$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a2e7b5e2-d6c1-37e9-9f06-26c28e296110.roa File: a2e7b5e2-d6c1-37e9-9f06-26c28e296110.roa (raw, json) Hash identifier: naC8gdaj6w0gh2/mTmpqMMcjwguUfoyBMo/boMs36Mo= Subject key identifier: 19:64:DA:D8:93:1B:55:FD:F2:32:FB:14:F4:E2:40:6C:00:5B:89:82 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBE404026C4FBE1E4FEDB4E40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a2e7b5e2-d6c1-37e9-9f06-26c28e296110.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 204.2.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:40:26:c4:fb:e1:e4:fe:db:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=232143f6-dbbd-4f89-b9d1-c63a62911f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:e5:2b:40:3a:fb:4e:25:0c:33:ed:b7:61: b3:43:cd:b1:58:67:0e:6f:bd:09:03:ff:42:a8:d2: d8:88:98:6c:eb:b1:05:0a:a7:d4:72:e6:1f:43:3f: 91:df:e2:89:52:5c:32:40:73:41:f2:29:a8:66:e9: 47:1f:ac:9d:a9:96:40:14:0f:ca:5a:bc:90:b4:9a: a3:ce:55:df:40:78:43:af:ae:ca:80:57:01:4f:06: a3:61:4a:e2:b1:a1:cf:88:41:1b:4e:fe:a5:b0:85: 31:37:ba:c5:1f:ad:d3:32:38:d1:ef:bb:30:14:12: cb:87:5b:7c:19:55:92:80:0d:f8:96:62:23:87:f9: b4:4c:c7:ac:53:f7:f8:33:9c:3e:e4:0a:b9:d3:49: 36:e6:a4:ee:71:a6:cf:b9:c1:b6:c2:20:f6:01:41: 7c:2e:07:7d:6d:08:8e:ad:97:49:59:36:35:6d:5d: 58:03:d0:53:1e:23:b8:1d:08:0d:97:b7:f8:5d:4c: ad:f3:f3:a7:01:69:b6:6f:90:98:07:5a:b3:87:46: fa:ca:f6:df:cb:5d:94:1c:46:e1:77:bc:06:3e:63: 0a:f9:0b:ab:fd:4f:c5:b3:45:bc:a5:f1:d5:56:0a: b4:6d:b2:4d:70:ef:1b:66:e8:b4:cb:a8:68:44:72: a9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:64:DA:D8:93:1B:55:FD:F2:32:FB:14:F4:E2:40:6C:00:5B:89:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a2e7b5e2-d6c1-37e9-9f06-26c28e296110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:47:2d:6e:18:16:3b:bc:8f:c5:b5:e6:e4:fa:45:c8:de:b1: f6:fc:34:a3:6f:04:6b:ed:5e:98:79:81:bf:fa:c7:e8:9f:34: 80:aa:80:4d:8c:06:8e:ce:f9:f1:d5:71:ff:a4:ed:7d:a2:68: 58:59:05:1c:ae:21:9a:2d:1c:71:99:e9:dd:c8:62:64:9a:7d: b2:9c:97:a0:a2:a6:45:3d:b7:3f:8f:a8:7d:6a:aa:ba:83:da: b8:19:38:5f:b4:37:04:17:75:ca:36:29:83:9d:73:49:ae:e0: 53:91:e5:b1:36:b6:57:dc:33:6a:8c:9e:7b:71:16:4f:b3:cd: 4c:7d:92:98:a0:5f:42:90:cb:18:06:4a:75:2e:81:1d:c0:a9: 50:00:39:fd:4a:de:df:e1:26:2f:f8:39:b9:26:4e:76:05:8f: 5c:c2:cc:7d:18:a9:8a:92:b9:d3:dd:e6:68:a3:d6:97:12:a8: 46:37:b3:7d:4f:00:2e:c1:89:61:95:2e:4b:2f:fc:c6:8d:0a: 4a:81:b9:59:23:59:77:85:78:08:0d:b8:d0:2e:9e:4f:8e:77: 3a:6e:02:66:8c:2e:ee:1d:b8:0a:b4:bc:88:aa:db:10:f7:25: 76:62:cc:41:b1:29:93:bc:74:16:ff:c7:4c:e0:1d:46:ca:ac: b7:7b:e4:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEAmxPvh5P7bTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MjMyMTQzZjYtZGJiZC00Zjg5LWI5ZDEtYzYzYTYyOTExZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhDlK0A6+04lDDPtt2GzQ82xWGcOb70JA/9C qNLYiJhs67EFCqfUcuYfQz+R3+KJUlwyQHNB8imoZulHH6ydqZZAFA/KWryQtJqj zlXfQHhDr67KgFcBTwajYUrisaHPiEEbTv6lsIUxN7rFH63TMjjR77swFBLLh1t8 GVWSgA34lmIjh/m0TMesU/f4M5w+5Aq500k25qTucabPucG2wiD2AUF8Lgd9bQiO rZdJWTY1bV1YA9BTHiO4HQgNl7f4XUyt8/OnAWm2b5CYB1qzh0b6yvbfy12UHEbh d7wGPmMK+Qur/U/Fs0W8pfHVVgq0bbJNcO8bZui0y6hoRHKpcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlk2tiTG1X98jL7FPTiQGwAW4mCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTJlN2I1ZTItZDZjMS0z N2U5LTlmMDYtMjZjMjhlMjk2MTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFHLW4YFju8j8W15uT6Rcjesfb8NKNvBGvtXph5gb/6x+ifNICqgE2M Bo7O+fHVcf+k7X2iaFhZBRyuIZotHHGZ6d3IYmSafbKcl6CipkU9tz+PqH1qqrqD 2rgZOF+0NwQXdco2KYOdc0mu4FOR5bE2tlfcM2qMnntxFk+zzUx9kpigX0KQyxgG SnUugR3AqVAAOf1K3t/hJi/4ObkmTnYFj1zCzH0YqYqSudPd5mij1pcSqEY3s31P AC7BiWGVLksv/MaNCkqBuVkjWXeFeAgNuNAunk+OdzpuAmaMLu4duAq0vIiq2xD3 JXZizEGxKZO8dBb/x0zgHUbKrLd75Kc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:51 2025 by rpki-client