$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa File: a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa (raw, json) Hash identifier: +XJcALcNRHgdsKmnLmVzCIBz3qe5G+s8p69ZQxpl9wU= Subject key identifier: 4C:C8:AF:8D:52:70:D2:A7:EA:2B:3D:BD:12:C2:85:B3:71:F6:6E:EE Certificate issuer: /CN=bc061f95-a504-48f1-88f1-fae53628511e Certificate serial: 010D0C9F4328584B583CA97F855132F139846680 Authority key identifier: 14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 398885 IP address blocks: 204.107.12.0/24 maxlen: 24 204.107.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:a9:7f:85:51:32:f1:39:84:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc061f95-a504-48f1-88f1-fae53628511e Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=b2823d51-15bf-4c8c-afda-ae993dce1ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:50:1c:f9:d2:2e:2b:8c:65:e1:67:17:9c:21: c9:39:97:3e:4f:e2:1f:5d:95:40:3d:5f:c1:d7:13: 9c:c1:5a:18:10:41:8c:be:ad:3c:7a:5f:92:a1:8d: ec:e6:56:83:b0:21:89:2c:60:ac:a7:e5:74:b6:bf: e1:23:37:fe:0f:c6:0f:15:5d:c2:50:0b:ad:bb:3b: 5d:08:50:71:94:5f:5d:61:a0:ca:3c:31:96:bb:f5: e1:8e:c7:1e:ad:29:ce:cc:7c:1b:59:10:c4:c8:82: f4:b4:37:01:49:81:49:5e:b7:f6:8e:60:72:91:6e: b8:dd:c7:9f:98:5d:83:81:18:c8:dd:ea:7e:f8:39: 30:c2:3c:03:11:ef:8c:52:9a:e4:e0:be:29:fd:ed: c1:0d:8f:b8:86:92:78:6d:4b:fc:0b:01:a7:fe:3e: aa:56:cc:7a:df:12:9a:27:31:f6:98:cf:a3:ff:d6: 72:08:31:38:03:a2:ac:0b:ad:dd:53:75:e1:57:05: 9e:28:80:f5:fd:66:b0:f1:c2:d3:63:20:5c:a1:02: 49:13:6e:45:6a:53:ba:21:b5:6d:16:49:e8:d6:9d: 2a:37:64:2f:de:f2:43:33:4a:d6:c0:4d:d0:83:26: 52:c0:3f:55:72:b7:85:49:51:8d:5f:6e:ad:b3:f7: 71:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C8:AF:8D:52:70:D2:A7:EA:2B:3D:BD:12:C2:85:B3:71:F6:6E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl X509v3 Authority Key Identifier: keyid:14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer sbgp-ipAddrBlock: critical IPv4: 204.107.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3a:ba:cf:76:21:c8:eb:da:46:26:ba:aa:c5:0a:01:7d:81: 31:98:97:cf:bd:ef:7d:d3:0b:98:7f:cb:b3:51:89:60:7f:a8: 3f:b7:f5:89:47:47:5f:51:be:de:77:f5:d6:70:57:40:47:54: af:ed:9b:d4:f7:fb:30:d1:3f:d1:45:72:ad:dd:7c:78:4b:af: a6:02:4d:e8:57:b2:c2:24:35:c8:42:9a:e4:99:9b:8b:82:46: fe:a1:10:72:e2:9b:99:55:16:c8:20:3a:24:8e:e3:c3:2f:da: e0:1e:90:3f:5b:a9:c3:94:91:df:fb:dc:ef:ba:74:b0:1a:16: a0:ff:cd:e1:ac:fa:2d:0f:5d:71:e2:14:a0:4c:f7:0b:da:e9: 5c:80:ee:62:b3:c3:6d:e6:b8:f3:5c:c6:11:b6:d7:8e:ce:a3: 9c:04:18:61:df:f9:98:ff:64:5b:5c:a0:90:38:b3:8f:40:52: 5e:b2:36:e6:3f:44:53:8c:a5:e4:51:f4:26:e0:cf:2e:8b:5e: fa:0d:bb:9d:f9:15:4d:1d:d1:f7:24:49:fa:8e:a6:7c:b1:53: a7:a8:12:15:72:a6:f1:e7:62:c0:df:eb:c0:c6:c6:be:af:92: 1c:5b:70:dd:0c:a8:65:2f:a0:4b:62:5c:47:4f:79:5e:f6:a5: d0:c2:30:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKl/hVEy8TmEZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMwNjFmOTUtYTUwNC00OGYxLTg4ZjEtZmFlNTM2Mjg1 MTFlMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YjI4MjNkNTEtMTViZi00YzhjLWFmZGEtYWU5OTNkY2UxYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVAc+dIuK4xl4WcXnCHJOZc+T+IfXZVAPV/B 1xOcwVoYEEGMvq08el+SoY3s5laDsCGJLGCsp+V0tr/hIzf+D8YPFV3CUAutuztd CFBxlF9dYaDKPDGWu/XhjscerSnOzHwbWRDEyIL0tDcBSYFJXrf2jmBykW643cef mF2DgRjI3ep++DkwwjwDEe+MUprk4L4p/e3BDY+4hpJ4bUv8CwGn/j6qVsx63xKa JzH2mM+j/9ZyCDE4A6KsC63dU3XhVwWeKID1/Waw8cLTYyBcoQJJE25FalO6IbVt Fkno1p0qN2Qv3vJDM0rWwE3QgyZSwD9VcreFSVGNX26ts/dxXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzIr41ScNKn6is9vRLChbNx9m7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYzA2 MWY5NS1hNTA0LTQ4ZjEtODhmMS1mYWU1MzYyODUxMWUvYTJjNjRkM2QtZmY1OC0z N2U1LTg3N2YtZjFiMTNlYTMxMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmMwNjFmOTUtYTUwNC00OGYxLTg4 ZjEtZmFlNTM2Mjg1MTFlL2JjMDYxZjk1LWE1MDQtNDhmMS04OGYxLWZhZTUzNjI4 NTExZS5jcmwwHwYDVR0jBBgwFoAUFFAVosutB3c4zIGLkq2jLlFK84EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYzA2MWY5NS1hNTA0LTQ4ZjEtODhmMS1mYWU1 MzYyODUxMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc6us92Icjr2kYmuqrFCgF9gTGYl8+9733TC5h/y7NRiWB/qD+39YlH R19Rvt539dZwV0BHVK/tm9T3+zDRP9FFcq3dfHhLr6YCTehXssIkNchCmuSZm4uC Rv6hEHLim5lVFsggOiSO48Mv2uAekD9bqcOUkd/73O+6dLAaFqD/zeGs+i0PXXHi FKBM9wva6VyA7mKzw23muPNcxhG2147Oo5wEGGHf+Zj/ZFtcoJA4s49AUl6yNuY/ RFOMpeRR9Cbgzy6LXvoNu535FU0d0fckSfqOpnyxU6eoEhVypvHnYsDf68DGxr6v khxbcN0MqGUvoEtiXEdPeV72pdDCMAA= -----END CERTIFICATE-----Generated at Mon Oct 20 05:24:22 2025 by rpki-client