$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/33cbeda8-ef84-3e20-ad85-a5be7b117a8c.roa File: 33cbeda8-ef84-3e20-ad85-a5be7b117a8c.roa (raw, json) Hash identifier: b2hE54WeDu/INQ73I+94mwQfrZJeSyJ4GBC0jHC3tww= Subject key identifier: E0:59:62:2C:DF:3E:5A:B8:3B:15:41:D7:F1:9D:3F:D4:51:B3:40:9B Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B28C6EC893E3C52F73A3BD7C0 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/33cbeda8-ef84-3e20-ad85-a5be7b117a8c.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 174 IP address blocks: 204.95.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:ec:89:3e:3c:52:f7:3a:3b:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=410cb6fc-8ccd-455a-9407-288c671c36a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ea:90:af:22:d5:e0:07:ef:b0:46:fc:7c:3d: be:20:35:ab:7d:74:4e:03:b4:45:03:2e:e9:0a:5d: 2e:e3:cf:ef:06:7d:d7:31:74:14:10:6f:5b:f5:27: 72:0a:1e:37:da:0b:46:26:0b:ba:a9:ea:8a:05:76: fe:d1:a8:5b:74:79:4e:89:45:90:70:0c:9d:db:90: 6e:4d:29:d9:b9:48:7f:49:f6:8b:6e:8c:42:60:74: 11:e9:ed:82:9c:53:1c:39:4b:31:cf:4b:bd:51:f5: 88:1c:f2:56:3b:c6:a1:e1:fb:54:70:fc:09:6a:cd: 2a:c3:16:26:38:66:38:87:92:70:64:1e:9d:ca:3e: 7d:7c:04:70:8f:7c:a9:b4:73:02:6f:65:2f:db:d5: 52:e8:24:03:c1:a4:d5:dd:11:e2:3b:4a:75:33:00: b9:57:1f:5d:5d:06:e5:c9:64:dd:96:31:70:90:c1: cc:0a:cc:26:07:bf:98:8b:71:5f:21:ad:7a:9e:95: cf:96:3b:cb:22:cb:29:dc:f3:d0:52:c4:89:5c:fe: df:3e:b4:94:1c:51:38:29:28:19:44:0a:3f:3c:59: 43:7f:c9:6b:0b:13:e4:c6:e2:d6:a6:46:b5:c9:67: 8f:b1:2f:a1:82:c3:10:6a:14:9b:69:0a:c3:9e:d7: d6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:59:62:2C:DF:3E:5A:B8:3B:15:41:D7:F1:9D:3F:D4:51:B3:40:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/33cbeda8-ef84-3e20-ad85-a5be7b117a8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.95.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:b8:6d:cf:28:bf:4c:71:d4:e9:5a:c6:c1:44:d0:b6:6a:28: 8d:92:41:7f:b6:94:f7:ac:8d:30:f7:9d:5c:16:e9:e3:6b:43: c7:f8:3a:e4:87:41:10:60:9a:1a:f3:8b:3a:ab:72:8a:fc:de: 55:d8:6e:d6:ef:6e:ae:98:5f:1d:e0:6f:0a:18:75:9e:3b:fc: de:0d:49:a7:31:e9:28:be:e3:47:a8:28:8a:90:aa:34:74:5d: b1:7d:09:23:37:7d:5a:9d:14:6b:eb:17:e9:85:c2:e6:e4:00: 46:f4:79:54:bf:f1:5b:61:ba:46:89:40:4f:91:8a:f2:00:a8: d2:67:48:79:c7:01:61:87:40:9c:c6:06:86:35:c5:e0:4a:94: 9f:48:f1:c6:fd:12:c5:2a:df:1f:56:30:be:31:3e:cd:b3:30: b7:0a:35:cb:4b:2c:ab:18:d4:5a:1a:6c:aa:9e:6a:44:fd:3d: ca:78:20:58:d7:71:28:74:19:b7:dd:a3:82:27:a3:e3:fa:5b: 21:c1:f2:8a:dc:d1:3a:b0:31:1d:44:1e:8b:ce:f5:20:9e:07: 95:1f:3e:cf:a5:70:b2:b2:0b:16:f6:b0:d8:21:1d:ef:57:65: e0:d3:b4:a6:ae:8b:bd:09:32:c3:81:dc:de:fc:65:99:88:6b: f8:67:72:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuyJPjxS9zo718AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk NDEwY2I2ZmMtOGNjZC00NTVhLTk0MDctMjg4YzY3MWMzNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheqQryLV4AfvsEb8fD2+IDWrfXROA7RFAy7p Cl0u48/vBn3XMXQUEG9b9SdyCh432gtGJgu6qeqKBXb+0ahbdHlOiUWQcAyd25Bu TSnZuUh/SfaLboxCYHQR6e2CnFMcOUsxz0u9UfWIHPJWO8ah4ftUcPwJas0qwxYm OGY4h5JwZB6dyj59fARwj3yptHMCb2Uv29VS6CQDwaTV3RHiO0p1MwC5Vx9dXQbl yWTdljFwkMHMCswmB7+Yi3FfIa16npXPljvLIssp3PPQUsSJXP7fPrSUHFE4KSgZ RAo/PFlDf8lrCxPkxuLWpka1yWePsS+hgsMQahSbaQrDntfWKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBZYizfPlq4OxVB1/GdP9RRs0CbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMzNjYmVkYTgtZWY4NC0z ZTIwLWFkODUtYTViZTdiMTE3YThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzF8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALG4bc8ov0xx1OlaxsFE0LZqKI2SQX+2lPesjTD3nVwW6eNrQ8f4OuSH QRBgmhrzizqrcor83lXYbtbvbq6YXx3gbwoYdZ47/N4NSacx6Si+40eoKIqQqjR0 XbF9CSM3fVqdFGvrF+mFwubkAEb0eVS/8VthukaJQE+RivIAqNJnSHnHAWGHQJzG BoY1xeBKlJ9I8cb9EsUq3x9WML4xPs2zMLcKNctLLKsY1FoabKqeakT9Pcp4IFjX cSh0Gbfdo4Ino+P6WyHB8orc0TqwMR1EHovO9SCeB5UfPs+lcLKyCxb2sNghHe9X ZeDTtKaui70JMsOB3N78ZZmIa/hnclU= -----END CERTIFICATE-----Generated at Tue Nov 4 20:55:37 2025 by rpki-client