$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/1fb72c15-8c92-3019-ae47-69dfe50e1e4d.roa File: 1fb72c15-8c92-3019-ae47-69dfe50e1e4d.roa (raw, json) Hash identifier: 9H9J9pJQs3ZWtRNMIlIAz3d1GDX6Ri9qUydzT9Gzv6w= Subject key identifier: 4D:E4:F9:FC:9E:CC:02:C0:46:38:57:FF:C9:BF:F4:94:57:10:69:86 Certificate issuer: /CN=d27e1a94-34c3-4462-8f10-07b9ec5d8176 Certificate serial: 010D0C9F4328584B715CA7D91AEB9415FD3882C0 Authority key identifier: F3:53:03:D3:57:0E:31:CC:DD:F5:88:F3:83:5B:23:44:0A:F9:40:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/1fb72c15-8c92-3019-ae47-69dfe50e1e4d.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 204.89.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d27e1a94-34c3-4462-8f10-07b9ec5d8176.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d27e1a94-34c3-4462-8f10-07b9ec5d8176.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a7:d9:1a:eb:94:15:fd:38:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d27e1a94-34c3-4462-8f10-07b9ec5d8176 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=d522016f-956f-4c7e-8351-b421e26b808f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f7:92:fb:a5:a2:04:ea:5b:19:8e:c1:c2:aa: 4c:0c:38:6a:7c:ce:0f:c6:b6:dc:06:f8:b4:c1:a0: 8a:a8:13:4a:f8:47:b0:65:6d:3b:f1:ee:c3:2b:04: 3f:b6:bd:4e:bf:39:3b:ea:04:bb:ff:70:43:44:03: 25:97:dc:2b:09:81:e3:42:0e:1c:2c:9a:0e:64:dc: 88:3b:50:f5:1c:35:cd:25:a5:58:7e:26:dd:8d:8d: d2:53:0c:53:fb:c4:c9:06:83:e4:ad:b9:df:b2:83: 39:e9:50:31:37:a0:f0:10:d0:6f:78:00:f9:d8:08: 41:f2:0d:e5:67:d1:0a:9a:97:89:e4:10:3a:6b:6c: a4:fc:4f:5c:78:df:0a:36:01:60:ab:97:31:60:86: 79:76:fc:0b:3d:05:e9:7f:29:64:0d:95:bd:8c:ed: 56:99:4d:36:3e:c4:23:e0:b9:90:7b:b2:92:d2:85: 51:3d:02:54:51:f2:4d:68:76:2c:fc:ac:aa:c0:93: 12:b9:c6:19:50:9f:aa:9a:8d:41:f7:48:94:63:0b: 35:9e:91:e0:92:81:56:12:e1:0c:c6:80:cd:3a:f5: 07:5c:0c:a5:44:f6:d6:f7:ab:c5:57:df:c0:12:6d: b7:82:4d:57:1d:46:f3:0d:35:46:2f:3c:0b:b3:2f: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E4:F9:FC:9E:CC:02:C0:46:38:57:FF:C9:BF:F4:94:57:10:69:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/1fb72c15-8c92-3019-ae47-69dfe50e1e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d27e1a94-34c3-4462-8f10-07b9ec5d8176.crl X509v3 Authority Key Identifier: keyid:F3:53:03:D3:57:0E:31:CC:DD:F5:88:F3:83:5B:23:44:0A:F9:40:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer sbgp-ipAddrBlock: critical IPv4: 204.89.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:56:fb:93:47:d4:52:f4:77:ce:7e:d1:e9:3d:5f:9d:fb:44: e0:53:c5:27:42:c6:12:c7:f1:06:6c:6f:92:38:7d:c8:b2:4d: c4:cb:33:16:69:d0:f1:ac:2f:2f:aa:79:57:61:ae:21:1d:13: 7b:0e:cc:5e:51:d4:45:e1:2d:c5:f3:cd:aa:4a:9f:3f:48:73: 24:a9:46:30:64:f6:6c:7f:e9:76:29:c2:35:ca:ce:0b:8d:a9: dc:4e:27:6d:b0:d3:96:3c:18:31:d3:d3:ac:09:90:16:1f:09: 9e:11:58:28:70:27:7b:41:87:99:b0:a6:17:ba:fd:27:46:25: 42:02:8f:ec:0b:ff:5d:c7:05:af:41:62:cf:6b:4f:2b:f0:3b: 5e:08:35:e7:11:27:e6:b4:a8:e2:2d:94:dd:ec:19:47:0f:b5: 8e:fc:56:cc:6b:39:b4:70:86:df:36:03:13:7d:34:4e:73:94: 1b:8d:6b:63:8d:b1:27:55:fd:16:ca:6b:c4:62:ac:d4:c9:c9: 9c:bf:ac:9a:39:2a:68:da:d3:ab:22:e1:ea:6b:f0:f1:15:87: 4a:9f:3a:5c:10:16:42:21:a5:6c:6f:6a:d1:b8:53:76:46:d0: 30:96:79:b1:8c:af:2b:aa:53:9a:2c:1d:ff:51:ec:59:e2:dd: 82:ff:bf:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKfZGuuUFf04gsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI3ZTFhOTQtMzRjMy00NDYyLThmMTAtMDdiOWVjNWQ4 MTc2MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZDUyMjAxNmYtOTU2Zi00YzdlLTgzNTEtYjQyMWUyNmI4MDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/eS+6WiBOpbGY7BwqpMDDhqfM4PxrbcBvi0 waCKqBNK+EewZW078e7DKwQ/tr1Ovzk76gS7/3BDRAMll9wrCYHjQg4cLJoOZNyI O1D1HDXNJaVYfibdjY3SUwxT+8TJBoPkrbnfsoM56VAxN6DwENBveAD52AhB8g3l Z9EKmpeJ5BA6a2yk/E9ceN8KNgFgq5cxYIZ5dvwLPQXpfylkDZW9jO1WmU02PsQj 4LmQe7KS0oVRPQJUUfJNaHYs/KyqwJMSucYZUJ+qmo1B90iUYws1npHgkoFWEuEM xoDNOvUHXAylRPbW96vFV9/AEm23gk1XHUbzDTVGLzwLsy/KxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3k+fyezALARjhX/8m/9JRXEGmGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjdl MWE5NC0zNGMzLTQ0NjItOGYxMC0wN2I5ZWM1ZDgxNzYvMWZiNzJjMTUtOGM5Mi0z MDE5LWFlNDctNjlkZmU1MGUxZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDI3ZTFhOTQtMzRjMy00NDYyLThm MTAtMDdiOWVjNWQ4MTc2L2QyN2UxYTk0LTM0YzMtNDQ2Mi04ZjEwLTA3YjllYzVk ODE3Ni5jcmwwHwYDVR0jBBgwFoAU81MD01cOMczd9Yjzg1sjRAr5QEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjdlMWE5NC0zNGMzLTQ0NjItOGYxMC0wN2I5 ZWM1ZDgxNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzFmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlW+5NH1FL0d85+0ek9X537ROBTxSdCxhLH8QZsb5I4fciyTcTLMxZp 0PGsLy+qeVdhriEdE3sOzF5R1EXhLcXzzapKnz9IcySpRjBk9mx/6XYpwjXKzguN qdxOJ22w05Y8GDHT06wJkBYfCZ4RWChwJ3tBh5mwphe6/SdGJUICj+wL/13HBa9B Ys9rTyvwO14INecRJ+a0qOItlN3sGUcPtY78VsxrObRwht82AxN9NE5zlBuNa2ON sSdV/RbKa8RirNTJyZy/rJo5Kmja06si4epr8PEVh0qfOlwQFkIhpWxvatG4U3ZG 0DCWebGMryuqU5osHf9R7Fni3YL/v+s= -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:40 2025 by rpki-client