$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/256d24fc-eda3-3794-a5c2-a337859acf22.roa File: 256d24fc-eda3-3794-a5c2-a337859acf22.roa (raw, json) Hash identifier: qihnNDVwLixqbPEV5ZY2D9yCT6i2et/c0KhHdhpylZo= Subject key identifier: D6:A0:61:65:CF:6D:98:F1:A9:84:3E:4F:CA:F4:18:25:62:06:0F:A5 Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584B648737D11A64E6DF3BF2B1C0 Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/256d24fc-eda3-3794-a5c2-a337859acf22.roa Signing time: Thu 02 Oct 2025 22:40:59 +0000 ROA not before: Thu 02 Oct 2025 22:40:59 +0000 ROA not after: Wed 31 Dec 2025 23:40:59 +0000 asID: 14618 IP address blocks: 204.152.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:87:37:d1:1a:64:e6:df:3b:f2:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Oct 2 22:40:59 2025 GMT Not After : Dec 31 23:40:59 2025 GMT Subject: CN=3937515e-bb36-4a32-8ac5-d649001fecb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:31:85:dd:f8:e9:0f:30:b8:56:35:ec:3f:29: 7f:c2:0b:04:7c:1d:6b:7d:7c:84:6c:d3:2f:75:25: 87:08:5d:ca:b8:27:cc:c4:23:2c:cb:e6:0a:7d:b6: b9:3c:56:a4:04:f0:88:f4:9c:36:2a:ad:b2:63:ec: 51:f8:a4:37:60:d4:fe:be:c5:81:2b:64:4b:f5:93: 5d:b6:2a:a9:b7:17:ab:b6:7f:2f:b0:2f:65:1a:9f: 60:82:6a:e5:a4:bb:f2:71:26:3a:5c:38:5d:f9:af: 70:cf:15:e3:e3:4f:fd:2d:9c:a8:3b:7f:79:17:aa: 46:f5:0f:87:73:be:93:37:da:93:df:83:46:09:2a: 1b:46:30:f2:7b:d1:12:3c:43:99:ed:73:38:7c:29: bd:c9:39:ea:0d:57:2e:c9:e9:e9:1b:7c:d5:c4:4d: 6a:76:3d:e3:5f:97:35:22:80:60:4c:99:0a:e2:59: da:08:54:fc:35:af:1f:ae:7b:95:3d:2f:23:40:71: 3f:c7:c4:d6:e3:fa:33:ce:11:3d:c8:24:4f:d9:81: e3:da:1a:3f:82:3d:ef:1a:8b:bc:06:be:79:83:09: e8:d7:57:44:56:58:9f:d0:8c:f7:2f:e3:83:8f:2d: b4:a1:65:db:27:fa:dd:12:2b:1b:ae:8e:fd:62:7b: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A0:61:65:CF:6D:98:F1:A9:84:3E:4F:CA:F4:18:25:62:06:0F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/256d24fc-eda3-3794-a5c2-a337859acf22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv4: 204.152.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:8a:55:dd:56:83:14:eb:35:82:7c:16:5e:41:df:3a:6b:fa: 5b:40:b2:b9:89:23:63:28:64:d0:df:f0:8d:72:3a:43:98:df: 4a:be:67:48:39:d9:fa:55:a2:c2:59:ba:2c:70:66:83:22:8a: 99:e9:c8:9d:91:47:c4:6e:71:ee:ef:2a:b4:60:35:7d:d1:78: 2a:20:c7:20:c4:13:b8:4a:2c:95:29:b4:31:11:1c:a3:ba:cc: 73:cf:39:52:a4:08:51:b6:6c:65:60:fa:9b:e7:fc:68:be:c3: 4b:6f:66:53:04:96:ba:05:db:c8:24:45:30:39:ae:d1:ff:f2: eb:b6:8e:51:2c:4f:95:44:52:74:ad:f2:91:eb:a1:20:3b:db: 3e:65:5a:9a:e7:ba:a3:73:4c:7b:c6:a9:33:82:2a:a4:4d:81: fd:df:01:6e:97:c0:4b:72:20:e8:05:de:34:1d:a4:ff:55:66: 26:4b:fd:65:ae:13:65:8a:60:67:c2:86:22:97:26:1e:b5:cf: bf:07:53:dd:1a:1e:d2:59:de:d7:56:28:0c:ab:ac:a8:f7:45: e2:7e:7a:d0:ea:e0:54:f8:cf:57:df:62:2f:68:3c:b5:2c:f3: 82:38:c1:33:c3:da:03:34:27:a1:bc:53:0e:8a:05:a9:5e:0d: 66:87:aa:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkhzfRGmTm3zvyscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI1MTAwMjIyNDA1OVoXDTI1MTIzMTIzNDA1OVowLzEtMCsGA1UEAxMk MzkzNzUxNWUtYmIzNi00YTMyLThhYzUtZDY0OTAwMWZlY2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DGF3fjpDzC4VjXsPyl/wgsEfB1rfXyEbNMv dSWHCF3KuCfMxCMsy+YKfba5PFakBPCI9Jw2Kq2yY+xR+KQ3YNT+vsWBK2RL9ZNd tiqptxertn8vsC9lGp9ggmrlpLvycSY6XDhd+a9wzxXj40/9LZyoO395F6pG9Q+H c76TN9qT34NGCSobRjDye9ESPEOZ7XM4fCm9yTnqDVcuyenpG3zVxE1qdj3jX5c1 IoBgTJkK4lnaCFT8Na8frnuVPS8jQHE/x8TW4/ozzhE9yCRP2YHj2ho/gj3vGou8 Br55gwno11dEVlif0Iz3L+ODjy20oWXbJ/rdEisbro79YnuXVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNagYWXPbZjxqYQ+T8r0GCViBg+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvMjU2ZDI0ZmMtZWRhMy0z Nzk0LWE1YzItYTMzNzg1OWFjZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANCKVd1WgxTrNYJ8Fl5B3zpr+ltAsrmJI2MoZNDf8I1yOkOY30q+Z0g5 2fpVosJZuixwZoMiipnpyJ2RR8Ruce7vKrRgNX3ReCogxyDEE7hKLJUptDERHKO6 zHPPOVKkCFG2bGVg+pvn/Gi+w0tvZlMElroF28gkRTA5rtH/8uu2jlEsT5VEUnSt 8pHroSA72z5lWprnuqNzTHvGqTOCKqRNgf3fAW6XwEtyIOgF3jQdpP9VZiZL/WWu E2WKYGfChiKXJh61z78HU90aHtJZ3tdWKAyrrKj3ReJ+etDq4FT4z1ffYi9oPLUs 84I4wTPD2gM0J6G8Uw6KBaleDWaHqvM= -----END CERTIFICATE-----Generated at Wed Oct 8 22:55:42 2025 by rpki-client