$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa File: f8690b69-feea-3870-a431-f819071fa236.roa (raw, json) Hash identifier: J1IPlzu4FOusUMVLB1w0ukTtla7b320qHdNpBr6hC0E= Subject key identifier: 6D:8E:37:65:44:26:2E:9D:1B:EB:DF:DF:5E:4D:83:B4:69:6D:92:1C Certificate issuer: /CN=355b6459-d3e6-4569-b278-aef1a714f5bf Certificate serial: 010D0C9F4328584B52A73964FDEA6CC42F4E0A80 Authority key identifier: CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 1708 IP address blocks: 204.63.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:39:64:fd:ea:6c:c4:2f:4e:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=355b6459-d3e6-4569-b278-aef1a714f5bf Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=b82e1417-7451-451d-b38a-1b589e70cb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:d2:df:3d:bf:2a:d8:9d:d7:18:3f:85:5c: b0:8b:6f:25:d9:d9:c2:7b:09:75:c9:06:00:00:36: 52:08:8f:58:62:52:59:17:4c:4d:81:dc:cf:0d:95: 86:24:0b:75:b9:8e:6e:e9:3c:95:1d:ed:cc:80:b9: 78:25:c3:07:b0:63:f6:85:18:b5:99:d1:d1:5e:a8: 32:5b:85:e3:73:18:e1:7d:88:4a:2c:cf:69:c7:c7: 6e:13:bc:17:a5:a2:50:a3:1e:8b:44:b0:cf:f6:c4: c6:a3:0a:4d:a7:af:49:c8:86:78:f6:4f:f6:c5:b1: b3:58:cd:47:4b:f5:b9:59:bb:d0:3d:62:b0:f9:0a: c4:cd:b9:24:1d:f8:ec:af:8e:ad:7e:1c:2b:ed:8f: 77:4b:d3:93:e2:96:c7:e2:7d:4c:13:ea:14:c0:b1: 53:e8:7c:2a:c4:86:42:9a:76:16:76:23:d7:bc:ac: b4:02:eb:2c:2c:dd:38:6d:f8:27:58:a6:54:48:a0: 50:46:18:34:a3:2c:ae:c2:bd:0a:a2:0a:e9:07:ce: 68:1d:e5:bc:dd:13:5b:52:fe:b6:cd:a0:90:0e:d4: 16:c7:14:93:f2:22:f2:87:ee:5d:10:36:17:8b:05: 98:25:a6:89:b8:d8:22:36:f6:e2:ec:76:b4:2f:40: ba:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8E:37:65:44:26:2E:9D:1B:EB:DF:DF:5E:4D:83:B4:69:6D:92:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl X509v3 Authority Key Identifier: keyid:CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer sbgp-ipAddrBlock: critical IPv4: 204.63.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:fb:aa:0e:a2:00:e4:80:0d:0b:bb:08:aa:ca:84:80:d0:d5: 19:8b:5b:f1:3a:a0:24:6d:10:07:6c:70:85:e3:d9:5d:99:81: 18:e7:c2:c2:90:89:6f:b7:6a:b2:ea:19:5a:b1:c3:f8:20:34: d1:69:ce:f2:ce:f2:f4:6d:05:14:e3:4f:e0:b4:1b:8b:d7:40: 87:92:77:2d:2c:ba:6c:f3:44:e4:c7:8a:16:df:3d:42:cb:ba: de:71:4a:1e:80:df:f8:53:b6:bf:12:ed:25:b1:36:a4:5b:ff: be:7a:10:a2:e5:9f:2a:2a:aa:ee:e7:61:79:b0:ce:c9:90:e0: a9:b7:c0:df:ec:5a:95:da:b2:e1:60:ab:14:6b:71:e4:f1:0c: 19:77:e3:e9:9a:c7:41:fe:66:a0:16:89:eb:42:dc:d2:70:07: c7:2b:f1:18:d3:66:00:ad:d0:f8:4d:86:a7:7e:27:7e:c4:b2: 47:f3:0c:31:87:90:44:92:9d:35:c6:bd:5f:ab:44:f8:0b:4f: 99:7a:ec:2d:a7:0d:44:53:a6:37:74:13:93:fe:2a:af:a3:77: bb:e1:36:05:69:6f:6c:2e:cc:bd:53:e7:95:85:1b:85:89:5f: ad:b4:ac:a7:c1:99:4f:fa:b2:b3:d9:22:20:12:b3:f1:68:36: e3:4e:b0:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpzlk/epsxC9OCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU1YjY0NTktZDNlNi00NTY5LWIyNzgtYWVmMWE3MTRm NWJmMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YjgyZTE0MTctNzQ1MS00NTFkLWIzOGEtMWI1ODllNzBjYjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYPS3z2/Ktid1xg/hVywi28l2dnCewl1yQYA ADZSCI9YYlJZF0xNgdzPDZWGJAt1uY5u6TyVHe3MgLl4JcMHsGP2hRi1mdHRXqgy W4XjcxjhfYhKLM9px8duE7wXpaJQox6LRLDP9sTGowpNp69JyIZ49k/2xbGzWM1H S/W5WbvQPWKw+QrEzbkkHfjsr46tfhwr7Y93S9OT4pbH4n1ME+oUwLFT6HwqxIZC mnYWdiPXvKy0AussLN04bfgnWKZUSKBQRhg0oyyuwr0KogrpB85oHeW83RNbUv62 zaCQDtQWxxST8iLyh+5dEDYXiwWYJaaJuNgiNvbi7Ha0L0C6SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2ON2VEJi6dG+vf315Ng7RpbZIcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNTVi NjQ1OS1kM2U2LTQ1NjktYjI3OC1hZWYxYTcxNGY1YmYvZjg2OTBiNjktZmVlYS0z ODcwLWE0MzEtZjgxOTA3MWZhMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzU1YjY0NTktZDNlNi00NTY5LWIy NzgtYWVmMWE3MTRmNWJmLzM1NWI2NDU5LWQzZTYtNDU2OS1iMjc4LWFlZjFhNzE0 ZjViZi5jcmwwHwYDVR0jBBgwFoAUyqsRcpuAwoivyZCDHeuMBEYEGMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNTViNjQ1OS1kM2U2LTQ1NjktYjI3OC1hZWYx YTcxNGY1YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzD+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD7qg6iAOSADQu7CKrKhIDQ1RmLW/E6oCRtEAdscIXj2V2ZgRjnwsKQ iW+3arLqGVqxw/ggNNFpzvLO8vRtBRTjT+C0G4vXQIeSdy0sumzzROTHihbfPULL ut5xSh6A3/hTtr8S7SWxNqRb/756EKLlnyoqqu7nYXmwzsmQ4Km3wN/sWpXasuFg qxRrceTxDBl34+max0H+ZqAWietC3NJwB8cr8RjTZgCt0PhNhqd+J37EskfzDDGH kESSnTXGvV+rRPgLT5l67C2nDURTpjd0E5P+Kq+jd7vhNgVpb2wuzL1T55WFG4WJ X620rKfBmU/6srPZIiASs/FoNuNOsGc= -----END CERTIFICATE-----Generated at Wed Nov 5 13:28:52 2025 by rpki-client