$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa File: 8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa (raw, json) Hash identifier: SzsW2l10LTZZYS+it1bki/N3cp/04jAqMQAZufV6ADA= Subject key identifier: C4:56:D7:CB:C6:1C:EA:91:A5:6B:DD:CC:98:48:5E:49:6B:23:35:CA Certificate issuer: /CN=0d51e326-4804-4f59-a629-20153f71b7fe Certificate serial: 010D0C9F4328584B0CDC07CF1B2AD171DDE13F40 Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 204.239.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:07:cf:1b:2a:d1:71:dd:e1:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=98e69e74-36c0-49bf-bee6-da1a892bd238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:13:2c:5a:5c:3b:4a:f5:81:fe:14:22:48:1b: 58:b7:74:e9:58:b9:64:12:44:94:c2:72:6e:49:2b: e4:59:cb:b9:db:22:e3:59:15:f3:49:e8:d3:a8:2f: c7:a7:e5:13:08:55:7c:07:f3:08:18:a2:c1:0e:2d: 31:a3:f1:99:66:15:06:2d:82:a6:be:4f:fd:ef:21: 4c:6a:1e:21:1f:81:48:8f:c8:c1:98:8e:87:7f:f6: 3d:26:ed:a6:8b:64:2b:b4:9f:3d:58:84:60:93:3f: 9e:69:f6:58:f6:8c:65:22:b1:f2:a0:92:74:6e:6a: 06:9b:d1:d9:a9:5d:df:68:42:e3:ef:6d:f1:e9:9f: 84:f7:e6:24:97:82:06:52:f3:9a:86:96:02:2c:b6: ee:43:b2:67:74:45:72:de:3e:6b:30:bc:15:8c:cf: 90:7d:2a:a6:48:96:95:60:5a:90:75:28:60:3f:bc: e9:c1:87:a9:b9:cc:92:10:a9:90:ce:02:fc:31:b5: ec:06:86:d3:9c:aa:fa:21:84:08:4d:e1:1d:64:d5: 7d:75:ed:ac:fb:d6:bb:9e:25:8e:3d:a0:df:3f:3d: 9c:c3:71:5e:ec:87:ac:78:27:a4:52:3d:39:a5:36: 38:e0:a2:62:c2:59:7c:67:ab:fd:89:7a:d4:1c:d8: a7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:56:D7:CB:C6:1C:EA:91:A5:6B:DD:CC:98:48:5E:49:6B:23:35:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl X509v3 Authority Key Identifier: keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer sbgp-ipAddrBlock: critical IPv4: 204.239.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:72:95:18:3e:10:16:04:d3:40:f2:c4:ec:61:8f:e0:1b:4b: d1:2b:56:4e:48:14:78:49:03:cb:db:fa:dd:db:fa:bb:ca:cd: 72:42:77:c2:16:b7:77:29:d3:f9:fa:90:92:49:3c:41:3b:01: 94:8d:84:5a:f0:a3:4a:b3:21:f8:15:3f:ed:b8:99:f4:38:72: 1b:fa:1a:c3:04:06:d8:7e:42:4c:cd:d1:9e:3c:e8:f3:3a:46: fd:4b:dc:36:81:7f:13:84:4b:3d:a5:6a:43:e8:81:95:c0:60: 27:3b:c8:84:e2:68:65:a0:15:6c:06:c8:e8:7b:bb:87:3d:c2: 5a:dc:84:a5:da:77:d7:9c:4d:78:0b:63:6b:15:0f:e7:76:c3: c1:86:04:5c:67:dd:72:cb:7e:b3:46:7b:c9:83:74:50:82:de: 38:36:1f:64:7d:48:a8:25:4a:91:a3:f7:64:e5:ca:ff:ec:79: 33:83:9a:16:ad:93:23:f6:52:b5:7c:15:de:53:a0:b9:f8:b1: 3f:ba:c2:b8:a9:ea:b3:c7:49:78:6b:86:e9:73:a9:38:19:9a: 08:09:e1:07:54:c2:33:e3:36:65:b8:dd:45:52:85:c7:47:96: f9:9f:15:7c:e8:99:5b:09:60:ee:da:34:b7:66:50:c4:1f:44: 0d:ab:d5:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AfPGyrRcd3hP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi N2ZlMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk OThlNjllNzQtMzZjMC00OWJmLWJlZTYtZGExYTg5MmJkMjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhMsWlw7SvWB/hQiSBtYt3TpWLlkEkSUwnJu SSvkWcu52yLjWRXzSejTqC/Hp+UTCFV8B/MIGKLBDi0xo/GZZhUGLYKmvk/97yFM ah4hH4FIj8jBmI6Hf/Y9Ju2mi2QrtJ89WIRgkz+eafZY9oxlIrHyoJJ0bmoGm9HZ qV3faELj723x6Z+E9+Ykl4IGUvOahpYCLLbuQ7JndEVy3j5rMLwVjM+QfSqmSJaV YFqQdShgP7zpwYepucySEKmQzgL8MbXsBobTnKr6IYQITeEdZNV9de2s+9a7niWO PaDfPz2cw3Fe7IeseCekUj05pTY44KJiwll8Z6v9iXrUHNinywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRW18vGHOqRpWvdzJhIXklrIzXKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvODgxNGM5YjUtODg0Ny0z ZDFhLWFhNTQtMGFiNzQyOWIyNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2 MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1 M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVylRg+EBYE00DyxOxhj+AbS9ErVk5IFHhJA8vb+t3b+rvKzXJCd8IW t3cp0/n6kJJJPEE7AZSNhFrwo0qzIfgVP+24mfQ4chv6GsMEBth+QkzN0Z486PM6 Rv1L3DaBfxOESz2lakPogZXAYCc7yITiaGWgFWwGyOh7u4c9wlrchKXad9ecTXgL Y2sVD+d2w8GGBFxn3XLLfrNGe8mDdFCC3jg2H2R9SKglSpGj92Tlyv/seTODmhat kyP2UrV8Fd5ToLn4sT+6wrip6rPHSXhrhulzqTgZmggJ4QdUwjPjNmW43UVShcdH lvmfFXzomVsJYO7aNLdmUMQfRA2r1dk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:21 2025 by rpki-client