$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa File: d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa (raw, json) Hash identifier: cMvHYjAOSx3lo/HH///HlQ5lbiDUSklR+PBu4L1sHHM= Subject key identifier: CD:DC:4D:4B:D9:F6:F7:F2:7F:4C:C5:54:5D:73:9F:20:C5:12:FB:BA Certificate issuer: /CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Certificate serial: 010D0C9F4328584B9442211CB5BC48C582F35800 Authority key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 32391 IP address blocks: 204.57.128.0/18 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:21:1c:b5:bc:48:c5:82:f3:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=e49c5ca7-8353-487e-bddc-84acea91b51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3d:f8:2c:7e:8a:cd:4b:7c:59:cf:cb:0c:63: a5:e5:f7:71:22:b0:15:ae:1d:77:82:3a:57:88:00: 14:26:50:75:5c:93:67:5f:48:23:fa:37:c3:7e:f1: 97:27:f0:f2:93:47:a2:58:9f:91:ce:98:c8:ef:42: d0:8f:0f:ae:13:18:01:2b:32:b6:82:c2:06:3b:62: 62:1e:72:2e:29:40:65:69:e9:bb:b1:e4:1c:cb:7a: 74:5e:46:8a:1c:15:f8:92:93:d6:16:ab:8b:59:5b: c3:68:ba:23:2c:f4:11:a3:2f:d8:14:19:26:24:1b: d7:69:65:08:1b:8e:5f:17:7c:80:43:b7:c9:58:b2: 68:85:0e:a8:88:c9:32:b8:5c:a7:5c:f1:04:c1:fc: b6:4d:75:43:fc:b8:ab:1e:58:8e:ca:17:a1:11:98: 98:3c:a3:44:e1:1e:d3:46:03:fc:a7:cb:0c:b1:e2: 46:be:5a:72:1b:a4:37:3e:8a:31:f5:be:6f:f2:8b: 69:7c:48:45:c9:52:e7:c3:58:e2:71:15:0e:b7:45: bd:5c:b9:87:20:bb:ab:f0:70:8d:e7:1b:b3:84:69: 25:f6:6e:93:39:ff:4a:71:13:5b:cf:92:3e:bf:09: 93:5e:48:73:a7:af:dc:e1:88:cd:50:49:74:72:d6: 67:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DC:4D:4B:D9:F6:F7:F2:7F:4C:C5:54:5D:73:9F:20:C5:12:FB:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl X509v3 Authority Key Identifier: keyid:EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer sbgp-ipAddrBlock: critical IPv4: 204.57.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:36:56:9b:70:d2:4c:64:48:97:74:15:5c:61:73:02:de:a9: ab:33:3b:be:13:62:14:fc:db:00:99:c1:f9:6f:0b:1a:4c:52: 35:54:79:83:4c:fc:2f:1b:e0:b3:0a:b4:61:f3:fc:ea:6f:d6: 8e:09:17:41:76:77:b2:d4:e7:da:88:01:95:b1:9e:94:4a:8f: b9:d6:91:d8:d8:f0:dd:d8:2e:15:09:b1:3f:27:a0:b7:d4:55: 0e:ce:e8:c0:24:f0:6a:04:f5:0c:db:dc:71:0a:1a:bc:80:78: 4e:55:f7:5d:b5:03:3c:8d:65:12:ce:bb:17:d9:1f:75:ed:1f: 61:30:12:77:ca:ad:14:22:18:7e:63:e5:63:4b:75:7a:cc:c6: 05:88:ce:14:44:4e:a9:17:da:01:35:f7:a2:8c:a2:c3:eb:ee: 1d:02:3c:4c:34:d0:d5:f6:19:89:26:2b:d6:c6:f2:c7:06:8d: 22:d7:9a:d9:71:24:dc:34:57:fe:32:f6:8f:83:53:3e:73:f7: d7:ae:07:26:9f:a4:6d:24:c1:ea:58:b6:71:f5:12:03:4f:be: e7:5b:cd:b4:f6:d5:cf:83:84:19:63:bc:d8:f3:03:b4:8d:ed: 4a:9a:81:c0:dc:e5:03:a7:3b:1a:6f:3a:7d:60:7f:7f:34:75: 8f:d7:ba:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiEctbxIxYLzWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NWE0MWEtODExNC00ZTA0LWFiZGItYTNhMDMyYjM3 YTA0MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk ZTQ5YzVjYTctODM1My00ODdlLWJkZGMtODRhY2VhOTFiNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij34LH6KzUt8Wc/LDGOl5fdxIrAVrh13gjpX iAAUJlB1XJNnX0gj+jfDfvGXJ/Dyk0eiWJ+RzpjI70LQjw+uExgBKzK2gsIGO2Ji HnIuKUBlaem7seQcy3p0XkaKHBX4kpPWFquLWVvDaLojLPQRoy/YFBkmJBvXaWUI G45fF3yAQ7fJWLJohQ6oiMkyuFynXPEEwfy2TXVD/LirHliOyhehEZiYPKNE4R7T RgP8p8sMseJGvlpyG6Q3Poox9b5v8otpfEhFyVLnw1jicRUOt0W9XLmHILur8HCN 5xuzhGkl9m6TOf9KcRNbz5I+vwmTXkhzp6/c4YjNUEl0ctZnQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3cTUvZ9vfyf0zFVF1znyDFEvu6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1 YTQxYS04MTE0LTRlMDQtYWJkYi1hM2EwMzJiMzdhMDQvZDAwMTI5OTgtZTVkMy0z MmE5LWFkM2EtZGNkN2Y0NjE1NTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmE4NWE0MWEtODExNC00ZTA0LWFi ZGItYTNhMDMyYjM3YTA0LzJhODVhNDFhLTgxMTQtNGUwNC1hYmRiLWEzYTAzMmIz N2EwNC5jcmwwHwYDVR0jBBgwFoAU76oZ3vz/oGu+JzCMbTVq5IOpML4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1YTQxYS04MTE0LTRlMDQtYWJkYi1hM2Ew MzJiMzdhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzDmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU2Vptw0kxkSJd0FVxhcwLeqaszO74TYhT82wCZwflvCxpMUjVUeYNM /C8b4LMKtGHz/Opv1o4JF0F2d7LU59qIAZWxnpRKj7nWkdjY8N3YLhUJsT8noLfU VQ7O6MAk8GoE9Qzb3HEKGryAeE5V9121AzyNZRLOuxfZH3XtH2EwEnfKrRQiGH5j 5WNLdXrMxgWIzhRETqkX2gE196KMosPr7h0CPEw00NX2GYkmK9bG8scGjSLXmtlx JNw0V/4y9o+DUz5z99euByafpG0kwepYtnH1EgNPvudbzbT21c+DhBljvNjzA7SN 7UqagcDc5QOnOxpvOn1gf380dY/XumA= -----END CERTIFICATE-----Generated at Mon Oct 20 22:47:26 2025 by rpki-client