$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5317c311-b69c-3892-b288-522c8ee207cf.roa File: 5317c311-b69c-3892-b288-522c8ee207cf.roa (raw, json) Hash identifier: HUuw4291rf6zYeZ7xdiKBkm38JFh67GCCkImP7qSSu8= Subject key identifier: F1:65:33:14:CB:E7:30:68:8C:DC:6D:F0:3A:03:18:50:E6:80:06:9B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B6D2C903E37C4B6F2AB007B40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5317c311-b69c-3892-b288-522c8ee207cf.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 3949 IP address blocks: 204.2.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:90:3e:37:c4:b6:f2:ab:00:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=dc960794-274d-404b-912d-7b1554d4846a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:27:f9:e8:ec:43:65:c8:2a:a6:56:13:69:bd: 70:c4:40:a0:d0:e4:16:f2:52:6a:9b:cf:ab:05:2f: e0:7d:5f:e8:16:13:83:1d:70:08:ae:0e:a0:24:fc: 6e:6e:4a:da:18:5f:1b:92:ed:8f:18:bc:46:27:1d: e8:cf:ed:24:54:9b:a5:b3:6f:6b:77:bc:ea:8b:bf: 90:68:53:d9:5c:b4:ea:f4:68:19:e4:32:fa:e3:47: 22:6d:a1:dd:0c:e2:13:42:3c:bd:33:ab:18:6f:36: 66:86:62:e3:ce:8e:68:53:67:2a:89:55:7c:9e:e7: 31:b7:93:fd:0f:8b:d6:40:68:57:3f:a6:d8:63:38: 87:3e:7b:54:86:e4:07:6e:80:9f:c6:5e:88:72:02: 2b:97:4d:7c:7a:f3:8c:5e:1c:9b:9c:e2:2c:9b:0d: 65:29:9d:51:45:8a:55:d2:6a:97:50:f9:b4:ff:c1: 6c:38:21:35:fe:c5:d1:49:08:7a:88:a4:d6:ef:82: e1:50:b7:28:37:e6:cd:73:f4:ce:ef:f7:52:7a:80: 26:f0:5c:ff:0c:74:eb:e2:8b:e8:51:bc:de:c6:fe: 49:a5:a8:4f:fb:0f:26:29:cb:b3:fa:4b:ba:90:b1: 4b:94:1b:9c:6f:85:fe:47:ed:5d:20:57:ea:e4:a7: 2b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:65:33:14:CB:E7:30:68:8C:DC:6D:F0:3A:03:18:50:E6:80:06:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5317c311-b69c-3892-b288-522c8ee207cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3e:58:18:c4:b6:f6:ef:8c:5b:e0:a3:8f:85:14:87:32:49: e8:9d:43:83:22:cf:89:8e:6f:b7:11:63:22:72:a3:55:b3:b4: 16:22:9a:b7:05:6a:b4:1a:1c:ea:04:9e:5c:95:fb:f4:fa:b9: fb:95:f2:bb:d4:c6:25:b8:cd:f2:f1:3c:6b:5e:c5:7e:b5:bd: 1b:99:0a:41:2d:56:e7:19:d0:e8:ac:59:a8:ce:7b:5b:4d:80: 21:05:b2:45:e7:2d:ae:54:59:b3:da:33:cc:28:b7:36:7a:fb: ec:3a:a9:43:29:46:20:93:6f:5c:15:1a:b7:11:b4:5d:dd:51: 51:50:b7:57:76:ec:3a:b3:e2:7f:69:d4:f9:ec:24:cf:73:2e: 39:75:96:d4:d6:ea:a3:50:c5:4d:8e:d6:40:1b:63:44:20:91: f2:07:7b:6e:16:19:54:df:14:47:a6:75:d2:ba:57:32:b2:34: 52:81:97:7a:8e:d0:18:08:2b:22:f3:68:de:c1:65:89:41:44: 66:c1:12:39:c1:eb:17:2d:1a:1f:27:54:d5:9c:d0:de:7a:1f: db:04:7a:d3:7d:2c:90:b1:b7:37:46:37:9e:13:0d:9c:17:0a: 25:ff:43:08:9d:31:01:b2:ff:7a:f1:ba:0a:dd:7a:a9:84:59: ee:21:35:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJA+N8S28qsAe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZGM5NjA3OTQtMjc0ZC00MDRiLTkxMmQtN2IxNTU0ZDQ4NDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yf56OxDZcgqplYTab1wxECg0OQW8lJqm8+r BS/gfV/oFhODHXAIrg6gJPxubkraGF8bku2PGLxGJx3oz+0kVJuls29rd7zqi7+Q aFPZXLTq9GgZ5DL640cibaHdDOITQjy9M6sYbzZmhmLjzo5oU2cqiVV8nucxt5P9 D4vWQGhXP6bYYziHPntUhuQHboCfxl6IcgIrl018evOMXhybnOIsmw1lKZ1RRYpV 0mqXUPm0/8FsOCE1/sXRSQh6iKTW74LhULcoN+bNc/TO7/dSeoAm8Fz/DHTr4ovo Ubzexv5JpahP+w8mKcuz+ku6kLFLlBucb4X+R+1dIFfq5KcrmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFlMxTL5zBojNxt8DoDGFDmgAabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTMxN2MzMTEtYjY5Yy0z ODkyLWIyODgtNTIyYzhlZTIwN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAIdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0+WBjEtvbvjFvgo4+FFIcySeidQ4Miz4mOb7cRYyJyo1WztBYimrcF arQaHOoEnlyV+/T6ufuV8rvUxiW4zfLxPGtexX61vRuZCkEtVucZ0OisWajOe1tN gCEFskXnLa5UWbPaM8wotzZ6++w6qUMpRiCTb1wVGrcRtF3dUVFQt1d27Dqz4n9p 1PnsJM9zLjl1ltTW6qNQxU2O1kAbY0QgkfIHe24WGVTfFEemddK6VzKyNFKBl3qO 0BgIKyLzaN7BZYlBRGbBEjnB6xctGh8nVNWc0N56H9sEetN9LJCxtzdGN54TDZwX CiX/QwidMQGy/3rxugrdeqmEWe4hNd8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:53 2025 by rpki-client