$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa File: 240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa (raw, json) Hash identifier: RAIEyEWAb5j6rh5p9auE76ZHrHVc6PHCN4V+R62269o= Subject key identifier: 55:6C:66:F7:F3:7B:AD:BA:F0:CF:76:29:B7:79:56:6D:2C:5E:EF:56 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584B3DBA28CDF10E401C5287FBC0 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 40509 IP address blocks: 204.8.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:28:cd:f1:0e:40:1c:52:87:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=54f844bd-61f4-412b-b351-e4f95afedb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:53:ea:3b:79:d6:4f:c0:63:5d:2d:00:35: 2e:b6:49:b9:9f:cc:e6:1d:68:f9:67:65:1d:57:eb: 0d:dd:25:f8:0c:97:ab:50:32:94:de:cb:01:fc:23: e7:c3:21:1f:22:12:f2:8f:34:2d:77:07:8c:ff:82: e1:10:63:00:8b:27:00:7a:57:2b:e4:59:c2:6d:18: 15:a5:ec:76:e5:a6:55:67:7b:bd:3f:1c:b9:fa:ff: ad:01:d8:c1:0d:c0:ae:5c:a9:28:c2:f0:6c:c4:5e: a2:5d:3f:31:17:d0:5a:d7:19:7d:2a:c4:c6:00:89: 80:8f:dd:79:09:3e:3b:79:4e:cf:19:98:40:0e:02: 80:f2:15:d7:3e:77:b8:42:2a:7a:46:eb:a2:8d:07: 1b:25:9a:38:46:d6:87:f0:d5:d9:f5:04:55:1b:a7: 1d:7e:4f:ca:a3:41:cd:b9:9f:8e:04:c8:d3:98:4c: 07:f9:86:32:67:ec:c0:3a:7d:9b:fd:17:db:90:d5: 22:6e:e4:af:92:29:cd:39:e6:40:c7:a5:1a:c5:6b: 64:99:43:54:5e:ef:9f:92:c4:d7:a4:1a:0b:d1:0b: 3a:2f:3d:3b:a7:73:90:06:6b:35:f2:1c:80:62:67: 21:0f:6d:f7:6f:53:d8:a9:fc:87:7e:43:67:31:d1: ff:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6C:66:F7:F3:7B:AD:BA:F0:CF:76:29:B7:79:56:6D:2C:5E:EF:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 204.8.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b9:d5:2f:72:93:51:af:83:d3:1e:2c:b1:66:28:c6:0d:1f: a0:16:4c:09:c9:dd:d5:4e:59:4d:4b:5d:19:f0:51:69:59:dc: db:ca:28:98:be:79:45:0c:ad:d5:e4:af:25:8c:93:98:7a:11: c0:ef:7f:0a:31:6e:62:5f:26:a5:d0:3a:15:90:0f:ca:c7:43: 46:31:9a:8d:f1:52:29:51:73:26:22:42:65:8f:28:dd:1f:9a: 69:fa:fe:96:85:bd:51:84:53:fe:cd:17:c5:e6:8f:44:be:75: bc:ee:2f:b6:f7:e7:5d:d0:90:2f:ad:53:73:d1:0a:c2:cd:51: c3:19:9d:89:df:63:67:40:6f:d1:49:2c:20:73:bc:1c:36:d5: ad:ea:f1:9c:46:4f:31:d0:9b:86:fc:16:01:e8:f8:8d:dd:bc: 01:d4:a2:e2:d5:33:eb:82:c2:cd:a7:d0:e6:1d:ca:c6:e6:55: 1b:2c:f5:f3:06:a8:3d:64:85:22:69:ea:d7:ba:9f:6a:d3:96: 75:f1:21:9d:91:4c:da:a0:74:22:56:a4:7f:67:06:cc:7b:b8: 57:66:df:04:7b:70:d3:43:af:5b:88:05:82:76:b5:07:bc:f2: d5:54:57:33:59:8f:b4:27:0d:43:56:d4:1b:a1:d3:f9:b9:f0: 0a:2c:3b:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uijN8Q5AHFKH+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NTRmODQ0YmQtNjFmNC00MTJiLWIzNTEtZTRmOTVhZmVkYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfNT6jt51k/AY10tADUutkm5n8zmHWj5Z2Ud V+sN3SX4DJerUDKU3ssB/CPnwyEfIhLyjzQtdweM/4LhEGMAiycAelcr5FnCbRgV pex25aZVZ3u9Pxy5+v+tAdjBDcCuXKkowvBsxF6iXT8xF9Ba1xl9KsTGAImAj915 CT47eU7PGZhADgKA8hXXPne4Qip6RuuijQcbJZo4RtaH8NXZ9QRVG6cdfk/Ko0HN uZ+OBMjTmEwH+YYyZ+zAOn2b/RfbkNUibuSvkinNOeZAx6UaxWtkmUNUXu+fksTX pBoL0Qs6Lz07p3OQBms18hyAYmchD233b1PYqfyHfkNnMdH/owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVsZvfze6268M92Kbd5Vm0sXu9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMjQwYmU2YWYtYWFkZi0z ZjI0LWJlYmUtOWVhMzhhMGE2YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES51S9yk1Gvg9MeLLFmKMYNH6AWTAnJ3dVOWU1LXRnwUWlZ3NvKKJi+ eUUMrdXkryWMk5h6EcDvfwoxbmJfJqXQOhWQD8rHQ0Yxmo3xUilRcyYiQmWPKN0f mmn6/paFvVGEU/7NF8Xmj0S+dbzuL7b3513QkC+tU3PRCsLNUcMZnYnfY2dAb9FJ LCBzvBw21a3q8ZxGTzHQm4b8FgHo+I3dvAHUouLVM+uCws2n0OYdysbmVRss9fMG qD1khSJp6te6n2rTlnXxIZ2RTNqgdCJWpH9nBsx7uFdm3wR7cNNDr1uIBYJ2tQe8 8tVUVzNZj7QnDUNW1Buh0/m58AosO9s= -----END CERTIFICATE-----Generated at Fri Oct 10 17:52:03 2025 by rpki-client