$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d2db51f-ecf1-37fb-a15a-a900fa4c2228.roa File: 5d2db51f-ecf1-37fb-a15a-a900fa4c2228.roa (raw, json) Hash identifier: /efmAM7QSlvRvdoK25hc+A7QAE7KlNHSfAP2kOW5kzs= Subject key identifier: D8:A3:D8:DD:2B:24:F2:11:E4:67:28:CE:44:6A:CD:1C:A2:1D:13:9F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B7F521544E9681764CC651580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d2db51f-ecf1-37fb-a15a-a900fa4c2228.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 205306 IP address blocks: 204.27.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:15:44:e9:68:17:64:cc:65:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=d3173cc0-8b49-40ce-8386-50f85cd58a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ff:a2:31:4b:48:45:02:a6:42:11:82:92:4b: 2a:51:e0:d0:84:c3:75:ff:d3:3d:ea:c0:fe:2a:5b: dd:28:a8:60:d9:c2:6a:0e:69:bc:27:aa:16:40:95: d7:b0:ba:9e:fa:72:03:b1:67:4d:73:be:92:1e:07: c5:f4:92:00:ea:26:6b:f6:53:41:62:80:9c:f9:97: c1:ca:2e:f2:9a:05:fe:da:7d:91:17:8c:66:e0:4d: ca:fa:fa:fb:61:ca:0d:9a:ac:a1:d0:d4:94:3b:cd: 2a:6a:97:ce:54:8b:75:d8:3a:e1:6d:62:1d:d8:de: 55:23:be:1f:93:27:de:4c:5b:91:ca:c3:d5:f5:f9: 43:0c:df:17:ed:0b:5d:f5:dc:af:53:3f:be:23:3b: e4:3d:56:15:ca:17:f3:67:cc:73:0b:cc:c1:bd:b5: 25:80:1e:78:b8:ed:af:0f:82:d6:d5:99:43:26:ec: 05:ac:d5:c4:89:a2:ad:ca:a7:8d:ab:fe:f5:ce:9d: a0:96:9d:fa:7a:79:74:3f:d6:0b:95:30:1b:ff:4b: 1f:36:ec:b3:1f:02:a5:3e:e1:21:48:f3:7d:f8:2c: f6:7e:9c:92:ad:86:89:2a:e8:9d:0e:08:73:67:e1: 9b:ae:9e:0b:92:cf:3d:5d:cb:20:e7:04:1e:b5:45: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A3:D8:DD:2B:24:F2:11:E4:67:28:CE:44:6A:CD:1C:A2:1D:13:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d2db51f-ecf1-37fb-a15a-a900fa4c2228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.27.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8b:ab:80:3c:c1:7c:6b:56:b1:ff:7a:c6:bf:d8:e0:e5:80: da:89:4d:3b:28:13:85:50:56:32:0a:83:ea:b6:1e:bd:00:df: be:db:bb:7c:c2:af:b2:62:c4:53:27:22:13:b1:f2:e6:12:21: f2:1d:73:21:d2:25:1a:67:98:b6:f9:03:68:a1:a7:ad:ae:f4: d4:89:2f:d2:4a:7c:75:91:0a:8e:d5:31:99:9c:c1:f3:5e:eb: 08:e3:22:ee:b9:5b:6e:9d:03:33:e7:28:b3:93:2e:1b:00:f0: 32:8e:eb:9e:aa:47:4e:ac:08:a7:62:e8:cd:2b:cf:20:d1:e7: af:52:57:f7:a0:e9:32:0e:c2:81:fe:db:40:3b:bb:46:b7:3a: 31:36:f6:a9:71:d9:a0:81:63:12:5f:0a:aa:64:30:0d:d4:fb: 64:c9:a9:02:01:fa:97:c2:ef:6a:c8:b0:ce:6b:50:76:b2:49: bc:00:e8:b4:e3:fb:88:08:ef:01:03:b6:ee:ac:88:38:4f:54: 56:26:7b:82:25:73:43:35:00:c8:50:92:e3:5f:73:54:29:0d: c1:5d:84:ff:e2:25:24:72:36:19:84:77:1b:82:2a:1a:04:38: e0:72:1c:17:4e:e9:e9:fe:fe:38:22:f3:5d:95:01:cc:0f:db: 28:1e:be:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhVE6WgXZMxlFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZDMxNzNjYzAtOGI0OS00MGNlLTgzODYtNTBmODVjZDU4YTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/+iMUtIRQKmQhGCkksqUeDQhMN1/9M96sD+ KlvdKKhg2cJqDmm8J6oWQJXXsLqe+nIDsWdNc76SHgfF9JIA6iZr9lNBYoCc+ZfB yi7ymgX+2n2RF4xm4E3K+vr7YcoNmqyh0NSUO80qapfOVIt12DrhbWId2N5VI74f kyfeTFuRysPV9flDDN8X7Qtd9dyvUz++IzvkPVYVyhfzZ8xzC8zBvbUlgB54uO2v D4LW1ZlDJuwFrNXEiaKtyqeNq/71zp2glp36enl0P9YLlTAb/0sfNuyzHwKlPuEh SPN9+Cz2fpySrYaJKuidDghzZ+Gbrp4Lks89Xcsg5wQetUWBNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNij2N0rJPIR5GcozkRqzRyiHROfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWQyZGI1MWYtZWNmMS0z N2ZiLWExNWEtYTkwMGZhNGMyMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBtFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWLq4A8wXxrVrH/esa/2ODlgNqJTTsoE4VQVjIKg+q2Hr0A377bu3zC r7JixFMnIhOx8uYSIfIdcyHSJRpnmLb5A2ihp62u9NSJL9JKfHWRCo7VMZmcwfNe 6wjjIu65W26dAzPnKLOTLhsA8DKO656qR06sCKdi6M0rzyDR569SV/eg6TIOwoH+ 20A7u0a3OjE29qlx2aCBYxJfCqpkMA3U+2TJqQIB+pfC72rIsM5rUHaySbwA6LTj +4gI7wEDtu6siDhPVFYme4Ilc0M1AMhQkuNfc1QpDcFdhP/iJSRyNhmEdxuCKhoE OOByHBdO6en+/jgi812VAcwP2ygevjA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:30 2025 by rpki-client