$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/46619392-b89b-30ad-aaa8-1b908d91e183.roa File: 46619392-b89b-30ad-aaa8-1b908d91e183.roa (raw, json) Hash identifier: DkL4oQ6O3T+PClk6FY58yoro+SYhY3tZffC6JJtD3Sw= Subject key identifier: C2:A7:E4:68:87:EF:54:AB:C6:5D:A6:14:B0:5D:84:3F:E3:29:BB:3B Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584B8EACC47E9DE6B0A41F0FF900 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/46619392-b89b-30ad-aaa8-1b908d91e183.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 46408 IP address blocks: 204.13.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c4:7e:9d:e6:b0:a4:1f:0f:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=9555103a-499f-4391-9118-5a1b3d8a46b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b6:b2:eb:03:f6:58:4d:83:90:ab:e7:14:39: 83:ca:f7:36:f0:0f:95:89:42:d3:09:27:e3:67:db: 5f:2d:78:eb:d3:5b:23:be:61:c4:c5:ce:a6:a0:ab: dd:0b:e3:67:21:71:59:c2:8b:5f:74:b8:1f:a3:46: 43:65:42:a2:70:50:e7:38:b3:f0:fa:72:f2:72:a8: 0f:66:f4:7d:cb:77:6b:bd:4b:a1:6a:77:dc:f0:c3: c9:d4:4b:bf:cf:46:d3:cc:8f:b2:fa:79:41:2f:02: ed:8e:6c:66:ee:13:2d:cb:be:21:f3:30:61:20:92: 5d:7c:a0:a4:42:33:69:7c:83:30:f5:90:f8:d5:3e: b6:bc:56:e5:c0:d3:6f:74:73:17:55:11:9e:df:3e: 4e:c0:da:e0:69:4d:9a:5f:88:fa:58:ca:04:dc:08: 0f:1b:15:3b:6e:81:dc:5a:6b:5d:a9:d9:56:ed:51: 8e:86:75:df:70:e8:94:e4:3b:2a:21:cb:16:06:42: 7f:19:11:51:b0:67:3e:58:53:65:40:a5:70:ac:0a: bb:ba:dc:2e:dd:82:c2:9f:f3:cb:39:f8:eb:17:35: 6d:1d:ec:24:20:8f:0f:47:ff:23:eb:9b:15:15:43: 66:68:72:d7:50:1e:3f:b5:bb:17:03:75:33:e8:6a: fb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A7:E4:68:87:EF:54:AB:C6:5D:A6:14:B0:5D:84:3F:E3:29:BB:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/46619392-b89b-30ad-aaa8-1b908d91e183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 204.13.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a6:ee:61:01:5d:55:a4:6d:2a:3b:9a:91:cc:3e:47:fa:f5: c3:f0:28:72:91:87:b9:52:91:b5:11:d6:39:9e:32:f5:79:50: c6:16:d1:ed:c2:65:4e:40:14:2d:61:f5:37:ed:b4:c0:44:02: ff:94:0e:da:94:2b:82:83:d3:e8:a8:a3:a3:b7:db:5e:8f:b8: 24:0c:e0:8e:ea:bd:50:25:3d:14:5e:8c:10:82:bf:ce:a7:71: bb:65:b2:c1:68:f8:48:c6:47:85:ed:e6:62:96:9c:f2:ab:22: 44:e6:8a:03:08:a5:90:6a:bd:eb:53:1e:76:71:80:58:6b:f9: 28:65:37:bc:ee:a6:3c:8d:7f:d0:76:7f:bd:2f:04:14:68:5b: ab:ea:1f:97:e0:32:2a:cf:7d:db:b6:c5:90:6f:1d:d3:27:7c: 1b:62:b9:e4:f0:17:db:bb:f5:48:28:e5:28:79:80:9c:18:c9: 8e:bd:3c:fc:e9:e1:72:3f:d0:8e:8f:bf:2f:17:fd:b6:94:c9: a6:07:42:26:6f:20:29:78:65:1d:f3:e8:3e:76:31:1f:c2:bd: e3:5a:31:b9:18:61:81:de:57:7a:1f:26:2d:d4:6b:da:12:30: 34:33:09:d9:e1:8b:08:7a:99:ec:1f:a4:bd:c8:c6:a4:0c:2d: 4b:5d:bf:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMR+neawpB8P+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTU1NTEwM2EtNDk5Zi00MzkxLTkxMTgtNWExYjNkOGE0NmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbay6wP2WE2DkKvnFDmDyvc28A+ViULTCSfj Z9tfLXjr01sjvmHExc6moKvdC+NnIXFZwotfdLgfo0ZDZUKicFDnOLPw+nLycqgP ZvR9y3drvUuhanfc8MPJ1Eu/z0bTzI+y+nlBLwLtjmxm7hMty74h8zBhIJJdfKCk QjNpfIMw9ZD41T62vFblwNNvdHMXVRGe3z5OwNrgaU2aX4j6WMoE3AgPGxU7boHc WmtdqdlW7VGOhnXfcOiU5DsqIcsWBkJ/GRFRsGc+WFNlQKVwrAq7utwu3YLCn/PL OfjrFzVtHewkII8PR/8j65sVFUNmaHLXUB4/tbsXA3Uz6Gr7fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKn5GiH71Srxl2mFLBdhD/jKbs7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvNDY2MTkzOTItYjg5Yi0z MGFkLWFhYTgtMWI5MDhkOTFlMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6m7mEBXVWkbSo7mpHMPkf69cPwKHKRh7lSkbUR1jmeMvV5UMYW0e3C ZU5AFC1h9TfttMBEAv+UDtqUK4KD0+ioo6O3216PuCQM4I7qvVAlPRRejBCCv86n cbtlssFo+EjGR4Xt5mKWnPKrIkTmigMIpZBqvetTHnZxgFhr+ShlN7zupjyNf9B2 f70vBBRoW6vqH5fgMirPfdu2xZBvHdMnfBtiueTwF9u79Ugo5Sh5gJwYyY69PPzp 4XI/0I6Pvy8X/baUyaYHQiZvICl4ZR3z6D52MR/CveNaMbkYYYHeV3ofJi3Ua9oS MDQzCdnhiwh6mewfpL3IxqQMLUtdv+c= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:31 2025 by rpki-client