$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa File: b689c60f-db70-33f5-924b-db12bc459442.roa (raw, json) Hash identifier: fsHcwtuRitC6WnSaCAOqZuTW0TNY6d/WyM/jFjsLuVk= Subject key identifier: BF:7E:F8:13:CF:60:AC:FC:F0:3B:21:D6:87:A9:89:B9:73:A9:28:63 Certificate issuer: /CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Certificate serial: 010D0C9F4328584B9E07D33A2BFEEF6AE239A310 Authority key identifier: 0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 399277 IP address blocks: 204.188.242.0/24 maxlen: 24 204.188.254.0/24 maxlen: 24 208.98.6.0/24 maxlen: 24 208.98.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d3:3a:2b:fe:ef:6a:e2:39:a3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=35b1ca05-1de1-4e97-8762-37df802095c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b2:03:ca:da:bc:2e:bf:b0:e6:7b:29:fd:19: c7:c4:32:d9:66:a9:bf:63:53:3e:9f:4f:35:32:c2: 3e:7f:ae:07:e2:29:0b:ce:30:98:f6:d1:4e:4a:af: 1e:35:69:44:a6:4c:a3:38:77:4c:63:20:81:ff:e0: fc:23:62:94:b8:16:6d:54:56:a5:c5:a1:cf:31:f7: 3e:63:4c:03:a0:7d:54:10:4e:f0:77:3a:b1:99:1b: db:43:75:e8:86:0f:50:4d:74:48:c0:f3:4d:7e:5a: 1f:b9:c2:39:e9:bf:5b:37:05:02:89:6c:aa:1e:3a: 2b:31:de:02:32:3d:20:44:a9:ba:bd:da:fc:cf:73: 56:6a:57:fb:6c:c2:16:12:2f:a1:12:b9:bc:4f:7c: 64:9f:86:82:f4:5e:44:83:e5:ae:0d:f4:e7:42:87: 01:1d:37:62:dd:bb:24:1e:61:fd:1e:07:31:81:68: 1d:3f:36:5f:9b:b5:bf:a5:d6:8e:62:cf:c5:53:40: ee:49:3f:15:c4:2e:5c:59:bf:38:ed:95:55:d9:21: 3f:78:18:86:78:bb:33:78:2d:39:96:c8:12:a7:11: 16:0e:b2:78:3e:ea:40:71:34:be:56:53:29:e3:63: 46:a0:b2:80:c5:75:15:f2:be:e4:a6:58:d0:e7:e9: 5b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7E:F8:13:CF:60:AC:FC:F0:3B:21:D6:87:A9:89:B9:73:A9:28:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl X509v3 Authority Key Identifier: keyid:0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer sbgp-ipAddrBlock: critical IPv4: 204.188.242.0/24 204.188.254.0/24 208.98.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:93:0d:ac:20:ca:8e:83:18:95:d6:ba:b1:ec:f8:96:78:4f: f4:1f:72:5e:92:6a:d6:47:27:52:f1:86:28:91:7a:d5:7e:de: d0:69:0c:be:db:0f:41:9f:c5:3e:b5:97:c0:07:50:9f:3a:33: 4d:2d:0c:10:e2:2f:09:dd:a7:ba:b7:b0:e3:c2:9b:94:73:bd: fa:ac:dc:67:e6:63:12:53:23:ee:a1:e9:2e:46:61:ae:f2:a8: cc:ed:18:a4:70:d0:28:36:d4:ce:b0:f4:73:db:6b:e2:0f:07: 9f:a2:0b:d7:64:63:5f:81:2d:c6:3b:47:8e:4f:a8:e4:f0:7a: 45:da:37:6f:88:05:e2:be:ca:5f:b0:ac:9c:de:18:63:c9:a6: 78:5b:17:63:4c:f2:46:2a:4d:5b:9c:e1:6c:42:8b:d1:cc:ca: 8a:70:1c:f5:4b:46:08:f0:77:b3:e6:8d:0d:e9:f0:40:93:03: a3:1c:9f:b3:76:c2:50:77:1a:ab:4a:f2:ce:2d:c3:0a:16:b7: 5d:82:b6:d1:68:11:46:13:06:dd:ed:da:4d:a9:7c:f3:1c:37: 74:f1:30:da:24:81:d0:64:ef:bd:0a:92:2b:50:c8:6e:02:48: 85:87:43:25:fc:8b:3c:e1:59:38:12:54:34:8c:9d:f4:02:13: 63:2d:64:a0 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEueB9M6K/7vauI5oxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRmODNmMmUtZTRiNC00OTUzLThhY2MtNzgxNmIzMzNk MzMyMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MzViMWNhMDUtMWRlMS00ZTk3LTg3NjItMzdkZjgwMjA5NWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7IDytq8Lr+w5nsp/RnHxDLZZqm/Y1M+n081 MsI+f64H4ikLzjCY9tFOSq8eNWlEpkyjOHdMYyCB/+D8I2KUuBZtVFalxaHPMfc+ Y0wDoH1UEE7wdzqxmRvbQ3Xohg9QTXRIwPNNflofucI56b9bNwUCiWyqHjorMd4C Mj0gRKm6vdr8z3NWalf7bMIWEi+hErm8T3xkn4aC9F5Eg+WuDfTnQocBHTdi3bsk HmH9HgcxgWgdPzZfm7W/pdaOYs/FU0DuST8VxC5cWb847ZVV2SE/eBiGeLszeC05 lsgSpxEWDrJ4PupAcTS+VlMp42NGoLKAxXUV8r7kpljQ5+lblwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFL9++BPPYKz88Dsh1oepiblzqShjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGY4 M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2YjMzM2QzMzIvYjY4OWM2MGYtZGI3MC0z M2Y1LTkyNGItZGIxMmJjNDU5NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRmODNmMmUtZTRiNC00OTUzLThh Y2MtNzgxNmIzMzNkMzMyLzhkZjgzZjJlLWU0YjQtNDk1My04YWNjLTc4MTZiMzMz ZDMzMi5jcmwwHwYDVR0jBBgwFoAUDaYqxupoTrLFfVvi9T8jMGOP5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZGY4M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2 YjMzM2QzMzIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAzLzyAwQA zLz+AwQB0GIGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAmTDawgyo6DGJXWurHs+JZ4T/Qfcl6SatZHJ1Lx hiiRetV+3tBpDL7bD0GfxT61l8AHUJ86M00tDBDiLwndp7q3sOPCm5Rzvfqs3Gfm YxJTI+6h6S5GYa7yqMztGKRw0Cg21M6w9HPba+IPB5+iC9dkY1+BLcY7R45PqOTw ekXaN2+IBeK+yl+wrJzeGGPJpnhbF2NM8kYqTVuc4WxCi9HMyopwHPVLRgjwd7Pm jQ3p8ECTA6Mcn7N2wlB3GqtK8s4twwoWt12CttFoEUYTBt3t2k2pfPMcN3TxMNok gdBk770KkitQyG4CSIWHQyX8izzhWTgSVDSMnfQCE2MtZKA= -----END CERTIFICATE-----Generated at Mon Nov 3 08:36:40 2025 by rpki-client