$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa File: 16b704f1-00d2-3275-b255-32b4eae3f37c.roa (raw, json) Hash identifier: A46c+1szEuO/Zav1LWqWk1wZrMYquaw7yXy5/0vV1Hc= Subject key identifier: 08:24:63:AF:93:52:CE:F5:B7:D9:7D:32:50:55:25:4C:99:F8:36:EF Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B0CDC0BAE142D0B63E2C47500 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 1239 IP address blocks: 204.119.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0b:ae:14:2d:0b:63:e2:c4:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=e0fbccaf-4628-4008-b0b4-1c6ae65698da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8d:ad:6e:64:d1:27:51:ea:ec:51:ab:f3:a7: 35:2c:a8:72:b5:c1:68:ea:5b:b2:8b:f1:83:2d:74: c2:79:1b:0f:3d:50:ac:d7:c3:42:3a:93:10:39:9d: b5:7c:3e:02:a6:40:91:c9:53:af:f0:18:6a:2d:a2: 43:5a:59:fb:74:08:27:d9:a0:1d:5c:30:b3:ca:9f: 81:90:0e:3d:69:8f:06:fd:96:a1:d0:52:36:c2:7c: 50:5a:4c:09:e7:91:f0:7b:2e:56:0d:fe:5e:78:80: 40:0c:ae:72:03:fc:cf:3c:5d:e9:81:01:c3:8a:b6: 47:9e:19:27:62:10:5b:fe:60:a4:11:29:b5:e1:1c: 3f:76:bb:c3:73:69:ba:8f:fe:e2:87:23:3b:bc:82: 47:bc:4f:dc:36:6f:8f:e2:a8:63:31:49:82:84:b0: 87:19:23:d6:f1:ac:78:ec:ae:b3:42:aa:54:1a:80: b0:5f:86:c7:63:d3:26:77:42:2b:0a:e1:b6:04:36: 92:63:2a:41:cb:c2:f9:9e:23:8c:2c:04:7d:78:93: 43:ed:b1:fe:20:3d:86:cd:bd:00:dc:a2:c0:62:6e: cb:e0:d2:9d:eb:2c:62:44:ee:db:a7:7a:0b:17:f2: c8:31:af:ed:92:d0:66:de:3e:a6:7e:2e:81:0e:2f: ac:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:24:63:AF:93:52:CE:F5:B7:D9:7D:32:50:55:25:4C:99:F8:36:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.119.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:56:e6:a8:2a:3d:00:4a:e8:ce:11:45:07:b0:0a:8c:c1:2f: 85:92:f4:86:12:38:c1:f5:68:82:bc:80:f1:04:47:6a:91:d8: 27:e4:ae:af:77:26:6e:1b:4a:46:af:72:db:e3:0a:87:28:79: ed:24:8b:29:3d:d8:ae:da:37:11:23:b6:e8:64:93:9c:59:59: 27:40:ee:62:4f:1a:f4:e4:ce:9b:3e:0e:e4:6e:b0:d1:d1:19: e8:cc:28:e3:b3:e2:b1:64:66:18:02:c8:f1:bc:86:19:cf:af: 1f:e4:10:68:87:08:ba:ef:dd:1b:14:c1:f4:0c:f0:38:7f:20: 4d:fd:b0:25:21:77:d4:4d:ee:7e:e5:f6:da:39:71:2c:b7:f0: fd:64:73:9f:f7:96:e3:c1:47:b1:a3:ca:69:cc:42:08:4b:b2: 5c:c2:de:1d:7b:5a:2d:4b:e5:2d:b9:12:5f:0e:9d:28:d9:49: 28:25:a2:72:79:83:c8:17:40:32:dd:2e:25:50:23:63:8f:6e: cc:b8:13:6d:ec:b7:fc:43:65:d2:38:60:ea:9c:c6:4e:d7:24: f3:31:ae:07:f8:e2:c4:68:32:2b:ff:26:6c:d1:84:47:cf:bf: 55:aa:4b:2a:bf:54:32:48:f8:a4:2c:71:40:34:e9:7a:00:0f: 82:64:ed:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AuuFC0LY+LEdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZTBmYmNjYWYtNDYyOC00MDA4LWIwYjQtMWM2YWU2NTY5OGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh42tbmTRJ1Hq7FGr86c1LKhytcFo6luyi/GD LXTCeRsPPVCs18NCOpMQOZ21fD4CpkCRyVOv8BhqLaJDWln7dAgn2aAdXDCzyp+B kA49aY8G/Zah0FI2wnxQWkwJ55Hwey5WDf5eeIBADK5yA/zPPF3pgQHDirZHnhkn YhBb/mCkESm14Rw/drvDc2m6j/7ihyM7vIJHvE/cNm+P4qhjMUmChLCHGSPW8ax4 7K6zQqpUGoCwX4bHY9Mmd0IrCuG2BDaSYypBy8L5niOMLAR9eJND7bH+ID2Gzb0A 3KLAYm7L4NKd6yxiRO7bp3oLF/LIMa/tktBm3j6mfi6BDi+sfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgkY6+TUs71t9l9MlBVJUyZ+DbvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMTZiNzA0ZjEtMDBkMi0z Mjc1LWIyNTUtMzJiNGVhZTNmMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzHfpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlW5qgqPQBK6M4RRQewCozBL4WS9IYSOMH1aIK8gPEER2qR2Cfkrq93 Jm4bSkavctvjCocoee0kiyk92K7aNxEjtuhkk5xZWSdA7mJPGvTkzps+DuRusNHR GejMKOOz4rFkZhgCyPG8hhnPrx/kEGiHCLrv3RsUwfQM8Dh/IE39sCUhd9RN7n7l 9to5cSy38P1kc5/3luPBR7GjymnMQghLslzC3h17Wi1L5S25El8OnSjZSSglonJ5 g8gXQDLdLiVQI2OPbsy4E23st/xDZdI4YOqcxk7XJPMxrgf44sRoMiv/JmzRhEfP v1WqSyq/VDJI+KQscUA06XoAD4Jk7Zg= -----END CERTIFICATE-----Generated at Fri Oct 10 17:25:43 2025 by rpki-client