$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa File: a18bc8e5-3031-3334-b765-3392f5d4fe56.roa (raw, json) Hash identifier: iMU/AgLHzARUB9CkrcPagx0FEmmP1E0C0tm2HorxAok= Subject key identifier: D9:9F:9C:A6:0C:E4:12:70:21:2A:B2:3C:C1:21:EA:88:AF:68:27:19 Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584B6486D6EFFC52197884F34D80 Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa Signing time: Thu 02 Oct 2025 22:40:13 +0000 ROA not before: Thu 02 Oct 2025 22:40:13 +0000 ROA not after: Wed 31 Dec 2025 23:40:13 +0000 asID: 16509 IP address blocks: 204.152.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:86:d6:ef:fc:52:19:78:84:f3:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Oct 2 22:40:13 2025 GMT Not After : Dec 31 23:40:13 2025 GMT Subject: CN=ae8d2a67-80f3-4ce2-a60a-0f926afed61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:32:54:c2:e3:ae:40:10:81:df:4e:5e:b9:8d: c4:e1:ad:a7:26:db:3b:44:2e:54:40:b7:9c:65:cc: 39:c6:91:c8:71:0d:5d:62:1b:9b:a3:6d:2d:e2:de: 21:86:b1:bb:74:7f:99:12:1a:92:b2:6f:73:65:f8: dc:f0:58:76:fc:55:6f:33:40:98:3a:ec:d5:59:7d: 69:2e:a5:44:48:4a:e6:0b:35:ba:81:59:8d:06:43: 49:ff:d6:50:3a:9c:60:d5:e1:bf:7c:83:70:f2:63: 29:60:b2:07:f0:b8:e8:6a:3e:fa:e5:49:79:5a:61: 98:dc:ca:cb:28:cc:b7:83:d7:ea:22:8b:53:76:53: d1:c4:6f:1b:c0:13:e4:7e:4e:db:37:f6:8c:1f:1d: 00:a8:25:5a:82:b4:65:02:10:89:df:ae:4f:de:eb: fc:ae:0b:78:aa:5f:36:be:55:1e:12:17:cb:db:a4: d7:23:cf:b2:b1:1d:0a:f5:60:23:6f:e7:2d:62:87: 91:a6:e3:63:1c:ee:ff:9d:ba:b1:aa:f9:96:65:98: 15:10:2a:c4:ab:81:f3:9d:c5:a7:b8:33:8c:f4:26: c3:36:6b:5c:a2:bd:1b:a4:2f:95:52:19:d6:66:f0: 3f:ef:37:58:0b:b4:ea:3e:a4:fc:71:39:7c:50:06: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9F:9C:A6:0C:E4:12:70:21:2A:B2:3C:C1:21:EA:88:AF:68:27:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv4: 204.152.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:73:76:6d:71:0f:4f:03:79:d8:6b:a1:4e:92:1a:cb:f0:98: bd:ba:28:3e:a9:79:4b:0c:9e:28:79:22:a3:d8:82:b7:8e:7a: 24:df:70:0e:db:2f:cc:8c:f9:6a:e7:9e:e4:dd:41:c1:17:b6: c9:bc:49:df:6d:7a:c6:da:c8:2e:a4:d4:a2:ac:18:1d:a4:b1: 66:8a:e9:de:1c:4c:a1:c1:9d:2d:89:a1:17:ca:67:ed:b1:dd: 75:aa:fb:37:0c:ab:a1:e8:69:6f:b8:5c:5e:aa:3b:f3:a9:bd: 9a:dd:a0:10:5f:7f:e3:2a:67:7c:66:70:45:10:39:c0:09:4b: f2:62:b4:20:b6:92:52:6a:64:07:0b:26:53:ef:66:e5:33:b5: 3e:69:40:0b:cc:4f:62:78:2e:83:89:1a:a3:66:94:ac:c0:b4: 18:44:86:47:c5:9b:6d:06:1c:a2:89:59:74:78:de:0e:f0:b8: 30:ce:2a:41:b2:cb:d8:01:84:ea:df:6d:a2:ca:48:b9:f8:cd: 4d:cc:1f:b4:1c:47:0a:91:31:d9:94:95:1a:05:97:55:99:d2: bd:00:1c:ac:6e:86:6c:49:47:25:45:63:c8:6f:62:ed:da:82: 3e:2c:bf:e5:b5:7d:9c:f9:15:b9:54:25:4b:e3:d6:b4:fd:75: e6:87:4c:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkhtbv/FIZeITzTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI1MTAwMjIyNDAxM1oXDTI1MTIzMTIzNDAxM1owLzEtMCsGA1UEAxMk YWU4ZDJhNjctODBmMy00Y2UyLWE2MGEtMGY5MjZhZmVkNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTJUwuOuQBCB305euY3E4a2nJts7RC5UQLec Zcw5xpHIcQ1dYhubo20t4t4hhrG7dH+ZEhqSsm9zZfjc8Fh2/FVvM0CYOuzVWX1p LqVESErmCzW6gVmNBkNJ/9ZQOpxg1eG/fINw8mMpYLIH8Ljoaj765Ul5WmGY3MrL KMy3g9fqIotTdlPRxG8bwBPkfk7bN/aMHx0AqCVagrRlAhCJ365P3uv8rgt4ql82 vlUeEhfL26TXI8+ysR0K9WAjb+ctYoeRpuNjHO7/nbqxqvmWZZgVECrEq4HzncWn uDOM9CbDNmtcor0bpC+VUhnWZvA/7zdYC7TqPqT8cTl8UAbu9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmfnKYM5BJwISqyPMEh6oivaCcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvYTE4YmM4ZTUtMzAzMS0z MzM0LWI3NjUtMzM5MmY1ZDRmZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlzdm1xD08DedhroU6SGsvwmL26KD6peUsMnih5IqPYgreOeiTfcA7b L8yM+WrnnuTdQcEXtsm8Sd9tesbayC6k1KKsGB2ksWaK6d4cTKHBnS2JoRfKZ+2x 3XWq+zcMq6HoaW+4XF6qO/OpvZrdoBBff+MqZ3xmcEUQOcAJS/JitCC2klJqZAcL JlPvZuUztT5pQAvMT2J4LoOJGqNmlKzAtBhEhkfFm20GHKKJWXR43g7wuDDOKkGy y9gBhOrfbaLKSLn4zU3MH7QcRwqRMdmUlRoFl1WZ0r0AHKxuhmxJRyVFY8hvYu3a gj4sv+W1fZz5FblUJUvj1rT9deaHTKk= -----END CERTIFICATE-----Generated at Wed Oct 8 19:32:50 2025 by rpki-client