$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1de1fb3f-1157-396f-898a-42e29591f7a1.roa File: 1de1fb3f-1157-396f-898a-42e29591f7a1.roa (raw, json) Hash identifier: O47Uc8u5uq64er09VQTpCYflsQBRSa3H6oC6WcLJL5Q= Subject key identifier: 98:61:2B:9A:3F:12:D3:F4:F6:E6:6B:86:24:09:D7:DD:7F:0E:47:23 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584B9B3CE5ABF2799FDF986D50C0 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1de1fb3f-1157-396f-898a-42e29591f7a1.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 2734 IP address blocks: 204.9.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e5:ab:f2:79:9f:df:98:6d:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=d060c0ff-951a-4d05-a593-badb26b1e20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:85:21:71:45:93:c5:81:7e:c9:39:7c:20: f3:b6:ba:94:66:39:c1:3f:76:7d:84:29:3b:ea:5c: 85:97:65:e0:93:44:e1:65:96:63:59:41:4f:b2:0f: 59:cb:8e:f0:d0:61:fb:1a:58:13:29:52:e2:a1:d8: a3:c1:ff:31:95:40:95:d4:d8:8f:3a:66:19:d9:31: 71:b9:f4:38:05:f7:20:d3:e4:01:8b:f8:43:41:32: b0:4b:b9:98:0d:60:48:60:32:9c:98:c2:a0:03:f5: 6c:f2:32:b8:1b:cd:41:51:30:ad:95:5e:c1:0b:a2: 58:6a:f1:1d:38:eb:fc:d6:76:3b:ca:3b:60:0f:8d: 45:29:d7:64:29:64:6c:2b:0a:ed:36:32:7a:e3:d3: 51:21:62:fc:3d:7e:0c:fa:fc:94:c6:47:b9:7b:5f: 3a:7f:5f:d3:d7:bb:e0:45:58:97:46:f7:7f:04:0f: 3e:03:e7:89:c2:78:29:4b:37:43:ba:63:b3:3d:d5: 3a:2b:f4:93:dd:fa:9e:57:99:fe:e8:1d:81:c6:d2: e6:61:47:6d:55:42:38:a6:a3:6c:77:a9:9b:5e:3d: c4:ef:e6:a2:9d:af:fe:cd:81:96:d1:a5:ad:4c:55: 9f:2e:8f:7c:a0:1b:56:1e:61:ee:29:91:b4:8f:82: fb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:61:2B:9A:3F:12:D3:F4:F6:E6:6B:86:24:09:D7:DD:7F:0E:47:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1de1fb3f-1157-396f-898a-42e29591f7a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 204.9.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:66:45:cb:7d:02:da:56:d0:5e:d2:e0:ef:f5:27:0f:63:94: fb:29:26:83:56:ac:48:56:35:ba:ca:f0:30:c6:2f:19:17:11: 27:8c:50:93:64:80:b4:10:88:4c:06:53:f3:21:02:d4:5c:ba: d2:85:38:47:66:25:3f:0a:d5:21:3e:f4:a7:75:ed:e3:af:be: 2b:7a:fd:bb:bf:3d:f1:b0:b4:6d:19:63:e5:ef:97:34:02:6d: 04:80:93:1b:48:45:7b:91:f3:3e:71:e9:7f:7f:63:df:1b:3a: 75:b9:f2:53:df:e1:c7:db:16:e9:82:2c:8d:c1:35:b1:e7:a6: e0:a8:1a:62:d0:da:3a:70:38:8c:44:07:5f:58:fd:a5:4f:9e: d1:f2:27:13:63:6e:ab:29:e2:f5:0d:28:c8:46:e1:80:19:1a: 7a:73:5c:21:32:a5:c4:83:6d:05:f7:47:b9:88:1f:2b:4e:a1: 6e:a3:0e:93:5b:95:a4:a2:d7:7a:6d:cf:82:17:df:08:27:eb: 49:47:65:e5:27:5a:10:63:1d:38:02:fe:fd:e6:c7:53:ba:f7: 4b:0d:c6:34:7b:f6:93:fb:0c:29:80:9d:e2:94:77:b1:de:56: 39:cb:fd:00:24:9e:33:ea:12:cc:9d:4f:61:ec:09:0b:cc:34: c0:e8:d4:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOWr8nmf35htUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZDA2MGMwZmYtOTUxYS00ZDA1LWE1OTMtYmFkYjI2YjFlMjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZWFIXFFk8WBfsk5fCDztrqUZjnBP3Z9hCk7 6lyFl2Xgk0ThZZZjWUFPsg9Zy47w0GH7GlgTKVLiodijwf8xlUCV1NiPOmYZ2TFx ufQ4Bfcg0+QBi/hDQTKwS7mYDWBIYDKcmMKgA/Vs8jK4G81BUTCtlV7BC6JYavEd OOv81nY7yjtgD41FKddkKWRsKwrtNjJ649NRIWL8PX4M+vyUxke5e186f1/T17vg RViXRvd/BA8+A+eJwngpSzdDumOzPdU6K/ST3fqeV5n+6B2BxtLmYUdtVUI4pqNs d6mbXj3E7+aina/+zYGW0aWtTFWfLo98oBtWHmHuKZG0j4L7CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhhK5o/EtP09uZrhiQJ191/DkcjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvMWRlMWZiM2YtMTE1Ny0z OTZmLTg5OGEtNDJlMjk1OTFmN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZmRct9AtpW0F7S4O/1Jw9jlPspJoNWrEhWNbrK8DDGLxkXESeMUJNk gLQQiEwGU/MhAtRcutKFOEdmJT8K1SE+9Kd17eOvvit6/bu/PfGwtG0ZY+XvlzQC bQSAkxtIRXuR8z5x6X9/Y98bOnW58lPf4cfbFumCLI3BNbHnpuCoGmLQ2jpwOIxE B19Y/aVPntHyJxNjbqsp4vUNKMhG4YAZGnpzXCEypcSDbQX3R7mIHytOoW6jDpNb laSi13ptz4IX3wgn60lHZeUnWhBjHTgC/v3mx1O690sNxjR79pP7DCmAneKUd7He VjnL/QAknjPqEsydT2HsCQvMNMDo1DU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:53:20 2025 by rpki-client