$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/058ee240-3f5e-3cad-9e8d-83f47bcc997f.roa File: 058ee240-3f5e-3cad-9e8d-83f47bcc997f.roa (raw, json) Hash identifier: N3hrKMQSRpw/BjShpwn6TCtvr0QiW66xJPI/aLk/g3o= Subject key identifier: 94:FF:B1:04:47:F4:42:1E:26:5B:FB:DD:68:A3:FA:C3:AF:57:FA:10 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBE4032325A2BE7319489C880 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/058ee240-3f5e-3cad-9e8d-83f47bcc997f.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 396071 IP address blocks: 204.141.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:32:32:5a:2b:e7:31:94:89:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=4c05b409-d2cd-45ca-ab18-aaf0acedf29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:d9:10:82:65:21:2b:ec:9d:7e:18:5e:24: 6a:44:4c:3e:4f:96:a3:75:af:46:dc:e5:84:9e:af: b2:37:e5:0c:0e:16:6d:34:08:07:54:64:c9:b4:29: a9:19:92:e0:6e:59:4a:c8:e9:7e:7a:07:9a:ef:e7: 6f:bf:1d:62:b5:da:1a:06:6b:07:71:5e:8a:86:76: cc:05:be:b4:0c:96:d7:8c:43:d4:56:33:3b:37:8e: 81:f4:48:c1:b5:39:e0:9d:24:52:0a:99:4b:32:73: 27:d0:ee:e2:2f:24:96:03:c6:31:f6:eb:a8:1d:e8: 00:1e:03:27:14:00:2c:a4:af:89:b9:7e:f5:e5:45: 0e:b6:8c:eb:14:15:8c:fb:40:3e:49:46:54:51:89: e3:74:aa:11:73:82:a5:d1:54:d2:f5:76:47:68:4d: 00:5b:7c:9d:21:89:08:d8:e6:77:a2:15:c6:30:c5: d0:04:f1:10:7d:30:08:26:c1:54:13:d4:b7:76:98: 09:05:b3:22:17:96:5f:49:bb:30:3f:1b:32:d3:42: 64:8a:96:88:71:8b:79:0f:a5:a6:72:d8:17:5b:39: 85:5f:42:69:d4:39:de:1b:b5:35:ec:72:fd:63:22: fc:c0:1a:ad:09:23:df:6b:42:2e:b2:4e:57:3d:25: ec:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FF:B1:04:47:F4:42:1E:26:5B:FB:DD:68:A3:FA:C3:AF:57:FA:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/058ee240-3f5e-3cad-9e8d-83f47bcc997f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:4f:56:9e:e5:0d:0d:c7:ad:fc:e7:50:89:a3:0b:6a:79:90: 54:38:5f:60:7c:12:c8:72:2a:64:df:bf:a2:0c:14:af:f5:48: 00:32:8e:a2:fd:7a:c2:a0:9f:6f:51:32:c3:ac:f1:de:6f:07: 9c:98:00:f4:31:e5:de:e5:47:02:a5:5d:8e:ac:f9:eb:2c:06: 27:95:e1:45:0e:0b:0f:b5:a5:b5:db:1f:2d:b2:bf:cd:41:51: 7f:0d:19:2c:aa:0d:c2:d0:57:4e:cb:ce:6a:98:b0:f2:0c:8c: 4c:86:16:f0:18:93:3d:08:43:a7:21:c5:a2:fc:14:25:39:eb: 78:44:50:52:7b:05:80:e6:dc:8c:09:0b:91:a6:76:b0:ef:80: d1:c7:89:cf:ab:9a:cb:81:a6:2b:be:59:fe:f2:02:e3:58:aa: 38:8d:32:ca:40:e0:8a:96:bf:05:b9:73:b9:81:5d:b4:86:39: ce:f4:ef:42:ac:f3:5f:c5:77:48:39:98:07:f1:5a:eb:57:cc: e6:4b:3f:a9:10:43:4a:84:8c:39:16:42:7d:05:17:0c:d9:dd: cb:af:7d:9c:21:b6:7c:46:bd:0f:1a:db:27:25:f0:7c:fb:93: 21:30:1e:8b:0c:df:6a:b5:7a:2b:41:40:cb:55:9f:a1:1a:03: a8:3f:1e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDIyWivnMZSJyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NGMwNWI0MDktZDJjZC00NWNhLWFiMTgtYWFmMGFjZWRmMjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMXZEIJlISvsnX4YXiRqREw+T5ajda9G3OWE nq+yN+UMDhZtNAgHVGTJtCmpGZLgbllKyOl+egea7+dvvx1itdoaBmsHcV6KhnbM Bb60DJbXjEPUVjM7N46B9EjBtTngnSRSCplLMnMn0O7iLySWA8Yx9uuoHegAHgMn FAAspK+JuX715UUOtozrFBWM+0A+SUZUUYnjdKoRc4Kl0VTS9XZHaE0AW3ydIYkI 2OZ3ohXGMMXQBPEQfTAIJsFUE9S3dpgJBbMiF5ZfSbswPxsy00JkipaIcYt5D6Wm ctgXWzmFX0Jp1DneG7U17HL9YyL8wBqtCSPfa0Iusk5XPSXsYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJT/sQRH9EIeJlv73Wij+sOvV/oQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDU4ZWUyNDAtM2Y1ZS0z Y2FkLTllOGQtODNmNDdiY2M5OTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzI3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBPVp7lDQ3HrfznUImjC2p5kFQ4X2B8EshyKmTfv6IMFK/1SAAyjqL9 esKgn29RMsOs8d5vB5yYAPQx5d7lRwKlXY6s+essBieV4UUOCw+1pbXbHy2yv81B UX8NGSyqDcLQV07LzmqYsPIMjEyGFvAYkz0IQ6chxaL8FCU563hEUFJ7BYDm3IwJ C5GmdrDvgNHHic+rmsuBpiu+Wf7yAuNYqjiNMspA4IqWvwW5c7mBXbSGOc7070Ks 81/Fd0g5mAfxWutXzOZLP6kQQ0qEjDkWQn0FFwzZ3cuvfZwhtnxGvQ8a2ycl8Hz7 kyEwHosM32q1eitBQMtVn6EaA6g/HmU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:03 2025 by rpki-client