$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/9a20493f-3df8-39b2-beb5-aafa944c96f1.roa File: 9a20493f-3df8-39b2-beb5-aafa944c96f1.roa (raw, json) Hash identifier: fwUm2I4OYune3KetlnqiO83VkG+YOjWAw5wUfvZcemk= Subject key identifier: 78:FF:54:2A:74:EF:82:B0:7D:FE:3E:B7:04:36:AE:8A:9B:F8:A5:26 Certificate issuer: /CN=ea4790bc-4699-4a2d-8cae-17f809013230 Certificate serial: 010D0C9F4328584BA0D24B61D1975DC4C820AE00 Authority key identifier: BB:7E:52:56:B2:3A:0C:40:CC:7F:81:32:9E:48:87:05:56:80:E9:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/9a20493f-3df8-39b2-beb5-aafa944c96f1.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 397550 IP address blocks: 199.231.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:4b:61:d1:97:5d:c4:c8:20:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea4790bc-4699-4a2d-8cae-17f809013230 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=99312d0f-8e57-47e4-bc9d-e2bde558b62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:6a:47:36:76:94:bc:b1:0f:b7:72:f5:82: 7e:a0:65:fc:cc:ab:bb:eb:fb:0e:6c:61:4d:55:da: 1a:ba:78:99:eb:b5:31:25:87:cc:8e:53:96:eb:74: 2b:f6:31:29:a8:b4:53:b2:50:da:88:e7:4f:01:98: db:ba:00:56:0c:ac:60:4f:9d:ec:71:68:09:b5:86: 5f:65:5e:d7:92:f2:07:c8:e8:16:05:d2:c9:d8:c3: 8b:72:83:5e:a6:1f:13:10:f1:86:f8:e7:2a:f5:5f: 7f:ca:34:54:77:48:74:0b:fa:69:92:58:90:f2:30: 7b:1b:83:86:89:aa:d2:5a:0c:57:bc:a6:f2:f0:1a: 84:3c:fa:b7:d5:1e:5e:59:4f:ea:0d:a3:8b:d9:fe: 06:cf:36:27:1f:e3:fb:01:ea:93:2e:db:76:6c:11: a1:21:cc:f9:5b:40:da:b2:c5:c4:fe:73:e4:17:62: 70:c6:53:db:51:2c:5a:6c:a8:42:4f:c5:29:3e:ba: bb:e5:63:91:e7:83:6e:f1:15:aa:51:ab:94:3a:9e: c0:7a:c1:21:43:96:a9:cf:48:bc:9f:c6:a4:39:05: 22:73:74:33:a7:e2:44:0c:68:a4:cf:79:99:1a:69: 23:25:71:d4:21:6d:96:47:1a:99:a5:de:6c:44:0a: 67:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FF:54:2A:74:EF:82:B0:7D:FE:3E:B7:04:36:AE:8A:9B:F8:A5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/9a20493f-3df8-39b2-beb5-aafa944c96f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.crl X509v3 Authority Key Identifier: keyid:BB:7E:52:56:B2:3A:0C:40:CC:7F:81:32:9E:48:87:05:56:80:E9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer sbgp-ipAddrBlock: critical IPv4: 199.231.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fe:00:34:29:22:00:38:93:e2:34:c7:29:da:f2:55:9d:bf: e3:b1:1b:a3:56:43:a4:07:16:e2:2d:9a:96:4d:3f:62:4c:1b: 0b:00:ab:df:6f:c3:a3:05:fc:72:e3:d2:d3:7e:ac:fc:6d:0c: be:e2:4c:7e:b8:10:45:d0:c2:00:3c:ce:27:6a:66:2e:14:b7: e4:a2:13:0f:be:53:b4:95:5e:4c:86:24:df:53:b8:ac:41:1c: b1:7d:8d:be:f2:da:87:d6:23:54:7b:d6:4b:f5:df:51:1e:ed: 65:25:06:6e:ea:01:aa:c5:bd:66:fa:79:2c:50:91:a4:d3:c0: 3c:c1:96:4d:0a:ca:6a:e0:f0:62:ae:24:f4:cc:2e:36:c4:80: f5:74:12:7a:0d:b7:6e:0c:c3:f9:a4:a4:85:f1:55:3a:d2:5c: 8c:19:55:ac:ff:98:69:eb:b8:4a:45:82:11:eb:e9:a5:eb:b4: 31:53:c3:12:47:11:6e:4c:50:94:5d:03:6b:75:26:5f:51:bc: 49:ab:fd:ff:8b:58:35:cb:39:16:ff:a8:86:b4:11:e0:8e:15: 91:2a:be:9f:91:db:47:61:44:20:6f:a6:2b:3c:0d:95:19:f2: a0:6c:26:a8:b0:70:3e:cc:5e:bb:a4:29:3d:fc:a7:72:96:f2: d5:38:fb:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kth0ZddxMggrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE0NzkwYmMtNDY5OS00YTJkLThjYWUtMTdmODA5MDEz MjMwMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OTkzMTJkMGYtOGU1Ny00N2U0LWJjOWQtZTJiZGU1NThiNjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9RqRzZ2lLyxD7dy9YJ+oGX8zKu76/sObGFN VdoauniZ67UxJYfMjlOW63Qr9jEpqLRTslDaiOdPAZjbugBWDKxgT53scWgJtYZf ZV7XkvIHyOgWBdLJ2MOLcoNeph8TEPGG+Ocq9V9/yjRUd0h0C/ppkliQ8jB7G4OG iarSWgxXvKby8BqEPPq31R5eWU/qDaOL2f4GzzYnH+P7AeqTLtt2bBGhIcz5W0Da ssXE/nPkF2JwxlPbUSxabKhCT8UpPrq75WOR54Nu8RWqUauUOp7AesEhQ5apz0i8 n8akOQUic3Qzp+JEDGikz3mZGmkjJXHUIW2WRxqZpd5sRApn+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHj/VCp074Kwff4+twQ2roqb+KUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYTQ3 OTBiYy00Njk5LTRhMmQtOGNhZS0xN2Y4MDkwMTMyMzAvOWEyMDQ5M2YtM2RmOC0z OWIyLWJlYjUtYWFmYTk0NGM5NmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWE0NzkwYmMtNDY5OS00YTJkLThj YWUtMTdmODA5MDEzMjMwL2VhNDc5MGJjLTQ2OTktNGEyZC04Y2FlLTE3ZjgwOTAx MzIzMC5jcmwwHwYDVR0jBBgwFoAUu35SVrI6DEDMf4EynkiHBVaA6cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYTQ3OTBiYy00Njk5LTRhMmQtOGNhZS0xN2Y4 MDkwMTMyMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD+ADQpIgA4k+I0xyna8lWdv+OxG6NWQ6QHFuItmpZNP2JMGwsAq99v w6MF/HLj0tN+rPxtDL7iTH64EEXQwgA8zidqZi4Ut+SiEw++U7SVXkyGJN9TuKxB HLF9jb7y2ofWI1R71kv131Ee7WUlBm7qAarFvWb6eSxQkaTTwDzBlk0Kymrg8GKu JPTMLjbEgPV0EnoNt24Mw/mkpIXxVTrSXIwZVaz/mGnruEpFghHr6aXrtDFTwxJH EW5MUJRdA2t1Jl9RvEmr/f+LWDXLORb/qIa0EeCOFZEqvp+R20dhRCBvpis8DZUZ 8qBsJqiwcD7MXrukKT38p3KW8tU4+xc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:58:09 2025 by rpki-client