$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/2439b4f0-8a36-3c46-834f-6cdd5daa4795.roa File: 2439b4f0-8a36-3c46-834f-6cdd5daa4795.roa (raw, json) Hash identifier: f8dW1w/DRaTEOfd1SrQqGYMXNPCBod8C65OmWIa7NoI= Subject key identifier: 8D:12:4C:79:82:71:0A:83:CA:E5:4A:40:7E:A0:B3:F2:7A:84:8F:0A Certificate issuer: /CN=0c2f5a4c-917e-4b90-8022-391847ae5699 Certificate serial: 010D0C9F4328584B047C18031C75ECB4B3F12480 Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/2439b4f0-8a36-3c46-834f-6cdd5daa4795.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 134176 IP address blocks: 204.235.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:18:03:1c:75:ec:b4:b3:f1:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=7ddf94e8-2299-4ade-ba52-601a86df6a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:3a:67:34:57:52:e5:fc:74:f8:74:1f:18: 63:82:bc:79:8c:34:dd:db:07:65:39:06:ae:af:f1: 55:67:29:05:54:cf:96:97:ba:88:06:aa:65:bf:e6: 69:b9:47:d1:96:72:b9:fd:ed:e9:49:e5:1e:4d:a4: 11:fe:68:6b:b4:60:af:5b:09:86:52:7f:15:70:91: 2e:0b:55:a4:5a:90:92:71:5c:fb:8d:3d:fc:85:f8: ab:29:c1:0f:01:29:de:9d:e8:ba:6b:d4:a2:08:bc: 51:0a:77:6d:02:e2:f0:3e:a5:5e:64:78:bf:f1:49: 40:95:94:2d:a9:a0:3d:75:42:94:ad:e5:45:fd:42: f2:8e:11:a0:fe:00:76:c4:fa:ad:3f:27:9e:95:6a: 79:66:05:a8:64:7c:dd:22:78:05:b0:eb:17:93:1b: 44:fa:23:8b:25:85:94:94:23:29:94:24:5c:c6:55: e3:6a:13:a0:09:1b:16:a2:d7:16:4d:26:71:3e:99: 53:f0:e4:77:9c:25:92:d6:78:61:72:f3:89:10:99: f3:fc:d9:ff:e0:8f:3e:5f:2a:57:a8:0e:42:15:6f: e0:a6:fe:d3:e7:c3:41:c4:3d:c3:48:0c:c2:bd:59: ee:82:5f:8e:41:78:34:c8:73:82:bd:f6:f3:e7:69: a0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:12:4C:79:82:71:0A:83:CA:E5:4A:40:7E:A0:B3:F2:7A:84:8F:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/2439b4f0-8a36-3c46-834f-6cdd5daa4795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl X509v3 Authority Key Identifier: keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer sbgp-ipAddrBlock: critical IPv4: 204.235.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:4a:87:32:d1:0c:42:55:03:06:d8:dd:9b:a4:64:96:a8:e7: cd:e4:2a:fe:ad:ec:73:f5:fc:11:7c:46:47:79:91:c6:45:2b: 5f:4c:57:25:19:86:d3:a6:bb:f4:3c:df:19:cd:5d:24:42:26: f8:a0:53:b9:dd:bb:7f:9b:65:49:19:11:4e:21:de:c7:d5:72: 17:d6:37:fb:4c:8c:73:ba:27:d0:f9:10:6a:5f:25:0c:21:1e: 82:05:f6:8a:dc:11:a4:29:b6:0e:76:26:ce:1c:c7:73:1f:3c: 5f:c1:32:3a:6e:01:69:65:05:61:4f:96:ec:2b:91:d1:d1:4c: a9:c5:76:46:7f:88:55:68:ff:2d:2a:7a:0c:c8:33:9b:07:db: 77:f2:99:90:25:a0:ba:20:02:06:6b:b1:29:6e:b2:39:53:79: 92:55:9e:ea:6e:98:bf:1f:68:07:9e:f0:ec:05:39:48:8a:34: a9:0c:f7:89:65:3c:57:a5:f5:97:2c:49:5a:71:3e:1d:ba:bd: d8:ae:13:0b:7a:67:47:02:e5:f7:df:be:d7:85:22:3d:76:60: 8e:78:1a:5d:9c:9f:0e:d4:70:be:11:29:85:e2:1c:ad:92:53: 5a:d4:92:a8:5a:7c:49:0d:c8:93:99:e4:fb:ac:52:6f:77:f9: e9:68:d7:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBgDHHXstLPxJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyZjVhNGMtOTE3ZS00YjkwLTgwMjItMzkxODQ3YWU1 Njk5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk N2RkZjk0ZTgtMjI5OS00YWRlLWJhNTItNjAxYTg2ZGY2YTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtY6ZzRXUuX8dPh0Hxhjgrx5jDTd2wdlOQau r/FVZykFVM+Wl7qIBqplv+ZpuUfRlnK5/e3pSeUeTaQR/mhrtGCvWwmGUn8VcJEu C1WkWpCScVz7jT38hfirKcEPASnenei6a9SiCLxRCndtAuLwPqVeZHi/8UlAlZQt qaA9dUKUreVF/ULyjhGg/gB2xPqtPyeelWp5ZgWoZHzdIngFsOsXkxtE+iOLJYWU lCMplCRcxlXjahOgCRsWotcWTSZxPplT8OR3nCWS1nhhcvOJEJnz/Nn/4I8+XypX qA5CFW/gpv7T58NBxD3DSAzCvVnugl+OQXg0yHOCvfbz52mgaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0STHmCcQqDyuVKQH6gs/J6hI8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYzJm NWE0Yy05MTdlLTRiOTAtODAyMi0zOTE4NDdhZTU2OTkvMjQzOWI0ZjAtOGEzNi0z YzQ2LTgzNGYtNmNkZDVkYWE0Nzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGMyZjVhNGMtOTE3ZS00YjkwLTgw MjItMzkxODQ3YWU1Njk5LzBjMmY1YTRjLTkxN2UtNGI5MC04MDIyLTM5MTg0N2Fl NTY5OS5jcmwwHwYDVR0jBBgwFoAUKnfTBPDpKIyedYcM4/xf3RQLd6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wYzJmNWE0Yy05MTdlLTRiOTAtODAyMi0zOTE4 NDdhZTU2OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzOvyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdKhzLRDEJVAwbY3ZukZJao583kKv6t7HP1/BF8Rkd5kcZFK19MVyUZ htOmu/Q83xnNXSRCJvigU7ndu3+bZUkZEU4h3sfVchfWN/tMjHO6J9D5EGpfJQwh HoIF9orcEaQptg52Js4cx3MfPF/BMjpuAWllBWFPluwrkdHRTKnFdkZ/iFVo/y0q egzIM5sH23fymZAloLogAgZrsSlusjlTeZJVnupumL8faAee8OwFOUiKNKkM94ll PFel9ZcsSVpxPh26vdiuEwt6Z0cC5fffvteFIj12YI54Gl2cnw7UcL4RKYXiHK2S U1rUkqhafEkNyJOZ5PusUm93+elo11Q= -----END CERTIFICATE-----Generated at Fri Oct 10 21:00:26 2025 by rpki-client