$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa File: 2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa (raw, json) Hash identifier: mq9lS2PP+BNFNNiv1TxH3uku4DzKgkxVHaRsSBn96+s= Subject key identifier: E4:0E:EF:BF:F0:EE:58:4B:5C:D4:DF:3C:10:32:05:6E:A5:92:13:38 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584B715CAAD3DAD0ECA141557380 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 11810 IP address blocks: 204.194.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:aa:d3:da:d0:ec:a1:41:55:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=8c5daa40-906d-4346-b6a8-90084575d508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:32:45:c8:ed:0d:5d:b3:24:c0:56:4b:82:7d: 7d:40:91:60:16:22:88:2c:5f:16:59:8b:d1:5e:15: 9b:0d:71:42:e7:f8:a9:67:12:74:3a:fc:65:b9:f4: 42:d3:39:34:72:58:4f:56:15:bb:2e:7b:b8:31:c7: 65:03:09:78:39:0d:58:d0:41:bc:19:32:ab:eb:53: 80:6b:2b:92:94:5c:b4:78:99:9b:aa:70:dd:1c:af: 27:70:6c:89:4a:51:ef:14:2e:8a:f4:c3:8c:15:c0: f4:70:11:e8:db:03:45:b6:55:79:3e:a1:b7:8c:12: 66:fa:c1:6e:ab:14:bd:aa:1b:76:78:ad:d4:9e:c8: e4:61:5e:92:74:b7:00:32:17:cc:a3:ad:b2:2b:b7: 75:70:7a:fc:25:7b:aa:fb:70:e5:c6:d8:fd:ae:db: 09:5d:47:4c:bc:82:9d:4f:6d:85:b4:dc:0d:2e:e3: f7:1b:da:de:ba:ae:5f:2c:59:19:49:35:3c:fb:98: d5:8f:2e:b0:31:0b:42:8c:ce:a3:f8:d3:75:70:6d: d9:88:57:8c:f8:68:f1:7e:cd:28:fe:6f:a6:e6:cb: 15:75:eb:30:c4:6b:0b:89:2a:a2:a4:24:23:f9:dd: 31:56:e3:4e:30:87:e0:1e:39:9a:58:b5:91:04:7c: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0E:EF:BF:F0:EE:58:4B:5C:D4:DF:3C:10:32:05:6E:A5:92:13:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 204.194.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:de:ea:1a:de:5d:ae:88:83:94:d4:19:c9:9c:50:c0:22:24: 77:28:e8:2e:ef:57:d6:f4:10:23:92:26:5f:e6:f9:7b:fa:f7: 35:f4:13:eb:cc:31:5a:b4:4c:ef:f6:15:8a:0f:3d:64:4f:0f: 3d:85:2d:65:74:8c:16:1e:9a:a3:95:62:6b:e0:3b:56:c7:b3: 3a:17:88:0c:b0:6d:4b:8f:70:0b:da:d2:5b:61:55:19:30:ff: c4:ad:7b:d1:98:1d:30:0c:87:41:79:e6:03:31:86:9a:e1:7c: a5:af:3a:57:b1:69:df:4c:6c:fc:5c:78:1d:74:b2:fa:f9:5b: f9:07:0c:a6:92:b2:8a:33:57:59:22:a8:58:ce:36:e1:fc:ce: 20:37:9b:20:8e:9e:9c:de:21:23:19:b4:23:16:ba:1c:09:12: 2b:3e:a7:50:de:67:fe:29:92:89:b9:13:b9:6d:9f:54:9f:b6: 95:18:03:42:6e:86:75:20:67:c5:d9:43:7e:a8:ad:8b:38:1f: 2b:9e:50:f5:d0:ad:8e:c9:6a:41:fe:41:4b:a2:a9:31:f2:77: 13:ad:4e:db:73:78:1c:23:b3:0f:78:6c:6d:8b:b6:fd:14:22: 01:fd:cf:49:c7:8a:fb:cc:77:f9:0e:c7:ad:54:2e:c8:d3:f6: c1:6e:da:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKrT2tDsoUFVc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OGM1ZGFhNDAtOTA2ZC00MzQ2LWI2YTgtOTAwODQ1NzVkNTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDJFyO0NXbMkwFZLgn19QJFgFiKILF8WWYvR XhWbDXFC5/ipZxJ0OvxlufRC0zk0clhPVhW7Lnu4McdlAwl4OQ1Y0EG8GTKr61OA ayuSlFy0eJmbqnDdHK8ncGyJSlHvFC6K9MOMFcD0cBHo2wNFtlV5PqG3jBJm+sFu qxS9qht2eK3UnsjkYV6SdLcAMhfMo62yK7d1cHr8JXuq+3Dlxtj9rtsJXUdMvIKd T22FtNwNLuP3G9reuq5fLFkZSTU8+5jVjy6wMQtCjM6j+NN1cG3ZiFeM+Gjxfs0o /m+m5ssVdeswxGsLiSqipCQj+d0xVuNOMIfgHjmaWLWRBHwLkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQO77/w7lhLXNTfPBAyBW6lkhM4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvMmExYzU3YjctMjI3MS0z ZTAwLTllNzktYmQ3OTcyMTBkNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABze6hreXa6Ig5TUGcmcUMAiJHco6C7vV9b0ECOSJl/m+Xv69zX0E+vM MVq0TO/2FYoPPWRPDz2FLWV0jBYemqOVYmvgO1bHszoXiAywbUuPcAva0lthVRkw /8Ste9GYHTAMh0F55gMxhprhfKWvOlexad9MbPxceB10svr5W/kHDKaSsoozV1ki qFjONuH8ziA3myCOnpzeISMZtCMWuhwJEis+p1DeZ/4pkom5E7ltn1SftpUYA0Ju hnUgZ8XZQ36orYs4HyueUPXQrY7JakH+QUuiqTHydxOtTttzeBwjsw94bG2Ltv0U IgH9z0nHivvMd/kOx61ULsjT9sFu2vI= -----END CERTIFICATE-----Generated at Tue Oct 21 00:08:32 2025 by rpki-client