$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa File: cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa (raw, json) Hash identifier: HnTZV+jZJJTF4bh9b5mYw/MSiPA3NLUvYM5pQ7sSLjc= Subject key identifier: DF:16:45:93:02:FB:BA:0F:A4:FC:94:9E:58:EA:C8:40:9F:57:20:9A Certificate issuer: /CN=481fd97a-d501-4297-871e-0024fbe50fc6 Certificate serial: 010D0C9F4328584B99D7A49AAD61ADE7D1A92EC0 Authority key identifier: E0:7F:C4:6B:FB:1B:F3:17:DC:DD:E9:74:51:77:B2:11:48:CB:1F:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 35866 IP address blocks: 117.18.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a4:9a:ad:61:ad:e7:d1:a9:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=481fd97a-d501-4297-871e-0024fbe50fc6 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d7a61659-12e5-40a2-a3b8-e0a7ae0dea36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:40:53:b8:91:e4:79:cb:03:49:d1:3e:39:df: 46:bf:5b:8e:96:18:8d:49:34:69:35:42:c2:df:7f: 7c:fb:5e:d4:7d:e6:d2:8c:d6:04:f8:39:61:46:91: ab:73:e5:42:71:54:62:93:27:1b:be:b8:9f:27:e9: 7d:4c:6a:f7:9d:8b:09:8a:c7:41:30:92:e7:a7:74: ef:20:0c:87:66:3b:18:31:ec:8a:d1:5b:bf:47:09: 2c:a4:f5:6f:10:c7:db:6c:81:60:62:57:8f:9d:0d: 98:89:5f:ce:0d:95:14:e9:d7:80:c1:b2:d5:1c:c5: 29:83:5f:72:68:27:28:c7:c6:d7:77:75:a4:76:e3: 84:ab:25:2c:f4:7c:74:0b:45:be:39:b0:3b:e2:a8: 61:5f:10:87:38:44:1d:e6:8a:41:e4:5d:1c:99:a4: 83:c5:12:26:4e:a8:02:04:5c:d6:9a:52:26:b1:8d: ce:c9:be:87:29:ab:76:c4:23:ba:af:5a:1b:73:2b: 6e:1e:ae:b7:28:98:58:9c:1b:63:38:cc:95:be:f3: 51:0c:03:bf:f0:5a:f7:fd:64:45:95:b2:3e:bc:bd: 82:26:02:89:24:ec:01:c7:39:16:4c:a0:ab:90:2f: 6e:f1:00:cc:87:d0:a5:53:d7:8f:8f:69:b5:db:e4: 83:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:16:45:93:02:FB:BA:0F:A4:FC:94:9E:58:EA:C8:40:9F:57:20:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.crl X509v3 Authority Key Identifier: keyid:E0:7F:C4:6B:FB:1B:F3:17:DC:DD:E9:74:51:77:B2:11:48:CB:1F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer sbgp-ipAddrBlock: critical IPv4: 117.18.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:53:fa:eb:31:fb:78:83:f1:70:f0:8d:24:86:67:e1:20:f7: 15:0f:4b:77:70:c3:34:a9:75:c4:6d:55:c9:f7:b7:99:4d:09: 86:a8:f2:47:1f:1a:3c:7e:ee:0a:4c:c3:3c:86:08:2e:3f:40: fd:29:a2:dd:b6:33:c3:32:9b:69:89:a4:d2:7a:98:e8:0f:b4: 3c:8d:85:35:51:df:64:1f:d4:6c:68:3c:8f:8e:85:14:30:14: b1:18:a6:3b:d7:f1:52:f5:67:60:ca:96:b5:de:e3:16:67:53: 11:02:1c:11:0b:0d:1a:1d:01:6c:45:12:63:79:52:98:76:34: 8c:d7:03:ea:86:6e:69:a1:d3:03:a0:52:d0:bd:10:cb:e3:63: af:df:69:19:59:93:c7:e4:ee:51:23:1d:4d:1a:78:f5:12:e5: 41:9b:b2:ec:94:2b:cd:1e:09:49:a8:d2:60:64:8c:a8:da:00: 8d:92:ca:00:62:1d:52:e2:0a:54:4a:76:92:2e:90:80:f6:7f: 63:14:c1:57:f2:ee:34:b0:2d:98:e5:6b:e2:ea:cc:74:3f:e6: 76:60:d4:b0:60:5d:79:f7:f5:49:04:eb:f3:54:a3:b8:4b:a1: 1c:2d:fb:d8:6b:c5:88:5e:5d:c7:c9:2d:d3:82:b0:f9:bb:6b: 5f:24:1c:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16SarWGt59GpLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgxZmQ5N2EtZDUwMS00Mjk3LTg3MWUtMDAyNGZiZTUw ZmM2MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDdhNjE2NTktMTJlNS00MGEyLWEzYjgtZTBhN2FlMGRlYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUBTuJHkecsDSdE+Od9Gv1uOlhiNSTRpNULC 3398+17UfebSjNYE+DlhRpGrc+VCcVRikycbvrifJ+l9TGr3nYsJisdBMJLnp3Tv IAyHZjsYMeyK0Vu/RwkspPVvEMfbbIFgYlePnQ2YiV/ODZUU6deAwbLVHMUpg19y aCcox8bXd3WkduOEqyUs9Hx0C0W+ObA74qhhXxCHOEQd5opB5F0cmaSDxRImTqgC BFzWmlImsY3Oyb6HKat2xCO6r1obcytuHq63KJhYnBtjOMyVvvNRDAO/8Fr3/WRF lbI+vL2CJgKJJOwBxzkWTKCrkC9u8QDMh9ClU9ePj2m12+SDiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8WRZMC+7oPpPyUnljqyECfVyCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODFm ZDk3YS1kNTAxLTQyOTctODcxZS0wMDI0ZmJlNTBmYzYvY2M0ODlkM2YtMmJjMS0z YTliLTllN2QtZTQ2ZmQ3M2M0MzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDgxZmQ5N2EtZDUwMS00Mjk3LTg3 MWUtMDAyNGZiZTUwZmM2LzQ4MWZkOTdhLWQ1MDEtNDI5Ny04NzFlLTAwMjRmYmU1 MGZjNi5jcmwwHwYDVR0jBBgwFoAU4H/Ea/sb8xfc3el0UXeyEUjLHxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ODFmZDk3YS1kNTAxLTQyOTctODcxZS0wMDI0 ZmJlNTBmYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdRJ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRT+usx+3iD8XDwjSSGZ+Eg9xUPS3dwwzSpdcRtVcn3t5lNCYao8kcf Gjx+7gpMwzyGCC4/QP0pot22M8Mym2mJpNJ6mOgPtDyNhTVR32Qf1GxoPI+OhRQw FLEYpjvX8VL1Z2DKlrXe4xZnUxECHBELDRodAWxFEmN5Uph2NIzXA+qGbmmh0wOg UtC9EMvjY6/faRlZk8fk7lEjHU0aePUS5UGbsuyUK80eCUmo0mBkjKjaAI2SygBi HVLiClRKdpIukID2f2MUwVfy7jSwLZjla+LqzHQ/5nZg1LBgXXn39UkE6/NUo7hL oRwt+9hrxYheXcfJLdOCsPm7a18kHP0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:30:19 2025 by rpki-client