$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffb3da79-e26f-3955-a998-a0f724c9166d.roa File: ffb3da79-e26f-3955-a998-a0f724c9166d.roa (raw, json) Hash identifier: mFWLvIEVe3H9KLCbyPKO3LBSl+gtOrqrdMJzblMLRD0= Subject key identifier: C8:02:51:43:0A:48:4A:8C:1B:8C:E6:AE:C3:00:C9:5B:47:53:79:A4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B52A7519933BF00435F582A60 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffb3da79-e26f-3955-a998-a0f724c9166d.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 35953 IP address blocks: 204.2.154.192/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:51:99:33:bf:00:43:5f:58:2a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=9f76f59f-7a59-4e63-a072-3782390239a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b4:70:e0:23:63:90:67:b2:31:73:63:d7:ea: e5:e2:c0:bc:37:c6:7a:22:14:02:16:96:a3:0e:df: 9d:9c:ee:df:65:f9:df:5a:4a:80:e2:a7:66:6f:b7: d3:ed:fb:b9:ac:20:90:21:0e:0f:9f:91:ab:cd:e5: 0c:64:24:d2:d4:36:b9:ce:68:b8:2b:b5:76:ad:b5: 1d:c3:f5:7f:64:04:c0:9b:d0:6c:98:15:3e:cc:24: 35:64:0f:51:5a:6f:65:69:0b:d4:ea:e1:36:48:11: 31:05:bf:80:3e:61:f3:0f:22:36:31:8d:fb:a9:46: 15:f2:72:f9:94:f2:34:b6:5c:5e:a0:0c:8d:0b:fb: cb:76:80:ee:14:f3:b2:8c:1c:b6:93:bb:75:f0:40: 24:ce:20:ce:50:2c:f1:79:c1:99:57:c2:36:53:20: 39:09:5a:eb:23:bd:fd:bf:38:d4:0c:30:8c:2e:71: cb:b2:f5:17:c2:d3:d7:6a:1c:ee:d4:8f:79:a9:7c: 6a:85:47:75:8d:3d:1f:f3:dd:49:3e:ad:cd:6d:8c: 6c:bc:be:bb:32:fb:4e:b0:39:0e:4b:7a:78:42:a4: 57:a7:4b:23:51:ac:e4:07:43:67:c4:09:a4:75:7c: da:57:9a:58:8d:7d:11:b4:4c:3f:6c:a0:49:4f:da: 45:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:02:51:43:0A:48:4A:8C:1B:8C:E6:AE:C3:00:C9:5B:47:53:79:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffb3da79-e26f-3955-a998-a0f724c9166d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.154.192/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:75:c7:92:5f:94:ff:e0:57:0a:54:22:5e:ec:bb:28:6a:8f: f0:1c:6c:dd:b2:cb:64:c2:34:ef:18:bb:25:e9:66:a6:bf:1b: ff:3c:8c:2d:cc:58:e2:5e:1b:30:2c:b9:c0:03:57:a6:bc:95: 0a:e5:15:3f:cb:ce:38:e8:6a:a0:fb:cd:09:67:2b:76:42:8f: d8:f3:e1:57:db:ac:fe:83:ec:8c:01:7e:bd:f1:bd:6f:de:6f: 08:c3:f1:3a:ee:ea:aa:c3:58:85:88:5f:27:d9:be:bb:20:a7: 55:87:93:9a:8b:a0:d0:16:7e:76:77:3e:4e:be:9a:ef:77:8b: bb:c7:1d:e2:a3:bd:6d:4e:f6:7a:46:07:ba:ed:18:e4:c5:a3: fb:02:39:c2:15:7e:ef:39:d9:f4:61:f1:f8:da:7b:15:32:fb: 43:3d:e6:68:b9:92:f5:91:bb:c2:a9:da:6e:b3:79:6a:df:7b: ad:b4:34:c2:78:e0:30:b0:b2:0d:c6:a1:c1:8a:6e:2b:a8:59: bd:3e:8d:77:c8:63:e9:a9:0c:6b:de:13:07:2c:0d:da:49:c5: fb:6e:2c:32:22:2e:d5:93:65:24:34:52:df:ba:a2:8e:e3:c7: a4:c7:21:1c:5c:a9:50:57:18:14:d7:ce:6c:fa:df:a6:12:58: aa:c1:6f:de -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtSp1GZM78AQ19YKmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk OWY3NmY1OWYtN2E1OS00ZTYzLWEwNzItMzc4MjM5MDIzOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbRw4CNjkGeyMXNj1+rl4sC8N8Z6IhQCFpaj Dt+dnO7fZfnfWkqA4qdmb7fT7fu5rCCQIQ4Pn5GrzeUMZCTS1Da5zmi4K7V2rbUd w/V/ZATAm9BsmBU+zCQ1ZA9RWm9laQvU6uE2SBExBb+APmHzDyI2MY37qUYV8nL5 lPI0tlxeoAyNC/vLdoDuFPOyjBy2k7t18EAkziDOUCzxecGZV8I2UyA5CVrrI739 vzjUDDCMLnHLsvUXwtPXahzu1I95qXxqhUd1jT0f891JPq3NbYxsvL67MvtOsDkO S3p4QqRXp0sjUazkB0NnxAmkdXzaV5pYjX0RtEw/bKBJT9pFHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMgCUUMKSEqMG4zmrsMAyVtHU3mkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmZiM2RhNzktZTI2Zi0z OTU1LWE5OTgtYTBmNzI0YzkxNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAKawDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC+dceSX5T/4FcKVCJe7Lsoao/wHGzdsstkwjTvGLsl6Wamvxv/PIwt zFjiXhswLLnAA1emvJUK5RU/y8446Gqg+80JZyt2Qo/Y8+FX26z+g+yMAX698b1v 3m8Iw/E67uqqw1iFiF8n2b67IKdVh5Oai6DQFn52dz5Ovprvd4u7xx3io71tTvZ6 Rge67RjkxaP7AjnCFX7vOdn0YfH42nsVMvtDPeZouZL1kbvCqdpus3lq33uttDTC eOAwsLINxqHBim4rqFm9Po13yGPpqQxr3hMHLA3aScX7biwyIi7Vk2UkNFLfuqKO 48ekxyEcXKlQVxgU185s+t+mEliqwW/e -----END CERTIFICATE-----Generated at Mon Oct 20 07:51:59 2025 by rpki-client