$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa File: 1af7f89d-d1da-35f0-bbd2-2132fad40618.roa (raw, json) Hash identifier: aBZa7SQgicBfayv101WCJV2yWoSB8oYWt6We8N7g5sY= Subject key identifier: DD:30:2A:9F:78:64:19:70:B1:BD:BF:AF:67:18:0F:E8:D9:81:73:75 Certificate issuer: /CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Certificate serial: 010D0C9F4328584B9E07983319F4E089C06BC560 Authority key identifier: 8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 396400 IP address blocks: 204.89.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:98:33:19:f4:e0:89:c0:6b:c5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=422ffa05-b398-4b76-a31e-048e6ef8a276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:45:a7:8f:0d:87:ce:ae:13:97:82:b8:80:de: 96:b7:82:ab:cb:d0:b4:76:1c:c3:b4:40:57:56:c2: 27:85:77:9e:c2:81:e4:5d:d0:0a:ac:a2:32:75:07: 21:d8:8a:bd:fd:18:ad:a9:99:3d:b3:6b:89:09:b6: e1:ce:fe:6a:58:e0:ea:95:c4:28:56:d7:35:c1:e9: 8d:13:ec:0f:c9:d1:0d:29:60:30:da:7a:ee:ff:94: 03:1f:fc:a7:87:8c:cd:ed:12:0e:97:c1:58:ef:4a: b5:b1:b9:fd:64:20:38:0b:5f:2d:0d:89:6f:af:25: 85:bc:71:67:dc:2b:ce:f1:3f:64:51:f7:5d:b9:f3: 7a:2d:48:ed:6e:0f:3b:78:c6:62:db:b8:7e:6f:3d: 9f:36:f5:97:c9:90:9a:1c:63:8d:df:3b:d5:c7:59: 3b:97:d4:30:73:fe:c0:55:7d:d2:46:e4:7f:3f:8f: 21:96:06:f6:09:4b:0c:34:c9:6c:0b:1d:8f:cc:cc: 4a:02:d9:ef:e3:3c:c6:e9:2f:de:55:cd:f0:a6:65: be:62:64:4f:1c:fb:ef:c5:89:30:8f:1c:84:9d:e6: 71:80:4c:c9:e3:23:2c:b6:6f:a0:45:41:6f:a1:89: f9:b8:c1:a5:5b:60:84:21:98:a0:51:01:52:62:35: 08:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:30:2A:9F:78:64:19:70:B1:BD:BF:AF:67:18:0F:E8:D9:81:73:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl X509v3 Authority Key Identifier: keyid:8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer sbgp-ipAddrBlock: critical IPv4: 204.89.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:5f:6a:ba:50:14:6a:4f:d6:d9:b7:ea:9c:46:ba:ee:10:63: 32:df:ba:da:9e:83:74:cb:62:5b:d3:80:9e:2d:18:a4:97:06: 4e:dc:41:02:ce:6b:72:fc:3b:f9:cf:e6:f3:a4:47:c0:80:67: cf:f7:18:6f:28:02:39:09:69:d0:84:15:22:90:61:11:ba:20: 21:ba:1c:b8:33:c3:77:ac:52:57:3c:54:01:82:67:f1:7d:ca: 35:ac:d0:9a:e5:32:31:5c:64:c6:ae:f8:ea:b3:53:57:2c:bb: 36:04:35:7a:1a:8e:8f:b4:97:7c:44:11:29:a4:f6:69:f3:0d: 60:59:7d:eb:cd:c9:6d:aa:52:d9:6b:2d:3b:6c:32:78:88:06: 2e:6e:4e:8f:7e:45:37:37:88:18:52:c2:54:d8:90:da:b8:5b: cd:82:5f:6c:d5:4d:f3:74:f2:b7:f2:d1:1a:94:9d:ae:5f:0b: 6f:84:e1:43:9c:0e:82:09:36:3e:9b:f7:5c:3a:a6:62:8c:20: 1e:e1:5e:00:ec:75:34:db:b9:d9:65:4b:2f:59:a5:53:80:48: 34:36:21:fb:37:2a:bc:e8:89:84:fc:ba:e2:97:93:36:6a:ed: d6:f9:76:bd:c1:97:c1:a2:6c:9d:0f:d7:73:6e:0a:38:eb:16: 61:2b:95:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5gzGfTgicBrxWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUwZDFiYjktMmVmOS00ODEwLTgxMDktMjVjZGQ1YWZj NGZkMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NDIyZmZhMDUtYjM5OC00Yjc2LWEzMWUtMDQ4ZTZlZjhhMjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EWnjw2Hzq4Tl4K4gN6Wt4Kry9C0dhzDtEBX VsInhXeewoHkXdAKrKIydQch2Iq9/RitqZk9s2uJCbbhzv5qWODqlcQoVtc1wemN E+wPydENKWAw2nru/5QDH/ynh4zN7RIOl8FY70q1sbn9ZCA4C18tDYlvryWFvHFn 3CvO8T9kUfddufN6LUjtbg87eMZi27h+bz2fNvWXyZCaHGON3zvVx1k7l9Qwc/7A VX3SRuR/P48hlgb2CUsMNMlsCx2PzMxKAtnv4zzG6S/eVc3wpmW+YmRPHPvvxYkw jxyEneZxgEzJ4yMstm+gRUFvoYn5uMGlW2CEIZigUQFSYjUI7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0wKp94ZBlwsb2/r2cYD+jZgXN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBk MWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNkZDVhZmM0ZmQvMWFmN2Y4OWQtZDFkYS0z NWYwLWJiZDItMjEzMmZhZDQwNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODUwZDFiYjktMmVmOS00ODEwLTgx MDktMjVjZGQ1YWZjNGZkLzg1MGQxYmI5LTJlZjktNDgxMC04MTA5LTI1Y2RkNWFm YzRmZC5jcmwwHwYDVR0jBBgwFoAUi3aXN6k5bQ2eBOg7ZEJtY8aQAHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBkMWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNk ZDVhZmM0ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRfarpQFGpP1tm36pxGuu4QYzLfutqeg3TLYlvTgJ4tGKSXBk7cQQLO a3L8O/nP5vOkR8CAZ8/3GG8oAjkJadCEFSKQYRG6ICG6HLgzw3esUlc8VAGCZ/F9 yjWs0JrlMjFcZMau+OqzU1csuzYENXoajo+0l3xEESmk9mnzDWBZfevNyW2qUtlr LTtsMniIBi5uTo9+RTc3iBhSwlTYkNq4W82CX2zVTfN08rfy0RqUna5fC2+E4UOc DoIJNj6b91w6pmKMIB7hXgDsdTTbudllSy9ZpVOASDQ2Ifs3KrzoiYT8uuKXkzZq 7db5dr3Bl8GibJ0P13NuCjjrFmErlSM= -----END CERTIFICATE-----Generated at Wed Nov 5 21:10:37 2025 by rpki-client