$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/0422ce09-e192-36ef-995a-0fb6ffb452b6.roa File: 0422ce09-e192-36ef-995a-0fb6ffb452b6.roa (raw, json) Hash identifier: kHr13ZcZ0CiY80QSI4Dx/C2GsInKSyHwXn+MU4pYJCk= Subject key identifier: 2B:13:2D:11:27:02:DE:0C:A0:25:2E:6E:29:BA:8D:BE:B7:42:77:FD Certificate issuer: /CN=a3ce9b72-308c-4401-abcd-f0002bb1a70a Certificate serial: 010D0C9F4328584B8EACEA7A45AE8F03A74A3EC0 Authority key identifier: BE:12:C6:8A:8D:98:2B:3C:C0:19:ED:CD:27:FC:A1:D3:94:3A:1C:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/0422ce09-e192-36ef-995a-0fb6ffb452b6.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 8075 IP address blocks: 204.155.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/a3ce9b72-308c-4401-abcd-f0002bb1a70a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/a3ce9b72-308c-4401-abcd-f0002bb1a70a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ea:7a:45:ae:8f:03:a7:4a:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3ce9b72-308c-4401-abcd-f0002bb1a70a Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=91e3adbf-2eb7-49d4-bd2d-de3a56b4d024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f2:98:54:02:2b:28:ac:4a:19:60:45:cb:4d: 71:89:8b:2a:ab:53:cd:75:6c:0a:18:3a:75:a0:20: 8f:c0:41:b8:93:9c:eb:27:8e:fe:51:dd:06:06:2e: 57:dc:9f:6e:05:0d:e6:d9:c5:71:9a:c5:1d:34:fe: ac:a7:52:ec:d0:57:e2:50:1c:e7:82:95:61:bc:d4: 1d:26:3e:a8:98:52:32:29:3c:e7:67:60:44:c5:62: a2:99:89:55:68:93:78:09:1a:2d:f9:49:c9:c6:47: 67:ae:dd:d7:3c:ed:7a:2a:e3:e8:eb:69:c6:f0:64: 6d:d9:56:61:ab:b3:f8:b0:f3:d4:c0:90:e1:59:4a: b1:c5:c2:6c:6e:ea:12:95:36:cd:ca:a3:6c:ab:cf: fc:a0:b3:b4:3f:ee:a7:9c:c5:d2:c6:40:2f:7f:18: 3d:d8:0a:08:87:c3:01:6f:2e:a5:8b:bb:e7:16:77: ef:c1:14:49:f3:14:0c:85:02:6d:66:c7:09:51:de: 50:f4:f6:32:f5:a9:a2:1a:40:88:a3:df:87:7c:bf: 18:93:bc:2b:5e:0b:a5:00:78:8f:7c:bc:a6:45:b6: e4:11:0f:da:16:4d:b9:bc:1a:89:be:c5:50:e9:63: 08:68:91:72:16:33:34:cc:30:6d:55:0b:69:2b:cf: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:13:2D:11:27:02:DE:0C:A0:25:2E:6E:29:BA:8D:BE:B7:42:77:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/0422ce09-e192-36ef-995a-0fb6ffb452b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/a3ce9b72-308c-4401-abcd-f0002bb1a70a.crl X509v3 Authority Key Identifier: keyid:BE:12:C6:8A:8D:98:2B:3C:C0:19:ED:CD:27:FC:A1:D3:94:3A:1C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a.cer sbgp-ipAddrBlock: critical IPv4: 204.155.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:08:44:46:f9:b1:5b:6e:6a:83:7f:8a:45:1d:90:b3:8c:de: 10:f6:4d:df:2c:a5:8f:84:c0:f7:6b:15:75:e5:4b:81:a2:c1: 70:61:ef:8b:de:54:84:ae:87:3e:93:99:e5:56:9e:0c:a7:11: a0:ff:3a:4d:02:96:c5:1d:3a:00:ff:cd:fc:03:25:cd:6f:c8: 7d:84:35:ea:fc:ae:1b:60:84:25:03:f9:74:c1:4b:56:a6:d9: ee:b4:2c:ec:01:80:51:42:c1:6c:1e:9d:50:d3:b6:e0:cc:f8: 4c:5d:b1:2b:4e:ef:cc:40:fc:6d:1f:48:d0:88:62:ca:40:e4: 62:ed:4d:ec:82:42:ac:11:92:6c:7c:fd:16:55:a4:c7:91:69: 58:1d:e6:f2:57:90:e7:2a:c7:51:d3:41:ad:15:51:d6:a5:06: 4a:70:94:8d:38:de:71:5b:51:43:f2:ca:30:66:87:d0:03:98: 9b:a0:7a:00:50:0d:76:89:03:b8:df:b4:6c:79:2e:b9:cf:28: 7a:4c:fa:4e:66:42:a6:4e:23:9d:e1:fe:4d:8f:ce:e2:04:7d: 88:9c:79:78:7c:a2:51:c4:fc:c1:13:b1:dc:01:6a:7e:c7:92: 5c:11:ee:f7:c5:e3:ea:6a:6e:87:b1:42:40:5c:0f:f6:7f:05: 8b:d8:20:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOp6Ra6PA6dKPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNjZTliNzItMzA4Yy00NDAxLWFiY2QtZjAwMDJiYjFh NzBhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTFlM2FkYmYtMmViNy00OWQ0LWJkMmQtZGUzYTU2YjRkMDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvKYVAIrKKxKGWBFy01xiYsqq1PNdWwKGDp1 oCCPwEG4k5zrJ47+Ud0GBi5X3J9uBQ3m2cVxmsUdNP6sp1Ls0FfiUBzngpVhvNQd Jj6omFIyKTznZ2BExWKimYlVaJN4CRot+UnJxkdnrt3XPO16KuPo62nG8GRt2VZh q7P4sPPUwJDhWUqxxcJsbuoSlTbNyqNsq8/8oLO0P+6nnMXSxkAvfxg92AoIh8MB by6li7vnFnfvwRRJ8xQMhQJtZscJUd5Q9PYy9amiGkCIo9+HfL8Yk7wrXgulAHiP fLymRbbkEQ/aFk25vBqJvsVQ6WMIaJFyFjM0zDBtVQtpK88R3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsTLREnAt4MoCUubim6jb63Qnf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hM2Nl OWI3Mi0zMDhjLTQ0MDEtYWJjZC1mMDAwMmJiMWE3MGEvMDQyMmNlMDktZTE5Mi0z NmVmLTk5NWEtMGZiNmZmYjQ1MmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTNjZTliNzItMzA4Yy00NDAxLWFi Y2QtZjAwMDJiYjFhNzBhL2EzY2U5YjcyLTMwOGMtNDQwMS1hYmNkLWYwMDAyYmIx YTcwYS5jcmwwHwYDVR0jBBgwFoAUvhLGio2YKzzAGe3NJ/yh05Q6HAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hM2NlOWI3Mi0zMDhjLTQ0MDEtYWJjZC1mMDAw MmJiMWE3MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJvSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwIREb5sVtuaoN/ikUdkLOM3hD2Td8spY+EwPdrFXXlS4GiwXBh74ve VISuhz6TmeVWngynEaD/Ok0ClsUdOgD/zfwDJc1vyH2ENer8rhtghCUD+XTBS1am 2e60LOwBgFFCwWwenVDTtuDM+ExdsStO78xA/G0fSNCIYspA5GLtTeyCQqwRkmx8 /RZVpMeRaVgd5vJXkOcqx1HTQa0VUdalBkpwlI043nFbUUPyyjBmh9ADmJugegBQ DXaJA7jftGx5LrnPKHpM+k5mQqZOI53h/k2PzuIEfYiceXh8olHE/METsdwBan7H klwR7vfF4+pqboexQkBcD/Z/BYvYILI= -----END CERTIFICATE-----Generated at Sun Oct 19 23:02:58 2025 by rpki-client