$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2c8e5f3-eaf9-3151-ae60-f1a6950cbe67.roa File: c2c8e5f3-eaf9-3151-ae60-f1a6950cbe67.roa (raw, json) Hash identifier: XE9ThdcPoj54snZkDBNOBs12uB0hM57O87lRV7BDmgc= Subject key identifier: 66:E9:8F:AC:D7:DB:F6:F0:9E:FB:8B:7F:4E:E6:9B:53:83:A0:F0:82 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BAF8534B505B2A4AAF87D80C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2c8e5f3-eaf9-3151-ae60-f1a6950cbe67.roa Signing time: Wed 29 Oct 2025 19:22:33 +0000 ROA not before: Wed 29 Oct 2025 19:22:33 +0000 ROA not after: Tue 27 Jan 2026 20:22:33 +0000 asID: 17727 IP address blocks: 154.18.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:85:34:b5:05:b2:a4:aa:f8:7d:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 29 19:22:33 2025 GMT Not After : Jan 27 20:22:33 2026 GMT Subject: CN=aa85952c-4585-4b75-96fb-abeb2ca7a5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f8:c8:92:98:10:2b:46:af:6e:e6:5a:2f:c1: 82:56:cd:55:8d:0c:a6:0d:19:de:82:6a:e2:e9:9a: 50:c2:d9:c8:1e:3c:6b:75:e2:39:cc:24:6d:80:14: c5:ed:8b:e3:c3:a5:2d:45:1f:91:95:ed:55:f0:eb: d7:6f:02:65:93:3d:be:b0:fa:b0:fa:47:62:51:b1: 15:ca:f7:db:6f:de:88:e1:97:ef:1f:17:00:ff:4b: dd:f2:b9:43:86:ff:1e:b7:21:ec:93:02:08:02:10: d9:3b:b7:73:15:d6:93:64:8c:ea:ff:41:85:86:5a: 6d:94:d4:34:c8:e3:61:07:0a:70:f4:43:44:a6:db: f8:14:ef:ec:3d:b8:24:7a:d8:94:6f:6e:a4:6e:f0: bb:68:c3:d3:09:06:99:bd:ab:8a:dc:19:11:28:42: 26:43:66:8b:61:ed:e1:ba:3e:73:77:9c:97:8f:a2: 7f:b0:9c:44:38:2d:cd:85:63:42:e9:ef:00:5e:7e: 35:90:7a:b4:62:9b:a1:74:45:08:45:2a:9f:1a:85: af:3e:dd:43:f9:40:e9:41:9d:ed:ad:28:cb:11:87: 9c:b6:89:b5:34:41:bc:9f:d3:80:28:89:0e:8a:d1: 17:e9:7f:37:f5:41:f5:c9:ba:e3:d5:96:6f:82:f4: a7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E9:8F:AC:D7:DB:F6:F0:9E:FB:8B:7F:4E:E6:9B:53:83:A0:F0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2c8e5f3-eaf9-3151-ae60-f1a6950cbe67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 154.18.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:67:db:6d:6f:76:62:37:0f:a5:a7:58:6b:dc:f2:2e:14:6b: f2:30:36:71:51:a4:e3:d0:38:be:95:8b:99:de:d0:30:e0:59: 5b:b8:b1:3b:56:bb:b5:39:6b:1c:f4:a2:14:9b:5f:16:47:60: 8f:17:25:25:86:76:ca:fb:5a:d1:be:8f:53:0f:65:2c:fc:5e: 53:e8:ca:24:e0:92:db:a5:07:95:5b:e0:f2:0f:b3:be:ef:3a: 92:43:ba:ab:59:7e:4f:a2:d1:0d:1b:7d:5a:f8:bd:90:ea:0c: d8:b4:f0:8e:87:9c:d3:2f:02:e4:d4:2a:09:4c:9c:ce:e1:23: 07:a9:a3:4d:97:9b:e8:b5:73:e0:8d:8e:f5:bb:45:ff:32:cf: 64:02:42:0c:75:c5:39:25:0a:68:57:73:12:89:a9:8d:f8:91: 6b:4f:e7:22:8c:c0:a6:bb:cc:5d:80:a0:cf:b3:7f:78:21:40: fa:77:0f:5f:b2:07:2a:e3:3c:da:e2:b4:ee:1d:1d:de:e4:24: 82:cb:fd:b2:82:d6:34:e5:44:f8:10:db:88:42:4f:83:d8:e6: 7e:47:6f:e9:a0:fe:53:e5:60:ed:74:7e:30:c4:86:18:0a:1d: a3:95:4d:6b:fb:e5:60:73:2d:ae:57:b9:c2:43:3e:7d:48:90: 27:53:7b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuvhTS1BbKkqvh9gMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyOTE5MjIzM1oXDTI2MDEyNzIwMjIzM1owLzEtMCsGA1UEAxMk YWE4NTk1MmMtNDU4NS00Yjc1LTk2ZmItYWJlYjJjYTdhNWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/jIkpgQK0avbuZaL8GCVs1VjQymDRnegmri 6ZpQwtnIHjxrdeI5zCRtgBTF7Yvjw6UtRR+Rle1V8OvXbwJlkz2+sPqw+kdiUbEV yvfbb96I4ZfvHxcA/0vd8rlDhv8etyHskwIIAhDZO7dzFdaTZIzq/0GFhlptlNQ0 yONhBwpw9ENEptv4FO/sPbgketiUb26kbvC7aMPTCQaZvauK3BkRKEImQ2aLYe3h uj5zd5yXj6J/sJxEOC3NhWNC6e8AXn41kHq0YpuhdEUIRSqfGoWvPt1D+UDpQZ3t rSjLEYectom1NEG8n9OAKIkOitEX6X839UH1ybrj1ZZvgvSnzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbpj6zX2/bwnvuLf07mm1ODoPCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzJjOGU1ZjMtZWFmOS0z MTUxLWFlNjAtZjFhNjk1MGNiZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmhLMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVn221vdmI3D6WnWGvc8i4Ua/IwNnFRpOPQOL6Vi5ne0DDgWVu4sTtW u7U5axz0ohSbXxZHYI8XJSWGdsr7WtG+j1MPZSz8XlPoyiTgktulB5Vb4PIPs77v OpJDuqtZfk+i0Q0bfVr4vZDqDNi08I6HnNMvAuTUKglMnM7hIwepo02Xm+i1c+CN jvW7Rf8yz2QCQgx1xTklCmhXcxKJqY34kWtP5yKMwKa7zF2AoM+zf3ghQPp3D1+y ByrjPNritO4dHd7kJILL/bKC1jTlRPgQ24hCT4PY5n5Hb+mg/lPlYO10fjDEhhgK HaOVTWv75WBzLa5XucJDPn1IkCdTe6A= -----END CERTIFICATE-----Generated at Wed Nov 5 08:14:01 2025 by rpki-client