$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/d4c1ab5e-022b-3fd0-a92b-89b25e5f072c.roa File: d4c1ab5e-022b-3fd0-a92b-89b25e5f072c.roa (raw, json) Hash identifier: ahBptuPSvRe+gt5TGqKrnrWV4dxaGc5a6ikO8xwH2Eo= Subject key identifier: 35:97:29:3B:FE:E4:7A:5C:52:94:7E:30:88:F8:FD:C0:BB:48:46:0D Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Certificate serial: 010D0C9F4328584BA39D08D750F153324F935980 Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/d4c1ab5e-022b-3fd0-a92b-89b25e5f072c.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 1273 IP address blocks: 204.188.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:08:d7:50:f1:53:32:4f:93:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=caede90b-3973-4249-b65a-23593325c0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f5:fc:54:41:a9:fc:36:1d:dd:a4:07:d6:28: 56:e0:39:ed:4c:29:c4:c6:bd:e2:81:84:6b:d6:82: e7:e6:3b:9e:a3:28:52:f8:ff:29:02:41:ad:7e:d9: 55:6e:1f:a6:1a:d3:d6:21:fa:fa:e1:d6:e0:5a:8e: 7d:c4:c9:b4:8e:63:32:a4:5e:f9:98:19:df:7c:7e: d1:4e:ee:68:17:80:3b:25:df:b4:8a:bd:c4:11:7f: 4f:bc:3a:1f:67:aa:b7:d5:28:0c:1d:4b:4a:07:c6: 39:cb:d1:63:e9:9c:6b:e1:4c:3b:88:b6:83:75:f9: 86:de:ec:67:21:6c:7a:9d:a9:4d:57:0a:50:ef:9e: 49:97:5e:d8:6f:0e:e8:93:14:87:c0:f9:4f:71:b0: 2b:3b:f1:b3:9c:0e:a8:5f:8e:32:ab:fe:45:7b:9c: 47:69:1b:c6:c3:ba:f9:04:8b:ae:6b:31:70:03:fc: 79:25:c6:0c:02:cf:bc:25:ae:3f:73:33:bd:94:54: c8:27:61:37:e5:12:38:cb:89:5d:5d:35:6f:50:f2: 96:6f:f7:05:b5:90:cc:0c:5d:a2:43:ff:79:39:a9: c0:28:47:f7:43:21:91:c6:3e:52:1b:d3:ac:08:48: d1:50:85:0a:48:11:cb:78:58:95:b5:9d:09:ec:7c: 42:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:97:29:3B:FE:E4:7A:5C:52:94:7E:30:88:F8:FD:C0:BB:48:46:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/d4c1ab5e-022b-3fd0-a92b-89b25e5f072c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl X509v3 Authority Key Identifier: keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer sbgp-ipAddrBlock: critical IPv4: 204.188.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:11:d9:dc:a2:47:09:91:84:80:19:1f:e9:67:80:10:92:8d: 0f:52:73:84:43:ea:67:b5:e3:7a:32:1d:f1:f6:cc:d0:25:ed: 5a:e6:bd:ee:cb:39:f5:5b:a2:8d:2b:b7:83:f7:bf:ed:b8:42: 46:1c:e1:a1:2d:dc:95:55:9d:f4:da:fd:40:99:ce:86:5b:ef: 9e:47:0e:20:85:77:5b:ca:a7:a3:46:4e:c5:84:86:97:71:fc: 4c:dd:84:41:6d:79:bb:42:76:64:9d:55:da:b9:a2:d2:a7:1b: 04:92:36:52:a7:1a:b2:8d:b5:9d:7b:70:62:30:d6:fa:ef:c2: ce:8c:32:cc:b3:a2:14:97:6e:76:c0:6b:5e:84:40:1b:6c:90: 09:25:7a:97:2f:ee:60:c7:3d:07:fa:1d:ac:34:33:ee:af:a6: 6e:f0:a0:ab:0f:3b:22:27:a7:e8:e6:a1:f8:0d:96:96:0e:6a: 18:87:c3:96:5b:9c:8f:0d:83:29:ab:2b:c3:36:71:23:e2:18: 8b:ec:17:c3:c3:8e:7b:6c:da:f4:a9:ac:5a:fb:c8:65:69:d6: 6b:bf:eb:b7:37:ad:5e:56:da:5e:d6:f3:98:d4:9c:3a:06:74: 6c:75:42:2b:b5:b4:aa:2b:05:5d:c8:e4:5d:43:0e:d6:fa:df: a5:1f:56:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQjXUPFTMk+TWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4 NTgyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Y2FlZGU5MGItMzk3My00MjQ5LWI2NWEtMjM1OTMzMjVjMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfX8VEGp/DYd3aQH1ihW4DntTCnExr3igYRr 1oLn5jueoyhS+P8pAkGtftlVbh+mGtPWIfr64dbgWo59xMm0jmMypF75mBnffH7R Tu5oF4A7Jd+0ir3EEX9PvDofZ6q31SgMHUtKB8Y5y9Fj6Zxr4Uw7iLaDdfmG3uxn IWx6nalNVwpQ755Jl17Ybw7okxSHwPlPcbArO/GznA6oX44yq/5Fe5xHaRvGw7r5 BIuuazFwA/x5JcYMAs+8Ja4/czO9lFTIJ2E35RI4y4ldXTVvUPKWb/cFtZDMDF2i Q/95OanAKEf3QyGRxj5SG9OsCEjRUIUKSBHLeFiVtZ0J7HxCWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWXKTv+5HpcUpR+MIj4/cC7SEYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvZDRjMWFiNWUtMDIyYi0z ZmQwLWE5MmItODliMjVlNWYwNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3 NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzLyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkR2dyiRwmRhIAZH+lngBCSjQ9Sc4RD6me143oyHfH2zNAl7Vrmve7L OfVboo0rt4P3v+24QkYc4aEt3JVVnfTa/UCZzoZb755HDiCFd1vKp6NGTsWEhpdx /EzdhEFtebtCdmSdVdq5otKnGwSSNlKnGrKNtZ17cGIw1vrvws6MMsyzohSXbnbA a16EQBtskAklepcv7mDHPQf6Haw0M+6vpm7woKsPOyInp+jmofgNlpYOahiHw5Zb nI8NgymrK8M2cSPiGIvsF8PDjnts2vSprFr7yGVp1mu/67c3rV5W2l7W85jUnDoG dGx1Qiu1tKorBV3I5F1DDtb636UfVp4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:28:47 2025 by rpki-client