$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/02d83ce4-4efc-3155-bb8f-a01746ad9bed.roa File: 02d83ce4-4efc-3155-bb8f-a01746ad9bed.roa (raw, json) Hash identifier: NtLlbArOR4LEkxyagTx0s3Gtt4AJm13HTyJ4xEOoto0= Subject key identifier: 2C:87:1C:BA:24:5E:2D:90:B0:C3:5E:41:AF:0E:83:7A:82:AF:9D:B8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D1DBFDC6E8D0962253200 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/02d83ce4-4efc-3155-bb8f-a01746ad9bed.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 3949 IP address blocks: 204.2.23.208/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:1d:bf:dc:6e:8d:09:62:25:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=bd8cf252-9e1c-42d8-ae2b-a5af6e8fb287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:25:03:83:34:d5:1e:9e:56:45:f1:80:f8: 7e:f6:1e:be:6c:5f:c2:7b:9f:9d:90:f0:58:05:65: 3b:df:d5:7c:74:13:aa:7d:ac:7e:92:6e:20:c7:8a: 2f:2a:ec:3f:98:7a:d6:59:79:38:04:a1:c1:d0:90: d2:ac:e9:a2:f1:03:a4:54:a1:57:02:fb:e4:e6:8e: ea:e6:d9:23:ec:0e:6f:cb:73:70:67:0c:9f:14:51: 22:ad:ea:03:e0:7b:70:ad:fa:6c:c5:0c:08:af:5c: 5c:d2:aa:93:c0:4c:59:88:3a:83:e1:5d:64:8d:cf: 7f:96:d5:c5:fd:fc:07:e5:0e:00:09:b9:6b:5d:20: 8f:e8:0b:95:03:da:3a:68:5c:d3:24:4a:13:ae:c2: f1:56:6b:f0:47:63:60:4e:70:3d:67:25:ec:f8:17: da:53:78:9a:ee:59:a4:c8:b3:0e:1e:11:8a:6b:51: 3a:64:3d:aa:60:76:30:1e:05:1f:b8:03:08:5a:b0: 84:58:36:89:5c:16:9c:33:d9:a0:f5:cf:20:f5:48: 15:89:4b:41:ae:ec:c3:fd:9c:5a:bb:08:2c:6b:1c: cf:9f:b3:de:88:df:4b:b6:96:65:d9:2c:4d:e5:e9: 4c:5f:33:38:d8:60:eb:2f:84:12:3f:9d:ce:ab:91: c1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:87:1C:BA:24:5E:2D:90:B0:C3:5E:41:AF:0E:83:7A:82:AF:9D:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/02d83ce4-4efc-3155-bb8f-a01746ad9bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.23.208/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:16:cf:28:78:7d:29:51:7e:f9:5a:19:b2:3c:52:e1:30:ad: 3e:86:56:08:57:25:1c:7a:9b:8d:0b:7e:27:38:7b:a6:d1:32: d7:cc:18:94:f0:02:8e:96:34:9f:01:79:d5:ee:f3:08:4b:22: 3c:e7:4e:7d:bc:c4:9a:3e:ea:3e:a8:a2:e7:8e:17:94:e1:c4: 17:a9:04:2f:bc:eb:65:83:0e:d1:8b:35:e2:5d:9c:44:e7:31: 19:39:ac:4d:b5:aa:15:f9:69:73:67:fe:f3:81:10:70:03:aa: c1:36:be:ac:a3:38:2c:16:bc:79:93:dc:c1:f6:b2:fa:e1:e2: a2:2b:3c:23:12:d5:fc:29:16:bc:eb:43:ce:1e:ee:14:1a:f8: b1:ce:f6:3a:78:de:8d:45:d3:f5:86:99:e1:5b:0b:71:4e:db: 2b:f7:14:c6:6b:a4:46:a4:e3:9d:0e:d0:90:21:63:8b:2e:74: d7:0c:de:9b:e9:d9:b6:68:4c:d9:d0:39:6a:4d:12:53:38:df: 68:7d:93:55:c2:20:6e:52:d9:7d:73:5a:d0:61:89:7e:f3:04: df:d4:d0:e1:97:ae:8a:88:50:2b:76:f9:42:d1:91:a8:38:94: 5c:a7:f0:32:49:5f:b5:34:63:8d:a6:a5:66:aa:4a:7e:df:1a: 21:67:f4:3f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu4jR2/3G6NCWIlMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YmQ4Y2YyNTItOWUxYy00MmQ4LWFlMmItYTVhZjZlOGZiMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/wlA4M01R6eVkXxgPh+9h6+bF/Ce5+dkPBY BWU739V8dBOqfax+km4gx4ovKuw/mHrWWXk4BKHB0JDSrOmi8QOkVKFXAvvk5o7q 5tkj7A5vy3NwZwyfFFEireoD4HtwrfpsxQwIr1xc0qqTwExZiDqD4V1kjc9/ltXF /fwH5Q4ACblrXSCP6AuVA9o6aFzTJEoTrsLxVmvwR2NgTnA9ZyXs+BfaU3ia7lmk yLMOHhGKa1E6ZD2qYHYwHgUfuAMIWrCEWDaJXBacM9mg9c8g9UgViUtBruzD/Zxa uwgsaxzPn7PeiN9LtpZl2SxN5elMXzM42GDrL4QSP53Oq5HB9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCyHHLokXi2QsMNeQa8Og3qCr524MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDJkODNjZTQtNGVmYy0z MTU1LWJiOGYtYTAxNzQ2YWQ5YmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAIX0DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsFs8oeH0pUX75WhmyPFLhMK0+hlYIVyUcepuNC34nOHum0TLXzBiU 8AKOljSfAXnV7vMISyI85059vMSaPuo+qKLnjheU4cQXqQQvvOtlgw7RizXiXZxE 5zEZOaxNtaoV+WlzZ/7zgRBwA6rBNr6sozgsFrx5k9zB9rL64eKiKzwjEtX8KRa8 60POHu4UGvixzvY6eN6NRdP1hpnhWwtxTtsr9xTGa6RGpOOdDtCQIWOLLnTXDN6b 6dm2aEzZ0DlqTRJTON9ofZNVwiBuUtl9c1rQYYl+8wTf1NDhl66KiFArdvlC0ZGo OJRcp/AySV+1NGONpqVmqkp+3xohZ/Q/ -----END CERTIFICATE-----Generated at Tue Nov 4 23:14:45 2025 by rpki-client