$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa File: 248dd090-9420-37f9-9305-b5cd56b24a28.roa (raw, json) Hash identifier: VM5DYa/9tU799mMesMfiG+S4IOBKwJgE0cGgOyyaZYA= Subject key identifier: 1B:B8:B6:A5:1D:A0:CE:E5:9E:5B:51:A9:88:0F:FF:71:F7:6A:F6:51 Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F4328584B92DCE236904731AC1DCD8200 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 25820 IP address blocks: 74.118.192.0/22 maxlen: 24 104.193.8.0/22 maxlen: 24 104.245.96.0/21 maxlen: 24 104.255.64.0/21 maxlen: 24 142.0.32.0/20 maxlen: 24 162.213.24.0/21 maxlen: 24 162.248.72.0/21 maxlen: 24 204.124.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:e2:36:90:47:31:ac:1d:cd:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=bd9c3064-c202-4cc4-8ea5-5c48d885fd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:b5:3a:f1:52:1f:59:78:62:77:bc:a5:7a: 91:16:07:a6:41:c9:96:6c:d3:ce:fc:57:0f:5f:73: 76:97:ac:dd:ca:b9:37:b4:8a:c4:95:69:39:ba:98: 71:94:70:50:ef:ad:40:ae:d5:1d:99:49:d3:9b:fa: cc:8e:77:3d:4c:72:ab:7b:b4:e3:ba:4b:89:90:ab: c6:47:d2:f2:27:2a:1f:97:91:d1:f7:03:d0:c7:0d: 9a:c3:5f:d2:79:0d:96:a5:f8:d9:84:c4:ff:19:66: 06:4c:5a:ec:29:26:d4:5d:36:b3:45:73:46:25:92: f7:4a:65:04:2f:ef:7e:cc:a4:db:60:b8:9e:8b:2a: ef:73:5c:40:97:43:21:c0:90:5e:0a:77:75:40:02: 44:11:2e:53:63:70:27:c7:98:9a:cd:6a:a1:0f:4d: dc:08:2a:fe:2b:43:ef:d6:de:be:d9:ae:20:d9:c3: 63:bf:9d:22:b9:50:26:b8:36:97:92:43:38:88:28: c6:4e:2b:c9:0e:0e:3b:49:1a:05:8f:13:6c:48:6b: 27:66:69:0a:ea:5e:49:ff:a9:4a:fe:4c:1b:51:6f: 2e:94:ff:ad:2a:97:f3:79:33:84:d6:03:42:97:bc: 21:0f:ce:b9:85:bc:35:78:d5:d0:60:2c:4c:67:25: 65:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B8:B6:A5:1D:A0:CE:E5:9E:5B:51:A9:88:0F:FF:71:F7:6A:F6:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 74.118.192.0/22 104.193.8.0/22 104.245.96.0/21 104.255.64.0/21 142.0.32.0/20 162.213.24.0/21 162.248.72.0/21 204.124.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8c:30:62:a0:42:34:89:b6:87:26:9d:d2:98:03:5a:ef:f3: a3:c9:10:47:58:5a:d3:88:77:12:b6:10:0b:f4:73:81:b0:89: 06:04:3f:8d:ac:55:19:cb:52:2a:b4:7c:6e:61:a7:c1:99:21: 9b:0d:6d:aa:52:30:c4:65:65:05:98:34:0a:b7:fa:f0:43:19: 38:d9:17:85:db:2a:e5:a9:b5:ba:94:ed:c5:d9:86:f8:d6:48: b6:7b:12:81:a9:5f:c6:fa:c7:f6:6e:c8:37:ed:82:cd:09:47: e1:b7:51:e6:67:31:df:51:8e:59:8b:fe:2a:20:7f:61:2b:35: a5:7a:2a:f7:02:3e:db:0c:e8:db:6c:97:a9:e1:9b:95:04:2b: a8:e7:d9:25:a0:7a:27:d3:c4:3b:c9:4a:a6:a7:79:54:04:ec: 76:bd:b6:8d:dd:7a:9a:e3:f2:8f:7c:1f:1c:8c:7b:54:6f:3f: 62:ed:02:b3:43:c2:b5:c8:17:9c:43:90:59:f9:0e:7c:0a:8d: 1f:d5:f1:2d:70:bf:14:0a:8e:9f:2e:88:d7:83:e9:c3:ec:4a: a1:ce:8a:5d:d5:d1:df:1b:9e:87:60:9c:53:86:6e:df:3a:05: aa:c0:db:c9:3e:c5:93:bf:7b:89:bd:7c:9f:47:1a:64:32:61: c1:3a:92:fa -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEuS3OI2kEcxrB3NggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YmQ5YzMwNjQtYzIwMi00Y2M0LThlYTUtNWM0OGQ4ODVmZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Za1OvFSH1l4Yne8pXqRFgemQcmWbNPO/FcP X3N2l6zdyrk3tIrElWk5uphxlHBQ761ArtUdmUnTm/rMjnc9THKre7TjukuJkKvG R9LyJyofl5HR9wPQxw2aw1/SeQ2WpfjZhMT/GWYGTFrsKSbUXTazRXNGJZL3SmUE L+9+zKTbYLieiyrvc1xAl0MhwJBeCnd1QAJEES5TY3Anx5iazWqhD03cCCr+K0Pv 1t6+2a4g2cNjv50iuVAmuDaXkkM4iCjGTivJDg47SRoFjxNsSGsnZmkK6l5J/6lK /kwbUW8ulP+tKpfzeTOE1gNCl7whD865hbw1eNXQYCxMZyVlCwIDAQABo4IDfzCC A3swHQYDVR0OBBYEFBu4tqUdoM7lnltRqYgP/3H3avZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvMjQ4ZGQwOTAtOTQyMC0z N2Y5LTkzMDUtYjVjZDU2YjI0YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCSnbAAwQC aMEIAwQDaPVgAwQDaP9AAwQEjgAgAwQDotUYAwQDovhIAwQCzHy0MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACCMMGKgQjSJtocmndKYA1rv86PJEEdYWtOIdxK2EAv0c4GwiQYEP42sVRnLUiq0 fG5hp8GZIZsNbapSMMRlZQWYNAq3+vBDGTjZF4XbKuWptbqU7cXZhvjWSLZ7EoGp X8b6x/ZuyDftgs0JR+G3UeZnMd9RjlmL/iogf2ErNaV6KvcCPtsM6Ntsl6nhm5UE K6jn2SWgeifTxDvJSqaneVQE7Ha9to3deprj8o98HxyMe1RvP2LtArNDwrXIF5xD kFn5DnwKjR/V8S1wvxQKjp8uiNeD6cPsSqHOil3V0d8bnodgnFOGbt86BarA28k+ xZO/e4m9fJ9HGmQyYcE6kvo= -----END CERTIFICATE-----Generated at Wed Nov 5 06:33:01 2025 by rpki-client