$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/45d8e8b2-b06f-3b53-b63f-efb481fd3dce.roa File: 45d8e8b2-b06f-3b53-b63f-efb481fd3dce.roa (raw, json) Hash identifier: FFMEJqNeo1KEulBwcqEVzkJMJZRkZCBQf4VWOgwulFM= Subject key identifier: 37:98:E8:A6:11:68:49:5F:A6:EF:BE:23:5A:04:96:76:E6:51:50:E9 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584B94422E8CE53B68449F357C00 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/45d8e8b2-b06f-3b53-b63f-efb481fd3dce.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 91 IP address blocks: 204.76.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:2e:8c:e5:3b:68:44:9f:35:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=949eb439-f9ad-4414-8a0e-4e2326d7bbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4d:d5:38:2f:00:67:80:3c:1d:c0:5b:e8:39: 32:d7:aa:3a:a4:4a:6e:34:05:77:89:c6:b6:08:89: 23:69:7f:5c:15:9a:62:55:68:75:07:15:cc:ae:ce: e0:84:a6:f5:17:2c:3e:a8:cc:bc:ab:0a:cc:00:29: 6e:34:4c:b9:39:71:fc:0b:24:c7:3d:a0:2a:41:f4: 19:00:49:86:56:12:b1:7c:08:28:31:1e:16:45:34: 37:21:b8:8b:8d:7d:66:3f:ab:75:32:7f:08:8d:d0: 0e:b3:20:0f:47:a5:05:f6:43:41:ac:00:ba:9f:38: 4e:d9:7c:b0:08:71:7e:69:a6:8f:ac:02:7c:ad:b9: b9:f6:df:fe:32:90:8b:a9:32:51:36:e1:98:69:14: 34:58:37:3f:f2:b1:c8:3a:a7:5b:d9:f3:50:d9:e0: 62:04:a3:1e:61:1e:a9:e5:f1:ab:51:20:85:44:71: 15:c8:29:a0:70:e7:c8:19:51:05:2b:a0:a5:d4:99: 3d:7a:b5:0e:85:0f:94:f8:bd:b4:b4:e9:92:f6:97: ef:06:4f:47:05:11:f2:71:b7:8b:c0:45:15:ab:84: 7f:03:73:d4:8a:5b:18:a4:4f:57:f8:4a:1d:9b:82: 23:c3:cb:78:ab:a7:a1:17:8c:59:c8:49:77:de:e0: 07:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:98:E8:A6:11:68:49:5F:A6:EF:BE:23:5A:04:96:76:E6:51:50:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/45d8e8b2-b06f-3b53-b63f-efb481fd3dce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 204.76.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e3:29:87:02:81:c7:cb:af:b2:05:46:30:34:ef:78:74:6f: 04:0b:90:55:2a:61:3b:65:a9:8b:f7:ec:63:cd:99:c2:6c:b2: ce:eb:ad:b9:1e:03:e8:d9:c2:4c:c4:42:81:a9:23:e1:ea:49: 73:94:b5:fe:36:a5:ce:a7:31:0c:68:3b:a3:dc:96:aa:d1:6f: f9:0e:e6:c9:ce:97:26:5a:19:a5:89:82:19:93:87:fb:27:e3: 72:03:8c:90:05:43:0d:34:ec:89:d7:2c:4e:1e:94:f6:ae:fd: 88:c4:9c:99:19:c1:ff:46:3b:c6:12:de:52:10:19:a5:b9:c2: 36:7f:16:e4:1d:68:1c:82:16:32:21:b3:cc:ef:c5:d2:82:52: 0e:26:c5:ac:f5:be:bb:18:90:fb:a8:32:83:5c:36:92:53:09: 9e:a5:3b:54:69:a1:66:0e:46:1f:14:df:76:83:03:bc:cb:22: 46:bd:5b:73:96:a6:6e:cd:c5:bf:6c:34:a4:00:af:18:28:aa: f8:a5:36:75:fd:ec:1b:b8:bc:6e:f1:6d:e8:70:d1:2c:0c:44: ed:97:7a:23:14:a1:6e:a6:ac:ed:39:c4:61:91:2d:43:9d:96: bb:9b:47:c7:81:18:23:9b:c4:5e:48:40:18:e8:10:da:d3:8e: 07:b4:29:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQi6M5TtoRJ81fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk OTQ5ZWI0MzktZjlhZC00NDE0LThhMGUtNGUyMzI2ZDdiYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk3VOC8AZ4A8HcBb6Dky16o6pEpuNAV3ica2 CIkjaX9cFZpiVWh1BxXMrs7ghKb1Fyw+qMy8qwrMACluNEy5OXH8CyTHPaAqQfQZ AEmGVhKxfAgoMR4WRTQ3IbiLjX1mP6t1Mn8IjdAOsyAPR6UF9kNBrAC6nzhO2Xyw CHF+aaaPrAJ8rbm59t/+MpCLqTJRNuGYaRQ0WDc/8rHIOqdb2fNQ2eBiBKMeYR6p 5fGrUSCFRHEVyCmgcOfIGVEFK6Cl1Jk9erUOhQ+U+L20tOmS9pfvBk9HBRHycbeL wEUVq4R/A3PUilsYpE9X+Eodm4Ijw8t4q6ehF4xZyEl33uAHXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeY6KYRaElfpu++I1oElnbmUVDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvNDVkOGU4YjItYjA2Zi0z YjUzLWI2M2YtZWZiNDgxZmQzZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEzkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDjKYcCgcfLr7IFRjA073h0bwQLkFUqYTtlqYv37GPNmcJsss7rrbke A+jZwkzEQoGpI+HqSXOUtf42pc6nMQxoO6PclqrRb/kO5snOlyZaGaWJghmTh/sn 43IDjJAFQw007InXLE4elPau/YjEnJkZwf9GO8YS3lIQGaW5wjZ/FuQdaByCFjIh s8zvxdKCUg4mxaz1vrsYkPuoMoNcNpJTCZ6lO1RpoWYORh8U33aDA7zLIka9W3OW pm7Nxb9sNKQArxgoqvilNnX97Bu4vG7xbehw0SwMRO2XeiMUoW6mrO05xGGRLUOd lrubR8eBGCObxF5IQBjoENrTjge0KQg= -----END CERTIFICATE-----Generated at Tue Oct 21 00:39:02 2025 by rpki-client