$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/2c4b35cf-7564-33b2-82cc-cee4d0eaab70.roa File: 2c4b35cf-7564-33b2-82cc-cee4d0eaab70.roa (raw, json) Hash identifier: ouOP+JSZ4JyniXDaywQVQ9LU8ZWqkuM40xu7E5mS2ZY= Subject key identifier: 20:DE:B8:CD:CA:A8:64:A3:7D:E3:BB:07:56:05:4C:7A:36:56:7D:77 Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F4328584B6A61DF412791A2859C7ED500 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/2c4b35cf-7564-33b2-82cc-cee4d0eaab70.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 5377 IP address blocks: 204.8.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:df:41:27:91:a2:85:9c:7e:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=55e711f4-0246-4cd1-9842-bc62f3143ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:44:f5:18:2b:43:8e:d2:2e:a5:33:56:05:9d: 71:cf:8a:cd:0e:f3:9c:63:ae:24:fc:d1:21:b2:80: fa:c1:99:d8:9c:c1:d7:88:25:69:0e:39:58:21:a9: 84:03:2e:2e:c1:e7:3f:42:e8:65:f2:1b:f8:d6:15: 4d:15:40:86:d2:c6:68:d1:a4:7c:80:2a:d7:88:c9: 6c:5c:27:3a:b3:69:33:03:04:ed:63:94:83:f8:a5: 17:10:88:b8:6f:ba:fd:22:47:74:02:be:2c:aa:2d: af:0d:61:35:4d:26:16:f3:c8:b6:2a:28:97:74:5f: 70:56:4b:89:7b:ae:e4:41:ce:03:2e:07:59:d9:7b: a2:3d:1e:fb:b6:c0:bd:a8:88:7f:64:dc:db:75:b4: 0c:03:7a:9c:7a:7a:0a:76:33:67:1a:9d:83:a6:af: 84:8b:fc:44:f3:90:e2:c2:80:9a:8b:73:3c:33:fb: 7e:26:7b:f6:be:fa:a1:ef:19:42:e8:9a:be:ee:ef: 81:34:9d:78:bb:74:0c:74:9a:a3:7e:6b:de:80:2e: e5:08:13:be:8b:6a:6b:90:13:0e:02:fb:d7:43:c9: 85:e5:94:de:d4:7b:14:e2:21:b4:a6:3b:16:a5:b5: 23:4d:c3:89:0f:34:dc:72:55:95:bb:37:25:7b:6e: 6e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DE:B8:CD:CA:A8:64:A3:7D:E3:BB:07:56:05:4C:7A:36:56:7D:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/2c4b35cf-7564-33b2-82cc-cee4d0eaab70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: 204.8.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:53:e6:8c:60:e2:09:10:53:17:08:15:81:3d:cb:7a:1d:55: 13:13:b2:05:48:80:df:25:dc:f2:e6:f4:03:b3:72:c6:a6:b6: a5:67:5e:c1:3e:1d:59:1d:eb:53:11:07:45:0c:91:22:3b:65: 3f:9d:66:45:c1:b2:df:e5:13:04:4f:90:92:f1:6a:47:32:a3: ab:ab:3d:5d:95:9c:aa:f5:37:4c:69:68:8b:12:6c:e4:e9:b3: 47:91:82:b2:27:bb:0a:fc:df:aa:a2:d1:6b:7d:86:42:31:41: 9c:c9:78:4a:d7:3f:52:09:d8:e4:26:36:5b:d7:c2:d3:1f:a0: 0f:32:ab:bd:b9:b4:55:c4:9e:3e:1f:b2:ae:dc:fe:d2:cc:e0: f5:44:13:8e:6d:9c:88:f9:71:2c:a5:82:68:3f:70:19:45:97: 24:96:8a:9f:fd:af:14:d1:06:37:d4:bf:b3:de:03:41:16:94: 6d:b3:91:60:de:3a:1f:12:dc:ff:68:71:80:60:87:c1:25:86: 3e:31:05:02:37:62:2f:38:00:a4:e0:e2:9a:31:f1:fa:f5:fe: 86:8d:d1:09:a3:ca:4f:58:90:24:84:cb:24:a7:15:9c:c4:bd: ee:26:31:8a:c1:e6:39:ca:54:93:75:37:42:69:56:b1:fb:8e: 0c:e4:ac:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYd9BJ5GihZx+1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NTVlNzExZjQtMDI0Ni00Y2QxLTk4NDItYmM2MmYzMTQzYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkET1GCtDjtIupTNWBZ1xz4rNDvOcY64k/NEh soD6wZnYnMHXiCVpDjlYIamEAy4uwec/Quhl8hv41hVNFUCG0sZo0aR8gCrXiMls XCc6s2kzAwTtY5SD+KUXEIi4b7r9Ikd0Ar4sqi2vDWE1TSYW88i2KiiXdF9wVkuJ e67kQc4DLgdZ2XuiPR77tsC9qIh/ZNzbdbQMA3qcenoKdjNnGp2Dpq+Ei/xE85Di woCai3M8M/t+Jnv2vvqh7xlC6Jq+7u+BNJ14u3QMdJqjfmvegC7lCBO+i2prkBMO AvvXQ8mF5ZTe1HsU4iG0pjsWpbUjTcOJDzTcclWVuzcle25uVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDeuM3KqGSjfeO7B1YFTHo2Vn13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvMmM0YjM1Y2YtNzU2NC0z M2IyLTgyY2MtY2VlNGQwZWFhYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClT5oxg4gkQUxcIFYE9y3odVRMTsgVIgN8l3PLm9AOzcsamtqVnXsE+ HVkd61MRB0UMkSI7ZT+dZkXBst/lEwRPkJLxakcyo6urPV2VnKr1N0xpaIsSbOTp s0eRgrInuwr836qi0Wt9hkIxQZzJeErXP1IJ2OQmNlvXwtMfoA8yq725tFXEnj4f sq7c/tLM4PVEE45tnIj5cSylgmg/cBlFlySWip/9rxTRBjfUv7PeA0EWlG2zkWDe Oh8S3P9ocYBgh8Elhj4xBQI3Yi84AKTg4pox8fr1/oaN0Qmjyk9YkCSEyySnFZzE ve4mMYrB5jnKVJN1N0JpVrH7jgzkrPE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:46 2025 by rpki-client