$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bbd436c6-609a-31cb-bef7-f830a6f8ff9a.roa File: bbd436c6-609a-31cb-bef7-f830a6f8ff9a.roa (raw, json) Hash identifier: W8M+9H5/LVykpfbG8ZWWM2IvX8LbXvv5QCdOaMQQ6MY= Subject key identifier: 62:BB:EA:30:EC:FB:32:14:4D:E2:3B:D9:38:7D:68:C2:F8:48:AC:BC Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AF951427823222541F0F6CA20 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bbd436c6-609a-31cb-bef7-f830a6f8ff9a.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 400810 IP address blocks: 204.2.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:42:78:23:22:25:41:f0:f6:ca:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=a05d5651-35e9-474d-a179-c5f05104cc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:f2:98:5e:67:00:0f:c9:27:48:4d:c3:8e: de:ef:7a:db:af:1a:ae:17:23:37:3a:ff:ee:3b:5a: c3:47:1a:0e:67:f7:a6:84:25:04:9e:df:b7:e3:8c: ea:d4:d6:98:e2:84:fb:42:ac:3c:15:7f:39:ee:bc: d1:1b:15:ce:37:85:dd:53:ce:22:e7:8c:8b:de:57: e6:9e:b3:63:b0:19:5f:fe:6c:7d:d3:07:db:3c:23: e1:ea:cf:41:c4:9d:12:05:a0:9a:ec:16:ab:3c:f9: b1:09:3d:87:50:5b:d0:53:c1:e8:98:32:0e:b3:c8: 8d:10:7e:21:1d:a6:34:1d:0d:57:4d:01:ca:d0:3e: ad:b7:b3:03:7c:ba:14:97:10:02:8f:50:08:26:a2: b8:2b:93:e6:22:67:2c:e9:2a:fb:56:ce:d5:b9:2d: c1:39:1b:d0:02:90:1e:af:21:94:18:24:52:28:36: b3:2f:b6:b2:41:7e:f5:1a:24:32:6a:b5:76:b2:ee: fb:52:af:85:bf:87:06:78:b8:7a:8a:2f:76:f4:16: f9:68:e2:6f:54:fb:f5:f7:07:e7:f7:39:3a:10:8d: eb:b5:28:ba:af:32:99:0d:4c:72:56:fc:d7:ad:4f: 25:99:2c:da:e5:dc:90:ef:68:6b:3f:33:30:16:72: 54:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BB:EA:30:EC:FB:32:14:4D:E2:3B:D9:38:7D:68:C2:F8:48:AC:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bbd436c6-609a-31cb-bef7-f830a6f8ff9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:07:b8:68:a6:de:fb:f6:3d:32:ca:91:2d:bc:52:09:e1:4d: d9:d1:52:90:d0:c9:f7:37:d3:2b:18:a6:b0:79:af:77:fe:80: 8d:54:86:3f:35:f0:eb:32:26:12:2c:59:e5:a3:1c:6c:2a:47: 45:2d:21:3d:89:51:fc:36:15:6b:87:3e:2d:d2:fe:77:ba:09: ed:f4:24:e1:aa:09:50:f2:a6:e0:ca:99:c4:cc:62:09:32:fc: 54:8a:41:a3:30:55:20:c2:99:c6:fa:d0:66:ff:06:25:92:97: 8a:ff:7d:0c:fe:2a:f4:d1:d0:2c:74:04:0b:77:40:90:36:0e: e1:05:df:e7:cf:55:d6:43:6f:27:de:c8:bd:69:02:a7:4d:75: ae:1e:b7:64:ec:6b:43:5c:67:9f:15:04:c7:0b:18:e4:c8:77: 80:6b:72:13:f0:33:0c:fc:6e:f7:d6:e8:f2:3c:77:4c:00:cf: 51:1f:c5:42:a1:95:73:d9:de:84:24:68:c2:05:9f:81:58:dc: 2c:09:d9:cd:75:40:4c:0a:5e:02:4c:af:d7:cc:0e:f3:a9:f9: d5:b8:14:06:ab:5c:0c:72:48:b1:bd:e2:35:ce:87:41:7f:39: 63:a7:49:ee:f6:13:c4:ff:82:38:33:9e:f0:0f:17:70:88:d3: 02:70:d8:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUJ4IyIlQfD2yiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YTA1ZDU2NTEtMzVlOS00NzRkLWExNzktYzVmMDUxMDRjYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KDymF5nAA/JJ0hNw47e73rbrxquFyM3Ov/u O1rDRxoOZ/emhCUEnt+344zq1NaY4oT7Qqw8FX857rzRGxXON4XdU84i54yL3lfm nrNjsBlf/mx90wfbPCPh6s9BxJ0SBaCa7BarPPmxCT2HUFvQU8HomDIOs8iNEH4h HaY0HQ1XTQHK0D6tt7MDfLoUlxACj1AIJqK4K5PmImcs6Sr7Vs7VuS3BORvQApAe ryGUGCRSKDazL7ayQX71GiQyarV2su77Uq+Fv4cGeLh6ii929Bb5aOJvVPv19wfn 9zk6EI3rtSi6rzKZDUxyVvzXrU8lmSza5dyQ72hrPzMwFnJUVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGK76jDs+zIUTeI72Th9aML4SKy8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmJkNDM2YzYtNjA5YS0z MWNiLWJlZjctZjgzMGE2ZjhmZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAKHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8HuGim3vv2PTLKkS28UgnhTdnRUpDQyfc30ysYprB5r3f+gI1Uhj81 8OsyJhIsWeWjHGwqR0UtIT2JUfw2FWuHPi3S/ne6Ce30JOGqCVDypuDKmcTMYgky /FSKQaMwVSDCmcb60Gb/BiWSl4r/fQz+KvTR0Cx0BAt3QJA2DuEF3+fPVdZDbyfe yL1pAqdNda4et2Tsa0NcZ58VBMcLGOTId4BrchPwMwz8bvfW6PI8d0wAz1EfxUKh lXPZ3oQkaMIFn4FY3CwJ2c11QEwKXgJMr9fMDvOp+dW4FAarXAxySLG94jXOh0F/ OWOnSe72E8T/gjgznvAPF3CI0wJw2Hk= -----END CERTIFICATE-----Generated at Mon Oct 27 07:08:49 2025 by rpki-client