$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa File: 5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa (raw, json) Hash identifier: VKk6WEaNK0QMlaBRVl+cpbuXwCWVm9BPBda4tXpgknQ= Subject key identifier: 17:00:6B:49:15:B1:1A:6A:DB:F2:17:2C:58:86:EF:39:37:C7:7A:1C Certificate issuer: /CN=4c6110af-3017-4d96-90e3-d18a76894aa0 Certificate serial: 010D0C9F4328584B79BCB82E7AD63D713363CAC0 Authority key identifier: 1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 394333 IP address blocks: 204.69.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b8:2e:7a:d6:3d:71:33:63:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c6110af-3017-4d96-90e3-d18a76894aa0 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=b06c7083-c45d-4c0d-8a3f-88fcf01bf477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:52:c9:a2:0d:4a:0d:c7:5f:56:a9:3c:74:73: 10:8f:b8:45:af:99:a1:24:6b:99:0e:7f:72:5f:4d: 5b:b8:dc:2f:1b:93:b4:77:9a:79:e4:3a:8f:57:eb: 8b:08:b7:8d:9a:fe:57:0c:57:26:1f:c7:06:e5:37: a2:2a:fd:70:90:f2:d7:d5:18:4a:70:4b:b8:50:61: 01:88:02:80:a4:ef:dc:59:dc:8a:d5:be:15:1c:42: b9:e9:06:a4:79:8d:72:1f:6a:66:af:fc:d8:7c:c4: 3d:75:63:52:1c:82:05:a1:69:9a:ba:aa:ad:48:1e: 6c:63:62:db:76:ae:08:c2:a1:94:90:28:f1:6c:48: cb:ae:c9:e1:f3:3c:20:b2:c1:68:0e:41:67:00:6f: d4:01:12:c9:31:9d:c7:b0:a5:af:74:05:65:b2:3b: 54:9f:96:49:7d:6b:f8:34:6c:c1:ff:8b:f1:de:95: 29:e1:69:74:95:c4:ad:a8:17:58:8c:cf:c1:d7:50: e5:97:d5:32:6d:8a:1d:0b:41:af:5d:c7:ec:93:04: 9c:10:5a:cb:fb:dd:58:a6:9e:e4:35:d2:4b:82:f0: 77:0c:5f:33:21:79:d8:19:e7:6d:12:a6:38:87:44: 7c:c9:82:52:12:b6:0d:ed:cc:02:0c:ad:11:05:85: 3c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:00:6B:49:15:B1:1A:6A:DB:F2:17:2C:58:86:EF:39:37:C7:7A:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl X509v3 Authority Key Identifier: keyid:1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer sbgp-ipAddrBlock: critical IPv4: 204.69.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f7:5b:ad:a1:f4:3b:16:94:c3:36:b2:35:06:0a:1b:6a:d3: f0:40:ec:c1:db:41:d8:6e:d8:a9:18:a7:96:c3:19:38:ca:12: fc:67:34:54:4a:29:30:08:3f:57:df:6d:74:74:d0:d0:ab:13: 10:3f:93:70:c8:4f:06:0d:14:bd:f3:7b:39:ce:40:a6:f1:9e: cf:85:78:17:1e:55:80:d7:bc:09:a5:c4:9a:46:11:ac:fb:53: 49:c1:05:6b:b6:83:54:ea:c1:b5:3a:b8:85:a6:0b:21:a4:43: 52:e9:d5:e8:12:8d:03:ff:ff:e4:3b:80:47:f3:b4:78:b5:6f: 87:f7:87:34:56:be:36:ad:53:bb:7c:30:42:51:6b:01:1d:12: 2a:49:d1:dd:b7:c7:56:72:5f:8d:e5:d7:4a:91:b9:4f:7f:8b: 41:f2:0d:fe:1f:6a:ee:bf:5d:16:c8:80:53:91:ff:6d:90:e8: a7:f3:a9:2e:4b:2e:41:82:20:be:41:e3:4e:f1:a8:51:05:22: 07:64:03:4a:29:2e:48:bd:fa:75:63:cb:c0:0d:89:8c:0b:01: e2:6e:95:a1:35:3e:b7:cc:87:d7:10:cb:d1:1a:68:e4:1a:32: 20:16:97:be:a6:93:74:9a:ba:f2:88:e2:a3:36:ec:ed:6b:83: 71:a7:63:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLguetY9cTNjysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM2MTEwYWYtMzAxNy00ZDk2LTkwZTMtZDE4YTc2ODk0 YWEwMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YjA2YzcwODMtYzQ1ZC00YzBkLThhM2YtODhmY2YwMWJmNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklLJog1KDcdfVqk8dHMQj7hFr5mhJGuZDn9y X01buNwvG5O0d5p55DqPV+uLCLeNmv5XDFcmH8cG5TeiKv1wkPLX1RhKcEu4UGEB iAKApO/cWdyK1b4VHEK56QakeY1yH2pmr/zYfMQ9dWNSHIIFoWmauqqtSB5sY2Lb dq4IwqGUkCjxbEjLrsnh8zwgssFoDkFnAG/UARLJMZ3HsKWvdAVlsjtUn5ZJfWv4 NGzB/4vx3pUp4Wl0lcStqBdYjM/B11Dll9UybYodC0GvXcfskwScEFrL+91Ypp7k NdJLgvB3DF8zIXnYGedtEqY4h0R8yYJSErYN7cwCDK0RBYU8tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcAa0kVsRpq2/IXLFiG7zk3x3ocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzYx MTBhZi0zMDE3LTRkOTYtOTBlMy1kMThhNzY4OTRhYTAvNTExMDk0NmYtYjdkMC0z ODcxLTliMjAtM2ZjZjE5YTYxZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGM2MTEwYWYtMzAxNy00ZDk2LTkw ZTMtZDE4YTc2ODk0YWEwLzRjNjExMGFmLTMwMTctNGQ5Ni05MGUzLWQxOGE3Njg5 NGFhMC5jcmwwHwYDVR0jBBgwFoAUHU5Hu1/rgWiCqcW5MRJpnvd9KHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzYxMTBhZi0zMDE3LTRkOTYtOTBlMy1kMThh NzY4OTRhYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEXrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb3W62h9DsWlMM2sjUGChtq0/BA7MHbQdhu2KkYp5bDGTjKEvxnNFRK KTAIP1ffbXR00NCrExA/k3DITwYNFL3zeznOQKbxns+FeBceVYDXvAmlxJpGEaz7 U0nBBWu2g1TqwbU6uIWmCyGkQ1Lp1egSjQP//+Q7gEfztHi1b4f3hzRWvjatU7t8 MEJRawEdEipJ0d23x1ZyX43l10qRuU9/i0HyDf4fau6/XRbIgFOR/22Q6KfzqS5L LkGCIL5B407xqFEFIgdkA0opLki9+nVjy8ANiYwLAeJulaE1PrfMh9cQy9EaaOQa MiAWl76mk3SauvKI4qM27O1rg3GnY3U= -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:03 2025 by rpki-client