$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa File: f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa (raw, json) Hash identifier: a6tJbqaEhAvoHhNjbLZi6CvuKzOpM+ELjv6sSUktOJY= Subject key identifier: 1F:E6:85:BB:99:54:BE:0B:DB:00:DB:38:96:A1:C5:74:67:3F:29:57 Certificate issuer: /CN=f25c48f2-c7df-4c6b-b214-2e741959995d Certificate serial: 010D0C9F4328584B1F0173E7A24A847A9467F280 Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 398427 IP address blocks: 185.172.188.0/22 maxlen: 22 2602:fd35::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:73:e7:a2:4a:84:7a:94:67:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=b48fe06f-1dd3-4c55-8416-8bbafa28e80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e1:90:f5:f7:89:4a:d3:69:5b:d9:93:c6:ca: 1d:6d:f5:c6:f7:ee:73:e5:8d:f1:12:5f:fd:fd:85: c4:f1:52:e0:67:4f:50:bc:1b:53:bc:ae:cd:8f:4e: 01:49:58:3a:61:b0:e2:18:d7:b1:62:08:55:09:ae: 13:0a:ff:b1:30:42:8d:bf:d6:15:e0:60:18:ac:b6: 04:83:0f:40:5f:ba:0e:86:52:94:24:c4:2b:e3:8e: 57:9a:1e:26:e5:7c:2b:33:d2:0d:13:2d:7c:e6:01: c3:8f:e7:d8:1b:c3:17:b8:5f:a9:28:18:d3:60:1d: 39:38:92:bd:6b:11:fd:df:3d:c6:d0:f2:6f:5f:b9: c6:86:70:3c:12:17:26:ca:27:d2:d2:da:13:db:8e: 47:53:e8:cc:92:0e:68:98:10:4c:1f:5c:b0:c6:ba: b3:ca:b9:fb:3b:56:6f:65:8c:08:30:b9:6b:b9:10: 11:34:62:cc:f1:50:70:8e:22:ab:4a:9e:43:48:48: d0:21:5d:85:0a:80:90:31:dc:c1:ee:67:d5:63:0d: 39:ad:29:38:d2:75:2d:ec:3d:ca:df:6d:e1:7e:f4: 2e:55:72:e4:db:91:28:b1:e6:8e:7a:4b:ad:10:96: 89:b5:4e:6b:07:76:e9:2f:aa:ab:3b:8d:b8:24:25: de:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E6:85:BB:99:54:BE:0B:DB:00:DB:38:96:A1:C5:74:67:3F:29:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl X509v3 Authority Key Identifier: keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer sbgp-ipAddrBlock: critical IPv4: 185.172.188.0/22 IPv6: 2602:fd35::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:bc:f1:d3:e4:a2:fc:98:10:6d:33:6c:6f:b2:46:b3:89:00: 89:4d:f4:e7:bf:09:14:97:f0:e8:da:b8:bc:c9:a5:3a:b0:6d: a5:80:43:bc:8c:c2:43:62:49:62:44:41:7d:6a:c7:e9:3e:7b: 0c:f0:b4:b1:34:0a:a3:48:77:24:b2:dc:0b:8a:95:ec:4b:4d: f3:0d:3f:dc:9d:b5:9c:39:32:63:58:37:f1:13:4f:54:e1:19: cc:de:e8:5b:f0:66:25:9d:9b:1c:94:0b:35:69:03:b8:97:36: 95:d4:f7:d4:aa:14:cf:83:52:90:4f:ce:8b:08:37:12:ff:3f: d1:52:4a:8a:04:3f:f6:63:15:59:9b:65:6b:89:9a:b8:ce:9e: 79:06:94:7a:c0:29:19:29:9e:82:6d:bf:79:11:4e:25:28:a5: 03:c3:ed:87:be:50:a6:41:61:09:1f:96:1d:01:d1:29:3a:36: 2b:3f:9e:09:d2:8b:e2:ad:bb:07:91:ad:58:80:dd:b5:93:dd: 85:af:3b:d1:e7:d4:1f:8e:7f:3a:82:a0:09:f7:3a:fb:b5:a8: d5:8c:34:7d:96:8b:b2:19:d5:10:48:d6:96:e9:eb:14:d6:c8: b0:4c:e2:55:ae:e4:2d:ab:3a:30:d0:20:87:1f:40:d2:88:f0: 2a:a0:20:40 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsfAXPnokqEepRn8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5 OTVkMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YjQ4ZmUwNmYtMWRkMy00YzU1LTg0MTYtOGJiYWZhMjhlODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+GQ9feJStNpW9mTxsodbfXG9+5z5Y3xEl/9 /YXE8VLgZ09QvBtTvK7Nj04BSVg6YbDiGNexYghVCa4TCv+xMEKNv9YV4GAYrLYE gw9AX7oOhlKUJMQr445Xmh4m5XwrM9INEy185gHDj+fYG8MXuF+pKBjTYB05OJK9 axH93z3G0PJvX7nGhnA8EhcmyifS0toT245HU+jMkg5omBBMH1ywxrqzyrn7O1Zv ZYwIMLlruRARNGLM8VBwjiKrSp5DSEjQIV2FCoCQMdzB7mfVYw05rSk40nUt7D3K 323hfvQuVXLk25EoseaOekutEJaJtU5rB3bpL6qrO424JCXeQQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFB/mhbuZVL4L2wDbOJahxXRnPylXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvZjkyNGVjNDUtN2M0Yi0z Yzk4LTljNDItMmNiMTY4NmRiNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5 OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0 MTk1OTk5NWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCuay8MA4E AgACMAgDBgQmAv01ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZvPHT5KL8mBBtM2xvskaziQCJTfTnvwkU l/Do2ri8yaU6sG2lgEO8jMJDYkliREF9asfpPnsM8LSxNAqjSHckstwLipXsS03z DT/cnbWcOTJjWDfxE09U4RnM3uhb8GYlnZsclAs1aQO4lzaV1PfUqhTPg1KQT86L CDcS/z/RUkqKBD/2YxVZm2VriZq4zp55BpR6wCkZKZ6Cbb95EU4lKKUDw+2HvlCm QWEJH5YdAdEpOjYrP54J0ovirbsHka1YgN21k92FrzvR59Qfjn86gqAJ9zr7tajV jDR9louyGdUQSNaW6esU1siwTOJVruQtqzow0CCHH0DSiPAqoCBA -----END CERTIFICATE-----Generated at Tue Oct 21 18:02:57 2025 by rpki-client