$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/fcfe012d-2849-39f0-a5b9-e421da6c1fec.roa File: fcfe012d-2849-39f0-a5b9-e421da6c1fec.roa (raw, json) Hash identifier: Q2jq3PJr3o2oF1C1liQxEpWptTxmkmCmbNs2kcxFbF0= Subject key identifier: CA:3E:5C:96:D8:20:2E:86:FE:17:64:3A:B1:F7:9A:E5:FF:7A:57:A5 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B84E76A391D6FC2D0F52BDA80 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/fcfe012d-2849-39f0-a5b9-e421da6c1fec.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 174 IP address blocks: 204.251.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6a:39:1d:6f:c2:d0:f5:2b:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=51c65f7f-a4db-48ac-9e70-f4d07c309556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:22:a0:8a:4d:ee:33:7b:cb:b2:30:09:17:45: 7c:dc:d2:f1:9d:b3:e5:60:42:bb:5e:a6:02:85:3d: 45:94:4c:47:b8:08:5c:89:99:61:b4:08:55:17:6f: b1:c7:e8:22:21:db:71:e2:a1:48:41:6f:9e:26:38: f9:72:ce:30:47:95:e4:b0:99:65:b7:b0:a4:73:cc: 81:a6:85:23:43:80:94:ba:c6:78:b9:4c:d0:74:aa: ad:b5:75:f5:50:4e:7d:19:36:7d:40:9d:76:38:be: 62:bc:05:2c:44:40:8b:25:8d:ba:c7:3f:6c:17:34: 46:83:02:47:e7:6a:71:47:de:94:0e:8f:02:65:5a: 58:a2:01:69:a6:d0:26:dc:2b:42:e3:2d:25:ea:60: b5:70:2c:8e:ed:e1:72:12:63:c0:6f:92:fa:08:f1: cc:25:e9:5b:80:32:6e:25:d1:37:62:d6:42:03:4d: 8c:28:91:97:72:f0:f4:75:06:c8:ba:50:e8:85:86: cb:9b:33:e2:19:b1:74:73:80:6e:72:56:28:ea:d5: 35:64:68:dd:29:fb:7d:e8:60:fc:a7:84:42:b6:a9: 49:bd:06:fe:73:9e:58:22:0e:36:15:29:78:0f:e9: 63:fb:a3:54:12:b4:22:60:60:44:5b:06:ab:fc:5b: 62:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3E:5C:96:D8:20:2E:86:FE:17:64:3A:B1:F7:9A:E5:FF:7A:57:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/fcfe012d-2849-39f0-a5b9-e421da6c1fec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.251.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:f1:82:c7:e9:22:a2:d5:cb:0b:3d:61:9b:2a:96:36:d4:14: 3c:53:d6:d7:9d:32:5c:a6:97:0f:96:c1:4c:65:c4:4a:c8:ab: c4:6e:f2:16:46:2b:b4:ac:a4:fb:94:61:4a:20:9a:e0:de:b3: 5c:81:a9:74:a5:f3:97:77:7c:c4:19:1c:40:27:c8:32:70:cf: 37:72:8b:42:1e:9a:57:89:41:69:62:a3:33:11:b4:92:da:1a: b4:a5:63:04:d8:08:ae:b9:98:fc:53:84:a6:9a:eb:3e:d6:6a: db:d1:a7:b2:37:71:46:9d:7a:09:7d:3e:a2:3b:ec:48:8a:4c: 77:3d:0c:c8:ed:bf:bf:a8:c4:21:09:24:da:14:0f:55:3f:39: c3:21:09:02:9b:1d:d3:4d:2b:e1:c3:b3:42:95:9d:bc:eb:28: f1:48:26:94:47:af:09:db:63:da:15:ba:7d:51:91:32:f9:e7: 68:f3:59:10:71:49:60:39:f9:9c:b7:06:e3:cc:37:0a:62:b8: 5f:fb:ae:49:42:84:65:85:27:d4:c4:da:a0:10:ba:e8:0d:20: 87:66:45:b5:8c:47:f0:44:bb:3f:72:bd:bd:b1:67:ec:e4:79: 92:58:30:79:cb:84:c2:a1:e5:73:dd:20:7c:70:c2:89:c4:28: c9:6c:ab:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52o5HW/C0PUr2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NTFjNjVmN2YtYTRkYi00OGFjLTllNzAtZjRkMDdjMzA5NTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyKgik3uM3vLsjAJF0V83NLxnbPlYEK7XqYC hT1FlExHuAhciZlhtAhVF2+xx+giIdtx4qFIQW+eJjj5cs4wR5XksJllt7Ckc8yB poUjQ4CUusZ4uUzQdKqttXX1UE59GTZ9QJ12OL5ivAUsRECLJY26xz9sFzRGgwJH 52pxR96UDo8CZVpYogFpptAm3CtC4y0l6mC1cCyO7eFyEmPAb5L6CPHMJelbgDJu JdE3YtZCA02MKJGXcvD0dQbIulDohYbLmzPiGbF0c4BuclYo6tU1ZGjdKft96GD8 p4RCtqlJvQb+c55YIg42FSl4D+lj+6NUErQiYGBEWwar/Fti5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo+XJbYIC6G/hdkOrH3muX/elelMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZmNmZTAxMmQtMjg0OS0z OWYwLWE1YjktZTQyMWRhNmMxZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzPvNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnxgsfpIqLVyws9YZsqljbUFDxT1tedMlymlw+WwUxlxErIq8Ru8hZG K7SspPuUYUogmuDes1yBqXSl85d3fMQZHEAnyDJwzzdyi0IemleJQWliozMRtJLa GrSlYwTYCK65mPxThKaa6z7WatvRp7I3cUadegl9PqI77EiKTHc9DMjtv7+oxCEJ JNoUD1U/OcMhCQKbHdNNK+HDs0KVnbzrKPFIJpRHrwnbY9oVun1RkTL552jzWRBx SWA5+Zy3BuPMNwpiuF/7rklChGWFJ9TE2qAQuugNIIdmRbWMR/BEuz9yvb2xZ+zk eZJYMHnLhMKh5XPdIHxwwonEKMlsq2s= -----END CERTIFICATE-----Generated at Sun Oct 19 23:16:15 2025 by rpki-client