$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/08c816d8-7401-3f72-a18e-ad21b4840346.roa File: 08c816d8-7401-3f72-a18e-ad21b4840346.roa (raw, json) Hash identifier: puhD0A0s6mX8XyL7zVTOPK+9HrkmdxYRNYGwP218laE= Subject key identifier: 1B:9A:8E:1C:56:B9:F0:BE:EA:C7:F4:D9:CD:E8:5E:51:E0:A3:2F:C7 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584BB5C26D6B5C1CB72364CA3420 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/08c816d8-7401-3f72-a18e-ad21b4840346.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 3561 IP address blocks: 204.189.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:6d:6b:5c:1c:b7:23:64:ca:34:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=5441ac03-cd91-41a7-a223-c3775622873a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c3:ce:0a:e5:c0:85:4f:99:e2:8d:30:75:5d: 1b:7b:44:1a:1e:61:70:84:49:a0:38:e0:a2:c5:be: 87:a7:4f:fc:6d:18:b0:11:91:b3:3b:58:9b:a3:fe: 80:07:e9:7d:bf:43:5b:65:68:06:88:12:57:30:a5: 6e:be:1b:82:44:2d:ad:ce:07:0b:c9:0a:25:6b:ff: a1:69:0b:3e:ab:87:e8:37:06:8a:4a:45:5b:7c:97: f3:cd:82:4b:0f:31:65:cf:ca:af:ff:a2:a0:e8:51: 4f:f1:28:4b:4c:3e:57:85:28:a7:10:87:07:a0:42: 03:58:b1:55:02:7b:f1:2c:90:d7:e4:88:5a:20:3d: 79:39:e5:14:df:51:2d:73:36:c9:ca:60:28:c1:2b: 34:6b:5e:36:3d:87:c0:1c:0c:b4:3a:27:2a:6e:af: 58:c9:b9:84:92:da:fb:36:d2:9a:fa:ee:40:b4:27: fd:c3:9d:72:d2:0f:7d:ce:61:4f:db:c4:61:f9:09: 87:b1:41:5d:43:d4:a6:b8:2e:cb:01:80:04:15:6e: 03:a7:f3:9b:cc:d3:d3:58:cd:a5:bb:ce:70:32:d9: 02:20:79:ff:bc:b9:90:d3:64:75:47:90:0f:57:fd: 17:32:2f:6e:28:c3:47:b2:55:bd:35:30:43:72:1c: b4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9A:8E:1C:56:B9:F0:BE:EA:C7:F4:D9:CD:E8:5E:51:E0:A3:2F:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/08c816d8-7401-3f72-a18e-ad21b4840346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 204.189.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b8:d3:ab:bd:e6:a5:47:31:62:12:ba:88:96:3c:26:08:92: 02:e8:be:c1:68:0e:15:a6:7b:46:7e:ea:77:4a:86:5b:72:f1: 71:9e:85:b7:92:71:77:a0:43:87:cd:a9:1c:26:0b:a5:39:c4: 60:0d:27:30:75:e7:66:4f:c2:f7:b1:f0:c0:c1:1e:cb:1e:0c: 34:0f:42:86:68:c1:12:26:1e:c8:1a:e9:11:e0:46:8d:4d:cd: 1c:e3:09:41:2f:9c:4e:69:f0:62:e6:b5:5c:2e:07:6a:76:31: 01:c6:27:3c:c4:a3:b8:bc:6e:76:84:64:85:76:7a:6b:05:d9: cd:92:26:8b:fb:a2:bf:73:11:7d:2b:d5:6d:91:2c:7b:a0:8d: b4:10:b4:b8:d1:d0:7c:39:73:ad:42:dd:7f:9d:8f:c7:ca:1c: 10:77:14:ae:9a:0f:69:4f:51:58:a5:c2:5c:22:43:72:5d:f1: 8b:43:f5:23:01:11:8c:8f:69:20:f7:79:6a:df:61:ea:8a:24: 1e:93:2a:ad:22:db:44:ca:58:d2:a9:3e:0e:e9:64:ab:9d:73: 2b:cb:ae:f4:67:6c:7a:b6:36:2f:77:78:ca:ff:31:ba:75:c5: 9a:11:06:91:c2:08:65:68:aa:20:16:97:53:bb:03:ce:f3:4b: 5d:9e:18:d4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEu1wm1rXBy3I2TKNCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NTQ0MWFjMDMtY2Q5MS00MWE3LWEyMjMtYzM3NzU2MjI4NzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cPOCuXAhU+Z4o0wdV0be0QaHmFwhEmgOOCi xb6Hp0/8bRiwEZGzO1ibo/6AB+l9v0NbZWgGiBJXMKVuvhuCRC2tzgcLyQola/+h aQs+q4foNwaKSkVbfJfzzYJLDzFlz8qv/6Kg6FFP8ShLTD5XhSinEIcHoEIDWLFV AnvxLJDX5IhaID15OeUU31EtczbJymAowSs0a142PYfAHAy0Oicqbq9YybmEktr7 NtKa+u5AtCf9w51y0g99zmFP28Rh+QmHsUFdQ9SmuC7LAYAEFW4Dp/ObzNPTWM2l u85wMtkCIHn/vLmQ02R1R5APV/0XMi9uKMNHslW9NTBDchy0+QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBuajhxWufC+6sf02c3oXlHgoy/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMDhjODE2ZDgtNzQwMS0z ZjcyLWExOGUtYWQyMWI0ODQwMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzL0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKLjTq73mpUcxYhK6iJY8JgiSAui+wWgOFaZ7Rn7qd0qGW3LxcZ6Ft5Jx d6BDh82pHCYLpTnEYA0nMHXnZk/C97HwwMEeyx4MNA9ChmjBEiYeyBrpEeBGjU3N HOMJQS+cTmnwYua1XC4HanYxAcYnPMSjuLxudoRkhXZ6awXZzZImi/uiv3MRfSvV bZEse6CNtBC0uNHQfDlzrULdf52Px8ocEHcUrpoPaU9RWKXCXCJDcl3xi0P1IwER jI9pIPd5at9h6ookHpMqrSLbRMpY0qk+Dulkq51zK8uu9GdserY2L3d4yv8xunXF mhEGkcIIZWiqIBaXU7sDzvNLXZ4Y1A== -----END CERTIFICATE-----Generated at Tue Nov 4 21:46:32 2025 by rpki-client