$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f314c2f5-8f3a-35c1-aa5c-9a9404ebf2fa.roa File: f314c2f5-8f3a-35c1-aa5c-9a9404ebf2fa.roa (raw, json) Hash identifier: wTozHfgCDZ/swEYJJF+O8L8CqnR2C2NpY7C+Cggd4ww= Subject key identifier: B9:E3:1E:7F:2C:B7:34:DA:B7:1C:35:17:07:E9:B9:A7:8B:4A:89:A4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B84E748DC4FA7D503BA897E80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f314c2f5-8f3a-35c1-aa5c-9a9404ebf2fa.roa Signing time: Tue 14 Oct 2025 13:00:25 +0000 ROA not before: Tue 14 Oct 2025 13:00:25 +0000 ROA not after: Mon 12 Jan 2026 14:00:25 +0000 asID: 35699 IP address blocks: 154.61.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:48:dc:4f:a7:d5:03:ba:89:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 14 13:00:25 2025 GMT Not After : Jan 12 14:00:25 2026 GMT Subject: CN=1cfb6fed-6559-47b7-92d9-4585a281e022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a3:9d:f0:a3:4b:dd:cf:cb:97:cd:2d:6c:80: 0a:16:04:4f:24:42:88:fb:78:2b:8e:64:aa:f9:9c: d9:5c:58:da:91:4a:cd:52:46:88:59:37:42:74:ad: 4b:3a:59:d4:f5:63:a4:61:77:c9:72:1a:ea:7c:d6: 44:45:14:c8:87:eb:08:db:15:d3:0a:2d:96:17:1d: 15:b5:b0:59:4b:dc:7d:6b:58:16:46:92:70:49:c5: 95:45:ec:c4:ad:a1:a1:e7:9e:bd:7d:a5:5c:a7:8f: ea:23:72:40:f6:a0:ea:af:6d:34:58:15:97:9f:de: f8:72:ae:5a:c7:35:d1:ce:15:ee:a6:39:fb:2b:2d: 2a:b6:6b:4f:c6:24:24:a8:99:53:24:aa:5a:30:f6: 73:1f:42:05:39:1d:47:07:85:1e:27:ac:ea:b1:76: 4f:99:be:81:d1:d7:7a:6f:75:57:29:c0:3a:b0:87: 6e:14:22:10:b5:98:e0:cd:b5:55:a3:9e:af:d3:fd: d2:ec:0b:c2:16:aa:b2:87:4b:bc:1c:d9:9b:ad:09: e1:70:bf:08:73:89:3b:9a:b0:01:be:a9:3c:fa:77: 6b:d5:f8:59:08:b0:4b:1c:00:18:c1:84:1d:f3:ea: 00:e5:fa:18:ea:11:29:c1:d3:80:b9:29:2f:49:48: b3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E3:1E:7F:2C:B7:34:DA:B7:1C:35:17:07:E9:B9:A7:8B:4A:89:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f314c2f5-8f3a-35c1-aa5c-9a9404ebf2fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 154.61.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b6:11:94:0f:97:d7:1a:93:5d:cc:0c:0c:d2:0f:05:43:b8: 4b:bc:a3:9e:56:68:9f:75:59:3a:4e:38:a8:6a:28:49:25:4d: 34:ab:74:e6:e5:ae:29:a8:63:b8:79:0a:ca:9b:1c:d1:d5:ce: a0:5b:d5:b8:48:e4:27:6b:99:bc:6f:05:4e:53:b3:63:34:30: 3a:ce:e6:63:f1:8f:41:f3:b7:ba:40:19:59:b9:0c:eb:2f:43: 30:f1:4b:10:b3:7c:1b:4d:a2:10:80:a6:69:bd:c7:b3:f8:8c: 36:b6:fc:99:96:95:88:af:c6:76:95:58:63:19:b3:78:b3:95: be:3b:0b:64:3a:84:94:2d:a5:78:ee:ad:4a:94:b5:39:20:74: 62:61:e8:9b:f0:1d:7b:cc:b7:c0:90:e0:49:c6:a1:54:7a:17: 66:1a:fc:1c:3e:e6:b9:7e:47:46:43:7e:8d:a4:7d:e6:39:4f: 89:1b:aa:55:14:a7:27:ec:57:6f:fb:83:fc:f1:a7:7b:14:1c: 2e:8c:38:d8:bf:c6:1c:77:cf:b1:87:dc:8e:e3:d2:fe:a8:33: 18:d1:e1:da:16:b7:04:4f:ce:28:64:91:a7:20:7d:53:d9:9f: 4e:10:d5:79:a6:70:de:75:17:a8:aa:04:e7:f8:81:68:b7:15: cf:3f:4b:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE50jcT6fVA7qJfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNDEzMDAyNVoXDTI2MDExMjE0MDAyNVowLzEtMCsGA1UEAxMk MWNmYjZmZWQtNjU1OS00N2I3LTkyZDktNDU4NWEyODFlMDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqOd8KNL3c/Ll80tbIAKFgRPJEKI+3grjmSq +ZzZXFjakUrNUkaIWTdCdK1LOlnU9WOkYXfJchrqfNZERRTIh+sI2xXTCi2WFx0V tbBZS9x9a1gWRpJwScWVRezEraGh5569faVcp4/qI3JA9qDqr200WBWXn974cq5a xzXRzhXupjn7Ky0qtmtPxiQkqJlTJKpaMPZzH0IFOR1HB4UeJ6zqsXZPmb6B0dd6 b3VXKcA6sIduFCIQtZjgzbVVo56v0/3S7AvCFqqyh0u8HNmbrQnhcL8Ic4k7mrAB vqk8+ndr1fhZCLBLHAAYwYQd8+oA5foY6hEpwdOAuSkvSUizLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnjHn8stzTatxw1FwfpuaeLSomkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjMxNGMyZjUtOGYzYS0z NWMxLWFhNWMtOWE5NDA0ZWJmMmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmj1kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe2EZQPl9cak13MDAzSDwVDuEu8o55WaJ91WTpOOKhqKEklTTSrdObl rimoY7h5CsqbHNHVzqBb1bhI5CdrmbxvBU5Ts2M0MDrO5mPxj0Hzt7pAGVm5DOsv QzDxSxCzfBtNohCApmm9x7P4jDa2/JmWlYivxnaVWGMZs3izlb47C2Q6hJQtpXju rUqUtTkgdGJh6JvwHXvMt8CQ4EnGoVR6F2Ya/Bw+5rl+R0ZDfo2kfeY5T4kbqlUU pyfsV2/7g/zxp3sUHC6MONi/xhx3z7GH3I7j0v6oMxjR4doWtwRPzihkkacgfVPZ n04Q1XmmcN51F6iqBOf4gWi3Fc8/S+A= -----END CERTIFICATE-----Generated at Mon Oct 20 10:01:13 2025 by rpki-client