$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5423aaa5-1c3a-33b4-83e3-5c73ba829c83.roa File: 5423aaa5-1c3a-33b4-83e3-5c73ba829c83.roa (raw, json) Hash identifier: MSbu4zcUWsrk9YYxbP9TJajBmyejYDspJDLVj/gmP1I= Subject key identifier: 6D:6F:9B:C2:05:88:77:8D:0E:40:8E:98:36:0E:67:71:A1:98:F5:44 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584B8BE20ECE138F6965A5635A60 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5423aaa5-1c3a-33b4-83e3-5c73ba829c83.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 42 IP address blocks: 204.26.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:0e:ce:13:8f:69:65:a5:63:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=be105ede-f4c4-4074-b688-d53b9865706c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:64:75:90:a5:08:6e:16:43:ac:4a:e4:08:68: 5a:9b:78:ed:01:ca:25:59:94:df:e6:ad:24:8e:64: f8:71:69:28:be:59:fe:e9:7a:a5:81:0f:b6:b2:8e: a6:e3:91:e2:31:6c:43:14:b2:ac:90:ec:f4:63:7b: 4a:fa:92:7b:f6:2e:5a:c9:06:47:9a:28:a9:8b:aa: 4c:70:f4:a6:f7:41:48:f5:c6:12:ea:f4:d1:7d:38: 3a:95:7d:cb:66:2d:8e:43:72:e7:0a:8d:63:53:6b: ea:bf:ae:7b:1d:bf:f7:f9:fd:af:f8:bf:8e:2c:2e: 13:4d:0f:f2:3f:31:f4:05:af:f8:2d:a2:91:5a:d8: 72:37:f7:43:55:b9:d0:31:21:56:ee:92:56:12:99: 18:f1:96:69:ac:15:63:bd:44:ed:05:a0:b2:ab:3c: de:ae:57:aa:56:51:f2:29:03:c5:f6:eb:e3:f8:ee: c6:01:56:d4:0c:ec:a9:19:7f:aa:65:82:1d:5e:2c: 49:83:cf:89:3b:3d:3a:7e:b7:f1:74:27:8b:ed:59: be:03:b8:20:8a:ab:12:17:e8:c5:f5:3e:a6:e4:14: e3:fd:24:70:05:6e:2d:b8:ee:63:24:e0:3a:a2:76: a2:43:65:e9:d0:bc:90:e1:86:6e:12:89:c3:17:5c: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6F:9B:C2:05:88:77:8D:0E:40:8E:98:36:0E:67:71:A1:98:F5:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5423aaa5-1c3a-33b4-83e3-5c73ba829c83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 204.26.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b1:71:3e:fa:fa:cc:a1:fe:57:61:35:2f:15:d0:17:b8:18: db:bc:cf:86:74:4c:e2:6f:67:4a:58:7b:25:7b:14:6e:94:f4: 6a:99:d1:3e:b7:84:76:8f:e7:57:bb:52:6e:3b:9a:e7:94:18: f5:84:2e:dd:ff:10:90:b0:b3:9a:63:ed:39:ea:d9:63:10:ca: 2d:6d:9f:6a:33:fa:dd:72:00:6f:4f:c7:8d:4f:b2:9d:46:48: 94:1a:7b:21:38:2e:e1:b3:1f:5f:4f:04:ff:8c:34:40:63:34: c2:f1:b6:0c:09:a3:88:eb:59:51:00:31:46:a7:c1:41:08:0e: e9:7b:e9:47:55:1c:cf:b2:81:9b:ea:c5:ca:36:dc:50:bd:71: 84:14:6a:b3:e5:fb:e7:a8:58:9f:33:2d:6e:f4:eb:66:34:f1: 36:9f:70:37:d7:d2:38:5e:84:1c:8f:c2:2e:38:a3:e2:7a:fa: 60:6e:04:be:fc:4e:20:cc:82:24:2e:32:07:ff:2f:4b:46:c9: d8:23:69:00:4e:36:da:b8:30:03:62:9b:61:7a:f7:f7:7d:a0: 00:29:97:1f:f8:ec:08:43:76:28:f1:ee:b3:50:88:48:b0:ae: 79:bb:8a:33:b6:f5:62:16:18:f2:35:2b:d7:e1:29:13:b4:5e: c0:98:34:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4g7OE49pZaVjWmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YmUxMDVlZGUtZjRjNC00MDc0LWI2ODgtZDUzYjk4NjU3MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGR1kKUIbhZDrErkCGham3jtAcolWZTf5q0k jmT4cWkovln+6XqlgQ+2so6m45HiMWxDFLKskOz0Y3tK+pJ79i5ayQZHmiipi6pM cPSm90FI9cYS6vTRfTg6lX3LZi2OQ3LnCo1jU2vqv657Hb/3+f2v+L+OLC4TTQ/y PzH0Ba/4LaKRWthyN/dDVbnQMSFW7pJWEpkY8ZZprBVjvUTtBaCyqzzerleqVlHy KQPF9uvj+O7GAVbUDOypGX+qZYIdXixJg8+JOz06frfxdCeL7Vm+A7ggiqsSF+jF 9T6m5BTj/SRwBW4tuO5jJOA6onaiQ2Xp0LyQ4YZuEonDF1yMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1vm8IFiHeNDkCOmDYOZ3GhmPVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvNTQyM2FhYTUtMWMzYS0z M2I0LTgzZTMtNWM3M2JhODI5YzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBo5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqxcT76+syh/ldhNS8V0Be4GNu8z4Z0TOJvZ0pYeyV7FG6U9GqZ0T63 hHaP51e7Um47mueUGPWELt3/EJCws5pj7Tnq2WMQyi1tn2oz+t1yAG9Px41Psp1G SJQaeyE4LuGzH19PBP+MNEBjNMLxtgwJo4jrWVEAMUanwUEIDul76UdVHM+ygZvq xco23FC9cYQUarPl++eoWJ8zLW7062Y08TafcDfX0jhehByPwi44o+J6+mBuBL78 TiDMgiQuMgf/L0tGydgjaQBONtq4MANim2F69/d9oAAplx/47AhDdijx7rNQiEiw rnm7ijO29WIWGPI1K9fhKRO0XsCYNDE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:59 2025 by rpki-client