$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/2ba3069e-b8c1-3ef2-b28d-66c86bd4ff58.roa File: 2ba3069e-b8c1-3ef2-b28d-66c86bd4ff58.roa (raw, json) Hash identifier: V3WDmxDpEIidifCDwxZJ84MvuR7ZsdJV09nE4jGIm9I= Subject key identifier: DA:DD:29:2F:77:99:4E:B6:02:36:0C:C5:D8:14:D7:33:51:68:D2:38 Certificate issuer: /CN=874e86b5-586f-43d7-be6f-cf21e434b31a Certificate serial: 010D0C9F4328584AF0F14253B393418236ADEE80 Authority key identifier: 79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/2ba3069e-b8c1-3ef2-b28d-66c86bd4ff58.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 55270 IP address blocks: 204.154.142.0/24 maxlen: 24 204.154.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:42:53:b3:93:41:82:36:ad:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874e86b5-586f-43d7-be6f-cf21e434b31a Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=8e9f24bf-da02-426e-8b9d-280d8397ad0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8c:fb:89:dd:b5:8c:57:02:ff:9d:6e:d8:4f: 05:53:06:9a:1d:88:e8:d9:a9:ae:8c:c5:21:11:6a: 2f:ab:52:d4:1c:3f:67:9e:9f:a0:ff:92:01:86:67: f4:f1:22:28:03:32:a0:3e:f4:94:20:44:eb:23:22: 74:09:b4:a6:ba:15:d3:32:6c:9a:4c:3d:22:c0:61: 9f:13:18:35:ac:c5:1d:c6:bf:c0:0e:9d:fd:5f:8f: 40:86:93:72:c4:c3:46:4c:c1:c6:9a:22:ea:97:31: 5f:9b:20:67:39:e4:4f:05:9f:85:08:cf:67:90:7a: 24:d3:54:43:49:ef:5e:76:fc:93:16:3d:66:ca:c4: e4:b1:85:39:10:e7:71:3a:d0:a0:c8:46:ab:1d:85: 32:b4:33:e1:29:b9:9b:71:15:12:9f:ba:70:f5:52: be:f0:24:56:8e:91:1d:14:a5:3f:bd:2b:16:79:c9: d4:64:0f:13:81:78:32:f3:49:21:77:3f:c9:e0:b2: 28:e5:f0:f7:1c:d3:0d:13:10:3a:12:72:7c:4a:e5: c6:e6:d6:72:43:22:65:ea:f7:4e:a0:bf:e9:0c:e0: 05:8d:96:89:2e:b2:e3:44:08:ed:22:18:33:6b:6b: 61:f8:4f:38:3a:d1:b4:d3:fd:ab:ed:69:ad:22:e7: 3f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DD:29:2F:77:99:4E:B6:02:36:0C:C5:D8:14:D7:33:51:68:D2:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/2ba3069e-b8c1-3ef2-b28d-66c86bd4ff58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl X509v3 Authority Key Identifier: keyid:79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer sbgp-ipAddrBlock: critical IPv4: 204.154.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:8c:44:da:ff:bb:1b:4d:9d:58:0e:40:af:52:cd:39:d6:c1: d7:fe:a7:db:dc:f9:30:c9:53:e8:c1:62:6a:a4:9e:66:e3:59: 0f:62:11:15:ca:26:65:fa:0e:4c:f6:c7:f8:df:74:3a:1c:7b: 95:1d:ec:e9:20:bb:9a:c0:01:11:41:4f:08:f8:81:72:d8:e1: 3c:ef:d6:26:c6:b1:a3:35:4f:e6:c8:f4:bb:f0:8e:d1:8b:e7: 9c:1f:0e:15:71:12:e6:da:4e:af:3c:54:ec:26:26:fd:25:18: ef:c1:07:df:2d:93:75:6e:10:1d:61:be:ef:a8:27:35:29:39: 06:38:11:6f:16:96:ad:50:0a:2a:24:5f:55:84:22:3d:89:5c: 89:3a:ec:c8:6a:76:38:af:ab:71:8c:40:35:f8:08:35:63:ba: 54:bd:51:a0:54:55:37:9f:e3:8e:cf:44:78:71:03:62:57:b8: 98:5d:b9:eb:9f:f4:92:91:b0:cb:7e:5a:2b:3e:72:30:05:db: b4:f7:33:9e:7c:29:c4:bf:c7:06:7f:c0:d0:16:b6:9b:b5:c6: dd:ea:7c:47:06:47:d5:8b:74:2c:d9:5e:2f:f7:75:95:aa:1d: ed:41:ac:04:3b:5f:21:96:9c:09:42:d2:0f:a3:68:71:a2:3d: 17:51:05:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UJTs5NBgjat7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc0ZTg2YjUtNTg2Zi00M2Q3LWJlNmYtY2YyMWU0MzRi MzFhMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OGU5ZjI0YmYtZGEwMi00MjZlLThiOWQtMjgwZDgzOTdhZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoz7id21jFcC/51u2E8FUwaaHYjo2amujMUh EWovq1LUHD9nnp+g/5IBhmf08SIoAzKgPvSUIETrIyJ0CbSmuhXTMmyaTD0iwGGf Exg1rMUdxr/ADp39X49AhpNyxMNGTMHGmiLqlzFfmyBnOeRPBZ+FCM9nkHok01RD Se9edvyTFj1mysTksYU5EOdxOtCgyEarHYUytDPhKbmbcRUSn7pw9VK+8CRWjpEd FKU/vSsWecnUZA8TgXgy80khdz/J4LIo5fD3HNMNExA6EnJ8SuXG5tZyQyJl6vdO oL/pDOAFjZaJLrLjRAjtIhgza2th+E84OtG00/2r7WmtIuc/OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrdKS93mU62AjYMxdgU1zNRaNI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84NzRl ODZiNS01ODZmLTQzZDctYmU2Zi1jZjIxZTQzNGIzMWEvMmJhMzA2OWUtYjhjMS0z ZWYyLWIyOGQtNjZjODZiZDRmZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODc0ZTg2YjUtNTg2Zi00M2Q3LWJl NmYtY2YyMWU0MzRiMzFhLzg3NGU4NmI1LTU4NmYtNDNkNy1iZTZmLWNmMjFlNDM0 YjMxYS5jcmwwHwYDVR0jBBgwFoAUeU1ChMm712cQU58VdYLc1BLE/u0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84NzRlODZiNS01ODZmLTQzZDctYmU2Zi1jZjIx ZTQzNGIzMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJqOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2MRNr/uxtNnVgOQK9SzTnWwdf+p9vc+TDJU+jBYmqknmbjWQ9iERXK JmX6Dkz2x/jfdDoce5Ud7Okgu5rAARFBTwj4gXLY4Tzv1ibGsaM1T+bI9LvwjtGL 55wfDhVxEubaTq88VOwmJv0lGO/BB98tk3VuEB1hvu+oJzUpOQY4EW8Wlq1QCiok X1WEIj2JXIk67Mhqdjivq3GMQDX4CDVjulS9UaBUVTef447PRHhxA2JXuJhdueuf 9JKRsMt+Wis+cjAF27T3M558KcS/xwZ/wNAWtpu1xt3qfEcGR9WLdCzZXi/3dZWq He1BrAQ7XyGWnAlC0g+jaHGiPRdRBTI= -----END CERTIFICATE-----Generated at Mon Nov 3 08:36:39 2025 by rpki-client