$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/92e5b62f-7306-35cc-a333-59e6a733fe31.roa File: 92e5b62f-7306-35cc-a333-59e6a733fe31.roa (raw, json) Hash identifier: ybEH4NVUL1JzwgkT+Uwf0ld+iwVn/p/KGNPgX8boflE= Subject key identifier: 8B:80:2B:FA:18:CA:02:D6:8A:85:B9:07:F3:70:20:4C:80:73:E8:27 Certificate issuer: /CN=2b43351f-c719-4221-9a96-519406f8433c Certificate serial: 010D0C9F4328584BB2F7CFF36482F26D10C6AC00 Authority key identifier: 57:C3:3D:1F:5B:46:16:7B:99:5D:B5:BE:A8:09:1B:FB:CF:C2:6A:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/92e5b62f-7306-35cc-a333-59e6a733fe31.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 204.15.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/2b43351f-c719-4221-9a96-519406f8433c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/2b43351f-c719-4221-9a96-519406f8433c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:cf:f3:64:82:f2:6d:10:c6:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b43351f-c719-4221-9a96-519406f8433c Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=8e432790-c32b-47c6-8452-d3e27bcdad98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3f:d9:ba:d1:a4:8f:65:81:9e:14:cd:a0:84: 4a:0e:61:db:96:cc:c7:f7:0f:99:f2:9d:da:7b:72: a6:fe:43:c8:c2:86:53:a0:fe:64:1e:fc:53:db:1e: 39:fc:c3:28:31:3e:d8:57:5e:eb:7f:93:a0:72:33: 0a:60:eb:08:15:67:df:5f:1b:be:5d:04:22:5b:87: ec:8f:24:76:e2:98:84:85:28:89:49:50:79:11:df: 3d:cd:5f:e0:27:ff:fa:4d:b7:fe:6d:4f:d7:ae:f6: b7:da:92:c3:29:97:ff:6e:d6:a3:33:7d:51:fd:f5: aa:be:4a:8e:85:cf:ac:0a:f2:46:e5:17:24:7b:f4: e7:6a:18:9e:42:ed:4b:c1:fa:3f:fb:fd:20:fc:4f: 9c:a2:35:f6:7f:7e:7b:9c:a9:17:8a:29:69:4c:b0: 00:74:ac:58:e0:a7:47:2b:ec:e9:1d:04:ae:ee:c2: 06:b9:68:dd:eb:e2:82:d1:63:a8:79:20:f1:33:b1: fb:c6:7f:ac:72:17:2d:59:db:d2:28:bf:a9:17:33: aa:ce:61:cd:7c:10:e8:21:5d:26:76:db:75:95:8b: 5c:7c:b1:f2:1e:17:bc:5e:c9:3f:ea:05:ea:9e:db: fc:25:e6:20:72:a2:0f:3a:24:8d:6f:75:39:19:16: 8c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:80:2B:FA:18:CA:02:D6:8A:85:B9:07:F3:70:20:4C:80:73:E8:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/92e5b62f-7306-35cc-a333-59e6a733fe31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/2b43351f-c719-4221-9a96-519406f8433c.crl X509v3 Authority Key Identifier: keyid:57:C3:3D:1F:5B:46:16:7B:99:5D:B5:BE:A8:09:1B:FB:CF:C2:6A:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c.cer sbgp-ipAddrBlock: critical IPv4: 204.15.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:30:f1:04:37:a9:23:cd:db:ec:d6:be:f4:a5:5d:e6:4a:76: 71:11:f1:c2:19:e5:17:03:6d:c1:8a:cb:2c:94:18:22:83:01: fc:35:48:be:d9:56:f2:5b:35:ce:97:0d:fe:78:90:69:1f:de: 31:6a:9c:e1:88:6d:93:92:4b:9c:8a:ef:07:10:39:9e:47:d9: 32:c4:c3:e3:5d:15:24:5a:d4:80:62:42:2f:78:5e:63:f5:73: 5a:60:53:c3:8a:a8:a5:a4:5f:1a:ef:05:9c:ec:ca:09:1e:bc: 4e:01:46:c9:e3:6f:3e:60:33:19:99:52:d7:d4:c7:6f:3d:f7: 76:c7:14:9c:2f:dd:22:61:54:dd:e6:cf:5e:9a:40:bb:92:7b: 20:84:42:fd:60:cb:5a:40:e4:1d:53:77:02:cc:bd:a9:d2:73: ad:14:c5:73:8e:56:25:ee:66:4b:00:f2:51:f3:02:76:a6:fc: e1:ea:8f:9b:96:3e:d0:59:d4:ee:f0:34:d9:b8:3a:16:c6:14: 42:86:1a:1f:33:dc:b9:19:af:10:7e:6b:86:e1:fa:2b:cb:92: 0b:e5:68:1d:a2:62:46:f6:00:68:ef:7d:64:20:3f:a1:8c:00: eb:74:9f:cd:b6:c3:cd:4b:0d:53:4b:d1:a0:5e:04:6a:66:9f: 22:a0:36:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98/zZILybRDGrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI0MzM1MWYtYzcxOS00MjIxLTlhOTYtNTE5NDA2Zjg0 MzNjMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OGU0MzI3OTAtYzMyYi00N2M2LTg0NTItZDNlMjdiY2RhZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT/ZutGkj2WBnhTNoIRKDmHblszH9w+Z8p3a e3Km/kPIwoZToP5kHvxT2x45/MMoMT7YV17rf5OgcjMKYOsIFWffXxu+XQQiW4fs jyR24piEhSiJSVB5Ed89zV/gJ//6Tbf+bU/Xrva32pLDKZf/btajM31R/fWqvkqO hc+sCvJG5Rcke/TnahieQu1Lwfo/+/0g/E+cojX2f357nKkXiilpTLAAdKxY4KdH K+zpHQSu7sIGuWjd6+KC0WOoeSDxM7H7xn+schctWdvSKL+pFzOqzmHNfBDoIV0m dtt1lYtcfLHyHhe8Xsk/6gXqntv8JeYgcqIPOiSNb3U5GRaMCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuAK/oYygLWioW5B/NwIEyAc+gnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYjQz MzUxZi1jNzE5LTQyMjEtOWE5Ni01MTk0MDZmODQzM2MvOTJlNWI2MmYtNzMwNi0z NWNjLWEzMzMtNTllNmE3MzNmZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmI0MzM1MWYtYzcxOS00MjIxLTlh OTYtNTE5NDA2Zjg0MzNjLzJiNDMzNTFmLWM3MTktNDIyMS05YTk2LTUxOTQwNmY4 NDMzYy5jcmwwHwYDVR0jBBgwFoAUV8M9H1tGFnuZXbW+qAkb+8/CalkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yYjQzMzUxZi1jNzE5LTQyMjEtOWE5Ni01MTk0 MDZmODQzM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzA8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQw8QQ3qSPN2+zWvvSlXeZKdnER8cIZ5RcDbcGKyyyUGCKDAfw1SL7Z VvJbNc6XDf54kGkf3jFqnOGIbZOSS5yK7wcQOZ5H2TLEw+NdFSRa1IBiQi94XmP1 c1pgU8OKqKWkXxrvBZzsygkevE4BRsnjbz5gMxmZUtfUx28993bHFJwv3SJhVN3m z16aQLuSeyCEQv1gy1pA5B1TdwLMvanSc60UxXOOViXuZksA8lHzAnam/OHqj5uW PtBZ1O7wNNm4OhbGFEKGGh8z3LkZrxB+a4bh+ivLkgvlaB2iYkb2AGjvfWQgP6GM AOt0n822w81LDVNL0aBeBGpmnyKgNsE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:49:24 2025 by rpki-client