$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa File: 9477d30f-60e1-349b-9381-c5e6e73f84d7.roa (raw, json) Hash identifier: mlLnNMstrnjz4IgLLiekyR86El/mcRIdEZ5PkjEY2vs= Subject key identifier: B3:15:AB:41:27:18:B1:C5:C2:4F:1D:7F:C9:9D:53:EC:2C:02:EF:B5 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584B758C943A0FDF6A3E6CB53C40 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 400226 IP address blocks: 204.197.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:94:3a:0f:df:6a:3e:6c:b5:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=54f5c872-24d0-4ae3-8894-90b3f67107a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c8:36:e6:0c:07:e4:df:f6:eb:43:06:fd:69: 61:49:91:48:b3:ab:9b:8c:02:6f:91:08:ab:8a:5b: 08:92:f2:50:d1:d2:0d:27:c4:13:b1:9e:59:ee:65: fc:99:47:cb:6e:cc:5d:f6:c5:ba:d0:9b:31:3f:3f: 86:4f:30:ec:40:f4:e5:4a:05:f8:34:f1:5c:52:ce: ae:c0:3e:8d:37:cd:24:15:d9:ce:60:74:38:e3:3e: 5e:ee:45:05:0c:a7:5f:cd:40:e8:74:e2:48:90:7b: ca:13:21:04:48:37:b3:1a:02:cd:3a:d3:5d:d1:58: ef:5a:59:9a:17:44:45:dd:76:27:e6:d0:d3:8a:01: 17:fe:cd:5c:bb:92:9c:b4:98:f4:60:39:72:06:97: 42:06:7f:44:ce:07:90:a0:c4:d8:0f:ff:b2:84:fe: ca:fd:97:48:83:0b:a4:34:eb:d4:23:7e:52:b3:dc: 13:ea:03:27:27:a1:b4:84:31:e0:af:b3:d7:4f:dd: 66:0a:26:4a:40:89:a9:54:1f:6b:04:27:03:e0:02: 41:e0:dc:e3:65:c7:6b:7d:77:10:dd:ae:e3:83:56: d3:63:4c:86:10:22:3e:69:75:56:d4:64:5f:ea:8a: e9:93:47:d9:71:9e:d4:cf:40:55:dc:89:bd:83:08: 1a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:15:AB:41:27:18:B1:C5:C2:4F:1D:7F:C9:9D:53:EC:2C:02:EF:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:4a:1a:2d:1d:a2:ae:c9:d7:03:91:59:f8:b2:e6:85:49:38: d7:d2:f4:2c:8c:f5:19:3c:e4:3d:fe:b4:9e:90:05:e1:d6:82: 83:9c:3c:8f:ad:65:58:41:c1:1c:60:d8:bd:c2:20:72:9d:5d: 28:c5:44:28:d1:ff:0c:e5:43:e6:6e:a4:33:1e:19:3a:5c:bb: 6c:1d:c8:3c:a6:1c:75:66:a4:e3:2d:76:01:6a:df:74:ca:a4: 52:13:b3:f8:c3:1c:6e:5c:bf:dd:4f:b5:ff:0a:99:1f:7a:f3: e5:2d:ad:3f:8f:97:c1:76:d3:da:32:cd:10:27:ca:44:8c:fa: be:99:a1:95:04:c1:e9:5b:54:54:de:03:1d:bd:a3:aa:2d:e6: 0e:05:bf:ad:58:99:e4:d0:b5:07:0e:34:36:87:fa:5e:5a:63: 77:ba:25:3f:27:25:17:87:f9:59:28:3c:46:8c:37:20:32:ab: 15:d2:26:10:f7:28:84:8f:69:82:2a:c1:dc:61:bd:ea:f0:cb: d0:ef:2c:53:5d:01:91:3d:1c:71:97:c6:15:6c:9d:92:45:87: 3e:2e:78:1c:9b:d8:46:64:fc:db:88:c7:d6:5e:1b:45:a3:52: b7:12:62:54:44:a6:85:e8:f7:67:1f:6c:47:ad:91:9b:bd:40: f2:6c:de:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJQ6D99qPmy1PEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk NTRmNWM4NzItMjRkMC00YWUzLTg4OTQtOTBiM2Y2NzEwN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Mg25gwH5N/260MG/WlhSZFIs6ubjAJvkQir ilsIkvJQ0dINJ8QTsZ5Z7mX8mUfLbsxd9sW60JsxPz+GTzDsQPTlSgX4NPFcUs6u wD6NN80kFdnOYHQ44z5e7kUFDKdfzUDodOJIkHvKEyEESDezGgLNOtNd0VjvWlma F0RF3XYn5tDTigEX/s1cu5KctJj0YDlyBpdCBn9EzgeQoMTYD/+yhP7K/ZdIgwuk NOvUI35Ss9wT6gMnJ6G0hDHgr7PXT91mCiZKQImpVB9rBCcD4AJB4NzjZcdrfXcQ 3a7jg1bTY0yGECI+aXVW1GRf6orpk0fZcZ7Uz0BV3Im9gwgagQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMVq0EnGLHFwk8df8mdU+wsAu+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvOTQ3N2QzMGYtNjBlMS0z NDliLTkzODEtYzVlNmU3M2Y4NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5KGi0doq7J1wORWfiy5oVJONfS9CyM9Rk85D3+tJ6QBeHWgoOcPI+t ZVhBwRxg2L3CIHKdXSjFRCjR/wzlQ+ZupDMeGTpcu2wdyDymHHVmpOMtdgFq33TK pFITs/jDHG5cv91Ptf8KmR968+UtrT+Pl8F209oyzRAnykSM+r6ZoZUEwelbVFTe Ax29o6ot5g4Fv61YmeTQtQcONDaH+l5aY3e6JT8nJReH+VkoPEaMNyAyqxXSJhD3 KISPaYIqwdxhverwy9DvLFNdAZE9HHGXxhVsnZJFhz4ueByb2EZk/NuIx9ZeG0Wj UrcSYlREpoXo92cfbEetkZu9QPJs3p4= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:36 2025 by rpki-client