$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4a90e3bd-d802-3c7e-82d3-d46b36ca4554.roa File: 4a90e3bd-d802-3c7e-82d3-d46b36ca4554.roa (raw, json) Hash identifier: utpt9GX91VmM3Pl29NUIxVGqaaFkBK/WJPjlgQTreBc= Subject key identifier: F2:4F:E1:6B:01:4D:AF:0E:21:8A:85:33:98:13:28:C0:52:72:8A:11 Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Certificate serial: 010D0C9F4328584AF686938BA17E9CA10CE15580 Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4a90e3bd-d802-3c7e-82d3-d46b36ca4554.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 1403 IP address blocks: 204.48.0.0/22 maxlen: 24 204.48.4.0/24 maxlen: 24 204.48.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:93:8b:a1:7e:9c:a1:0c:e1:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=167adf62-5139-4541-8953-d7d3d77a314a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:c0:03:03:57:8a:1a:d6:c4:2e:96:2e:dd: 49:5e:fe:7b:df:f7:ce:40:f6:c5:84:2e:1b:c6:e3: b4:12:94:1f:9f:e0:95:ae:c5:5c:5d:b3:c3:a1:0f: 5b:a7:9f:14:87:d9:ed:4f:b7:25:6b:6c:fe:5d:a8: 78:af:62:71:2a:6a:a7:c3:7e:f2:60:dc:78:9a:e1: 98:fa:28:9b:b4:47:1c:0b:51:86:6a:97:79:7d:d9: 7a:66:40:5b:8c:24:c8:b1:19:ac:af:83:10:ec:a5: 43:19:20:d5:41:e9:22:17:7f:1c:71:fa:af:57:6b: b6:79:14:4d:61:ba:87:e0:6e:73:fd:73:1f:23:12: de:18:b6:98:b4:92:b0:b3:7b:c0:0c:15:e3:57:d8: c2:98:8c:15:49:46:0a:3f:27:03:76:2a:56:20:0d: a9:26:fc:76:11:11:d9:0d:2f:60:2e:9b:9c:16:b7: 08:93:60:5d:8c:62:53:c2:0e:f3:33:55:18:5d:22: bd:6e:ad:a6:ee:f3:3f:b5:d9:eb:cc:53:8a:a2:9e: 57:41:59:48:15:f9:d6:73:a6:a3:18:7b:00:f7:aa: 07:b8:5a:37:c4:c1:4e:9f:c3:8b:d4:93:a5:45:c3: 8d:41:63:d5:86:7b:2c:14:e1:af:94:6d:c5:fe:1c: e4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4F:E1:6B:01:4D:AF:0E:21:8A:85:33:98:13:28:C0:52:72:8A:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4a90e3bd-d802-3c7e-82d3-d46b36ca4554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl X509v3 Authority Key Identifier: keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer sbgp-ipAddrBlock: critical IPv4: 204.48.0.0-204.48.4.255 204.48.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:10:15:53:cb:b8:4a:8c:68:6b:0c:93:0f:f1:d0:79:82:b7: db:0c:a4:bc:14:d9:b9:7e:3d:62:2e:05:14:bc:0c:a5:31:21: 40:bc:29:97:6b:9a:7b:b8:1f:56:91:4e:33:65:a6:b5:d8:70: 77:43:b6:a2:7c:3a:c6:2a:ff:b0:b4:8b:59:d5:b1:2a:6b:f4: 2e:05:3f:7b:fe:31:45:53:3a:3a:1a:2f:67:1b:b2:c9:34:cb: 23:00:ba:58:bf:18:60:8e:ae:cc:83:15:04:6f:69:c7:00:04: 87:70:86:15:d5:12:8d:4d:17:d1:7d:6b:32:fc:b0:0b:73:12: 95:3c:1a:a8:d4:15:1c:4e:3c:c2:69:e5:b9:1c:b1:aa:65:8b: bb:04:82:b5:88:86:84:92:7e:93:b0:ca:fd:11:26:f7:7e:79: d0:cf:88:7c:68:05:d3:75:9a:83:45:9b:3d:9f:2f:63:7f:d5: 86:78:df:f4:b5:11:fd:5d:14:d2:db:18:0d:58:08:ac:09:3a: aa:bd:dc:0b:46:20:ad:85:93:98:82:f3:af:d3:a7:c9:2c:d1: 23:13:e8:16:bb:8c:a9:d5:c7:f6:69:c0:58:6c:f1:77:72:22: df:f8:84:dc:99:7c:2f:a4:55:8f:c8:0f:b7:72:6e:11:cf:f7: eb:5e:85:a5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEr2hpOLoX6coQzhVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj NzQ0MB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MTY3YWRmNjItNTEzOS00NTQxLTg5NTMtZDdkM2Q3N2EzMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEjAAwNXihrWxC6WLt1JXv573/fOQPbFhC4b xuO0EpQfn+CVrsVcXbPDoQ9bp58Uh9ntT7cla2z+Xah4r2JxKmqnw37yYNx4muGY +iibtEccC1GGapd5fdl6ZkBbjCTIsRmsr4MQ7KVDGSDVQekiF38ccfqvV2u2eRRN YbqH4G5z/XMfIxLeGLaYtJKws3vADBXjV9jCmIwVSUYKPycDdipWIA2pJvx2ERHZ DS9gLpucFrcIk2BdjGJTwg7zM1UYXSK9bq2m7vM/tdnrzFOKop5XQVlIFfnWc6aj GHsA96oHuFo3xMFOn8OL1JOlRcONQWPVhnssFOGvlG3F/hzk2wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPJP4WsBTa8OIYqFM5gTKMBScooRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5 NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvNGE5MGUzYmQtZDgwMi0z YzdlLTgyZDMtZDQ2YjM2Y2E0NTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl ODNjZGM3NDQuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwTMMAME AMwwBAMEAMwwBzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBvEBVTy7hKjGhrDJMP8dB5grfbDKS8FNm5fj1i LgUUvAylMSFAvCmXa5p7uB9WkU4zZaa12HB3Q7aifDrGKv+wtItZ1bEqa/QuBT97 /jFFUzo6Gi9nG7LJNMsjALpYvxhgjq7MgxUEb2nHAASHcIYV1RKNTRfRfWsy/LAL cxKVPBqo1BUcTjzCaeW5HLGqZYu7BIK1iIaEkn6TsMr9ESb3fnnQz4h8aAXTdZqD RZs9ny9jf9WGeN/0tRH9XRTS2xgNWAisCTqqvdwLRiCthZOYgvOv06fJLNEjE+gW u4yp1cf2acBYbPF3ciLf+ITcmXwvpFWPyA+3cm4Rz/frXoWl -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:09 2025 by rpki-client