$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/718e6891-fcf5-3db0-9e48-283b9dd7e755.roa File: 718e6891-fcf5-3db0-9e48-283b9dd7e755.roa (raw, json) Hash identifier: /ZfBohm3dPIxUNOrL5mDHBQbqcPYYQgQ9VtqetE7FDQ= Subject key identifier: 5A:C7:BD:14:0A:B0:0B:8E:96:AB:15:C0:25:74:D8:40:C0:5D:8F:F5 Certificate issuer: /CN=e6dcaaff-4250-4357-98e7-c0c322cd2ad4 Certificate serial: 010D0C9F4328584B540C69AE22F755B951224E80 Authority key identifier: A2:DC:FB:F7:3D:84:5F:DA:7C:C1:DF:FA:5D:4B:69:AE:FD:AD:3C:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/718e6891-fcf5-3db0-9e48-283b9dd7e755.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 204.154.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:69:ae:22:f7:55:b9:51:22:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6dcaaff-4250-4357-98e7-c0c322cd2ad4 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=cbf9e737-ea4c-4037-910c-2c2efeb1d10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:2d:2a:64:7e:db:ea:f4:2b:3e:70:d7:6a: 8b:c2:bf:7f:4c:af:af:e0:94:cc:61:4c:fa:bc:c6: ad:8d:00:46:eb:bd:49:0f:0d:65:04:51:64:f2:5c: 2f:87:81:f4:46:19:47:71:14:8d:ea:c6:d3:bd:c0: 92:20:96:53:71:6d:19:38:c1:23:c8:cf:ef:7e:39: cb:ac:01:00:f3:1f:89:51:1a:08:83:6d:c7:35:8a: 8f:cf:e8:ee:f1:49:9b:ed:86:7b:4c:f3:29:18:96: 47:c9:16:fb:f1:62:2f:22:0f:f8:01:e8:ce:98:14: 37:4b:21:6b:4d:c0:6d:88:83:ed:ec:d3:cb:1a:a1: 11:27:f9:3e:ad:4d:d0:de:75:25:6a:b9:14:dc:0d: bc:e3:50:3e:42:cc:23:ba:7a:35:48:03:2d:de:f4: 37:62:9b:f1:ef:5a:3b:06:15:a6:51:13:ff:f1:34: ea:9b:5f:da:9c:e6:b8:a9:19:0e:05:44:65:d0:67: 35:60:0d:0e:e4:a3:22:d0:a0:6e:b0:f5:87:61:cd: c4:4b:63:80:fc:bb:19:fd:5b:e5:e9:73:0f:73:7d: 07:39:6a:90:44:a6:7a:3b:c6:66:e3:a4:9a:ca:68: 98:ba:59:14:c2:c9:a8:6e:42:65:ea:69:2a:5c:d9: 9c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C7:BD:14:0A:B0:0B:8E:96:AB:15:C0:25:74:D8:40:C0:5D:8F:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/718e6891-fcf5-3db0-9e48-283b9dd7e755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.crl X509v3 Authority Key Identifier: keyid:A2:DC:FB:F7:3D:84:5F:DA:7C:C1:DF:FA:5D:4B:69:AE:FD:AD:3C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer sbgp-ipAddrBlock: critical IPv4: 204.154.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b5:ea:15:d9:72:4a:e7:da:34:ea:12:11:b9:2f:ca:e7:51: ab:64:44:f9:7f:d8:67:f4:c3:e8:14:90:d9:91:9c:a4:c7:eb: d6:13:cc:4f:a0:89:5b:55:43:d5:28:40:e1:fc:a8:b4:b4:08: 13:16:d4:e6:96:11:af:80:2e:62:2f:10:d3:95:dc:35:3d:96: 3e:ca:cf:2f:fd:77:38:28:4b:e3:be:0c:bd:c1:b0:9b:d3:9c: 3c:4f:b7:7f:0c:4a:a2:44:b1:51:a7:3e:bc:83:d2:52:0c:78: 5d:23:4c:2e:a4:61:a6:c5:34:2a:54:32:bc:68:64:d1:b2:6e: 32:15:64:cc:9f:3c:78:c1:bb:91:db:30:4d:b3:2d:5c:ad:2a: 5a:74:37:7a:8e:1a:68:f0:33:bf:2b:e2:b3:01:5d:93:5d:78: 12:38:ff:21:58:24:58:85:c1:38:19:3b:59:04:87:15:16:2a: 84:29:b3:d2:32:ff:22:16:06:dc:07:d2:3a:6d:49:53:bb:f0: e6:fa:5d:86:b0:af:20:72:ac:0c:88:fa:88:f8:d2:1b:be:31: a1:3b:db:22:7b:21:8a:ec:b9:d2:43:9f:83:4a:36:91:42:f2: 8c:39:6c:de:5f:ce:2b:69:33:f7:3b:8d:e9:34:61:f4:87:13: f1:13:06:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGmuIvdVuVEiToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZkY2FhZmYtNDI1MC00MzU3LTk4ZTctYzBjMzIyY2Qy YWQ0MB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2JmOWU3MzctZWE0Yy00MDM3LTkxMGMtMmMyZWZlYjFkMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszItKmR+2+r0Kz5w12qLwr9/TK+v4JTMYUz6 vMatjQBG671JDw1lBFFk8lwvh4H0RhlHcRSN6sbTvcCSIJZTcW0ZOMEjyM/vfjnL rAEA8x+JURoIg23HNYqPz+ju8Umb7YZ7TPMpGJZHyRb78WIvIg/4AejOmBQ3SyFr TcBtiIPt7NPLGqERJ/k+rU3Q3nUlarkU3A2841A+Qswjuno1SAMt3vQ3Ypvx71o7 BhWmURP/8TTqm1/anOa4qRkOBURl0Gc1YA0O5KMi0KBusPWHYc3ES2OA/LsZ/Vvl 6XMPc30HOWqQRKZ6O8Zm46SaymiYulkUwsmobkJl6mkqXNmchQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrHvRQKsAuOlqsVwCV02EDAXY/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNmRj YWFmZi00MjUwLTQzNTctOThlNy1jMGMzMjJjZDJhZDQvNzE4ZTY4OTEtZmNmNS0z ZGIwLTllNDgtMjgzYjlkZDdlNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTZkY2FhZmYtNDI1MC00MzU3LTk4 ZTctYzBjMzIyY2QyYWQ0L2U2ZGNhYWZmLTQyNTAtNDM1Ny05OGU3LWMwYzMyMmNk MmFkNC5jcmwwHwYDVR0jBBgwFoAUotz79z2EX9p8wd/6XUtprv2tPMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNmRjYWFmZi00MjUwLTQzNTctOThlNy1jMGMz MjJjZDJhZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJrnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+16hXZckrn2jTqEhG5L8rnUatkRPl/2Gf0w+gUkNmRnKTH69YTzE+g iVtVQ9UoQOH8qLS0CBMW1OaWEa+ALmIvENOV3DU9lj7Kzy/9dzgoS+O+DL3BsJvT nDxPt38MSqJEsVGnPryD0lIMeF0jTC6kYabFNCpUMrxoZNGybjIVZMyfPHjBu5Hb ME2zLVytKlp0N3qOGmjwM78r4rMBXZNdeBI4/yFYJFiFwTgZO1kEhxUWKoQps9Iy /yIWBtwH0jptSVO78Ob6XYawryByrAyI+oj40hu+MaE72yJ7IYrsudJDn4NKNpFC 8ow5bN5fzitpM/c7jek0YfSHE/ETBgc= -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:08 2025 by rpki-client