$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a51a9291-44f4-3bfc-a893-35a5eb20289c.roa File: a51a9291-44f4-3bfc-a893-35a5eb20289c.roa (raw, json) Hash identifier: dAFzojF7iK2fFrVzrl9ps1x79XzTj4O7ddjyTo1ZC8A= Subject key identifier: 82:9E:48:0E:73:8E:A1:E0:88:5B:F9:9E:45:21:34:DE:8A:D0:14:5E Certificate issuer: /CN=a58fe14b-04a0-43bf-b9b8-f6564f858306 Certificate serial: 010D0C9F4328584B7DECAAAFBA99D3A8C7735600 Authority key identifier: 68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a51a9291-44f4-3bfc-a893-35a5eb20289c.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 32639 IP address blocks: 204.239.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:aa:af:ba:99:d3:a8:c7:73:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a58fe14b-04a0-43bf-b9b8-f6564f858306 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=7cc2061f-1079-4888-8ebd-4eccb1eb597c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a6:a5:e5:ef:8f:a8:dc:69:6d:1c:f1:bd:ae: 03:7d:a0:83:b6:6a:ef:58:f6:5d:98:93:7e:64:a3: fe:f1:25:67:0b:64:ea:b0:8b:6b:f0:2c:1d:01:b6: 5e:74:a4:76:4d:b5:c2:95:ae:2c:3c:af:eb:4f:08: 7c:2e:b8:cc:fa:da:25:39:e0:8f:6d:52:73:38:d5: f8:a2:ec:c3:61:31:cd:15:88:f2:8f:79:0d:8d:19: be:11:2f:21:3b:cd:a9:50:69:5a:c6:c0:46:6f:3e: 3b:e3:d9:55:9b:f9:56:c7:9f:68:5f:d3:6f:7a:e2: 7d:0c:92:31:98:0a:4c:20:7b:1b:c0:31:b6:40:71: 1e:f7:06:ec:a6:2a:34:67:57:25:52:5d:dd:b4:3b: 4e:7a:2e:3b:81:96:f0:f4:d8:23:b9:bc:f3:7c:83: ef:ec:93:7a:1b:c1:40:43:65:34:cb:31:f6:ab:5c: 80:b5:d1:48:00:b0:bb:28:e9:38:e9:66:69:b4:b6: ba:0f:74:4d:20:8d:59:61:8e:98:03:07:fa:f2:97: 4a:6b:fa:84:0e:b9:20:36:1a:8a:bd:7a:5e:06:cf: 80:fc:ca:d7:16:ff:31:6d:68:12:1d:a4:c0:62:d6: 24:39:56:08:8f:e6:2c:56:c0:34:62:1a:8a:cc:1f: ba:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9E:48:0E:73:8E:A1:E0:88:5B:F9:9E:45:21:34:DE:8A:D0:14:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a51a9291-44f4-3bfc-a893-35a5eb20289c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.crl X509v3 Authority Key Identifier: keyid:68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer sbgp-ipAddrBlock: critical IPv4: 204.239.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:21:d7:22:7d:07:d0:70:6c:77:cd:8e:d2:c4:b8:4e:ed:14: 42:2c:28:b9:1b:8c:ec:15:6f:ab:1a:95:8c:03:9b:b9:46:cc: 3d:18:6a:52:ac:6a:34:0a:30:f6:db:e3:64:59:7e:55:e3:d4: d3:21:b2:38:80:6b:9a:fc:05:e2:df:15:73:d1:0c:e3:a8:de: cd:a1:c4:d0:62:85:86:8a:9d:4c:1f:1d:4c:19:5b:8b:3c:d4: 15:a5:68:79:ba:b0:79:23:76:d8:db:95:62:38:54:34:05:3e: 9b:57:4b:5b:70:64:62:12:53:df:dc:e3:62:42:88:a4:48:8d: 16:c8:79:4c:64:3a:46:46:f4:37:d2:67:3e:8d:c4:1c:9f:b8: 15:17:f0:64:17:3e:4d:de:83:2b:17:78:ee:f8:62:e0:fd:9a: 6f:cf:67:d8:3a:bc:87:39:a0:5b:76:c1:30:4a:a8:df:45:b0: 74:94:ac:8b:7d:71:ae:da:b4:a2:b3:0b:11:09:0a:06:61:bc: 25:16:0e:3a:04:29:d9:f5:98:a8:4f:46:ce:9e:3c:dc:94:7e: 23:e8:9a:9c:60:9d:df:46:16:69:5a:4e:52:49:e2:e1:a8:e0: 43:0c:c1:48:43:e4:c8:e1:37:14:7e:36:3f:82:8a:d3:ea:3b: 0d:00:c4:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97KqvupnTqMdzVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU4ZmUxNGItMDRhMC00M2JmLWI5YjgtZjY1NjRmODU4 MzA2MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk N2NjMjA2MWYtMTA3OS00ODg4LThlYmQtNGVjY2IxZWI1OTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aal5e+PqNxpbRzxva4DfaCDtmrvWPZdmJN+ ZKP+8SVnC2TqsItr8CwdAbZedKR2TbXCla4sPK/rTwh8LrjM+tolOeCPbVJzONX4 ouzDYTHNFYjyj3kNjRm+ES8hO82pUGlaxsBGbz4749lVm/lWx59oX9NveuJ9DJIx mApMIHsbwDG2QHEe9wbspio0Z1clUl3dtDtOei47gZbw9NgjubzzfIPv7JN6G8FA Q2U0yzH2q1yAtdFIALC7KOk46WZptLa6D3RNII1ZYY6YAwf68pdKa/qEDrkgNhqK vXpeBs+A/MrXFv8xbWgSHaTAYtYkOVYIj+YsVsA0YhqKzB+6rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKeSA5zjqHgiFv5nkUhNN6K0BReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNThm ZTE0Yi0wNGEwLTQzYmYtYjliOC1mNjU2NGY4NTgzMDYvYTUxYTkyOTEtNDRmNC0z YmZjLWE4OTMtMzVhNWViMjAyODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTU4ZmUxNGItMDRhMC00M2JmLWI5 YjgtZjY1NjRmODU4MzA2L2E1OGZlMTRiLTA0YTAtNDNiZi1iOWI4LWY2NTY0Zjg1 ODMwNi5jcmwwHwYDVR0jBBgwFoAUaJD16AVPynV7txcSiBfQZS1GQRwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNThmZTE0Yi0wNGEwLTQzYmYtYjliOC1mNjU2 NGY4NTgzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoh1yJ9B9BwbHfNjtLEuE7tFEIsKLkbjOwVb6salYwDm7lGzD0YalKs ajQKMPbb42RZflXj1NMhsjiAa5r8BeLfFXPRDOOo3s2hxNBihYaKnUwfHUwZW4s8 1BWlaHm6sHkjdtjblWI4VDQFPptXS1twZGISU9/c42JCiKRIjRbIeUxkOkZG9DfS Zz6NxByfuBUX8GQXPk3egysXeO74YuD9mm/PZ9g6vIc5oFt2wTBKqN9FsHSUrIt9 ca7atKKzCxEJCgZhvCUWDjoEKdn1mKhPRs6ePNyUfiPompxgnd9GFmlaTlJJ4uGo 4EMMwUhD5MjhNxR+Nj+CitPqOw0AxKg= -----END CERTIFICATE-----Generated at Tue Oct 21 01:59:00 2025 by rpki-client