$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e231d0a-b1d6-3b7b-957c-430eafda0f9f.roa File: 2e231d0a-b1d6-3b7b-957c-430eafda0f9f.roa (raw, json) Hash identifier: HyUENYV3x+/TDKGGr+vLzxSJeDU4XfZFnNgvrdrN1Y4= Subject key identifier: C4:DA:52:D3:2E:5C:AC:BD:9E:FE:A2:75:87:D3:52:78:5B:0E:15:E3 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBE403E4A4BD6CCA34CD5B280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e231d0a-b1d6-3b7b-957c-430eafda0f9f.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 204.141.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:3e:4a:4b:d6:cc:a3:4c:d5:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=d9e417bf-f6fd-4cb6-8a95-68d88a3c0308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:23:1e:70:60:f9:37:ef:87:ac:24:ba:9b: 0c:5e:dd:eb:61:cd:de:7b:a1:74:ce:9f:63:3a:da: 0f:9d:f5:fc:43:ce:13:ad:6f:64:c4:0d:ed:95:7d: 4f:9f:d0:25:4c:ed:a0:a5:60:f5:6c:a3:eb:22:22: 30:39:72:be:5e:25:3a:d4:a0:ca:3e:ba:a8:4a:96: b5:f4:32:07:0e:6d:b6:1a:85:a0:59:53:03:43:41: ca:c8:71:79:b3:71:78:bf:f1:92:92:48:a9:16:bd: 73:60:69:07:02:7d:e5:a1:db:5f:bb:a6:0c:e5:a3: d5:83:50:14:33:25:02:30:7f:c5:18:22:17:54:09: 10:d6:c5:29:59:4c:38:96:4b:f8:2b:9d:3a:34:6e: 90:2c:27:4e:56:19:9d:df:3a:a2:3d:92:02:c3:b4: 5e:27:8c:3d:69:6f:c9:b2:44:81:35:cc:5c:be:6e: 49:e6:12:c0:6b:07:2a:49:ef:70:b0:d7:bd:f2:e9: 27:cb:e2:d3:9c:36:50:3c:89:02:80:41:56:10:2a: 14:01:2c:2f:45:37:df:f7:27:e7:27:ce:8f:b8:a8: 46:e9:8d:5b:ae:0a:07:37:21:a2:47:66:9d:3b:58: 75:f8:73:96:14:c7:ba:d4:6e:3d:f0:a6:d5:9b:ac: 5c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DA:52:D3:2E:5C:AC:BD:9E:FE:A2:75:87:D3:52:78:5B:0E:15:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e231d0a-b1d6-3b7b-957c-430eafda0f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ba:a5:f0:7c:b8:8b:f3:5b:22:c8:ac:ac:12:30:2b:4f:ba: d2:8f:90:a9:76:db:e6:f2:98:86:ee:31:8b:7b:8d:11:fc:cd: a4:2f:09:92:5f:31:bb:45:0c:87:9e:0c:0e:bf:8a:bb:63:a2: fb:79:a3:bb:32:86:6d:61:6b:ec:d6:58:09:bb:34:e5:b3:5b: bb:b6:1d:3e:c6:d5:73:8f:2d:d2:34:38:ee:79:08:e5:15:52: 26:c7:39:da:d0:81:86:e4:d9:5a:2b:a4:3f:de:08:62:23:5b: 91:ac:5c:97:e4:ce:42:86:cf:d7:f1:ae:30:c3:58:a8:bb:cb: ff:98:43:f6:f0:65:b5:0f:fe:0a:eb:c0:f7:0a:58:c1:a5:4b: 72:3c:94:0b:b9:cf:0a:b5:21:7e:09:53:c8:fb:2a:43:11:01: c6:56:53:b0:bc:3e:ff:4f:20:77:a6:18:a6:2a:02:38:35:6d: de:40:0b:1d:8d:ed:ec:e9:67:f3:c2:dc:26:26:39:a2:18:70: 5e:d1:0a:57:5d:f4:0c:cb:7c:eb:6d:31:bd:a2:93:57:91:16: 5f:2e:9c:ba:4c:8c:a3:6e:05:e0:ba:57:2d:4a:d0:8e:80:1f: 88:df:8b:45:47:75:be:13:dc:06:4d:58:59:ce:e4:06:f1:9a: 30:4b:88:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QD5KS9bMo0zVsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZDllNDE3YmYtZjZmZC00Y2I2LThhOTUtNjhkODhhM2MwMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTsjHnBg+Tfvh6wkupsMXt3rYc3ee6F0zp9j OtoPnfX8Q84TrW9kxA3tlX1Pn9AlTO2gpWD1bKPrIiIwOXK+XiU61KDKPrqoSpa1 9DIHDm22GoWgWVMDQ0HKyHF5s3F4v/GSkkipFr1zYGkHAn3lodtfu6YM5aPVg1AU MyUCMH/FGCIXVAkQ1sUpWUw4lkv4K506NG6QLCdOVhmd3zqiPZICw7ReJ4w9aW/J skSBNcxcvm5J5hLAawcqSe9wsNe98ukny+LTnDZQPIkCgEFWECoUASwvRTff9yfn J86PuKhG6Y1brgoHNyGiR2adO1h1+HOWFMe61G498KbVm6xc1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTaUtMuXKy9nv6idYfTUnhbDhXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmUyMzFkMGEtYjFkNi0z YjdiLTk1N2MtNDMwZWFmZGEwZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzI3vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+6pfB8uIvzWyLIrKwSMCtPutKPkKl22+bymIbuMYt7jRH8zaQvCZJf MbtFDIeeDA6/irtjovt5o7syhm1ha+zWWAm7NOWzW7u2HT7G1XOPLdI0OO55COUV UibHOdrQgYbk2VorpD/eCGIjW5GsXJfkzkKGz9fxrjDDWKi7y/+YQ/bwZbUP/grr wPcKWMGlS3I8lAu5zwq1IX4JU8j7KkMRAcZWU7C8Pv9PIHemGKYqAjg1bd5ACx2N 7ezpZ/PC3CYmOaIYcF7RCldd9AzLfOttMb2ik1eRFl8unLpMjKNuBeC6Vy1K0I6A H4jfi0VHdb4T3AZNWFnO5AbxmjBLiNc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:07 2025 by rpki-client