$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/cfd5f556-bd1f-3211-96d0-beae3373e874.roa File: cfd5f556-bd1f-3211-96d0-beae3373e874.roa (raw, json) Hash identifier: I3UZ7YPPyKNG2BwLRwemOQvTJnx0BJ+DlM2WhvsjWzg= Subject key identifier: AB:33:A8:DB:47:A5:80:F4:E3:8E:8B:92:8E:B2:BD:3B:1E:01:FA:6A Certificate issuer: /CN=2e218182-d880-48fb-baed-8c63f1bc8249 Certificate serial: 010D0C9F4328584B987243951D2D3A423323E880 Authority key identifier: C6:85:47:30:B6:5C:97:13:CE:68:0F:0C:5D:C3:9A:80:41:D6:E7:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/cfd5f556-bd1f-3211-96d0-beae3373e874.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 22951 IP address blocks: 204.19.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/2e218182-d880-48fb-baed-8c63f1bc8249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/2e218182-d880-48fb-baed-8c63f1bc8249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:43:95:1d:2d:3a:42:33:23:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e218182-d880-48fb-baed-8c63f1bc8249 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=4f00ded1-b058-4056-888c-47de5e5fd67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:4f:12:f6:94:68:66:15:b7:c5:a4:41:d5: b0:b7:9d:81:81:0b:7a:55:e4:72:fa:52:90:30:e4: 40:8c:15:10:ef:68:cc:9e:b2:91:89:db:b7:60:fd: 9c:e2:fb:65:68:c9:f0:20:b1:b5:25:bb:2c:19:b9: 46:91:fd:43:57:8c:0e:00:64:b5:23:7f:7f:3e:92: 18:21:ab:be:a9:05:0c:38:65:44:e2:95:70:d0:a8: 77:cc:74:4d:7f:50:fc:49:a7:ba:d1:38:ec:32:bb: 2f:fb:ff:53:bc:f7:b1:24:8c:7b:ab:17:51:9a:5a: fc:1b:cf:c0:2d:3e:8b:9f:72:b8:9c:44:c7:d5:00: b7:4a:7a:8c:9d:38:9c:2d:c7:2d:3d:24:64:54:1a: 46:6d:6c:db:fd:d7:9e:af:cb:6d:c9:56:fe:47:1a: e9:8d:63:82:b0:cd:58:8f:11:52:59:0a:eb:74:5d: 91:3e:f3:69:fc:9c:d9:c3:f7:f3:78:66:e7:58:f8: da:52:5c:9b:04:a1:03:d5:fd:42:9f:43:cc:20:07: 62:93:61:63:20:9c:7f:be:9e:f6:2b:8a:45:82:ac: 6b:6f:38:ad:cd:9d:07:5b:7e:22:7f:bc:9e:b4:79: d0:bf:8e:41:8d:94:03:da:b1:46:93:1b:fd:f3:a5: 04:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:33:A8:DB:47:A5:80:F4:E3:8E:8B:92:8E:B2:BD:3B:1E:01:FA:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/cfd5f556-bd1f-3211-96d0-beae3373e874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/2e218182-d880-48fb-baed-8c63f1bc8249.crl X509v3 Authority Key Identifier: keyid:C6:85:47:30:B6:5C:97:13:CE:68:0F:0C:5D:C3:9A:80:41:D6:E7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249.cer sbgp-ipAddrBlock: critical IPv4: 204.19.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:11:75:ac:40:51:25:2e:64:d9:71:39:2d:d2:92:d1:41:dd: ee:22:f6:22:0f:8f:19:e1:ae:5a:83:c2:13:97:d8:37:af:b7: 74:3b:de:10:01:a5:bb:86:07:3a:b8:87:34:58:53:e7:72:c1: 28:75:ee:f3:b8:41:30:43:a1:d2:9f:d3:1f:9e:46:4e:05:e1: 63:49:e1:80:d4:33:3f:aa:6e:92:30:94:cf:c3:82:32:74:e3: 27:1c:2b:56:d2:00:0d:ae:1e:db:44:29:45:cf:ff:e1:11:24: 46:26:78:7d:4f:f4:4e:c5:52:d7:d0:7e:b5:09:56:aa:fd:5e: 88:35:36:34:bb:db:06:c4:c6:de:6a:ac:0d:ec:ee:fa:49:ef: 85:1c:84:fc:cf:89:f1:97:7f:fb:23:48:28:2b:2d:cb:80:e0: 38:8e:92:f7:19:bf:65:a4:fe:c2:48:e3:95:34:28:09:99:ed: 32:a1:c0:ac:bf:0f:9c:82:a6:bb:19:b4:e5:4a:f4:dc:c7:d4: 00:a6:1a:53:e6:0b:1e:74:8a:a6:dc:5f:ee:fd:ca:86:e6:9f: 2f:2e:2f:ab:7e:f5:25:50:d0:e7:7d:3e:1d:12:3a:c4:38:9c: 48:8b:d5:6a:36:fc:79:80:e3:59:a1:ee:b9:39:7f:e2:0a:16: a0:d0:48:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckOVHS06QjMj6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUyMTgxODItZDg4MC00OGZiLWJhZWQtOGM2M2YxYmM4 MjQ5MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NGYwMGRlZDEtYjA1OC00MDU2LTg4OGMtNDdkZTVlNWZkNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0tPEvaUaGYVt8WkQdWwt52BgQt6VeRy+lKQ MORAjBUQ72jMnrKRidu3YP2c4vtlaMnwILG1JbssGblGkf1DV4wOAGS1I39/PpIY Iau+qQUMOGVE4pVw0Kh3zHRNf1D8Sae60TjsMrsv+/9TvPexJIx7qxdRmlr8G8/A LT6Ln3K4nETH1QC3SnqMnTicLcctPSRkVBpGbWzb/deer8ttyVb+RxrpjWOCsM1Y jxFSWQrrdF2RPvNp/JzZw/fzeGbnWPjaUlybBKED1f1Cn0PMIAdik2FjIJx/vp72 K4pFgqxrbzitzZ0HW34if7yetHnQv45BjZQD2rFGkxv986UEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKszqNtHpYD0446Lko6yvTseAfpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZTIx ODE4Mi1kODgwLTQ4ZmItYmFlZC04YzYzZjFiYzgyNDkvY2ZkNWY1NTYtYmQxZi0z MjExLTk2ZDAtYmVhZTMzNzNlODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmUyMTgxODItZDg4MC00OGZiLWJh ZWQtOGM2M2YxYmM4MjQ5LzJlMjE4MTgyLWQ4ODAtNDhmYi1iYWVkLThjNjNmMWJj ODI0OS5jcmwwHwYDVR0jBBgwFoAUxoVHMLZclxPOaA8MXcOagEHW5+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZTIxODE4Mi1kODgwLTQ4ZmItYmFlZC04YzYz ZjFiYzgyNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBPhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAARdaxAUSUuZNlxOS3SktFB3e4i9iIPjxnhrlqDwhOX2Devt3Q73hAB pbuGBzq4hzRYU+dywSh17vO4QTBDodKf0x+eRk4F4WNJ4YDUMz+qbpIwlM/DgjJ0 4yccK1bSAA2uHttEKUXP/+ERJEYmeH1P9E7FUtfQfrUJVqr9Xog1NjS72wbExt5q rA3s7vpJ74UchPzPifGXf/sjSCgrLcuA4DiOkvcZv2Wk/sJI45U0KAmZ7TKhwKy/ D5yCprsZtOVK9NzH1ACmGlPmCx50iqbcX+79yobmny8uL6t+9SVQ0Od9Ph0SOsQ4 nEiL1Wo2/HmA41mh7rk5f+IKFqDQSGA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:12:00 2025 by rpki-client