$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa File: dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa (raw, json) Hash identifier: 9LVQWJ+wbee5gMAiqdoWW2vnAmAkw/Z6Sz6OL0EHk/0= Subject key identifier: 28:08:02:2B:F8:2C:99:9B:D6:FE:DD:0F:A0:05:F8:22:DB:CE:8A:C8 Certificate issuer: /CN=ce660bcc-5f06-4302-bd04-76a6aff8b40c Certificate serial: 010D0C9F4328584B758C8F60AC59C42869D9F680 Authority key identifier: DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 54223 IP address blocks: 204.145.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:8f:60:ac:59:c4:28:69:d9:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce660bcc-5f06-4302-bd04-76a6aff8b40c Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=4f592316-742f-4009-b0d0-920674965b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:2d:bd:48:a9:e5:bd:ce:12:57:d3:d6:20: 7d:54:9e:9f:14:d5:56:6e:39:9f:f1:31:6e:c3:ce: b8:d4:a5:38:30:d7:3e:5f:b9:6c:a2:42:1b:e3:15: c8:b1:01:75:a1:e5:4c:37:f8:c0:87:43:ba:56:f4: b0:5b:f9:2d:38:90:b4:36:4f:e4:0f:a5:29:e6:0f: b1:48:ba:ab:c4:1b:3c:20:06:92:2c:89:ca:49:8f: a9:d0:45:aa:72:55:c8:23:56:7f:b0:40:a4:69:10: e9:cf:d6:8a:6d:81:80:d0:f2:bf:20:93:d6:c7:11: d1:74:ed:33:66:b9:e9:a1:9d:61:9a:e2:ce:17:5c: e1:8d:70:ea:66:74:f3:3b:67:11:bc:aa:c5:d9:41: 8c:57:80:1b:6a:e4:dd:4d:0b:fb:2b:93:08:e0:5d: 54:8a:44:be:da:ba:be:3d:61:f5:7d:55:61:0f:01: c9:87:a6:9b:33:e0:29:6b:e8:c2:f8:02:be:e6:ee: 23:37:ec:fa:54:3b:8f:a2:0a:4c:65:f4:0c:4c:84: 1a:76:4e:e8:59:91:35:16:86:45:8d:4a:16:d2:cc: dc:a0:72:49:1a:82:18:61:77:1f:6f:1c:3d:d8:75: 9b:6a:63:5d:86:cf:fe:c6:fb:27:df:58:56:67:51: 6f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:08:02:2B:F8:2C:99:9B:D6:FE:DD:0F:A0:05:F8:22:DB:CE:8A:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.crl X509v3 Authority Key Identifier: keyid:DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer sbgp-ipAddrBlock: critical IPv4: 204.145.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:9a:ab:ac:75:81:aa:d3:26:dc:d3:b6:ea:50:16:ec:b5:ee: c5:f0:b8:7f:04:4b:d1:4b:d0:8b:ac:ad:42:6f:ff:40:82:8a: e5:ae:72:ab:4b:5a:f2:a6:52:17:49:1a:19:bc:62:15:62:4a: c0:43:9a:88:df:ac:fb:9f:ec:63:82:67:df:5e:3a:49:ba:e9: 8a:9e:47:40:c5:e3:16:e4:8d:47:a5:50:28:54:f1:25:33:3d: b8:a3:05:d0:ea:12:94:26:8b:71:2d:91:d3:00:cf:77:bc:2a: 2c:5c:ad:7d:29:09:c5:6f:f4:b4:33:52:0e:5b:36:91:78:1c: 0a:2e:73:24:af:9b:ef:72:76:56:f6:7f:5a:5c:1f:1c:c4:e0: b6:cc:56:5a:77:ab:e9:d2:a0:b1:89:9d:78:ff:97:58:19:f3: 7e:4b:73:d3:c7:98:fc:52:1c:b7:3e:67:6b:a6:e2:b2:11:54: 4a:9a:a6:cf:db:3b:5c:64:9d:ef:54:55:00:a1:3c:1a:f1:93: c2:0e:d0:f8:a9:09:ad:f5:e8:39:16:07:0a:9d:f9:c8:d0:9f: 6f:17:13:bc:ba:48:25:9c:47:55:22:67:5c:89:db:b4:3e:28: 38:67:94:8c:f1:da:2f:8a:89:e8:87:be:54:7a:2c:34:7e:ad: 88:98:39:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jI9grFnEKGnZ9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U2NjBiY2MtNWYwNi00MzAyLWJkMDQtNzZhNmFmZjhi NDBjMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk NGY1OTIzMTYtNzQyZi00MDA5LWIwZDAtOTIwNjc0OTY1YjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE4tvUip5b3OElfT1iB9VJ6fFNVWbjmf8TFu w8641KU4MNc+X7lsokIb4xXIsQF1oeVMN/jAh0O6VvSwW/ktOJC0Nk/kD6Up5g+x SLqrxBs8IAaSLInKSY+p0EWqclXII1Z/sECkaRDpz9aKbYGA0PK/IJPWxxHRdO0z ZrnpoZ1hmuLOF1zhjXDqZnTzO2cRvKrF2UGMV4AbauTdTQv7K5MI4F1UikS+2rq+ PWH1fVVhDwHJh6abM+Apa+jC+AK+5u4jN+z6VDuPogpMZfQMTIQadk7oWZE1FoZF jUoW0szcoHJJGoIYYXcfbxw92HWbamNdhs/+xvsn31hWZ1FvWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgIAiv4LJmb1v7dD6AF+CLbzorIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jZTY2 MGJjYy01ZjA2LTQzMDItYmQwNC03NmE2YWZmOGI0MGMvZGZjNDM5ODctZTUyZS0z MGFhLTg1N2YtM2JkNmVmNjRkZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvY2U2NjBiY2MtNWYwNi00MzAyLWJk MDQtNzZhNmFmZjhiNDBjL2NlNjYwYmNjLTVmMDYtNDMwMi1iZDA0LTc2YTZhZmY4 YjQwYy5jcmwwHwYDVR0jBBgwFoAU2nV7pHGWjPj1zQTMP7gapf4X3ZgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jZTY2MGJjYy01ZjA2LTQzMDItYmQwNC03NmE2 YWZmOGI0MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6aq6x1garTJtzTtupQFuy17sXwuH8ES9FL0IusrUJv/0CCiuWucqtL WvKmUhdJGhm8YhViSsBDmojfrPuf7GOCZ99eOkm66YqeR0DF4xbkjUelUChU8SUz PbijBdDqEpQmi3EtkdMAz3e8KixcrX0pCcVv9LQzUg5bNpF4HAoucySvm+9ydlb2 f1pcHxzE4LbMVlp3q+nSoLGJnXj/l1gZ835Lc9PHmPxSHLc+Z2um4rIRVEqaps/b O1xkne9UVQChPBrxk8IO0PipCa316DkWBwqd+cjQn28XE7y6SCWcR1UiZ1yJ27Q+ KDhnlIzx2i+KieiHvlR6LDR+rYiYORk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:08 2025 by rpki-client