$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2d4512f9-c056-36bf-88f6-4bace83c24cf.roa File: 2d4512f9-c056-36bf-88f6-4bace83c24cf.roa (raw, json) Hash identifier: 7VjcESklRYmqmLeXh63+qacMmtX8UBAz49UaFhQKhW4= Subject key identifier: CB:30:74:DF:03:9A:7C:04:83:DA:15:7B:D4:FA:67:97:82:94:75:90 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBA10430AA9E5A2CAB23D6C80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2d4512f9-c056-36bf-88f6-4bace83c24cf.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 204.2.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:43:0a:a9:e5:a2:ca:b2:3d:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=8a6b1d6d-4c07-4fa1-a2a9-3944e3624759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:69:0b:3b:23:84:40:99:45:d6:4c:f8:08: 32:85:3f:07:66:5a:3f:c2:11:a0:39:86:ad:16:b7: e5:36:c6:9d:7e:89:4e:f3:1c:91:11:52:49:f0:ef: 73:e9:3f:6d:54:8b:08:33:33:38:b9:82:c6:b8:6d: c3:4d:55:5d:26:13:1e:f2:3c:ca:4a:a4:e2:88:f6: 29:8f:5d:3d:ac:20:51:7c:20:72:de:b1:33:6c:e9: 11:8b:a4:53:13:f5:e1:79:41:ca:8a:56:4b:1d:e3: 84:4d:e7:0e:ad:07:f9:46:17:88:80:b3:5c:b4:ea: 1e:47:ed:ad:88:bc:a3:4a:5f:4f:35:4e:d7:62:c7: 5a:08:2f:80:87:33:26:a7:de:47:7f:0c:d2:d3:65: 47:45:91:0c:11:d1:ef:1b:80:3f:63:63:05:2c:df: 32:da:09:d7:cd:0d:a8:59:50:93:1c:f0:be:89:5f: fb:94:f5:4c:8c:55:50:44:05:27:ae:b9:c9:b1:3c: 21:c7:e4:e8:7b:64:f5:a8:05:ec:05:95:aa:55:68: 45:0b:42:ea:88:5a:70:af:e8:28:8c:84:fc:77:0e: 11:e9:8c:04:e1:0e:bc:b2:6a:f0:e3:1a:7a:23:80: 45:39:21:60:76:34:73:a7:e1:7e:1d:b5:77:da:2c: 94:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:30:74:DF:03:9A:7C:04:83:DA:15:7B:D4:FA:67:97:82:94:75:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2d4512f9-c056-36bf-88f6-4bace83c24cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:bc:fa:f4:fd:c0:80:f8:2a:eb:38:e0:55:b7:77:68:9a:a0: 79:4f:c2:ab:70:09:10:41:e3:5d:ce:e4:11:0f:34:36:24:94: 91:6b:32:07:f6:7a:90:a8:95:96:f6:0d:4d:4a:f3:85:e6:79: 7a:e2:3e:ad:8d:21:c5:65:d9:2f:0d:f4:86:4d:51:f1:b9:a3: f9:19:ba:46:6c:d5:95:e6:ff:d0:30:ad:54:3e:de:fc:48:18: 8e:e1:1b:2f:a6:f2:e1:ad:e9:e6:c7:ce:d5:bd:f7:6e:5d:dd: f8:4e:be:90:c0:93:26:e4:b9:99:1f:68:f4:6d:c3:36:bd:57: 49:06:61:08:8d:93:a5:af:b1:82:f1:23:46:c6:e0:22:02:1f: d5:d2:3e:5e:60:16:e9:7f:80:73:60:da:27:62:0d:51:c3:8b: ca:74:3a:87:41:9a:34:93:42:b3:dc:f3:39:ee:69:56:30:97: 04:b3:6c:0c:0c:59:50:cf:fb:96:eb:f1:25:2c:05:59:32:5d: 12:ca:70:4c:f2:1e:92:a6:77:1a:16:ac:81:af:65:0a:61:8f: b8:b9:48:de:10:e7:b1:57:f8:65:66:e6:f4:8f:64:e5:36:01: 96:2c:1a:40:eb:84:c7:ae:bb:de:59:be:02:28:ce:f7:7c:2e: b1:bc:df:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEMKqeWiyrI9bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk OGE2YjFkNmQtNGMwNy00ZmExLWEyYTktMzk0NGUzNjI0NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqlpCzsjhECZRdZM+AgyhT8HZlo/whGgOYat FrflNsadfolO8xyREVJJ8O9z6T9tVIsIMzM4uYLGuG3DTVVdJhMe8jzKSqTiiPYp j109rCBRfCBy3rEzbOkRi6RTE/XheUHKilZLHeOETecOrQf5RheIgLNctOoeR+2t iLyjSl9PNU7XYsdaCC+AhzMmp95HfwzS02VHRZEMEdHvG4A/Y2MFLN8y2gnXzQ2o WVCTHPC+iV/7lPVMjFVQRAUnrrnJsTwhx+Toe2T1qAXsBZWqVWhFC0LqiFpwr+go jIT8dw4R6YwE4Q68smrw4xp6I4BFOSFgdjRzp+F+HbV32iyUgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMswdN8DmnwEg9oVe9T6Z5eClHWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmQ0NTEyZjktYzA1Ni0z NmJmLTg4ZjYtNGJhY2U4M2MyNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzALhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG28+vT9wID4Kus44FW3d2iaoHlPwqtwCRBB413O5BEPNDYklJFrMgf2 epColZb2DU1K84XmeXriPq2NIcVl2S8N9IZNUfG5o/kZukZs1ZXm/9AwrVQ+3vxI GI7hGy+m8uGt6ebHztW9925d3fhOvpDAkybkuZkfaPRtwza9V0kGYQiNk6WvsYLx I0bG4CICH9XSPl5gFul/gHNg2idiDVHDi8p0OodBmjSTQrPc8znuaVYwlwSzbAwM WVDP+5br8SUsBVkyXRLKcEzyHpKmdxoWrIGvZQphj7i5SN4Q57FX+GVm5vSPZOU2 AZYsGkDrhMeuu95ZvgIozvd8LrG83+Q= -----END CERTIFICATE-----Generated at Tue Nov 4 23:14:44 2025 by rpki-client