$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1b31f61a-098e-37a7-8531-9a5ab36e5749.roa File: 1b31f61a-098e-37a7-8531-9a5ab36e5749.roa (raw, json) Hash identifier: 3AvEvsaZvo/SGzieLwV0BhAVstukfhV8nNG9kVMNdFw= Subject key identifier: 6B:CD:86:1D:53:13:95:3C:93:7B:CC:B8:BF:75:BA:35:A7:50:89:7B Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584B758C94D8EC838C796A5A5B00 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1b31f61a-098e-37a7-8531-9a5ab36e5749.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 204928 IP address blocks: 128.254.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:94:d8:ec:83:8c:79:6a:5a:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=ee7c7ee9-9e37-41b3-9fe6-5b397e0f585f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:ce:5c:45:af:33:11:4c:6e:5c:e4:39:05: 99:06:fd:c8:6b:f0:88:21:63:30:60:fe:33:31:5f: 31:dc:b9:6e:2a:f6:37:d1:61:80:73:61:e8:ee:25: 3d:b5:2b:58:6c:f3:ad:98:76:58:4d:d8:29:71:0b: 38:4a:8e:88:e2:8f:da:36:47:61:ae:7b:68:cd:f0: be:79:96:79:08:c5:65:d0:38:b5:99:1b:f9:5a:97: 4b:81:0b:ac:8a:37:e6:9c:4d:da:ea:7e:f5:af:93: 94:5a:76:66:43:b1:5b:11:08:72:a6:2f:63:0c:ce: 0f:5a:6e:07:1d:db:e2:d7:0e:42:a1:38:9c:b1:2a: 86:fc:4d:c5:5e:f3:3c:00:dc:8f:d0:bd:7e:da:7b: 7b:4e:9f:87:60:75:71:15:b6:89:6c:72:0e:6f:ba: ad:02:ac:96:8d:83:75:33:0e:8c:fd:76:ba:ef:07: ec:9e:a1:a2:b0:91:63:08:d4:3c:24:ce:3b:eb:67: ba:13:1b:2c:35:61:58:c2:1b:b6:2e:1a:8f:96:1c: 78:41:6f:9b:b9:05:b8:ea:12:c1:99:83:b4:d7:95: 79:97:32:71:5d:c4:45:7f:21:2a:64:46:85:c7:62: ee:45:16:e4:42:77:b1:54:ba:64:bd:10:ca:83:f0: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CD:86:1D:53:13:95:3C:93:7B:CC:B8:BF:75:BA:35:A7:50:89:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1b31f61a-098e-37a7-8531-9a5ab36e5749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 128.254.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:f9:ef:bc:d5:9a:29:7e:e6:da:46:dd:4e:16:0c:e2:90:53: 34:4d:23:01:9b:8c:c3:96:9e:0c:53:02:8c:24:62:a6:20:e9: 86:9a:1b:48:a8:06:40:cc:a6:1c:65:56:97:c6:7d:3f:88:77: f8:bb:d1:c4:47:5e:f9:89:8a:93:16:2d:64:4a:a1:2a:ee:d7: 0c:cf:96:50:3a:0a:56:35:cf:c6:08:63:fa:8a:74:5a:09:57: ad:72:be:88:fd:be:ba:b9:d5:68:fa:da:d5:98:48:94:4f:54: 3e:1e:d4:4a:62:7f:51:26:4e:dc:ed:db:79:09:fa:01:7c:02: e3:ad:76:de:b2:14:a8:48:4e:e9:ae:9f:b5:19:4c:21:91:0c: 45:36:6b:38:08:41:53:ec:63:78:80:90:12:94:e5:58:e2:fd: 42:4f:97:51:03:df:19:cc:45:68:47:45:c5:dd:32:a9:a1:5e: 1b:43:2a:08:3e:33:38:a1:a3:18:ad:b8:cc:9e:59:c8:8a:aa: 40:9c:07:ec:fb:44:c9:35:44:3a:13:79:e3:71:e0:55:2c:ef: 02:ba:9d:ee:a6:d9:27:46:63:1d:cf:60:3e:de:33:11:01:01: 7b:b1:b1:40:bd:0a:3e:6f:78:0f:e2:07:af:3c:88:62:e0:76: de:73:98:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJTY7IOMeWpaWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk ZWU3YzdlZTktOWUzNy00MWIzLTlmZTYtNWIzOTdlMGY1ODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC7OXEWvMxFMblzkOQWZBv3Ia/CIIWMwYP4z MV8x3LluKvY30WGAc2Ho7iU9tStYbPOtmHZYTdgpcQs4So6I4o/aNkdhrntozfC+ eZZ5CMVl0Di1mRv5WpdLgQusijfmnE3a6n71r5OUWnZmQ7FbEQhypi9jDM4PWm4H Hdvi1w5CoTicsSqG/E3FXvM8ANyP0L1+2nt7Tp+HYHVxFbaJbHIOb7qtAqyWjYN1 Mw6M/Xa67wfsnqGisJFjCNQ8JM4762e6ExssNWFYwhu2LhqPlhx4QW+buQW46hLB mYO015V5lzJxXcRFfyEqZEaFx2LuRRbkQnexVLpkvRDKg/CAXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvNhh1TE5U8k3vMuL91ujWnUIl7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvMWIzMWY2MWEtMDk4ZS0z N2E3LTg1MzEtOWE1YWIzNmU1NzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP64MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMb577zVmil+5tpG3U4WDOKQUzRNIwGbjMOWngxTAowkYqYg6YaaG0io BkDMphxlVpfGfT+Id/i70cRHXvmJipMWLWRKoSru1wzPllA6ClY1z8YIY/qKdFoJ V61yvoj9vrq51Wj62tWYSJRPVD4e1Epif1EmTtzt23kJ+gF8AuOtdt6yFKhITumu n7UZTCGRDEU2azgIQVPsY3iAkBKU5Vji/UJPl1ED3xnMRWhHRcXdMqmhXhtDKgg+ MzihoxituMyeWciKqkCcB+z7RMk1RDoTeeNx4FUs7wK6ne6m2SdGYx3PYD7eMxEB AXuxsUC9Cj5veA/iB688iGLgdt5zmMY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:50:07 2025 by rpki-client