$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c175acf9-e976-3e92-8620-2f0f126d1450.roa File: c175acf9-e976-3e92-8620-2f0f126d1450.roa (raw, json) Hash identifier: 56yTwR0kyHO+Bv1pztDL3r8Zyi0TSsYbbbUefLSsHe0= Subject key identifier: B5:DE:79:37:6C:51:43:C8:5F:35:58:96:8D:15:AF:93:D7:1A:FC:0C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D1984B7CAF3A4524ADD40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c175acf9-e976-3e92-8620-2f0f126d1450.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 22691 IP address blocks: 204.141.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:19:84:b7:ca:f3:a4:52:4a:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=42e8d8bd-8945-490b-99b2-369cde2dba02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:b6:24:20:b8:fc:86:00:30:6c:db:80:e1: 5f:6b:83:21:03:19:dc:69:da:30:55:95:25:32:b4: eb:10:d6:ca:3b:a5:ba:e3:6a:2d:aa:16:e0:35:2a: ea:bb:03:06:9e:61:b5:c9:30:66:6a:05:6f:d2:9b: 94:53:f8:9f:b3:f9:c7:90:1a:3e:88:47:43:10:b7: f7:cc:ab:41:b6:71:e9:e0:f8:3a:a8:42:b7:33:a4: 9e:e6:56:b6:a0:51:91:72:25:1a:77:ab:bc:b1:67: d1:53:c8:01:56:ef:ef:02:98:93:4d:45:22:9d:f1: c0:c0:ee:36:72:b1:2d:9e:0c:d7:ba:6e:5f:6d:b2: 57:53:13:ea:b6:c8:fb:d6:2c:1f:58:71:6d:27:27: 56:1b:b0:f1:7f:9b:b2:b2:01:64:8c:93:27:9d:d8: 25:46:a7:61:1e:95:24:dd:05:a2:f3:cc:0f:af:17: 5b:44:a1:8e:30:f1:69:ea:7b:9d:4c:e4:e2:9e:00: df:6a:f6:fe:91:0c:da:55:d4:74:c8:90:7f:83:c1: 74:45:a6:36:2a:0e:e4:ce:46:7a:92:1b:d7:8f:fa: bc:28:4f:16:0c:5c:8f:db:03:a0:db:e6:09:fa:99: 96:71:4d:8a:ac:1e:6e:9f:41:22:36:a3:7d:4a:81: 8c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DE:79:37:6C:51:43:C8:5F:35:58:96:8D:15:AF:93:D7:1A:FC:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c175acf9-e976-3e92-8620-2f0f126d1450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8d:ff:90:38:9e:11:3c:ad:a8:90:ae:70:10:22:43:93:0a: 7f:e3:05:9f:90:3c:81:b1:00:bd:e5:cc:f6:87:db:5d:70:2f: ea:5c:01:00:5b:95:98:f6:3b:9e:02:4b:05:50:e4:89:7e:a5: e4:a9:8b:c2:2c:bb:be:80:e7:cf:44:9b:ed:d8:90:dc:8a:a0: 10:6e:1b:7d:ac:0e:1f:f9:d7:7b:5e:6b:c3:e6:bd:7d:1b:fb: 91:16:6e:cf:fd:ed:2f:7b:12:59:c0:da:37:23:4b:e6:7a:2b: c7:c3:ed:8c:4f:4c:a0:6e:19:dc:6d:bf:9c:07:ac:6d:68:d4: 00:9b:7b:b4:7f:b1:c9:df:37:7d:53:44:90:8b:5b:28:58:54: f6:7d:f4:bb:fe:b6:37:50:be:37:4b:56:c6:44:42:a1:73:49: 67:b0:46:5a:2a:d5:bf:49:fa:df:4f:c9:51:95:dd:5b:ae:ad: ee:3c:d7:24:76:af:fe:57:5c:96:8b:8f:c3:22:bc:ef:28:0c: 51:7b:a5:79:1b:ec:67:ee:ae:2d:56:cb:b1:f8:5c:09:7b:4c: fe:a1:28:8e:60:bc:aa:0d:fb:2f:84:d3:1f:70:d7:99:dc:eb: 88:51:4b:27:2e:31:c8:dc:8f:9f:28:f2:7e:d1:82:46:54:2e: 6a:54:c1:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRmEt8rzpFJK3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDJlOGQ4YmQtODk0NS00OTBiLTk5YjItMzY5Y2RlMmRiYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpi2JCC4/IYAMGzbgOFfa4MhAxncadowVZUl MrTrENbKO6W642otqhbgNSrquwMGnmG1yTBmagVv0puUU/ifs/nHkBo+iEdDELf3 zKtBtnHp4Pg6qEK3M6Se5la2oFGRciUad6u8sWfRU8gBVu/vApiTTUUinfHAwO42 crEtngzXum5fbbJXUxPqtsj71iwfWHFtJydWG7Dxf5uysgFkjJMnndglRqdhHpUk 3QWi88wPrxdbRKGOMPFp6nudTOTingDfavb+kQzaVdR0yJB/g8F0RaY2Kg7kzkZ6 khvXj/q8KE8WDFyP2wOg2+YJ+pmWcU2KrB5un0EiNqN9SoGM2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXeeTdsUUPIXzVYlo0Vr5PXGvwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzE3NWFjZjktZTk3Ni0z ZTkyLTg2MjAtMmYwZjEyNmQxNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzI0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuN/5A4nhE8raiQrnAQIkOTCn/jBZ+QPIGxAL3lzPaH211wL+pcAQBb lZj2O54CSwVQ5Il+peSpi8Isu76A589Em+3YkNyKoBBuG32sDh/513tea8PmvX0b +5EWbs/97S97ElnA2jcjS+Z6K8fD7YxPTKBuGdxtv5wHrG1o1ACbe7R/scnfN31T RJCLWyhYVPZ99Lv+tjdQvjdLVsZEQqFzSWewRloq1b9J+t9PyVGV3Vuure481yR2 r/5XXJaLj8MivO8oDFF7pXkb7Gfuri1Wy7H4XAl7TP6hKI5gvKoN+y+E0x9w15nc 64hRSycuMcjcj58o8n7RgkZULmpUwYM= -----END CERTIFICATE-----Generated at Wed Nov 5 01:27:33 2025 by rpki-client