$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e77351d-244f-3943-b240-3d53c3a958b4.roa File: 1e77351d-244f-3943-b240-3d53c3a958b4.roa (raw, json) Hash identifier: oMo6RirJGbwLrSWKdE1drVd7VE2x1chR7Mb0UKNAx4c= Subject key identifier: 2B:77:E2:FE:ED:4F:E4:49:D2:91:FA:00:69:74:5B:67:4F:5F:2B:1F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B4D7F735B78BAC6EB52586120 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e77351d-244f-3943-b240-3d53c3a958b4.roa Signing time: Wed 24 Sep 2025 16:41:01 +0000 ROA not before: Wed 24 Sep 2025 16:41:01 +0000 ROA not after: Tue 23 Dec 2025 17:41:01 +0000 asID: 3949 IP address blocks: 204.27.72.0/27 maxlen: 27 204.27.72.32/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:7f:73:5b:78:ba:c6:eb:52:58:61:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 24 16:41:01 2025 GMT Not After : Dec 23 17:41:01 2025 GMT Subject: CN=9670b89a-f028-43a0-bfde-d3ccfd51d2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:52:b3:03:b4:50:97:9f:60:e5:34:4f:0b:cb: 74:8a:83:4a:9f:1f:06:9c:e9:c9:ae:77:35:52:5a: ea:22:93:b7:c3:11:45:79:c0:54:ac:19:cc:cb:45: 16:18:4f:46:1d:f5:a4:4e:4d:92:30:9c:e1:be:82: a8:d9:cc:95:9b:38:22:43:ce:38:68:3c:8e:94:7e: 12:67:2b:5f:45:84:1b:0e:49:9c:33:c3:bd:85:02: 9d:e5:e0:9a:4c:60:99:46:06:16:d8:39:ca:22:ed: e4:da:07:95:9f:3d:62:90:5a:9c:34:73:70:a5:c2: 42:3c:fb:93:2f:c6:92:66:9b:bb:5a:6f:dd:b5:56: 1b:3f:68:d3:fc:3a:4e:1d:79:e1:de:dd:be:d7:d9: bb:7c:5e:5d:d4:12:d0:43:02:d7:d8:8f:e5:76:51: 4e:14:46:28:bf:6f:ed:bf:a8:31:91:e8:5f:60:88: b5:0e:cc:36:74:f2:84:fc:3b:67:10:cf:52:ff:c4: d4:2b:44:54:26:14:2f:99:f4:21:39:fd:8d:11:f7: 17:d8:e9:84:08:c7:39:58:64:07:2f:26:0b:6e:79: c8:52:87:15:14:3f:29:ec:03:70:84:28:be:d4:ab: f8:8d:b9:92:39:62:15:08:97:39:82:64:6e:bf:f4: 53:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:77:E2:FE:ED:4F:E4:49:D2:91:FA:00:69:74:5B:67:4F:5F:2B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e77351d-244f-3943-b240-3d53c3a958b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.27.72.0/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:31:5e:d0:9a:8f:df:bd:d4:5d:2f:3d:b0:eb:df:ac:7d:79: ed:cd:2c:0d:34:37:52:91:bc:ce:11:c4:d5:fe:dc:1a:89:3e: 47:9e:3c:f7:3c:fb:f8:e8:90:ac:eb:d2:4c:e6:b6:cb:9c:89: 81:c9:8d:bf:9d:e1:57:5c:65:b9:96:40:2a:a3:6f:56:7c:c5: 0d:60:a8:4a:d8:aa:a2:b5:0e:6b:b6:a0:ac:60:84:be:46:26: 41:31:16:5d:01:d6:7f:3e:f5:4f:e1:3b:d5:5f:61:12:f6:76: 8c:bd:3d:b6:78:37:63:1e:9f:0a:5a:bc:89:ef:c4:19:40:e8: ce:e9:eb:9d:68:8b:e1:97:75:f1:9e:13:70:b6:c2:49:89:8c: f0:30:46:55:83:94:15:54:96:b8:7e:d2:73:a6:3c:0f:ab:d7: 97:e6:a5:ed:ee:f4:aa:ff:ef:cf:3f:91:a0:21:8a:90:84:dd: 97:0e:bb:a0:b4:5f:66:61:2d:65:6f:24:a9:c6:19:d5:7a:94: 6e:b1:50:a4:b2:2b:d5:31:9e:fc:b2:27:19:03:5d:ab:cc:aa: 0b:46:e4:ca:80:55:39:6b:79:67:0c:6a:eb:c0:f2:8f:f6:73: a9:08:a9:08:e6:cd:6a:21:42:c3:9a:4f:6e:4d:20:dd:16:6d: 1d:08:5a:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtNf3NbeLrG61JYYSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyNDE2NDEwMVoXDTI1MTIyMzE3NDEwMVowLzEtMCsGA1UEAxMk OTY3MGI4OWEtZjAyOC00M2EwLWJmZGUtZDNjY2ZkNTFkMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlKzA7RQl59g5TRPC8t0ioNKnx8GnOnJrnc1 UlrqIpO3wxFFecBUrBnMy0UWGE9GHfWkTk2SMJzhvoKo2cyVmzgiQ844aDyOlH4S ZytfRYQbDkmcM8O9hQKd5eCaTGCZRgYW2DnKIu3k2geVnz1ikFqcNHNwpcJCPPuT L8aSZpu7Wm/dtVYbP2jT/DpOHXnh3t2+19m7fF5d1BLQQwLX2I/ldlFOFEYov2/t v6gxkehfYIi1Dsw2dPKE/DtnEM9S/8TUK0RUJhQvmfQhOf2NEfcX2OmECMc5WGQH LyYLbnnIUocVFD8p7ANwhCi+1Kv4jbmSOWIVCJc5gmRuv/RT1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCt34v7tT+RJ0pH6AGl0W2dPXysfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWU3NzM1MWQtMjQ0Zi0z OTQzLWIyNDAtM2Q1M2MzYTk1OGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGzBtIADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRMV7Qmo/fvdRdLz2w69+sfXntzSwNNDdSkbzOEcTV/twaiT5Hnjz3 PPv46JCs69JM5rbLnImByY2/neFXXGW5lkAqo29WfMUNYKhK2KqitQ5rtqCsYIS+ RiZBMRZdAdZ/PvVP4TvVX2ES9naMvT22eDdjHp8KWryJ78QZQOjO6eudaIvhl3Xx nhNwtsJJiYzwMEZVg5QVVJa4ftJzpjwPq9eX5qXt7vSq/+/PP5GgIYqQhN2XDrug tF9mYS1lbySpxhnVepRusVCksivVMZ78sicZA12rzKoLRuTKgFU5a3lnDGrrwPKP 9nOpCKkI5s1qIULDmk9uTSDdFm0dCFoZ -----END CERTIFICATE-----Generated at Tue Oct 14 10:41:49 2025 by rpki-client