$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/f5bf30b6-f0c9-37bc-ad10-e5fc2ad5be44.roa File: f5bf30b6-f0c9-37bc-ad10-e5fc2ad5be44.roa (raw, json) Hash identifier: +vXuABEtKC8BrDPJw4UrdPbnY6spBb0N2Apf6wnQOpY= Subject key identifier: 5F:9C:44:66:21:27:58:86:66:2E:A2:6F:14:1D:1D:AB:8C:2F:CA:8A Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B84E769E146B2F7A03CC46950 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/f5bf30b6-f0c9-37bc-ad10-e5fc2ad5be44.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 174 IP address blocks: 204.118.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:69:e1:46:b2:f7:a0:3c:c4:69:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=bd796186-a845-402d-9ceb-eb8fa6fc35de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1a:3c:51:98:e1:7d:08:3c:c4:65:62:0a:85: 30:60:3b:e9:c9:83:77:d8:f9:a4:de:56:77:61:df: 30:53:61:6c:ef:24:e1:25:7f:b4:ac:34:8a:3f:4d: a8:7b:e7:5a:8c:d4:8a:97:f7:77:15:e1:52:40:df: c1:c9:08:bc:32:38:a9:31:03:14:5f:89:3d:de:9f: d9:93:20:3a:90:f3:81:94:5b:b8:ba:d9:7a:a9:20: 86:a1:ec:16:5f:f8:f8:2f:db:f9:58:49:9c:f2:cc: dc:f4:32:45:2a:fe:65:92:8a:81:99:14:ef:f8:4e: 10:a2:a9:1f:a0:c9:f2:ff:58:db:c2:0e:97:db:1c: 9e:f1:c4:82:ca:0b:e1:6e:55:07:3d:28:1b:cd:28: d3:7a:27:44:a7:4c:ec:a4:12:51:00:e1:17:67:39: bb:76:fd:e2:90:10:43:21:ee:b9:4b:24:a2:29:49: cf:30:c0:47:7b:09:c3:48:14:ca:b6:16:23:64:dd: c8:69:4b:9c:41:c9:4b:45:1e:cb:25:48:dc:c0:92: 16:43:c9:3c:12:45:87:dc:41:40:ee:09:16:82:97: b8:18:7b:fe:0b:c0:1d:9d:81:03:a5:c6:98:b2:17: 5d:bf:35:8b:ac:3b:f3:8b:1b:15:e2:13:70:58:96: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9C:44:66:21:27:58:86:66:2E:A2:6F:14:1D:1D:AB:8C:2F:CA:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/f5bf30b6-f0c9-37bc-ad10-e5fc2ad5be44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.118.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:58:77:ee:d4:c4:03:70:69:a7:23:5f:0b:b7:17:22:17:71: 49:8d:2f:0c:ed:b5:71:ba:94:47:ad:95:52:9e:73:9d:7b:87: 57:d5:ce:5b:13:d7:7e:e1:e7:60:c4:f9:37:34:89:9b:ea:5b: 65:1e:e1:ce:ce:a2:6d:1a:ad:81:39:6d:42:c0:96:e3:27:95: 52:c4:15:15:71:61:d1:09:63:d6:c0:d4:74:b5:d5:ac:05:fa: e0:17:8e:eb:83:25:09:ef:ca:a8:c0:16:c7:cd:fb:cb:62:91: 5e:c9:6f:97:b4:61:cb:09:79:54:8d:5e:c1:54:08:c5:e8:cd: d7:25:88:aa:17:51:a9:1b:1a:cc:6e:cf:a5:6d:54:d6:b0:70: f5:92:b7:ac:50:64:06:b6:53:22:b5:9d:2b:3a:a7:f5:83:bc: 15:91:5e:3b:1f:f5:97:36:c5:b4:fb:e7:83:11:a9:99:aa:cd: 30:c0:4f:f6:f8:27:1d:84:d9:66:89:ca:49:b6:7c:0d:b5:25: 5d:a6:ff:61:4e:8e:99:6a:7d:39:cd:2e:0b:8b:5d:f4:ec:a2: 3d:d5:30:43:f5:de:04:e8:8c:98:cd:fe:51:99:ce:c9:01:e9: 18:0e:12:dc:cb:51:62:24:96:a1:22:58:12:b7:b6:8e:3c:d2: c7:6c:b2:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52nhRrL3oDzEaVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YmQ3OTYxODYtYTg0NS00MDJkLTljZWItZWI4ZmE2ZmMzNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhho8UZjhfQg8xGViCoUwYDvpyYN32Pmk3lZ3 Yd8wU2Fs7yThJX+0rDSKP02oe+dajNSKl/d3FeFSQN/ByQi8MjipMQMUX4k93p/Z kyA6kPOBlFu4utl6qSCGoewWX/j4L9v5WEmc8szc9DJFKv5lkoqBmRTv+E4Qoqkf oMny/1jbwg6X2xye8cSCygvhblUHPSgbzSjTeidEp0zspBJRAOEXZzm7dv3ikBBD Ie65SySiKUnPMMBHewnDSBTKthYjZN3IaUucQclLRR7LJUjcwJIWQ8k8EkWH3EFA 7gkWgpe4GHv+C8AdnYEDpcaYshddvzWLrDvzixsV4hNwWJZnoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+cRGYhJ1iGZi6ibxQdHauML8qKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZjViZjMwYjYtZjBjOS0z N2JjLWFkMTAtZTVmYzJhZDViZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzHYWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtYd+7UxANwaacjXwu3FyIXcUmNLwzttXG6lEetlVKec517h1fVzlsT 137h52DE+Tc0iZvqW2Ue4c7Oom0arYE5bULAluMnlVLEFRVxYdEJY9bA1HS11awF +uAXjuuDJQnvyqjAFsfN+8tikV7Jb5e0YcsJeVSNXsFUCMXozdcliKoXUakbGsxu z6VtVNawcPWSt6xQZAa2UyK1nSs6p/WDvBWRXjsf9Zc2xbT754MRqZmqzTDAT/b4 Jx2E2WaJykm2fA21JV2m/2FOjplqfTnNLguLXfTsoj3VMEP13gTojJjN/lGZzskB 6RgOEtzLUWIklqEiWBK3to480sdssms= -----END CERTIFICATE-----Generated at Mon Oct 20 06:23:12 2025 by rpki-client