$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d741a37-bbe7-386f-a706-d1272b5e8e69.roa File: 8d741a37-bbe7-386f-a706-d1272b5e8e69.roa (raw, json) Hash identifier: BdlANHalmei93GFDLOTJjDz3NROKdPefJrqJjwmIr/I= Subject key identifier: D7:63:69:24:82:BC:6B:BA:87:89:25:29:3D:E6:61:CC:DB:42:1F:70 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBE403E256290B0AC21F21D40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d741a37-bbe7-386f-a706-d1272b5e8e69.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 204.2.132.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:3e:25:62:90:b0:ac:21:f2:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=f61afc4e-46ec-4291-8345-e3d58ddb44d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b2:e2:e6:2b:d1:1a:75:09:da:49:f1:b8:a9: 89:dc:1b:3b:2b:00:07:98:d9:d6:f2:66:dd:c7:2f: 19:37:09:ce:24:11:2a:78:c8:f6:60:b5:19:9d:9b: b8:ad:df:9d:a5:9b:00:c2:6e:bf:76:eb:99:15:53: 98:62:67:fe:17:11:6a:09:1f:cc:87:a7:51:43:0c: 21:8d:17:97:1a:0b:97:5f:4c:4e:cb:46:3c:e4:4f: 47:5e:3d:76:f2:82:00:17:fc:63:f2:80:c7:54:89: 57:6d:47:4b:48:94:2a:67:73:ce:bd:c1:44:cd:ca: ef:c8:7c:77:c5:71:be:01:c3:1c:26:be:bb:b9:3b: 72:d2:c9:41:fb:66:af:ef:95:12:4b:ca:03:e0:ad: 8f:8f:09:c6:a6:30:02:30:c9:8b:f1:4f:cf:83:61: d0:bf:25:04:c8:cd:b0:9e:51:84:47:9c:9c:20:4e: 38:97:d1:a3:92:58:86:39:02:b5:0b:54:34:ea:55: ee:c5:af:c1:d6:f1:f4:8d:08:aa:36:f1:0d:15:bf: 1e:f0:25:ba:59:9b:6e:f1:1c:d9:74:14:ff:03:65: 9a:41:73:4c:d8:11:b8:58:63:c1:67:0c:22:e7:60: af:c2:97:ac:37:19:f2:87:a8:50:46:12:af:74:2d: f2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:63:69:24:82:BC:6B:BA:87:89:25:29:3D:E6:61:CC:DB:42:1F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d741a37-bbe7-386f-a706-d1272b5e8e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.132.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:fa:be:6c:28:e0:b0:91:09:f2:2e:43:64:6a:a2:3b:7c:2d: 93:6c:28:c4:56:d8:7b:55:81:d0:9b:ae:44:fd:0a:b0:de:13: 68:bd:78:a4:7f:25:c6:76:58:ad:01:54:69:5a:c9:4a:45:32: 5f:97:cd:36:7c:2b:60:3f:5a:54:57:1c:60:a0:1a:0e:cd:8c: 48:d3:94:87:10:81:d6:a9:4c:df:ab:87:32:2a:12:1e:0c:1e: 35:f8:34:a0:94:08:8b:10:dc:ff:63:59:01:0a:3a:06:06:60: b3:37:c5:54:c6:e5:db:dd:72:3d:7f:77:84:bb:ad:66:6c:49: 3c:54:62:b1:bc:ba:bf:5d:47:94:1d:d2:a6:d9:7c:62:19:34: 37:ca:5a:8b:53:d6:5c:7f:4b:33:47:67:62:56:a8:ea:43:b7: ea:80:ff:b4:38:3d:03:b7:20:85:64:55:15:39:d4:14:52:58: 4b:99:a2:e9:f4:75:75:61:d9:6c:28:dc:7d:55:bf:b6:5d:cd: 09:b5:9b:6b:c3:53:b8:78:bf:65:97:fa:8c:15:40:1d:14:1c: 0e:7b:08:b2:df:a4:8b:32:a3:38:f3:6a:29:89:44:ae:32:48: 25:23:a4:b6:b9:b7:ba:d9:03:94:09:68:0c:a7:82:4b:f2:60: 1f:18:e1:b4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu+QD4lYpCwrCHyHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjYxYWZjNGUtNDZlYy00MjkxLTgzNDUtZTNkNThkZGI0NGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbLi5ivRGnUJ2knxuKmJ3Bs7KwAHmNnW8mbd xy8ZNwnOJBEqeMj2YLUZnZu4rd+dpZsAwm6/duuZFVOYYmf+FxFqCR/Mh6dRQwwh jReXGguXX0xOy0Y85E9HXj128oIAF/xj8oDHVIlXbUdLSJQqZ3POvcFEzcrvyHx3 xXG+AcMcJr67uTty0slB+2av75USS8oD4K2PjwnGpjACMMmL8U/Pg2HQvyUEyM2w nlGER5ycIE44l9GjkliGOQK1C1Q06lXuxa/B1vH0jQiqNvENFb8e8CW6WZtu8RzZ dBT/A2WaQXNM2BG4WGPBZwwi52CvwpesNxnyh6hQRhKvdC3yHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNdjaSSCvGu6h4klKT3mYczbQh9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGQ3NDFhMzctYmJlNy0z ODZmLWE3MDYtZDEyNzJiNWU4ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHzAKEgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAe+r5sKOCwkQnyLkNkaqI7fC2TbCjEVth7VYHQm65E/Qqw3hNovXik fyXGdlitAVRpWslKRTJfl802fCtgP1pUVxxgoBoOzYxI05SHEIHWqUzfq4cyKhIe DB41+DSglAiLENz/Y1kBCjoGBmCzN8VUxuXb3XI9f3eEu61mbEk8VGKxvLq/XUeU HdKm2XxiGTQ3ylqLU9Zcf0szR2diVqjqQ7fqgP+0OD0DtyCFZFUVOdQUUlhLmaLp 9HV1YdlsKNx9Vb+2Xc0JtZtrw1O4eL9ll/qMFUAdFBwOewiy36SLMqM482opiUSu MkglI6S2ube62QOUCWgMp4JL8mAfGOG0 -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:39 2025 by rpki-client