$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5a94e139-6432-37da-ad9a-9a58e43133b8.roa File: 5a94e139-6432-37da-ad9a-9a58e43133b8.roa (raw, json) Hash identifier: lN44Fe10gTDbdcYI9S6jGu+giuGoTN/Os1BrRz+hf+4= Subject key identifier: CA:2A:DA:93:1D:A3:7A:E0:67:08:01:7F:8B:4D:BF:96:21:B7:45:D2 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584B2FC18B657A5A25438B509B00 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5a94e139-6432-37da-ad9a-9a58e43133b8.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 14041 IP address blocks: 204.132.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:8b:65:7a:5a:25:43:8b:50:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=bb87a8fa-cc8f-42bc-bd25-06ecdfb7524b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:55:d1:11:07:21:6f:18:5a:4c:ad:c1:3d:ea: d7:1e:f4:93:28:52:1d:c8:90:c3:b4:16:80:ec:9f: 54:a9:89:44:7c:60:dd:3a:93:ca:2b:a2:d8:f1:8c: 9d:ae:5e:d3:97:6a:e4:00:46:65:3e:3b:a2:ec:12: 4a:f9:cb:bb:25:f7:f4:98:7d:b7:3c:c0:1b:d0:31: 96:0d:f5:d2:3b:4b:a4:a5:81:9b:96:04:b2:47:aa: 56:03:0d:60:32:35:5d:16:d5:c8:86:77:ed:44:f3: 96:4e:70:5d:ae:a1:40:33:5b:64:fa:c6:5c:48:41: dc:aa:b8:f0:72:75:fb:4a:67:85:75:02:59:80:ac: da:dc:ba:12:56:fd:d9:f3:b8:77:d0:ee:87:35:a9: 4a:31:38:52:e2:f7:2e:3f:48:ca:2e:40:19:4c:4f: 67:db:e5:e6:f8:5a:3d:ea:5f:0e:0e:58:4e:a2:85: 52:48:fb:e3:f8:91:77:dc:b6:3a:f4:d8:7f:1d:08: 7d:21:a3:c8:b1:86:67:38:d9:e1:91:f5:62:f2:fc: 03:2e:28:fd:13:6c:61:0b:74:a7:7b:95:f4:ed:4e: 58:82:c9:d8:e4:0b:58:1d:cf:7c:97:06:6b:0a:eb: f3:70:9d:89:f0:a9:75:a0:f1:09:80:b6:27:80:c7: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2A:DA:93:1D:A3:7A:E0:67:08:01:7F:8B:4D:BF:96:21:B7:45:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5a94e139-6432-37da-ad9a-9a58e43133b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 204.132.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:68:a2:8b:97:e4:c8:f8:83:4b:c8:3c:31:5e:e8:52:a1:99: 0d:82:c4:a2:a5:a9:81:77:c2:e7:96:bd:e7:9d:3a:44:ad:96: 57:93:ce:98:ec:76:8b:6f:c5:5d:36:70:de:32:2b:ca:da:a4: 6e:ab:fb:21:12:9e:c5:57:05:53:68:45:72:c7:a3:2c:d8:8d: e4:35:3a:65:36:93:c1:6d:e3:9c:3f:40:b6:4d:b2:ad:5f:d8: d6:8d:fd:37:e4:5d:51:0c:3d:d3:2c:e9:51:49:b6:7a:a3:b0: ba:ed:ce:ad:74:c9:56:66:9b:e7:95:e8:32:5a:0b:71:7d:29: 0b:d4:6f:ab:00:68:8d:3e:15:15:7d:eb:aa:04:6e:b5:98:5f: af:bb:c5:b9:c2:e1:ee:1d:4b:0e:e0:8d:3d:13:d4:4c:31:ae: e4:e9:13:a4:80:6e:f2:13:6f:b7:62:9a:03:02:59:da:e1:70: 4a:5c:1c:a8:4b:48:b8:a0:ee:47:ed:3d:36:20:8a:79:43:ce: 78:9c:99:f7:d6:e4:cc:ff:a5:ce:35:94:35:b3:cc:19:26:8a: a9:53:0e:be:07:b9:df:98:ca:fc:eb:e0:f4:6b:33:81:73:26: 8c:9d:06:9b:06:5b:99:09:72:93:18:bf:80:c9:71:60:4e:09: 28:74:6d:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwYtlelolQ4tQmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YmI4N2E4ZmEtY2M4Zi00MmJjLWJkMjUtMDZlY2RmYjc1MjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolXREQchbxhaTK3BPerXHvSTKFIdyJDDtBaA 7J9UqYlEfGDdOpPKK6LY8Yydrl7Tl2rkAEZlPjui7BJK+cu7Jff0mH23PMAb0DGW DfXSO0ukpYGblgSyR6pWAw1gMjVdFtXIhnftRPOWTnBdrqFAM1tk+sZcSEHcqrjw cnX7SmeFdQJZgKza3LoSVv3Z87h30O6HNalKMThS4vcuP0jKLkAZTE9n2+Xm+Fo9 6l8ODlhOooVSSPvj+JF33LY69Nh/HQh9IaPIsYZnONnhkfVi8vwDLij9E2xhC3Sn e5X07U5YgsnY5AtYHc98lwZrCuvzcJ2J8Kl1oPEJgLYngMf0dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoq2pMdo3rgZwgBf4tNv5Yht0XSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNWE5NGUxMzktNjQzMi0z N2RhLWFkOWEtOWE1OGU0MzEzM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzIQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdooouX5Mj4g0vIPDFe6FKhmQ2CxKKlqYF3wueWveedOkStlleTzpjs dotvxV02cN4yK8rapG6r+yESnsVXBVNoRXLHoyzYjeQ1OmU2k8Ft45w/QLZNsq1f 2NaN/TfkXVEMPdMs6VFJtnqjsLrtzq10yVZmm+eV6DJaC3F9KQvUb6sAaI0+FRV9 66oEbrWYX6+7xbnC4e4dSw7gjT0T1EwxruTpE6SAbvITb7dimgMCWdrhcEpcHKhL SLig7kftPTYginlDznicmffW5Mz/pc41lDWzzBkmiqlTDr4Hud+Yyvzr4PRrM4Fz JoydBpsGW5kJcpMYv4DJcWBOCSh0bU8= -----END CERTIFICATE-----Generated at Sat Oct 11 11:33:25 2025 by rpki-client