$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/5417fe0f-b83b-33a5-86ad-dcdede83208d.roa File: 5417fe0f-b83b-33a5-86ad-dcdede83208d.roa (raw, json) Hash identifier: 2HWUndbxKSDgZ7z571CVlWIh8kl4BwBhF8Rn/wGj/fI= Subject key identifier: 42:61:71:61:C7:10:10:3A:B2:84:49:E6:71:AE:EC:5C:5C:28:1B:A8 Certificate issuer: /CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902 Certificate serial: 010D0C9F4328584BB88D2B17A5DAC25EE7C48400 Authority key identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/5417fe0f-b83b-33a5-86ad-dcdede83208d.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 26461 IP address blocks: 208.91.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:2b:17:a5:da:c2:5e:e7:c4:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=7a621933-9c8a-4a4d-8830-fe24d914ce91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e2:11:84:00:a0:3d:13:7b:2e:6d:c2:ea:a4: f0:a1:42:53:04:d5:b7:cd:e2:3f:11:03:05:26:50: 61:cd:c7:ff:f4:c6:64:8e:36:e9:e9:d6:ec:db:9d: 53:ff:64:93:92:af:df:1a:ff:68:e2:bd:bb:e0:05: 00:53:38:d9:56:29:f4:88:c3:4d:9c:10:18:37:ef: 1b:38:18:2b:54:c2:cf:a1:11:25:e1:56:c1:d2:03: 24:87:2f:d2:40:d5:bc:32:59:98:76:d9:10:f9:36: 28:4c:cf:9a:79:a1:5d:2e:1d:ec:b8:23:f2:35:12: cb:18:c7:f9:ec:bc:1f:74:a0:30:b9:ab:51:d4:49: c6:7d:90:de:03:0c:ac:83:e6:40:11:66:43:53:ad: 4e:61:53:0b:58:9d:b8:03:9d:6d:be:5d:e9:6f:41: f4:ad:a9:68:f3:0b:62:9c:49:52:16:c9:f0:86:74: e7:ba:0d:ba:67:f3:66:78:c7:f2:b2:60:bd:2e:1c: 76:ed:fd:23:82:da:1a:d0:c5:95:ea:7a:b7:b3:a9: 7c:e8:22:b1:6c:bb:47:8e:9d:af:61:21:ed:b6:06: e7:30:7a:f5:12:c5:61:17:ce:62:4d:85:5f:f2:e4: d1:bd:13:e6:5f:09:13:fa:7d:57:db:62:23:22:90: bd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:61:71:61:C7:10:10:3A:B2:84:49:E6:71:AE:EC:5C:5C:28:1B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/5417fe0f-b83b-33a5-86ad-dcdede83208d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl X509v3 Authority Key Identifier: keyid:51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer sbgp-ipAddrBlock: critical IPv4: 208.91.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a3:92:7c:dd:3c:37:59:75:6c:d3:ff:00:fd:d1:c1:6a:81: 0f:5f:1e:c1:d5:65:fd:a4:3c:ca:09:ca:71:7c:bd:33:a7:0c: be:01:33:85:e7:74:b2:2c:c0:61:2c:4b:82:84:92:cc:a9:00: ae:6a:1a:bf:1d:8b:e7:75:8b:61:d5:26:01:37:48:34:6a:85: e1:d9:fd:54:e4:36:b2:68:45:d4:d4:e8:f7:30:8c:2c:d5:43: 38:5a:8f:89:b6:02:c4:46:0c:06:27:9b:5a:d9:4b:9b:84:af: 2f:65:c3:7b:99:ed:af:a9:76:a7:07:46:4d:d5:98:54:9b:3c: 01:01:23:c6:53:2e:b2:a8:8b:0c:75:03:82:4c:6d:48:a9:43: f6:74:b4:85:8a:1f:a4:0e:91:34:4c:ca:5e:23:36:60:0f:68: 7d:3a:64:53:8b:5a:bc:3d:b4:63:b6:51:1d:83:6d:fc:76:e1: 26:d6:2e:0a:f7:af:7e:eb:9b:3a:95:e4:e6:86:b7:d0:1f:41: 51:de:74:ca:16:33:60:66:ca:06:06:28:ac:20:43:db:c9:86: bb:24:92:c6:50:67:c5:01:20:06:d6:cf:96:de:db:26:51:09: 9b:18:bb:68:a8:40:83:5e:65:fe:d3:2e:58:83:61:35:0c:8d: 79:91:07:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSsXpdrCXufEhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlZTliMDAtN2Y5ZS00ZDJjLThlMTctNDk0ZGZmYTY2 OTAyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk N2E2MjE5MzMtOWM4YS00YTRkLTg4MzAtZmUyNGQ5MTRjZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+IRhACgPRN7Lm3C6qTwoUJTBNW3zeI/EQMF JlBhzcf/9MZkjjbp6dbs251T/2STkq/fGv9o4r274AUAUzjZVin0iMNNnBAYN+8b OBgrVMLPoREl4VbB0gMkhy/SQNW8MlmYdtkQ+TYoTM+aeaFdLh3suCPyNRLLGMf5 7LwfdKAwuatR1EnGfZDeAwysg+ZAEWZDU61OYVMLWJ24A51tvl3pb0H0ralo8wti nElSFsnwhnTnug26Z/NmeMfysmC9Lhx27f0jgtoa0MWV6nq3s6l86CKxbLtHjp2v YSHttgbnMHr1EsVhF85iTYVf8uTRvRPmXwkT+n1X22IjIpC9cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJhcWHHEBA6soRJ5nGu7FxcKBuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZGVl OWIwMC03ZjllLTRkMmMtOGUxNy00OTRkZmZhNjY5MDIvNTQxN2ZlMGYtYjgzYi0z M2E1LTg2YWQtZGNkZWRlODMyMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmRlZTliMDAtN2Y5ZS00ZDJjLThl MTctNDk0ZGZmYTY2OTAyLzJkZWU5YjAwLTdmOWUtNGQyYy04ZTE3LTQ5NGRmZmE2 NjkwMi5jcmwwHwYDVR0jBBgwFoAUUW9nf41XwHp/1O/IOs/yMVPvGmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZGVlOWIwMC03ZjllLTRkMmMtOGUxNy00OTRk ZmZhNjY5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqjknzdPDdZdWzT/wD90cFqgQ9fHsHVZf2kPMoJynF8vTOnDL4BM4Xn dLIswGEsS4KEksypAK5qGr8di+d1i2HVJgE3SDRqheHZ/VTkNrJoRdTU6PcwjCzV Qzhaj4m2AsRGDAYnm1rZS5uEry9lw3uZ7a+pdqcHRk3VmFSbPAEBI8ZTLrKoiwx1 A4JMbUipQ/Z0tIWKH6QOkTRMyl4jNmAPaH06ZFOLWrw9tGO2UR2Dbfx24SbWLgr3 r37rmzqV5OaGt9AfQVHedMoWM2BmygYGKKwgQ9vJhrskksZQZ8UBIAbWz5be2yZR CZsYu2ioQINeZf7TLliDYTUMjXmRBwQ= -----END CERTIFICATE-----Generated at Sun Nov 2 07:04:02 2025 by rpki-client