$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa File: 542301b0-83c1-3997-b59d-aab70751e89e.roa (raw, json) Hash identifier: LkWl+vqgjndy6kyLhWb6mMSSEd0zroCnfzhhwSdoymg= Subject key identifier: AA:A1:07:54:CF:42:8E:D2:A0:C5:A7:EB:8D:0A:0C:84:1C:A8:59:17 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584B6A61E93958634AD115E5AFA5 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 55293 IP address blocks: 128.201.4.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e9:39:58:63:4a:d1:15:e5:af:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=64d2ae72-4af1-42d3-bcac-962ecfb55daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8e:7c:04:2a:a1:58:f8:32:03:15:a1:1a:1d: 1c:ac:b6:8e:89:77:2f:e0:6b:f8:a3:04:9a:a6:78: a1:87:1d:64:f9:7e:3a:e7:1d:5d:e6:ae:fe:66:e6: 69:9a:57:0e:c8:4f:61:eb:76:b4:d2:a9:50:cd:53: 9d:6f:b7:47:98:46:17:7d:4e:ee:19:a5:7d:81:6b: 7b:d5:0f:54:92:e7:61:6a:37:e0:2c:e3:95:c4:4c: 94:fd:8f:fc:67:73:73:29:25:81:80:40:d3:0c:ad: f3:30:4e:98:65:e9:8f:91:78:e0:e6:d3:b4:b8:58: 88:03:4b:43:9e:86:51:f7:8d:2e:53:92:ee:47:fb: 02:33:d5:7d:37:67:19:b1:0d:bb:e4:1e:6d:24:4b: 25:3b:e8:c7:c1:eb:fb:e4:28:ad:4c:cf:61:2e:4d: 9f:97:17:58:86:4f:83:a1:fd:97:9c:90:e7:65:00: fc:09:93:56:78:e4:fd:d0:d7:29:80:96:5c:48:e7: af:03:f3:f1:2d:7b:00:20:03:5d:e4:fc:01:3e:52: 2c:a2:45:a5:04:ff:3b:d2:ba:ec:56:ab:2b:ba:a6: b8:70:78:50:ea:36:76:f7:06:b7:79:c0:e0:d3:77: 3e:02:43:09:89:78:70:da:05:25:a0:23:83:93:68: 4f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A1:07:54:CF:42:8E:D2:A0:C5:A7:EB:8D:0A:0C:84:1C:A8:59:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 128.201.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:22:d9:42:1a:cd:a0:06:0e:68:30:9f:08:e1:c6:03:cf:55: 91:88:67:f2:8d:a6:32:13:81:db:de:09:69:ee:2b:4f:ac:10: d6:87:6c:13:3d:af:ca:bb:c3:e4:66:18:eb:6c:2f:56:8d:5e: 63:69:af:02:ad:b9:16:41:c4:a4:74:18:e8:20:a0:c3:bc:3a: 00:7c:57:e1:c0:9b:ec:ca:ae:cb:2f:08:0f:24:32:8f:cc:dd: 76:12:37:60:53:30:99:a9:96:12:5a:40:9a:b8:42:54:9b:b6: 93:7e:c1:e2:c6:f0:8a:38:9b:e5:80:3a:a7:c0:a2:53:ab:b4: 9d:f5:2a:b0:59:e9:e2:a6:94:14:da:7b:23:64:85:83:49:34: 81:ae:25:47:9a:df:c5:4e:08:4e:f3:af:1f:cc:78:40:fb:47: e4:fc:9a:d0:53:90:ac:5b:05:55:7f:64:19:42:9b:29:30:95: 5d:65:05:3c:07:80:55:e9:58:ed:be:e6:a9:cc:0d:99:de:32: b0:44:98:50:a8:61:84:d8:55:ea:5e:71:08:70:bd:a3:5a:81: c0:34:0b:3f:35:8d:47:7e:e4:ba:f5:45:77:1d:29:c2:23:e1: 08:1c:a2:bf:df:2b:ae:db:76:e6:57:df:f8:4c:06:ac:32:7c: 25:9c:22:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYek5WGNK0RXlr6UwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NjRkMmFlNzItNGFmMS00MmQzLWJjYWMtOTYyZWNmYjU1ZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY58BCqhWPgyAxWhGh0crLaOiXcv4Gv4owSa pnihhx1k+X465x1d5q7+ZuZpmlcOyE9h63a00qlQzVOdb7dHmEYXfU7uGaV9gWt7 1Q9UkudhajfgLOOVxEyU/Y/8Z3NzKSWBgEDTDK3zME6YZemPkXjg5tO0uFiIA0tD noZR940uU5LuR/sCM9V9N2cZsQ275B5tJEslO+jHwev75CitTM9hLk2flxdYhk+D of2XnJDnZQD8CZNWeOT90NcpgJZcSOevA/PxLXsAIANd5PwBPlIsokWlBP870rrs Vqsruqa4cHhQ6jZ29wa3ecDg03c+AkMJiXhw2gUloCODk2hPYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqhB1TPQo7SoMWn640KDIQcqFkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNTQyMzAxYjAtODNjMS0z OTk3LWI1OWQtYWFiNzA3NTFlODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgMkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIi2UIazaAGDmgwnwjhxgPPVZGIZ/KNpjITgdveCWnuK0+sENaHbBM9 r8q7w+RmGOtsL1aNXmNprwKtuRZBxKR0GOggoMO8OgB8V+HAm+zKrssvCA8kMo/M 3XYSN2BTMJmplhJaQJq4QlSbtpN+weLG8Io4m+WAOqfAolOrtJ31KrBZ6eKmlBTa eyNkhYNJNIGuJUea38VOCE7zrx/MeED7R+T8mtBTkKxbBVV/ZBlCmykwlV1lBTwH gFXpWO2+5qnMDZneMrBEmFCoYYTYVepecQhwvaNagcA0Cz81jUd+5Lr1RXcdKcIj 4Qgcor/fK67bduZX3/hMBqwyfCWcInA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:22 2025 by rpki-client