$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4234588-1140-311f-b4ce-5a6285415779.roa File: d4234588-1140-311f-b4ce-5a6285415779.roa (raw, json) Hash identifier: YwbcHl5DkLnYAtnnnG3WLW4SNqbdQfxpNCIcV3+0Cqk= Subject key identifier: CA:24:D4:73:57:1C:5D:3C:83:97:DC:13:9E:57:E3:87:86:11:B4:19 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D55452C742D0BBE7D8270 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4234588-1140-311f-b4ce-5a6285415779.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 22691 IP address blocks: 204.141.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:55:45:2c:74:2d:0b:be:7d:82:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=bfedeb72-f863-40c1-870a-c6cd4c77cc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:a6:cb:d2:af:18:89:a4:46:38:6f:f2:a6: 65:4c:b4:6a:13:5d:9c:4a:cc:3a:ca:f4:84:3a:a7: 5a:c8:a9:c9:3d:1e:c8:6c:c4:80:c8:bd:65:88:00: 9b:e1:37:a5:a1:31:b6:1f:f7:33:e1:c2:0d:c3:fe: fa:5c:88:f9:fc:a0:cd:ec:0f:6c:d5:17:d6:dc:15: cd:04:10:59:ae:24:79:a4:62:5b:37:7f:ba:20:8f: d1:32:06:2a:28:3b:f9:57:d9:a3:21:b6:40:0d:84: e9:09:76:aa:ca:83:c5:ee:2c:45:ff:a8:67:16:eb: 5c:09:b8:ba:50:56:6c:db:f9:65:a1:46:cd:9d:2f: 1f:a2:4e:9b:01:0f:98:71:f4:3e:13:68:51:de:37: c9:0c:c0:6a:7e:9d:20:67:89:c7:f5:d7:c4:75:e4: f6:71:cf:56:af:bd:87:95:3f:50:c6:d5:4a:9e:81: 2c:03:96:c4:f9:6f:cb:05:b1:48:2a:0c:5b:dc:35: c3:4f:ae:8e:03:a0:03:15:ba:cf:71:b9:19:c3:b5: 90:65:f4:4a:eb:84:a8:3b:cc:59:7e:f0:c2:a7:f5: cb:f8:b4:f9:4b:f4:4d:6a:81:90:e1:a7:00:1e:3e: 2a:58:83:72:fd:24:28:05:20:b6:d2:7f:24:53:71: 65:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:24:D4:73:57:1C:5D:3C:83:97:DC:13:9E:57:E3:87:86:11:B4:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4234588-1140-311f-b4ce-5a6285415779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c9:6c:ff:88:2d:fa:10:bc:67:bb:aa:51:81:f4:04:08:54: 7d:97:b1:74:4b:fb:03:f7:29:07:92:96:75:d2:f7:d2:6a:3b: 15:70:90:c2:3d:10:df:78:77:4a:22:f1:0c:0a:89:a6:66:e3: 2e:84:c8:9b:7f:30:3b:42:7c:2f:30:b7:40:2d:f5:99:58:ea: 62:da:73:bc:b8:c4:59:77:4d:77:59:c7:38:f0:2f:32:81:c4: ed:4a:a9:9b:a0:b2:f5:5b:17:0c:55:20:70:32:7e:05:22:d3: 97:b9:d6:1d:e0:64:b0:2e:9d:2b:48:d6:64:0e:aa:ab:5f:4a: 75:1c:87:9a:3a:c9:f8:cd:2e:23:87:44:4c:d0:62:21:aa:76: ca:09:e8:ba:05:e0:6a:ae:c3:1e:84:ac:4e:a8:2e:1b:d4:28: df:b8:e9:1e:b4:11:a1:13:df:a0:18:bb:4b:4d:d2:93:2a:d4: 3e:71:f2:2f:9a:8b:f7:d2:0f:14:01:e5:25:19:a8:65:63:ee: 5f:ac:7b:7e:84:43:3b:89:8d:02:94:27:2f:22:e3:af:b0:73: 15:a4:9f:5f:9a:45:1b:81:b8:a7:f1:91:68:b2:ba:bb:39:81: 8c:dc:1a:3c:16:d8:3a:40:8f:67:88:20:a1:0e:29:c7:9f:29: cf:62:8d:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVVFLHQtC759gnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YmZlZGViNzItZjg2My00MGMxLTg3MGEtYzZjZDRjNzdjYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl+my9KvGImkRjhv8qZlTLRqE12cSsw6yvSE OqdayKnJPR7IbMSAyL1liACb4TeloTG2H/cz4cINw/76XIj5/KDN7A9s1RfW3BXN BBBZriR5pGJbN3+6II/RMgYqKDv5V9mjIbZADYTpCXaqyoPF7ixF/6hnFutcCbi6 UFZs2/lloUbNnS8fok6bAQ+YcfQ+E2hR3jfJDMBqfp0gZ4nH9dfEdeT2cc9Wr72H lT9QxtVKnoEsA5bE+W/LBbFIKgxb3DXDT66OA6ADFbrPcbkZw7WQZfRK64SoO8xZ fvDCp/XL+LT5S/RNaoGQ4acAHj4qWINy/SQoBSC20n8kU3FlvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMok1HNXHF08g5fcE55X44eGEbQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDQyMzQ1ODgtMTE0MC0z MTFmLWI0Y2UtNWE2Mjg1NDE1Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzI0jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDJbP+ILfoQvGe7qlGB9AQIVH2XsXRL+wP3KQeSlnXS99JqOxVwkMI9 EN94d0oi8QwKiaZm4y6EyJt/MDtCfC8wt0At9ZlY6mLac7y4xFl3TXdZxzjwLzKB xO1KqZugsvVbFwxVIHAyfgUi05e51h3gZLAunStI1mQOqqtfSnUch5o6yfjNLiOH REzQYiGqdsoJ6LoF4Gquwx6ErE6oLhvUKN+46R60EaET36AYu0tN0pMq1D5x8i+a i/fSDxQB5SUZqGVj7l+se36EQzuJjQKUJy8i46+wcxWkn1+aRRuBuKfxkWiyurs5 gYzcGjwW2DpAj2eIIKEOKcefKc9ijYw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:25 2025 by rpki-client