$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/6ec2c75b-1d0a-3ea3-9e6c-6033be4a03ca.roa File: 6ec2c75b-1d0a-3ea3-9e6c-6033be4a03ca.roa (raw, json) Hash identifier: 9leyBfEiais0cVIg6bn7fdODiT7aA/ZmBYQl9ppjVnw= Subject key identifier: 80:4C:88:4F:94:94:22:A6:76:3A:BC:B4:57:F1:A4:8A:68:DE:EA:52 Certificate issuer: /CN=0c2f5a4c-917e-4b90-8022-391847ae5699 Certificate serial: 010D0C9F4328584B477C9D5101C1385028711DAC Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/6ec2c75b-1d0a-3ea3-9e6c-6033be4a03ca.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 398741 IP address blocks: 204.235.240.0/24 maxlen: 24 204.235.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:9d:51:01:c1:38:50:28:71:1d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=15e86063-15dc-4fac-8ab2-dfd1e2e1cda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2d:50:9c:fb:71:19:d9:d5:d5:a1:70:f5:af: dd:99:9d:3b:37:21:10:e7:af:5c:07:89:92:af:2e: ba:47:96:1a:f4:c9:0d:54:aa:a1:c8:ef:55:ab:35: 8f:93:9a:5c:b2:4b:de:d8:b3:4a:88:23:34:a7:0e: 54:7e:64:53:76:dc:2d:b9:2e:49:00:f9:b5:93:9c: c5:e1:db:dc:4a:1a:26:92:40:8d:0b:1b:ef:e2:73: a4:94:0f:ac:9d:d3:9e:49:15:b1:3b:3f:09:03:8a: 35:6f:45:20:8b:89:f7:b7:1e:12:3a:7a:86:94:14: cb:ca:9b:4f:07:9f:9f:30:30:2f:a4:d6:db:41:f5: 47:35:fa:6f:22:72:48:5b:9d:6a:89:3a:07:5d:5a: 91:34:39:55:32:74:81:b1:66:e5:4d:1c:e3:69:7f: b3:dc:eb:5d:d9:9d:d2:55:dd:00:a1:41:e8:8d:3d: 0e:5b:61:e4:0b:86:d8:1d:80:13:66:31:05:b7:50: e0:c6:1c:3b:5b:ca:a7:7f:87:e0:c2:10:e1:90:ec: 17:48:cd:b3:38:43:53:5f:c4:a8:c1:4e:b0:51:8e: b5:51:7f:75:71:be:d5:78:18:dc:28:42:17:16:11: fb:c2:54:ce:8e:f1:5a:0d:b2:fc:2d:55:02:da:de: 5c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4C:88:4F:94:94:22:A6:76:3A:BC:B4:57:F1:A4:8A:68:DE:EA:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/6ec2c75b-1d0a-3ea3-9e6c-6033be4a03ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl X509v3 Authority Key Identifier: keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer sbgp-ipAddrBlock: critical IPv4: 204.235.240.0/24 204.235.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:62:0b:32:d7:6a:aa:47:c0:35:d9:af:d2:d1:19:77:55:41: 84:6e:0f:7b:0e:34:28:2d:d4:36:b8:ed:59:12:4f:da:22:03: d2:05:c9:6d:63:a5:c7:b6:29:84:15:f9:3a:b7:9e:68:4c:1c: 41:fb:d3:cd:4f:75:f9:ed:ad:a6:15:77:ed:e2:ca:85:13:e1: 50:f3:a0:ee:6a:23:1b:f5:56:bb:2b:3a:d7:d1:b7:7b:1f:b2: 05:0f:0c:f4:ec:d4:c2:3c:88:5a:42:23:82:9d:0f:ad:2b:30: 60:88:ad:71:13:0e:83:70:ff:dc:49:d0:66:ce:fa:50:7b:ab: 5f:32:1b:13:01:0c:3c:ff:1b:59:0a:a9:6b:82:68:9f:86:14: 36:ef:5b:69:a8:40:e7:1f:76:b6:bf:3f:06:29:68:41:52:27: ce:0e:d6:5d:90:1a:6f:19:0e:3b:3e:07:38:ce:67:1e:1c:27: 74:34:5f:0c:3d:d7:16:8f:a9:55:79:c3:1b:d5:7f:dd:6c:05: b4:ab:dd:c5:90:15:27:1b:73:1a:72:00:3a:9c:a0:e7:1c:25: c0:9e:a7:ba:9d:38:29:53:af:58:2f:0c:a7:37:ee:6f:e9:6e: b7:7a:28:3f:c4:14:c0:e7:fa:64:a8:66:7d:80:4d:07:2a:b2: 8e:a4:e7:5f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtHfJ1RAcE4UChxHawwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyZjVhNGMtOTE3ZS00YjkwLTgwMjItMzkxODQ3YWU1 Njk5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MTVlODYwNjMtMTVkYy00ZmFjLThhYjItZGZkMWUyZTFjZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy1QnPtxGdnV1aFw9a/dmZ07NyEQ569cB4mS ry66R5Ya9MkNVKqhyO9VqzWPk5pcskve2LNKiCM0pw5UfmRTdtwtuS5JAPm1k5zF 4dvcShomkkCNCxvv4nOklA+sndOeSRWxOz8JA4o1b0Ugi4n3tx4SOnqGlBTLyptP B5+fMDAvpNbbQfVHNfpvInJIW51qiToHXVqRNDlVMnSBsWblTRzjaX+z3Otd2Z3S Vd0AoUHojT0OW2HkC4bYHYATZjEFt1Dgxhw7W8qnf4fgwhDhkOwXSM2zOENTX8So wU6wUY61UX91cb7VeBjcKEIXFhH7wlTOjvFaDbL8LVUC2t5cZQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIBMiE+UlCKmdjq8tFfxpIpo3upSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYzJm NWE0Yy05MTdlLTRiOTAtODAyMi0zOTE4NDdhZTU2OTkvNmVjMmM3NWItMWQwYS0z ZWEzLTllNmMtNjAzM2JlNGEwM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGMyZjVhNGMtOTE3ZS00YjkwLTgw MjItMzkxODQ3YWU1Njk5LzBjMmY1YTRjLTkxN2UtNGI5MC04MDIyLTM5MTg0N2Fl NTY5OS5jcmwwHwYDVR0jBBgwFoAUKnfTBPDpKIyedYcM4/xf3RQLd6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wYzJmNWE0Yy05MTdlLTRiOTAtODAyMi0zOTE4 NDdhZTU2OTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzOvwAwQA zOvyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJ1iCzLXaqpHwDXZr9LRGXdVQYRuD3sONCgt1Da47VkST9oi A9IFyW1jpce2KYQV+Tq3nmhMHEH7081PdfntraYVd+3iyoUT4VDzoO5qIxv1Vrsr OtfRt3sfsgUPDPTs1MI8iFpCI4KdD60rMGCIrXETDoNw/9xJ0GbO+lB7q18yGxMB DDz/G1kKqWuCaJ+GFDbvW2moQOcfdra/PwYpaEFSJ84O1l2QGm8ZDjs+BzjOZx4c J3Q0Xww91xaPqVV5wxvVf91sBbSr3cWQFScbcxpyADqcoOccJcCep7qdOClTr1gv DKc37m/pbrd6KD/EFMDn+mSoZn2ATQcqso6k518= -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:34 2025 by rpki-client