0:54:6e:c1:10:25:4b:0d:7a:a7:55:d4:97:91:fe:61:01: 10:fe:91:20:6e:e0:5f:57:99:99:8b:23:b1:bf:ee:2b:df:fa: c2:c1:b8:b6:6b:0b:ba:e1:11:1f:26:77:d2:69:4b:7c:32:e3: ca:a0:30:20:d7:08:bc:cd:d9:b2:24:ae:0d:d7:e6:c6:f6:c0: 64:cd:da:1d:6b:6f:83:12:de:e6:4f:c7:9b:6d:8d:c5:03:96: d5:09:93:e1:02:c6:9b:f8:4a:20:55:0f:b4:3d:3c:5d:f5:59: c9:70:9c:97:15:46:ad:96:51:aa:b9:c3:f4:5b:4b:6c:c8:10: 28:dd:38:7a:8c:6b:c6:65:0f:54:92:3b:94:2a:71:0f:ee:13: 09:6c:a9:49 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtDTG1s0MePanfwi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNkZTY4M2EtMDRiMS00ZTFjLTk0YzUtY2I0NWU5ODMz MjNkMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZTUxYjRjNWItNTdlNS00YTU2LTg1YjYtN2JlZDBhMzk4OTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiUFt8NgTJiyKUcSkXjZSLx6LvB61YteW3XI GA7SYzBwFeEag7SnAt660ya51reBFXz7hvBYyokVZRB7mXHD68ZIymwRUN0MTmEU YL6j0/Ng8F+LdBg2zW4W52bmpFoseMokinNHERfmTiI/1uAb7qyAGECn8Rv7HZ3r BY6NXrkTq2g7Z+lEc0u8kq3e+ijEs+W6y/7RxbQi4jWVXz/nmklD4ljr5pXX8D3F nYZrgVXwclaJdeI1LQ61MJlTQzNqcpFifQ0Bs2H7Tw6ENBGG/CQpq1e5jjc4a646 iNV6z8Qh8XaPRW7GnDwRsJRmv6gLY3ULT+NHvlvoi4AHLgkphwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEbf8o+IqY16VzNR64id2hoWGs75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kM2Rl NjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1ZTk4MzMyM2QvOGVkYzFhMjctYzMyNC0z ZDI2LWJlM2MtMTU2NzllY2VlMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDNkZTY4M2EtMDRiMS00ZTFjLTk0 YzUtY2I0NWU5ODMzMjNkL2QzZGU2ODNhLTA0YjEtNGUxYy05NGM1LWNiNDVlOTgz MzIzZC5jcmwwHwYDVR0jBBgwFoAUIf0rCB2hYHaj1ZCVi5hdPuCb8aQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kM2RlNjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1 ZTk4MzMyM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgP7cAwQA o3vYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAK/vJwna2ABIo3qkqWmLujeFxR+w+8JaTNHoa8MF/DiCbFLA NeysBYsnPmVqHr750wag4KBCCDBuUb9pHNEnnhQ+fayo9k7c3h1WPxdMgfaFqGKE zLw7Z4h0wu5MovUhQI7DW/ClLWSHgNE098DQVG7BECVLDXqnVdSXkf5hARD+kSBu 4F9XmZmLI7G/7ivf+sLBuLZrC7rhER8md9JpS3wy48qgMCDXCLzN2bIkrg3X5sb2 wGTN2h1rb4MS3uZPx5ttjcUDltUJk+ECxpv4SiBVD7Q9PF31WclwnJcVRq2WUaq5 w/RbS2zIECjdOHqMa8ZlD1SSO5QqcQ/uEwlsqUk= -----END CERTIFICATE-----Generated at Fri Nov 7 11:23:04 2025 by rpki-client