$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa File: fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa (raw, json) Hash identifier: +lMN3wTOrMnklqAPRTwQ8y7JVrDo8YBXK4mDHv+AUfU= Subject key identifier: 59:7F:D7:3D:59:81:9D:CA:72:44:74:33:3F:6B:18:5C:66:3E:1E:71 Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Certificate serial: 010D0C9F4328584B21CC2D3AF0FAC6B8D84BAA00 Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 398573 IP address blocks: 204.108.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:2d:3a:f0:fa:c6:b8:d8:4b:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=d2686743-6eff-4a2d-940f-4698b7b6dc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:46:b8:a8:1f:a5:4b:4a:d3:82:c1:1d:92: 9c:55:38:1e:94:87:43:89:d9:c7:b3:05:64:9e:d2: ad:3d:a5:d2:1e:37:ae:3e:49:6a:3b:6e:31:0f:fa: be:5e:a0:9c:0b:54:0e:2f:49:2a:c9:10:1e:95:d1: ce:71:4d:d9:eb:6b:ae:03:8e:4c:62:31:b7:1c:0f: a2:ca:01:80:81:f4:82:a4:4a:44:4b:0d:3d:5e:70: 03:29:4d:51:19:29:d4:65:a4:e1:e2:6a:f7:10:30: ae:f9:5e:27:3d:84:a9:16:b0:09:cf:e0:49:4b:ce: 1c:c9:76:45:1d:0c:26:34:89:37:ec:81:2d:59:de: d0:23:48:14:25:8b:d2:cf:d5:fd:0f:54:48:74:3a: c4:7f:8c:c0:d9:f9:43:cf:8d:60:9b:c4:b3:4a:1c: 05:fc:20:d7:3b:6a:3a:1b:88:18:21:37:32:ff:9b: 19:5e:e5:3e:d5:26:7c:59:2c:df:fd:60:f9:ee:3b: 20:ae:a1:a4:0d:44:2f:ea:f6:18:fe:4a:d2:b3:c9: 84:d3:43:70:82:ee:65:5a:ed:57:9e:a8:74:a5:36: 4c:ff:02:c5:3c:f9:e4:f7:86:1e:87:ef:e7:25:2c: fa:21:ea:47:a0:38:9b:fd:97:d2:07:84:36:00:a2: cb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7F:D7:3D:59:81:9D:CA:72:44:74:33:3F:6B:18:5C:66:3E:1E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl X509v3 Authority Key Identifier: keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer sbgp-ipAddrBlock: critical IPv4: 204.108.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:76:b7:4e:0f:e6:92:4e:fc:fb:d9:12:97:5f:8d:ff:13:52: dd:9c:2f:53:65:93:ff:25:00:b1:77:64:ac:46:66:f9:d7:71: 8a:d4:17:49:80:c0:32:0c:07:f8:b8:ef:73:24:7b:1f:06:82: db:d7:32:2d:13:dd:31:d2:72:87:de:5b:c1:61:56:1c:14:37: 01:18:fe:98:4e:90:bd:57:0b:38:53:9f:f1:72:e1:de:d6:0f: dd:cd:ef:bb:02:40:8b:d3:50:fd:70:b3:10:49:c1:63:42:11: 4e:67:5c:23:2c:e9:e6:33:60:ab:72:c8:b3:6a:49:16:f0:7f: 71:14:c7:7c:3b:d3:b1:19:25:af:cd:3d:3e:dc:31:cb:b3:41: 88:ca:1a:cf:e9:2d:e7:a1:58:1d:86:08:e3:0a:96:61:37:26: 43:84:34:b7:a5:ff:65:ff:e2:af:12:4a:93:de:75:f1:c6:73: 32:12:a1:e5:36:8b:df:22:0a:44:60:cf:30:48:f6:5c:a0:46: c9:8c:95:3c:92:72:00:ba:15:86:9f:b3:90:2d:99:4a:b8:1b: c6:11:85:04:de:19:6c:6e:5b:3d:67:5b:d4:a0:e5:af:90:76: d5:47:ef:03:9b:1f:88:e1:f7:07:f0:97:6b:85:f0:1a:39:ce: ce:7f:50:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzC068PrGuNhLqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz YWExMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZDI2ODY3NDMtNmVmZi00YTJkLTk0MGYtNDY5OGI3YjZkYzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsNGuKgfpUtK04LBHZKcVTgelIdDidnHswVk ntKtPaXSHjeuPklqO24xD/q+XqCcC1QOL0kqyRAeldHOcU3Z62uuA45MYjG3HA+i ygGAgfSCpEpESw09XnADKU1RGSnUZaTh4mr3EDCu+V4nPYSpFrAJz+BJS84cyXZF HQwmNIk37IEtWd7QI0gUJYvSz9X9D1RIdDrEf4zA2flDz41gm8SzShwF/CDXO2o6 G4gYITcy/5sZXuU+1SZ8WSzf/WD57jsgrqGkDUQv6vYY/krSs8mE00Nwgu5lWu1X nqh0pTZM/wLFPPnk94Yeh+/nJSz6IepHoDib/ZfSB4Q2AKLLfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFl/1z1ZgZ3KckR0Mz9rGFxmPh5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvZmQxMGIzZjMtMTc3MC0z YTM0LTg4ZmQtNWYwMWIyZDE3MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0 YjRmMTNhYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB52t04P5pJO/PvZEpdfjf8TUt2cL1Nlk/8lALF3ZKxGZvnXcYrUF0mA wDIMB/i473Mkex8GgtvXMi0T3THScofeW8FhVhwUNwEY/phOkL1XCzhTn/Fy4d7W D93N77sCQIvTUP1wsxBJwWNCEU5nXCMs6eYzYKtyyLNqSRbwf3EUx3w707EZJa/N PT7cMcuzQYjKGs/pLeehWB2GCOMKlmE3JkOENLel/2X/4q8SSpPedfHGczISoeU2 i98iCkRgzzBI9lygRsmMlTyScgC6FYafs5AtmUq4G8YRhQTeGWxuWz1nW9Sg5a+Q dtVH7wObH4jh9wfwl2uF8Bo5zs5/UEs= -----END CERTIFICATE-----Generated at Wed Nov 5 23:35:43 2025 by rpki-client