$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa File: 844a594c-7e4b-3b8f-aaee-aec765543f6a.roa (raw, json) Hash identifier: TBPQg+0J3AXB6gOB8INjuJkDSC8SixfnfcgV9kB6mqw= Subject key identifier: 39:EB:6A:7D:FF:EE:C0:ED:8D:A7:54:57:3A:AD:76:EF:5E:58:6F:44 Certificate issuer: /CN=18291d4d-da48-4b25-84d6-3df88f2fed54 Certificate serial: 010D0C9F4328584B0FA6C48BC4E09AD841E53F00 Authority key identifier: 33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 376 IP address blocks: 204.19.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c4:8b:c4:e0:9a:d8:41:e5:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18291d4d-da48-4b25-84d6-3df88f2fed54 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=1be05cda-6391-4a9a-a24a-d593798fd7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9a:af:aa:b3:20:74:16:c1:f1:2a:c5:2c:53: f0:8f:0e:85:2d:13:02:08:33:db:87:08:c4:0f:7c: dc:5e:95:10:4d:87:97:8a:11:94:c2:44:59:fd:19: b2:38:6f:b3:f6:08:47:9d:1b:84:4d:2d:13:ef:4f: 1d:98:61:b8:7e:cf:6c:a2:bf:61:d9:36:95:9f:a5: d6:d5:68:14:3d:52:33:d3:6d:3a:ed:7a:e2:82:1b: f7:97:18:2d:1f:99:9d:38:09:91:91:5d:43:fd:35: 56:fc:e3:d3:ed:51:c7:68:55:fa:fd:9b:7a:51:7b: 2c:67:4d:24:e7:cf:4c:63:58:ce:b9:26:eb:d7:e9: f7:96:ff:d8:87:7e:ab:5d:16:86:12:36:70:a0:75: 6f:6f:31:4b:9c:84:69:76:3e:1a:b2:e1:12:02:63: c1:12:23:28:e3:a8:ef:22:43:1c:01:b1:db:9e:92: 18:ee:e1:cc:74:9b:6b:3f:e0:c7:2a:32:54:c6:e9: 72:b4:c2:20:e4:36:0d:71:b1:8d:db:e4:d9:03:21: 50:00:62:4a:ad:03:5d:8d:02:9f:db:fa:b3:0b:78: 46:c1:8d:7c:7e:7e:ad:4b:d9:e3:14:a7:84:a0:bf: 0e:e3:45:21:e6:97:da:e0:98:5b:70:f4:6a:eb:c7: c5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EB:6A:7D:FF:EE:C0:ED:8D:A7:54:57:3A:AD:76:EF:5E:58:6F:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl X509v3 Authority Key Identifier: keyid:33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer sbgp-ipAddrBlock: critical IPv4: 204.19.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e9:84:75:bb:24:d2:87:e9:40:58:7a:8d:6b:11:6b:45:85: a4:d5:70:da:9c:b3:42:c7:f3:8f:1f:23:23:e5:60:01:28:d2: c7:bd:a9:77:ef:bc:18:0b:1f:57:d3:55:ba:2f:e1:7e:72:98: a1:65:ff:22:af:46:2f:64:e8:6b:50:47:9d:3c:91:e4:a8:b4: f9:74:2b:1c:1e:ef:42:83:54:3c:54:d3:f6:ac:d9:14:17:85: 56:a6:38:d0:02:05:b8:9f:c8:56:6e:84:d4:32:cb:20:e4:51: 51:7b:6d:48:d5:f9:4a:2e:4d:36:44:28:12:77:95:5d:8b:4e: 82:e0:f4:9a:10:b3:d1:e9:2f:2b:87:0c:f5:6a:0f:96:96:e5: 0e:0e:23:21:68:9e:aa:5b:99:32:70:e2:db:49:14:62:53:4c: 5d:0d:9f:cc:bc:73:99:63:39:0b:15:5a:86:2b:60:44:71:a9: 15:a8:d3:52:49:5f:d4:22:35:49:67:aa:51:d2:e3:34:cb:27: 01:8c:d1:fc:17:33:af:f9:ef:34:7e:f6:14:46:fe:d7:f3:c1: bb:99:48:37:ec:2b:6a:87:5d:c4:1f:c5:1c:d5:fa:f0:54:a8: 48:5d:2a:e6:f9:96:57:00:8f:85:31:fe:08:70:9a:bd:6a:de: 71:fa:55:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsSLxOCa2EHlPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTgyOTFkNGQtZGE0OC00YjI1LTg0ZDYtM2RmODhmMmZl ZDU0MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk MWJlMDVjZGEtNjM5MS00YTlhLWEyNGEtZDU5Mzc5OGZkN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZqvqrMgdBbB8SrFLFPwjw6FLRMCCDPbhwjE D3zcXpUQTYeXihGUwkRZ/RmyOG+z9ghHnRuETS0T708dmGG4fs9sor9h2TaVn6XW 1WgUPVIz02067Xrighv3lxgtH5mdOAmRkV1D/TVW/OPT7VHHaFX6/Zt6UXssZ00k 589MY1jOuSbr1+n3lv/Yh36rXRaGEjZwoHVvbzFLnIRpdj4asuESAmPBEiMo46jv IkMcAbHbnpIY7uHMdJtrP+DHKjJUxulytMIg5DYNcbGN2+TZAyFQAGJKrQNdjQKf 2/qzC3hGwY18fn6tS9njFKeEoL8O40Uh5pfa4JhbcPRq68fFwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnran3/7sDtjadUVzqtdu9eWG9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xODI5 MWQ0ZC1kYTQ4LTRiMjUtODRkNi0zZGY4OGYyZmVkNTQvODQ0YTU5NGMtN2U0Yi0z YjhmLWFhZWUtYWVjNzY1NTQzZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTgyOTFkNGQtZGE0OC00YjI1LTg0 ZDYtM2RmODhmMmZlZDU0LzE4MjkxZDRkLWRhNDgtNGIyNS04NGQ2LTNkZjg4ZjJm ZWQ1NC5jcmwwHwYDVR0jBBgwFoAUM9lgbdXMKovJHNAJgMgAwq5YgtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xODI5MWQ0ZC1kYTQ4LTRiMjUtODRkNi0zZGY4 OGYyZmVkNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBMXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbphHW7JNKH6UBYeo1rEWtFhaTVcNqcs0LH848fIyPlYAEo0se9qXfv vBgLH1fTVbov4X5ymKFl/yKvRi9k6GtQR508keSotPl0Kxwe70KDVDxU0/as2RQX hVamONACBbifyFZuhNQyyyDkUVF7bUjV+UouTTZEKBJ3lV2LToLg9JoQs9HpLyuH DPVqD5aW5Q4OIyFonqpbmTJw4ttJFGJTTF0Nn8y8c5ljOQsVWoYrYERxqRWo01JJ X9QiNUlnqlHS4zTLJwGM0fwXM6/57zR+9hRG/tfzwbuZSDfsK2qHXcQfxRzV+vBU qEhdKub5llcAj4Ux/ghwmr1q3nH6VXY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:06:35 2025 by rpki-client