$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa File: 488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa (raw, json) Hash identifier: rs5mJIcySL3rnVIDi1nvh3E4mRWiNI9yy5jxFhAaO/s= Subject key identifier: F0:2F:F5:75:87:44:6A:0B:32:FA:61:01:CF:4B:1C:5F:6D:77:0A:BF Certificate issuer: /CN=86906b9d-26ff-4ce8-b900-62739db43657 Certificate serial: 010D0C9F4328584B41E70DF860F171606CEA1480 Authority key identifier: 5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 6653 IP address blocks: 204.10.124.0/22 maxlen: 24 204.16.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0d:f8:60:f1:71:60:6c:ea:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86906b9d-26ff-4ce8-b900-62739db43657 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=6ddbf586-0177-4666-89ee-4b732292dba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b4:d9:80:4e:e9:27:f8:9c:b7:d3:1a:f8:0f: 7b:74:53:13:a8:91:a1:01:fa:fc:e9:4d:a6:85:83: 56:5a:ed:4b:16:80:09:16:e5:5a:3a:b9:5d:52:d2: b8:5d:a5:35:58:5d:d6:c7:b6:5b:e3:2e:f1:8c:1e: 7d:c1:a4:2e:a3:d5:23:99:dd:0e:83:e5:75:e1:2b: cd:4a:a0:07:4e:2c:4d:88:0c:05:9e:9c:a5:a7:c3: 13:e6:8f:2a:19:ac:ac:e0:df:f9:65:31:97:df:59: 93:1e:6e:00:bf:44:11:1b:ba:0e:b9:dd:f2:8d:8a: 28:61:20:8e:3b:eb:8f:9e:ee:18:12:61:c9:d6:57: a9:3d:8b:fb:7f:c4:6d:df:18:44:73:cd:e0:6c:2d: ae:66:9f:ed:7c:85:c0:22:2d:cf:cf:fd:14:a6:0c: 1a:c4:1e:34:c1:be:c2:63:c8:a2:13:27:8e:7d:e4: e2:54:e1:20:44:27:44:8d:3d:12:41:ff:5e:fc:6b: 69:b6:8d:38:9b:5d:5c:b6:8a:9a:a9:44:f9:1e:8f: f4:d1:b9:4d:3b:15:c3:d0:77:38:c6:33:4e:99:3b: c1:f2:17:17:30:7f:52:82:6c:a8:75:79:36:52:b0: b9:e8:9d:1e:45:63:91:06:76:28:6a:ba:e9:fb:3e: e3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2F:F5:75:87:44:6A:0B:32:FA:61:01:CF:4B:1C:5F:6D:77:0A:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.crl X509v3 Authority Key Identifier: keyid:5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer sbgp-ipAddrBlock: critical IPv4: 204.10.124.0/22 204.16.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b1:cf:ce:00:86:3d:61:b9:68:0f:58:20:87:72:2a:e6:05: 97:01:b7:d5:a1:ec:c2:49:19:d7:65:a8:e8:54:96:78:c1:21: bf:da:15:9d:5e:13:e8:ed:90:77:81:08:f9:d2:19:af:96:52: 00:ca:6c:de:a1:79:27:05:39:5f:1d:da:93:81:8c:c3:4e:05: 4e:85:ad:c6:38:f8:a2:47:e7:8d:01:d4:fc:10:92:94:2c:87: 2b:c0:50:55:98:db:40:e4:ff:78:a5:46:bf:2c:a5:e9:fc:74: 12:58:09:40:1a:ef:b1:fd:3f:af:73:e5:94:0e:f4:c5:18:7d: 05:bd:27:63:fa:14:00:d0:43:39:1d:1d:40:e4:7c:17:39:14: 7a:66:4a:7c:e8:48:66:a5:41:98:42:5e:a7:86:87:92:fa:17: 9e:21:5b:18:4a:93:93:d1:72:82:d9:10:72:cd:fd:ff:ad:16: c1:0b:46:e2:5a:1b:57:42:6b:98:4f:f1:ab:c9:05:98:74:07: 83:c3:f8:9e:51:bd:35:f3:82:a4:f6:30:a8:33:b8:9e:ac:af: d4:6d:86:59:90:ef:34:37:43:a3:2b:41:aa:d5:58:37:6c:5c: cb:13:78:90:2b:10:92:2f:29:dd:f0:ca:05:9e:6a:52:72:80: ef:24:9b:55 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtB5w34YPFxYGzqFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY5MDZiOWQtMjZmZi00Y2U4LWI5MDAtNjI3MzlkYjQz NjU3MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NmRkYmY1ODYtMDE3Ny00NjY2LTg5ZWUtNGI3MzIyOTJkYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLTZgE7pJ/ict9Ma+A97dFMTqJGhAfr86U2m hYNWWu1LFoAJFuVaOrldUtK4XaU1WF3Wx7Zb4y7xjB59waQuo9Ujmd0Og+V14SvN SqAHTixNiAwFnpylp8MT5o8qGays4N/5ZTGX31mTHm4Av0QRG7oOud3yjYooYSCO O+uPnu4YEmHJ1lepPYv7f8Rt3xhEc83gbC2uZp/tfIXAIi3Pz/0UpgwaxB40wb7C Y8iiEyeOfeTiVOEgRCdEjT0SQf9e/Gtpto04m11ctoqaqUT5Ho/00blNOxXD0Hc4 xjNOmTvB8hcXMH9SgmyodXk2UrC56J0eRWORBnYoarrp+z7jTwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPAv9XWHRGoLMvphAc9LHF9tdwq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Njkw NmI5ZC0yNmZmLTRjZTgtYjkwMC02MjczOWRiNDM2NTcvNDg4ZDMyZjAtZGVkNS0z Y2U5LThlOGItNTBiY2NiNjVjNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODY5MDZiOWQtMjZmZi00Y2U4LWI5 MDAtNjI3MzlkYjQzNjU3Lzg2OTA2YjlkLTI2ZmYtNGNlOC1iOTAwLTYyNzM5ZGI0 MzY1Ny5jcmwwHwYDVR0jBBgwFoAUW5Tob1yTC1nwz5qsCXmVzu2WP6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NjkwNmI5ZC0yNmZmLTRjZTgtYjkwMC02Mjcz OWRiNDM2NTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCzAp8AwQC zBDgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAWxz84Ahj1huWgPWCCHcirmBZcBt9Wh7MJJGddlqOhUlnjB Ib/aFZ1eE+jtkHeBCPnSGa+WUgDKbN6heScFOV8d2pOBjMNOBU6FrcY4+KJH540B 1PwQkpQshyvAUFWY20Dk/3ilRr8spen8dBJYCUAa77H9P69z5ZQO9MUYfQW9J2P6 FADQQzkdHUDkfBc5FHpmSnzoSGalQZhCXqeGh5L6F54hWxhKk5PRcoLZEHLN/f+t FsELRuJaG1dCa5hP8avJBZh0B4PD+J5RvTXzgqT2MKgzuJ6sr9RthlmQ7zQ3Q6Mr QarVWDdsXMsTeJArEJIvKd3wygWealJygO8km1U= -----END CERTIFICATE-----Generated at Wed Nov 5 14:57:44 2025 by rpki-client