$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4d3eb862-5ab9-362b-bca6-66ffa1d5e67d.roa File: 4d3eb862-5ab9-362b-bca6-66ffa1d5e67d.roa (raw, json) Hash identifier: ieNvUqeaDaPscp2hBsNUIPq5x6S0SnZOO3HhOftJRj8= Subject key identifier: 35:8A:18:91:32:76:0B:AF:F4:B2:53:C2:B9:73:08:77:E7:7C:F6:15 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBE40407E0E0C14A165A31680 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4d3eb862-5ab9-362b-bca6-66ffa1d5e67d.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 40934 IP address blocks: 204.2.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:40:7e:0e:0c:14:a1:65:a3:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=90970eaa-60b9-4a12-a513-467e0477f66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:ee:30:68:36:b0:25:4f:0b:26:76:2b:85: f8:20:57:23:54:b7:df:33:06:48:d6:b5:6e:50:cf: e4:8e:8f:ef:be:e3:91:23:a3:2c:23:b9:41:ff:bd: af:16:b7:c5:b8:b0:2a:47:87:4c:ab:6c:f9:dc:92: a5:b2:1a:95:ab:b5:d7:3a:ac:ca:41:25:6e:a3:3b: 03:2d:2c:68:ca:f5:93:7c:a9:cc:cd:6c:38:fa:d7: fb:ec:ae:d8:32:c9:ec:aa:77:4f:94:9a:41:90:f7: 2a:f3:78:fb:3e:7e:0b:ee:c5:c0:79:27:1f:00:04: ea:fd:e0:6b:b6:42:19:4d:f4:ed:ae:62:3d:6f:b9: 47:0a:69:66:ad:70:0e:40:e9:b4:ff:d9:2f:c1:2e: 66:68:af:0a:52:ca:0e:60:e3:10:8c:96:e6:34:3c: 0e:f8:89:1e:48:e7:ef:58:8a:1a:36:29:ee:84:25: 05:cd:88:5a:87:bd:dd:17:b9:50:d8:cf:61:e9:d7: ab:68:2a:54:d8:21:29:62:13:23:d7:f1:60:f3:74: ff:a8:46:48:d7:99:03:8a:a4:83:f2:88:0c:ed:bc: 8f:3b:4e:37:58:9f:63:6f:dd:7f:db:1b:1e:9f:c7: ed:2d:f0:fd:dd:1a:91:85:b1:45:19:8c:86:6b:5d: bb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8A:18:91:32:76:0B:AF:F4:B2:53:C2:B9:73:08:77:E7:7C:F6:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4d3eb862-5ab9-362b-bca6-66ffa1d5e67d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:5b:64:16:ab:78:e0:ba:44:7c:5c:1f:14:02:0a:9b:00:18: 2b:42:41:9f:b3:b1:47:de:9b:e0:68:e0:46:9d:87:4f:b7:8e: b4:ca:85:92:21:81:f7:1b:36:dc:01:9d:78:f8:d2:94:51:2d: 78:9b:10:5e:9c:dd:fb:4b:3a:c7:fd:05:1f:c2:bd:41:5c:cb: ce:5c:54:8c:57:17:56:c9:b9:ab:20:ea:79:db:62:16:06:71: 7d:65:df:cd:9c:00:22:81:08:8b:b2:52:60:cf:42:a9:61:0c: a4:d2:d2:89:b9:e1:46:a2:2d:60:e9:d2:ab:b0:95:a4:db:73: 98:c1:8a:55:34:ad:99:6f:9e:1a:68:a0:e3:1f:6e:15:eb:5b: 58:c1:2f:16:06:ca:b5:f5:88:6f:97:18:a1:12:5a:e3:d4:95: a6:c8:02:b8:36:e2:1d:1b:f9:61:5d:23:8a:d1:2e:f6:d7:c1: b2:8e:97:3a:26:80:a1:7c:67:15:49:ac:89:ad:7a:e4:66:0c: 25:a0:3d:13:bc:8a:fd:8a:a1:c5:e5:c0:f0:25:1e:1c:a7:93: 92:7c:4e:16:65:95:ec:a9:79:dd:4b:a6:5b:53:eb:aa:c9:15: 98:c4:c0:19:76:57:cc:ee:f6:7a:52:4a:a1:ae:1e:ae:ec:b7: 30:1b:8d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEB+DgwUoWWjFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OTA5NzBlYWEtNjBiOS00YTEyLWE1MTMtNDY3ZTA0NzdmNjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi3uMGg2sCVPCyZ2K4X4IFcjVLffMwZI1rVu UM/kjo/vvuORI6MsI7lB/72vFrfFuLAqR4dMq2z53JKlshqVq7XXOqzKQSVuozsD LSxoyvWTfKnMzWw4+tf77K7YMsnsqndPlJpBkPcq83j7Pn4L7sXAeScfAATq/eBr tkIZTfTtrmI9b7lHCmlmrXAOQOm0/9kvwS5maK8KUsoOYOMQjJbmNDwO+IkeSOfv WIoaNinuhCUFzYhah73dF7lQ2M9h6deraCpU2CEpYhMj1/Fg83T/qEZI15kDiqSD 8ogM7byPO043WJ9jb91/2xsen8ftLfD93RqRhbFFGYyGa127lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWKGJEydguv9LJTwrlzCHfnfPYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGQzZWI4NjItNWFiOS0z NjJiLWJjYTYtNjZmZmExZDVlNjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAITMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJbZBareOC6RHxcHxQCCpsAGCtCQZ+zsUfem+Bo4Eadh0+3jrTKhZIh gfcbNtwBnXj40pRRLXibEF6c3ftLOsf9BR/CvUFcy85cVIxXF1bJuasg6nnbYhYG cX1l382cACKBCIuyUmDPQqlhDKTS0om54UaiLWDp0quwlaTbc5jBilU0rZlvnhpo oOMfbhXrW1jBLxYGyrX1iG+XGKESWuPUlabIArg24h0b+WFdI4rRLvbXwbKOlzom gKF8ZxVJrImteuRmDCWgPRO8iv2KocXlwPAlHhynk5J8ThZlleyped1LpltT66rJ FZjEwBl2V8zu9npSSqGuHq7stzAbjVk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:12 2025 by rpki-client