$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/ce38122d-5a2c-3c90-91f7-4c9c3326741e.roa File: ce38122d-5a2c-3c90-91f7-4c9c3326741e.roa (raw, json) Hash identifier: eYXWvMmD1EAA3q+VaFaVSTPR5VJ4n57Emln1kXMFR6g= Subject key identifier: 86:33:77:AE:50:4E:AE:A3:C2:58:A6:A7:7E:7E:CA:7E:7E:97:5C:36 Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F4328584B0B76A453A453ACF702E7D580 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/ce38122d-5a2c-3c90-91f7-4c9c3326741e.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 204.77.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a4:53:a4:53:ac:f7:02:e7:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=a961f083-b96b-4201-8237-c9750b178810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fd:f5:97:6d:1f:f4:f6:0d:4c:1b:0c:09:d0: 27:87:88:0c:32:76:c4:78:0c:7b:06:8d:f9:73:fd: de:33:22:47:8f:10:7c:8c:e5:66:3b:ba:7d:c9:1c: 3c:cf:45:42:98:f6:37:e4:c0:5c:b1:5d:dc:5e:12: b7:02:d5:29:d1:82:90:f3:d4:9b:56:45:36:fb:75: f5:f5:00:41:ab:d9:68:f2:bf:67:80:74:7b:e8:6e: e3:05:ca:f2:c5:11:1f:32:bb:2e:47:16:51:89:39: 62:1e:c2:18:a5:dc:83:a8:d8:82:52:fb:4f:b2:38: 07:df:a7:a8:cd:63:f0:ce:9b:53:d5:a6:e4:4a:1c: 24:8a:08:4c:1e:5a:f1:09:c6:b0:2d:41:ce:9e:87: 39:d9:6e:c7:b5:23:af:5f:09:65:ce:8f:ba:8d:e0: 04:a8:3f:21:45:06:ab:d1:49:82:9a:22:20:7c:c5: 60:5c:f0:83:83:11:86:2f:cb:15:2a:d2:89:1f:f7: cf:54:c8:16:61:11:64:37:15:6f:4d:8b:b5:d2:0b: 13:f9:20:8c:b0:26:1b:a4:d7:de:48:60:bd:1c:9a: 88:49:51:74:3a:e0:be:b3:6b:b4:95:03:f7:12:28: 35:17:d0:ae:fc:7a:46:53:97:9a:e8:60:97:06:68: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:33:77:AE:50:4E:AE:A3:C2:58:A6:A7:7E:7E:CA:7E:7E:97:5C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/ce38122d-5a2c-3c90-91f7-4c9c3326741e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7e:14:67:91:0f:39:10:f5:84:8f:60:f7:94:e6:e4:4c:e1: ae:05:18:9b:8e:84:12:c1:3e:2c:bf:d4:c8:39:f4:80:10:39: 88:1f:20:e1:ed:fd:07:c9:e8:b0:02:08:6d:2a:4e:cf:6f:50: fb:16:6a:da:7a:c8:46:e7:fb:6c:f5:0e:d2:88:09:fd:2a:dd: eb:24:d1:70:55:2c:ed:f1:db:73:0a:6b:fa:f1:37:f8:2a:08: b6:11:8b:82:35:01:ab:90:b7:0d:b5:49:38:f5:ca:57:a1:1a: 88:cf:bc:9d:10:6e:7c:f6:87:d9:1e:9e:23:28:06:ad:fc:ff: 17:c1:cb:bd:44:80:b6:ac:b7:e5:7f:91:db:2d:9b:f2:e7:27: e2:22:3e:96:5f:25:dd:73:91:e7:ea:d7:8b:bb:5a:7d:a2:41: 72:48:2d:f0:4f:50:fc:11:2c:8f:5f:2c:0a:b1:ac:9f:f4:b7: 93:df:01:40:5a:06:aa:2d:65:44:f0:cb:8c:f0:ec:17:c5:f4: fb:91:4e:1b:de:4b:7a:8c:e6:1c:b7:d4:cc:ef:c2:9b:f2:ed: bc:bf:58:38:ee:ea:05:f9:04:93:c5:df:a4:b6:2a:05:ff:37: b4:64:43:fc:7e:97:2f:f3:f5:b9:e6:48:40:2d:47:53:13:26: f5:79:46:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqRTpFOs9wLn1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YTk2MWYwODMtYjk2Yi00MjAxLTgyMzctYzk3NTBiMTc4ODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv31l20f9PYNTBsMCdAnh4gMMnbEeAx7Bo35 c/3eMyJHjxB8jOVmO7p9yRw8z0VCmPY35MBcsV3cXhK3AtUp0YKQ89SbVkU2+3X1 9QBBq9lo8r9ngHR76G7jBcryxREfMrsuRxZRiTliHsIYpdyDqNiCUvtPsjgH36eo zWPwzptT1abkShwkighMHlrxCcawLUHOnoc52W7HtSOvXwllzo+6jeAEqD8hRQar 0UmCmiIgfMVgXPCDgxGGL8sVKtKJH/fPVMgWYRFkNxVvTYu10gsT+SCMsCYbpNfe SGC9HJqISVF0OuC+s2u0lQP3Eig1F9Cu/HpGU5ea6GCXBmgDCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYzd65QTq6jwlimp35+yn5+l1w2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvY2UzODEyMmQtNWEyYy0z YzkwLTkxZjctNGM5YzMzMjY3NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9+FGeRDzkQ9YSPYPeU5uRM4a4FGJuOhBLBPiy/1Mg59IAQOYgfIOHt /QfJ6LACCG0qTs9vUPsWatp6yEbn+2z1DtKICf0q3esk0XBVLO3x23MKa/rxN/gq CLYRi4I1AauQtw21STj1ylehGojPvJ0Qbnz2h9keniMoBq38/xfBy71EgLast+V/ kdstm/LnJ+IiPpZfJd1zkefq14u7Wn2iQXJILfBPUPwRLI9fLAqxrJ/0t5PfAUBa BqotZUTwy4zw7BfF9PuRThveS3qM5hy31Mzvwpvy7by/WDju6gX5BJPF36S2KgX/ N7RkQ/x+ly/z9bnmSEAtR1MTJvV5Rkc= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:13 2025 by rpki-client