$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa File: 58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa (raw, json) Hash identifier: KSOb6vXlJcXZ7S8f5Tl+C07sZXfD0yzjnjnZNbC9Llo= Subject key identifier: BF:2D:77:35:EC:BE:22:25:DA:87:12:A0:51:74:25:B4:D0:42:B1:D0 Certificate issuer: /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Certificate serial: 010D0C9F4328584B4081AF3BBDCAC90603B09B00 Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 393981 IP address blocks: 204.239.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:af:3b:bd:ca:c9:06:03:b0:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=82a81c9e-c2e5-4e2c-a124-3abd024a9e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:6b:dd:d2:fc:51:f2:93:9e:d8:b9:c4:d4: e9:1a:87:f6:a7:cb:0a:2f:69:b2:1d:69:6f:ab:72: 86:db:27:bb:4a:d6:e2:56:1b:3c:04:dd:95:67:8e: 43:85:9b:be:cc:2c:27:5c:85:ac:9f:f6:10:64:53: b8:90:82:3f:b6:42:26:6e:e9:4b:7d:66:7c:89:40: 65:0e:1c:ff:6b:57:c0:c5:27:d8:47:ba:b4:f2:d7: 7a:8b:85:5b:39:02:e1:3f:e7:46:fe:e3:6e:5a:0d: ad:56:88:04:73:47:ef:8c:4f:f8:8a:76:4a:bb:8f: ef:0a:eb:d1:66:5c:49:6f:32:90:72:88:97:fc:d3: ac:8e:f6:28:41:ab:b8:ef:eb:d7:eb:37:d1:29:f9: 6e:f7:d3:df:b7:79:28:9c:2e:f7:0e:a1:ca:95:b0: f3:5e:74:4e:d2:36:bb:88:f4:94:48:6c:29:0c:b3: a2:9c:59:b5:58:18:d9:92:98:81:c7:45:59:56:51: 99:c4:e2:81:67:c2:d6:a6:85:16:af:6f:87:67:2b: 19:df:bb:5e:94:a6:76:dc:f3:2e:59:c2:c4:02:f7: d2:76:70:90:c4:3b:1f:6e:6b:f5:43:72:c4:be:c8: 1e:e0:86:86:0e:8d:77:91:ac:65:8b:ca:90:36:c6: a4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2D:77:35:EC:BE:22:25:DA:87:12:A0:51:74:25:B4:D0:42:B1:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl X509v3 Authority Key Identifier: keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer sbgp-ipAddrBlock: critical IPv4: 204.239.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:15:23:11:c9:48:52:bc:78:97:8d:f5:38:bc:b1:44:7b:c7: 06:19:de:eb:bb:48:1e:d5:11:b6:26:dc:98:b1:67:ee:10:55: 9c:26:f1:00:b2:23:84:96:99:81:b7:10:c7:dc:80:ae:f9:d4: c2:c5:6f:2e:9d:ef:0e:43:45:d2:2a:9f:ac:d2:19:c7:42:86: 7e:f4:a8:bd:5c:d0:35:67:52:25:43:cb:ea:73:c1:ac:a5:8a: e6:38:ec:be:b9:76:b9:25:5d:ab:80:ff:d3:e0:2c:1c:e6:0f: ef:69:f8:6a:b3:b5:08:ac:d1:34:19:5a:6e:61:87:f0:ed:c8: fb:d0:a6:31:d5:71:93:e5:4a:1b:ad:42:6a:94:9c:4a:62:66: f9:09:6e:6f:f2:3f:6e:6f:5e:d1:4e:29:63:8c:3f:32:5c:5e: 34:0a:23:75:c5:cc:f5:ed:5f:93:84:6e:45:37:2c:27:b7:56: d4:1c:4b:39:25:ca:ac:b6:08:63:08:5a:20:06:df:2a:05:de: 89:dc:6a:b3:d2:65:81:8e:4b:90:6a:8d:19:d2:73:a1:1f:bb: ec:e2:19:38:6a:00:13:38:2b:5f:dd:df:93:08:b8:9b:21:46: 79:30:a2:01:73:d1:1d:14:50:c1:74:6d:56:76:85:38:75:fd: da:2d:f4:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAga87vcrJBgOwmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQxMGFjNjctZDhmZi00ZTJlLTkyZTktOTliOGFhMjcx OGVmMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ODJhODFjOWUtYzJlNS00ZTJjLWExMjQtM2FiZDAyNGE5ZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3hr3dL8UfKTnti5xNTpGof2p8sKL2myHWlv q3KG2ye7StbiVhs8BN2VZ45DhZu+zCwnXIWsn/YQZFO4kII/tkImbulLfWZ8iUBl Dhz/a1fAxSfYR7q08td6i4VbOQLhP+dG/uNuWg2tVogEc0fvjE/4inZKu4/vCuvR ZlxJbzKQcoiX/NOsjvYoQau47+vX6zfRKflu99Pft3konC73DqHKlbDzXnRO0ja7 iPSUSGwpDLOinFm1WBjZkpiBx0VZVlGZxOKBZ8LWpoUWr2+HZysZ37telKZ23PMu WcLEAvfSdnCQxDsfbmv1Q3LEvsge4IaGDo13kaxli8qQNsakFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8tdzXsviIl2ocSoFF0JbTQQrHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZDEw YWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4YWEyNzE4ZWYvNThkODc0YTgtNjdiMi0z NTJjLWI4YWEtNmI2OTk5ZTdjYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGQxMGFjNjctZDhmZi00ZTJlLTky ZTktOTliOGFhMjcxOGVmLzRkMTBhYzY3LWQ4ZmYtNGUyZS05MmU5LTk5YjhhYTI3 MThlZi5jcmwwHwYDVR0jBBgwFoAUL4RfQ6yTgW/6VJUXKva2p0MINvkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZDEwYWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4 YWEyNzE4ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO9WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0VIxHJSFK8eJeN9Ti8sUR7xwYZ3uu7SB7VEbYm3JixZ+4QVZwm8QCy I4SWmYG3EMfcgK751MLFby6d7w5DRdIqn6zSGcdChn70qL1c0DVnUiVDy+pzwayl iuY47L65drklXauA/9PgLBzmD+9p+GqztQis0TQZWm5hh/DtyPvQpjHVcZPlShut QmqUnEpiZvkJbm/yP25vXtFOKWOMPzJcXjQKI3XFzPXtX5OEbkU3LCe3VtQcSzkl yqy2CGMIWiAG3yoF3oncarPSZYGOS5BqjRnSc6Efu+ziGThqABM4K1/d35MIuJsh RnkwogFz0R0UUMF0bVZ2hTh1/dot9Ho= -----END CERTIFICATE-----Generated at Tue Nov 4 23:54:36 2025 by rpki-client