$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa File: 3f88eb45-1ebb-364d-9949-8283978277cd.roa (raw, json) Hash identifier: CZEvqIXmwRE6gMlgszXBSa69itTsxG6XpXnW77husA0= Subject key identifier: 7D:A3:3A:C3:9F:C7:14:77:69:FC:DA:D8:D1:58:99:D6:56:0F:5D:55 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584B8BE2244E93A64A56B1626800 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 40948 IP address blocks: 204.156.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:24:4e:93:a6:4a:56:b1:62:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=752752f6-35d6-4fc1-b633-6e4c5e6207bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f3:0a:70:25:c8:a7:ff:3f:f9:6d:58:1e:0f: ab:a8:bc:bd:f5:79:37:26:06:48:62:fe:80:d4:4e: 5f:27:7c:01:77:ae:03:18:7f:31:05:8c:11:ea:c1: 05:13:81:7a:0a:e6:19:e9:53:4f:8a:c3:dc:13:11: 63:ff:6c:26:e8:6c:a0:21:97:1b:82:4a:f3:8e:df: 13:8f:5d:cf:00:27:62:ee:72:79:8b:ad:de:05:ce: 06:0d:08:ac:bd:41:69:0e:41:7a:5f:ce:44:23:35: e1:47:f2:75:80:ab:38:71:e9:13:0e:77:f0:0e:32: de:00:08:6b:9b:71:58:75:71:87:67:63:c0:4b:b4: a0:1b:0b:03:9b:46:57:e6:18:03:82:a9:2b:38:c9: b3:95:46:78:94:e2:e4:2b:2c:93:1c:48:2f:43:6f: 04:82:4f:d3:3c:ae:09:0b:9e:25:98:ba:ad:17:b8: af:b0:76:21:0d:1e:cb:b6:e6:44:78:e4:2f:57:ec: 78:33:06:af:6f:2f:af:de:b1:0d:5e:1a:0b:87:44: 62:fb:28:f0:75:c8:8e:7e:72:ef:44:0a:93:65:28: f9:56:99:f5:24:a8:48:9c:df:a7:34:5d:27:7c:b1: 97:48:d8:4f:24:9e:8c:7b:b3:9a:f7:38:3c:b6:94: b9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A3:3A:C3:9F:C7:14:77:69:FC:DA:D8:D1:58:99:D6:56:0F:5D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 204.156.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:d4:3f:75:1d:9c:08:a5:1f:d3:4a:2a:67:c0:e0:36:f6:5d: d3:ae:e9:5b:90:8c:64:b3:91:77:9d:44:d1:32:0c:7c:61:06: e3:f4:87:42:d6:6b:81:c5:fd:ab:c0:3b:db:fa:05:ae:be:5d: d7:77:b4:8e:f0:1d:e6:40:32:40:4f:9e:84:2c:bd:91:ee:ba: 1d:6e:50:fd:34:1c:8e:22:48:b5:9b:29:99:af:ee:20:d0:04: fc:78:aa:2b:ac:9f:32:1d:5b:09:95:98:6a:bd:74:0c:9a:bc: 89:4b:44:b1:c1:ff:39:7c:72:cb:fe:10:1c:5a:a1:de:29:18: 6b:f8:42:f2:96:3d:ee:fd:56:da:bd:b7:90:fb:e4:4e:92:a1: 20:23:d2:0a:f4:ca:a7:fe:0a:4e:94:b2:e2:71:04:b8:a5:48: 95:2e:61:14:32:38:ab:21:4a:4f:54:a1:b3:b8:f1:5b:f1:99: 5e:49:a9:fb:c6:f7:1c:a5:13:d5:86:32:7c:f0:14:b9:ee:b3: ee:15:a5:0b:84:bc:d7:fd:76:ea:5e:f8:4c:32:10:9a:e6:d4: 49:cd:48:8c:15:29:c9:d7:b3:2a:11:14:e5:73:ea:c5:ca:0c: 54:1c:37:6e:ef:c7:30:f8:fd:fa:62:4d:7f:d6:69:e2:e5:47: 53:50:ff:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iROk6ZKVrFiaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NzUyNzUyZjYtMzVkNi00ZmMxLWI2MzMtNmU0YzVlNjIwN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPMKcCXIp/8/+W1YHg+rqLy99Xk3JgZIYv6A 1E5fJ3wBd64DGH8xBYwR6sEFE4F6CuYZ6VNPisPcExFj/2wm6GygIZcbgkrzjt8T j13PACdi7nJ5i63eBc4GDQisvUFpDkF6X85EIzXhR/J1gKs4cekTDnfwDjLeAAhr m3FYdXGHZ2PAS7SgGwsDm0ZX5hgDgqkrOMmzlUZ4lOLkKyyTHEgvQ28Egk/TPK4J C54lmLqtF7ivsHYhDR7LtuZEeOQvV+x4Mwavby+v3rENXhoLh0Ri+yjwdciOfnLv RAqTZSj5Vpn1JKhInN+nNF0nfLGXSNhPJJ6Me7Oa9zg8tpS5GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2jOsOfxxR3afza2NFYmdZWD11VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvM2Y4OGViNDUtMWViYi0z NjRkLTk5NDktODI4Mzk3ODI3N2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrUP3UdnAilH9NKKmfA4Db2XdOu6VuQjGSzkXedRNEyDHxhBuP0h0LW a4HF/avAO9v6Ba6+Xdd3tI7wHeZAMkBPnoQsvZHuuh1uUP00HI4iSLWbKZmv7iDQ BPx4qiusnzIdWwmVmGq9dAyavIlLRLHB/zl8csv+EBxaod4pGGv4QvKWPe79Vtq9 t5D75E6SoSAj0gr0yqf+Ck6UsuJxBLilSJUuYRQyOKshSk9UobO48VvxmV5JqfvG 9xylE9WGMnzwFLnus+4VpQuEvNf9dupe+EwyEJrm1EnNSIwVKcnXsyoRFOVz6sXK DFQcN27vxzD4/fpiTX/WaeLlR1NQ/0c= -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:03 2025 by rpki-client