$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/2b45a8d2-36c0-3698-8b2f-2c6aa1d56b60.roa File: 2b45a8d2-36c0-3698-8b2f-2c6aa1d56b60.roa (raw, json) Hash identifier: VOFvhnggUQUW6QeJHRlwkN+M/HuRw12lGg3vjJrvb/w= Subject key identifier: 11:21:16:6C:E7:E1:B9:0C:BF:98:78:0D:96:56:15:E8:1D:4A:BE:39 Certificate issuer: /CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466 Certificate serial: 010D0C9F4328584B9E0796E75748AADC854E5820 Authority key identifier: 43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/2b45a8d2-36c0-3698-8b2f-2c6aa1d56b60.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 10439 IP address blocks: 135.84.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:96:e7:57:48:aa:dc:85:4e:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=8b11a41c-6db4-43a6-8f52-3acc4cc3a85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a7:b2:c1:b5:43:1d:0b:75:01:92:26:7b:fc: b5:e3:59:14:90:99:bf:6f:9e:0f:85:cd:f8:61:11: 52:5b:72:cf:82:03:fe:3f:6e:74:97:82:a7:99:3c: 61:dd:c7:30:57:21:38:d2:d6:8b:89:d3:7e:98:b0: b5:ed:4d:ce:8c:82:34:92:1e:54:07:05:f5:54:19: 46:70:6f:39:13:f0:86:e9:3f:90:77:30:7a:34:44: 48:a6:23:53:f4:0a:fc:6a:0c:7c:71:d7:07:d9:94: b6:bf:f2:6e:f9:29:1b:65:7c:48:b2:18:ab:1e:30: b3:1f:02:b0:eb:2a:fa:0f:75:6b:73:01:89:7a:ba: 56:2f:ef:3f:d4:3a:bc:36:d8:b2:a5:ff:c1:3f:bb: 3d:27:4b:86:a2:e5:49:ab:2c:2c:de:55:74:d5:dc: 99:6d:b9:2f:de:b1:d6:5c:76:88:91:c1:05:f6:75: 75:f0:aa:52:82:b4:b0:3a:4d:be:85:6b:39:e1:9a: 96:27:cd:e8:ca:d1:9e:04:f5:fe:6c:e8:ed:96:aa: 7e:e3:28:a1:99:8c:8e:a9:eb:cb:e6:44:cd:e1:b6: 34:fd:75:d1:02:3f:70:8d:97:ae:4a:78:1c:52:ca: d2:95:88:21:47:86:c7:9d:41:f8:52:fb:c5:b3:3d: ea:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:21:16:6C:E7:E1:B9:0C:BF:98:78:0D:96:56:15:E8:1D:4A:BE:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/2b45a8d2-36c0-3698-8b2f-2c6aa1d56b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl X509v3 Authority Key Identifier: keyid:43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer sbgp-ipAddrBlock: critical IPv4: 135.84.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:32:35:e1:5c:b8:d9:99:b2:08:4b:82:03:42:e3:73:3b:f1: fb:05:16:ff:bd:5f:14:67:34:ac:93:1e:f9:10:c8:05:48:1e: 13:2f:19:f6:b0:50:42:96:48:10:f9:65:85:1c:e9:0a:ad:34: 55:bd:ff:4f:79:1b:fd:6c:51:4c:be:28:63:cc:06:6a:30:f8: 2b:5d:22:53:1a:0a:6d:7f:c5:05:22:cd:a5:98:6c:ba:1f:c2: ce:95:c8:95:aa:b5:ec:cb:84:5c:d0:9a:4d:4f:69:b6:5a:2d: d1:ee:ee:02:ec:32:be:fb:0b:f1:62:52:67:15:d9:0a:67:53: 6a:14:f7:62:68:00:b7:91:1d:22:64:20:db:37:3f:19:97:7f: 80:b4:2b:b7:17:b5:ad:52:1b:42:5e:aa:82:23:29:10:39:0d: b7:1e:17:e5:95:45:17:d2:3c:6d:54:48:76:98:15:30:5e:06: b2:0c:1d:a2:01:2b:dc:4a:99:fa:bd:0a:ac:61:96:fb:a6:3c: 37:c7:c1:2d:3f:53:7f:ee:32:5a:fe:ca:5d:2a:99:c5:74:f4: 5a:92:7d:23:74:6b:3b:37:9d:bd:5d:af:47:68:73:45:0f:4d: cd:23:84:cb:d1:5d:01:42:e3:d6:75:7e:c5:d4:b4:74:93:93: 7a:37:a6:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5bnV0iq3IVOWCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFmZjRkNzgtMjRlNi00ZGIyLThlOTctZTVjMzlmZjIx NDY2MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OGIxMWE0MWMtNmRiNC00M2E2LThmNTItM2FjYzRjYzNhODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKeywbVDHQt1AZIme/y141kUkJm/b54Phc34 YRFSW3LPggP+P250l4KnmTxh3ccwVyE40taLidN+mLC17U3OjII0kh5UBwX1VBlG cG85E/CG6T+QdzB6NERIpiNT9Ar8agx8cdcH2ZS2v/Ju+SkbZXxIshirHjCzHwKw 6yr6D3VrcwGJerpWL+8/1Dq8Ntiypf/BP7s9J0uGouVJqyws3lV01dyZbbkv3rHW XHaIkcEF9nV18KpSgrSwOk2+hWs54ZqWJ83oytGeBPX+bOjtlqp+4yihmYyOqevL 5kTN4bY0/XXRAj9wjZeuSngcUsrSlYghR4bHnUH4UvvFsz3qzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEhFmzn4bkMv5h4DZZWFegdSr45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMWZm NGQ3OC0yNGU2LTRkYjItOGU5Ny1lNWMzOWZmMjE0NjYvMmI0NWE4ZDItMzZjMC0z Njk4LThiMmYtMmM2YWExZDU2YjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTFmZjRkNzgtMjRlNi00ZGIyLThl OTctZTVjMzlmZjIxNDY2L2ExZmY0ZDc4LTI0ZTYtNGRiMi04ZTk3LWU1YzM5ZmYy MTQ2Ni5jcmwwHwYDVR0jBBgwFoAUQ6dNoOwhBnVxkUvW07a409XVlkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMWZmNGQ3OC0yNGU2LTRkYjItOGU5Ny1lNWMz OWZmMjE0NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAh1TaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8yNeFcuNmZsghLggNC43M78fsFFv+9XxRnNKyTHvkQyAVIHhMvGfaw UEKWSBD5ZYUc6QqtNFW9/095G/1sUUy+KGPMBmow+CtdIlMaCm1/xQUizaWYbLof ws6VyJWqtezLhFzQmk1PabZaLdHu7gLsMr77C/FiUmcV2QpnU2oU92JoALeRHSJk INs3PxmXf4C0K7cXta1SG0JeqoIjKRA5DbceF+WVRRfSPG1USHaYFTBeBrIMHaIB K9xKmfq9CqxhlvumPDfHwS0/U3/uMlr+yl0qmcV09FqSfSN0azs3nb1dr0doc0UP Tc0jhMvRXQFC49Z1fsXUtHSTk3o3psw= -----END CERTIFICATE-----Generated at Wed Nov 5 08:54:09 2025 by rpki-client