$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c703411c-6214-3b4f-a875-1901e3bb6a04.roa File: c703411c-6214-3b4f-a875-1901e3bb6a04.roa (raw, json) Hash identifier: cvQY7Xax/RZ8/AMzlLGRegjbYijSWPQtOrjE7bLXlNU= Subject key identifier: 66:4C:A9:25:E5:8E:53:37:62:F8:28:A4:06:EF:FD:D3:90:68:00:E0 Certificate issuer: /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Certificate serial: 010D0C9F4328584B987239F426C428385938DAE0 Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c703411c-6214-3b4f-a875-1901e3bb6a04.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 46261 IP address blocks: 107.155.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:39:f4:26:c4:28:38:59:38:da:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=e341e267-b229-4096-9195-36de9e0aefa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c3:d6:88:bf:d3:28:82:ab:35:94:37:67:b6: ad:d9:cf:8c:62:17:b5:7c:cd:95:c0:cc:04:ce:df: a4:c6:5b:b2:46:a0:cc:c0:55:14:60:ed:c1:b4:b9: f1:3d:f8:03:66:76:a4:1c:4b:97:63:80:26:ed:82: 1e:7d:01:2f:b1:0d:cc:30:a8:d6:36:af:57:36:bb: cc:7e:33:8e:95:0e:eb:02:68:2a:4b:50:33:ce:5e: 89:0f:24:1b:5b:4e:d6:34:29:37:25:34:55:a3:b3: 53:5f:c6:45:4a:19:52:01:28:7c:7e:29:db:25:ef: 29:e1:01:21:8a:81:b8:3d:fa:d1:18:fd:85:be:b8: 7c:15:9e:0a:79:23:b1:e8:c2:bb:ae:eb:18:5b:59: c3:96:5c:94:a9:29:f1:41:f9:f3:1a:4a:b4:3f:0a: 03:6f:08:53:d5:e2:1f:87:df:87:51:ac:ee:6c:63: cd:89:58:a1:bb:50:74:4d:5a:66:e2:5d:a8:6f:ab: b3:c8:0d:62:be:80:cd:b5:cd:8d:0e:08:19:5d:ba: b3:0c:6a:61:9d:5b:58:71:f1:85:b0:fc:08:37:d0: a0:d7:9d:9f:17:82:f2:b4:ec:ac:67:c8:b3:a5:9b: 3b:df:65:29:29:76:95:a2:29:87:31:ff:5e:bd:6c: 84:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4C:A9:25:E5:8E:53:37:62:F8:28:A4:06:EF:FD:D3:90:68:00:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c703411c-6214-3b4f-a875-1901e3bb6a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl X509v3 Authority Key Identifier: keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer sbgp-ipAddrBlock: critical IPv4: 107.155.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:92:02:2a:c7:43:b1:f8:30:74:d5:62:9a:64:4a:c3:7a:a5: 75:65:09:ea:ec:ca:6c:6f:ba:48:be:a7:eb:0a:e8:42:ee:30: 1c:60:80:2b:13:c7:5e:db:fb:2b:78:b1:74:32:f6:94:08:5f: 43:be:30:2d:71:3f:a8:e4:62:50:ec:fc:0a:e2:45:4a:00:ab: a3:bf:1f:73:a2:61:8c:c4:e9:6c:33:13:1d:f6:51:0a:9f:44: cd:21:eb:50:a0:ed:8d:41:0b:3e:68:e5:0f:ef:6c:14:73:9d: 9c:6a:5a:22:16:1f:ff:80:51:82:b8:ee:85:20:20:ab:3a:df: 0a:ad:5c:a7:aa:fe:44:d9:4e:e3:8d:2a:19:7c:e3:b5:69:05: b9:cf:33:e2:ec:d5:54:55:79:29:ca:20:67:ec:9f:31:ce:9b: 42:bc:37:10:b6:63:8e:88:fc:f2:fb:20:95:89:30:f8:e6:11: 54:37:68:97:0a:88:6d:69:2e:60:48:15:23:93:aa:d4:d4:47: f9:78:42:83:e5:22:8f:b7:d3:f1:01:de:f2:63:58:3d:82:0a: 59:2b:37:1e:0d:5d:ff:b1:5c:66:be:b7:d2:8d:e0:96:2a:63: d9:59:bb:35:d8:7f:a6:b6:dc:97:3a:41:08:b7:d1:c6:4a:da: df:c6:ba:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYcjn0JsQoOFk42uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0 Mjg3MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk ZTM0MWUyNjctYjIyOS00MDk2LTkxOTUtMzZkZTllMGFlZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcPWiL/TKIKrNZQ3Z7at2c+MYhe1fM2VwMwE zt+kxluyRqDMwFUUYO3BtLnxPfgDZnakHEuXY4Am7YIefQEvsQ3MMKjWNq9XNrvM fjOOlQ7rAmgqS1Azzl6JDyQbW07WNCk3JTRVo7NTX8ZFShlSASh8finbJe8p4QEh ioG4PfrRGP2Fvrh8FZ4KeSOx6MK7rusYW1nDllyUqSnxQfnzGkq0PwoDbwhT1eIf h9+HUazubGPNiVihu1B0TVpm4l2ob6uzyA1ivoDNtc2NDggZXbqzDGphnVtYcfGF sPwIN9Cg152fF4LytOysZ8izpZs732UpKXaVoimHMf9evWyEAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZMqSXljlM3YvgopAbv/dOQaADgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4 NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvYzcwMzQxMWMtNjIxNC0z YjRmLWE4NzUtMTkwMWUzYmI2YTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk YzJmMDQyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5v8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeSAirHQ7H4MHTVYppkSsN6pXVlCersymxvuki+p+sK6ELuMBxggCsT x17b+yt4sXQy9pQIX0O+MC1xP6jkYlDs/AriRUoAq6O/H3OiYYzE6WwzEx32UQqf RM0h61Cg7Y1BCz5o5Q/vbBRznZxqWiIWH/+AUYK47oUgIKs63wqtXKeq/kTZTuON Khl847VpBbnPM+Ls1VRVeSnKIGfsnzHOm0K8NxC2Y46I/PL7IJWJMPjmEVQ3aJcK iG1pLmBIFSOTqtTUR/l4QoPlIo+30/EB3vJjWD2CClkrNx4NXf+xXGa+t9KN4JYq Y9lZuzXYf6a23Jc6QQi30cZK2t/GuiA= -----END CERTIFICATE-----Generated at Tue Nov 4 22:59:36 2025 by rpki-client