$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/257bba9c-737b-32f8-afa2-28d7618d1067.roa File: 257bba9c-737b-32f8-afa2-28d7618d1067.roa (raw, json) Hash identifier: vc60X8T49jyFoGl+3am51BmXk0qyl2XQUu5II6jKPoI= Subject key identifier: 1D:75:39:2E:27:9C:F3:8E:79:0C:E5:D2:32:23:0A:0B:B1:15:D6:7B Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584B2496DBB972A68D5FD7037180 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/257bba9c-737b-32f8-afa2-28d7618d1067.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 54994 IP address blocks: 168.235.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:db:b9:72:a6:8d:5f:d7:03:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=24cca521-3e7e-4163-bb89-7510555c02a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b5:88:c0:3e:3a:0d:70:b4:58:34:65:09:22: 65:cc:b3:16:1f:2f:7f:0c:87:f4:a3:52:ec:41:2e: 8f:77:42:2b:d3:00:91:1e:b9:5c:fc:b1:48:a8:76: 14:69:0d:a1:81:29:80:2b:07:4d:54:6a:f5:46:1f: 02:22:27:0c:ed:58:dc:bd:f3:a8:49:99:8c:ca:3a: a2:79:3c:6b:52:ef:75:af:de:c0:65:29:42:33:02: 07:ba:77:28:f8:bc:62:28:7e:35:b8:b1:9f:8b:8b: 0d:8f:62:cb:f4:cf:5a:c7:82:77:2e:3e:8f:0c:8e: ec:e0:f1:66:63:13:9d:22:90:77:0d:a7:30:ca:07: ca:90:23:9f:4a:b3:59:98:15:36:1a:4a:f8:2c:a3: a2:cf:a5:16:6f:6f:51:2d:2f:94:c3:1b:44:ed:e2: 90:0f:a5:6c:8f:5a:c4:cc:a1:03:72:a4:58:0d:1f: c0:d2:24:a1:1d:37:73:5c:a7:15:fa:f2:5a:f5:32: ed:f8:6a:83:91:05:b8:01:80:19:3a:16:cd:78:eb: b5:e6:2c:44:a1:34:94:df:4c:a6:37:f6:f3:ea:45: f0:03:38:c7:1e:c1:cd:3e:79:97:71:3b:ce:03:66: 61:f3:f1:d5:1e:5e:de:68:50:9f:b8:41:fb:2e:3c: 83:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:75:39:2E:27:9C:F3:8E:79:0C:E5:D2:32:23:0A:0B:B1:15:D6:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/257bba9c-737b-32f8-afa2-28d7618d1067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 168.235.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:36:08:fa:dd:b7:46:d9:76:4c:73:16:5c:e1:37:b0:00:d0: 22:fe:63:01:a5:3d:a0:57:3d:63:9f:29:17:38:93:63:1e:65: 0b:b8:9c:e7:36:9d:1d:2b:9f:c7:28:e9:16:22:73:1f:af:4d: e1:03:a0:5c:10:b5:0e:a1:59:e2:42:91:2d:9e:98:75:55:5d: 7f:1f:c7:31:7c:4e:3e:1c:80:95:36:c0:09:0c:04:0b:57:96: 65:2f:06:fa:9e:b1:22:28:8e:76:aa:85:72:fb:93:ce:6d:bf: f1:ea:48:81:8e:22:57:9e:82:4d:cd:ad:c5:be:45:ce:93:1d: 02:6a:a5:e3:2e:fd:34:52:eb:ac:1f:08:63:e7:7b:a2:b4:c7: 1e:bd:7f:f1:aa:55:02:4a:8f:c5:7b:24:e1:53:4b:3e:8f:24: c7:5e:42:5a:e8:1c:ab:af:5f:9e:1f:16:8b:73:25:1c:9b:90: f1:a8:f5:c8:6b:a5:7e:82:6f:4b:60:4e:6c:de:39:bb:fd:5e: 24:5b:42:27:d5:aa:2f:c0:f4:8a:ed:45:be:18:c4:cc:d6:99: e4:c8:33:ed:0f:89:39:23:50:5c:b3:49:07:9d:1f:95:e2:e1: e2:40:50:e3:88:f4:6e:10:e0:06:14:5f:92:04:ed:15:e5:50: 53:25:91:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltu5cqaNX9cDcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk MjRjY2E1MjEtM2U3ZS00MTYzLWJiODktNzUxMDU1NWMwMmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrWIwD46DXC0WDRlCSJlzLMWHy9/DIf0o1Ls QS6Pd0Ir0wCRHrlc/LFIqHYUaQ2hgSmAKwdNVGr1Rh8CIicM7VjcvfOoSZmMyjqi eTxrUu91r97AZSlCMwIHunco+LxiKH41uLGfi4sNj2LL9M9ax4J3Lj6PDI7s4PFm YxOdIpB3DacwygfKkCOfSrNZmBU2Gkr4LKOiz6UWb29RLS+UwxtE7eKQD6Vsj1rE zKEDcqRYDR/A0iShHTdzXKcV+vJa9TLt+GqDkQW4AYAZOhbNeOu15ixEoTSU30ym N/bz6kXwAzjHHsHNPnmXcTvOA2Zh8/HVHl7eaFCfuEH7LjyDHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB11OS4nnPOOeQzl0jIjCguxFdZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjU3YmJhOWMtNzM3Yi0z MmY4LWFmYTItMjhkNzYxOGQxMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA2CPrdt0bZdkxzFlzhN7AA0CL+YwGlPaBXPWOfKRc4k2MeZQu4nOc2 nR0rn8co6RYicx+vTeEDoFwQtQ6hWeJCkS2emHVVXX8fxzF8Tj4cgJU2wAkMBAtX lmUvBvqesSIojnaqhXL7k85tv/HqSIGOIleegk3NrcW+Rc6THQJqpeMu/TRS66wf CGPne6K0xx69f/GqVQJKj8V7JOFTSz6PJMdeQlroHKuvX54fFotzJRybkPGo9chr pX6Cb0tgTmzeObv9XiRbQifVqi/A9IrtRb4YxMzWmeTIM+0PiTkjUFyzSQedH5Xi 4eJAUOOI9G4Q4AYUX5IE7RXlUFMlkas= -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:39 2025 by rpki-client