$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/d9c4d9a7-0b81-36b0-b76b-a0c9dec648d4.roa File: d9c4d9a7-0b81-36b0-b76b-a0c9dec648d4.roa (raw, json) Hash identifier: 82as2gVb74FCFNi3xzSBpetEVYD49Z4EG3aqVwUdEuw= Subject key identifier: 26:D9:B8:CB:91:90:71:44:37:43:73:5F:9A:91:83:53:40:77:4A:42 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584B2E5C60962FC5B25416E1BA70 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/d9c4d9a7-0b81-36b0-b76b-a0c9dec648d4.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 26286 IP address blocks: 204.197.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:60:96:2f:c5:b2:54:16:e1:ba:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=6b8aff9b-37a6-493c-9d61-71d5d535c956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:88:6e:b6:85:6a:cf:8d:a2:72:b7:4d:8c:40: 99:c6:c6:9b:68:64:f8:a5:5f:f2:83:db:72:68:bb: 8b:50:ff:ee:f1:66:66:fd:d4:eb:58:b1:57:ee:0e: ea:26:ea:23:c9:a7:75:4a:fa:fc:c5:b8:01:49:48: 82:92:5c:6c:49:4f:9c:12:bb:fc:45:fa:cf:97:4c: 37:45:45:d2:80:db:5f:1e:a0:49:46:ce:ab:92:cc: db:2c:eb:37:cf:87:33:47:0d:a7:42:c6:82:d5:cf: ca:e0:fc:39:2f:d9:86:c3:8a:f4:8e:33:06:91:b7: 07:91:1e:02:05:28:c4:da:96:3f:cb:b5:c4:40:c3: ab:f8:a0:d0:57:9c:07:a8:bb:97:23:e8:19:a4:2a: 25:e7:ac:65:56:02:67:9e:44:e8:51:5a:cd:ab:b0: 09:21:38:9d:68:17:b6:7d:d5:3e:02:14:13:fc:49: 95:9c:95:93:76:b4:b8:ce:9c:95:3d:05:8e:fc:fb: cf:99:00:81:b5:89:1a:0f:ce:ed:1a:e0:e5:80:38: 8c:e5:8f:63:5a:e8:25:c4:10:38:d1:1e:ec:e6:70: 01:77:9b:f4:ea:56:78:97:d2:d4:2b:61:63:60:85: 0c:27:e8:99:ca:9c:08:ef:92:6a:04:69:39:0d:3d: 9a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D9:B8:CB:91:90:71:44:37:43:73:5F:9A:91:83:53:40:77:4A:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/d9c4d9a7-0b81-36b0-b76b-a0c9dec648d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:01:f7:40:13:71:56:57:b8:b4:86:bd:bf:c6:4e:47:61:30: 7f:14:ca:0b:e1:9a:91:99:a3:36:3f:f0:ef:6a:f0:e2:ac:1c: 24:64:e8:eb:64:d9:4b:35:a5:e2:47:3a:db:5c:6a:78:c8:d2: a7:ed:0e:c1:92:97:c3:82:af:b7:53:3e:6f:37:00:15:db:b1: 50:cb:4e:67:07:ef:df:82:e7:cb:e9:ce:0a:7f:94:ed:7d:2c: b8:f3:c2:26:dd:09:9c:da:2c:75:2c:d8:f8:59:1d:0a:55:8f: 5b:56:a5:4d:5c:5e:09:f8:4c:6d:aa:06:2a:ba:4b:fd:22:a2: a0:dc:17:34:c2:fc:9d:ec:50:9a:6a:a9:b5:fb:71:06:62:f0: 93:32:25:71:90:e1:aa:e8:85:3a:4a:44:ec:ee:9a:4a:aa:cb: f2:a9:c6:95:57:4d:32:e6:f7:f0:cf:55:d9:e1:74:42:c4:6d: 9b:ee:ab:7e:e0:95:a2:1a:0e:7f:5a:a6:96:a8:5a:95:bd:17: b1:30:c3:c8:70:c2:53:02:d2:d4:76:df:35:ac:af:6d:53:33: 29:4f:19:6f:5c:1f:b6:7c:ea:a7:e0:64:33:7b:ca:82:44:bc: 3b:8f:9d:a9:4d:b2:76:0d:7b:f8:bd:51:ba:70:00:25:c1:ad: ef:17:53:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXGCWL8WyVBbhunAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk NmI4YWZmOWItMzdhNi00OTNjLTlkNjEtNzFkNWQ1MzVjOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYhutoVqz42icrdNjECZxsabaGT4pV/yg9ty aLuLUP/u8WZm/dTrWLFX7g7qJuojyad1Svr8xbgBSUiCklxsSU+cErv8RfrPl0w3 RUXSgNtfHqBJRs6rkszbLOs3z4czRw2nQsaC1c/K4Pw5L9mGw4r0jjMGkbcHkR4C BSjE2pY/y7XEQMOr+KDQV5wHqLuXI+gZpCol56xlVgJnnkToUVrNq7AJITidaBe2 fdU+AhQT/EmVnJWTdrS4zpyVPQWO/PvPmQCBtYkaD87tGuDlgDiM5Y9jWuglxBA4 0R7s5nABd5v06lZ4l9LUK2FjYIUMJ+iZypwI75JqBGk5DT2a4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbZuMuRkHFEN0NzX5qRg1NAd0pCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvZDljNGQ5YTctMGI4MS0z NmIwLWI3NmItYTBjOWRlYzY0OGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4B90ATcVZXuLSGvb/GTkdhMH8UygvhmpGZozY/8O9q8OKsHCRk6Otk 2Us1peJHOttcanjI0qftDsGSl8OCr7dTPm83ABXbsVDLTmcH79+C58vpzgp/lO19 LLjzwibdCZzaLHUs2PhZHQpVj1tWpU1cXgn4TG2qBiq6S/0ioqDcFzTC/J3sUJpq qbX7cQZi8JMyJXGQ4arohTpKROzumkqqy/KpxpVXTTLm9/DPVdnhdELEbZvuq37g laIaDn9appaoWpW9F7Eww8hwwlMC0tR23zWsr21TMylPGW9cH7Z86qfgZDN7yoJE vDuPnalNsnYNe/i9UbpwACXBre8XUwM= -----END CERTIFICATE-----Generated at Fri Oct 10 09:54:41 2025 by rpki-client