$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa File: df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa (raw, json) Hash identifier: 5xNeuGX3ySJyObvmCQHMt3A10IWT1XAJnVXjMXAdRUw= Subject key identifier: 7A:D9:6D:F1:6C:29:A4:03:0A:B2:B0:04:43:50:79:33:28:F6:A5:95 Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584B7F520DD8D62BA71D25D949C0 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396952 IP address blocks: 204.238.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0d:d8:d6:2b:a7:1d:25:d9:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=9ead0684-18e1-4512-9587-be69fdcab941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:6f:17:d4:c0:65:8a:1c:7c:d1:ae:48:71: 0e:5c:4e:af:cf:4a:c2:e1:9b:07:a0:63:41:73:3a: 62:db:4e:3c:27:45:2f:b0:e3:bf:09:9b:29:fe:2d: c4:c5:1a:c7:65:e2:56:da:5e:85:86:95:c3:93:df: 59:53:7e:cb:08:18:ae:6f:14:45:d7:b9:c0:73:a5: 8f:b1:a3:93:4e:12:c7:7c:05:5c:6a:ce:4f:ff:64: dc:6d:86:0b:a0:38:03:1b:51:25:74:07:f9:f0:1e: 31:e3:3a:4c:f7:3e:3e:bc:b2:b7:5e:89:8b:fb:34: a8:af:9e:68:2a:fe:01:f5:e1:aa:e9:88:3b:08:80: 1e:f5:ff:fd:bf:d1:0f:fc:03:99:f2:ed:1f:da:a6: b7:ba:81:38:1e:94:ac:73:b1:a4:08:dd:bb:a1:3b: d3:f6:94:1e:62:5d:4a:d7:92:47:c6:f2:21:b5:c6: bf:ef:c7:6b:c0:5b:c1:fc:ea:59:53:dd:3b:bb:3b: 9d:9c:f3:b6:ca:f4:dd:51:46:02:2b:0c:4d:04:ea: 8a:9f:2f:97:de:6c:1d:f3:c2:a1:24:d0:d0:36:c9: e5:10:3c:7e:b8:07:7c:9c:37:7b:15:20:cd:4c:a6: b4:1f:fe:f4:97:ad:25:86:c5:c5:62:2f:1d:cc:01: fa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D9:6D:F1:6C:29:A4:03:0A:B2:B0:04:43:50:79:33:28:F6:A5:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 204.238.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:88:5f:fd:c0:17:4d:59:56:44:e7:53:79:72:02:9c:33:c8: a5:4d:97:c7:36:70:10:de:ec:d9:d5:05:f2:39:cb:d3:92:9a: a7:fd:fd:37:44:39:bb:82:1e:38:d8:eb:79:36:c4:1e:eb:6e: f5:6c:0b:ad:30:35:0e:44:3d:ea:83:5a:2f:ea:e5:5b:33:e9: fa:90:9e:d4:6b:12:c7:38:fb:d7:76:90:1b:4b:ea:0c:94:75: 44:b0:df:e6:bd:1e:57:71:45:24:9d:de:76:1e:26:71:45:ba: d7:59:c2:d0:2d:33:00:95:b8:8b:b4:db:2d:7c:ff:d4:6b:a9: e4:a4:c9:c7:06:e8:af:ce:90:38:54:4d:7e:76:6b:c9:46:db: c1:a9:b3:1f:cb:d1:1f:a5:19:6f:be:c4:99:a2:09:c3:f0:fb: fc:89:44:f2:b7:bd:b6:76:ae:ec:10:86:90:10:30:00:8f:70: c3:f9:7a:2f:59:c6:81:2c:63:e5:6d:f5:fc:34:08:38:e0:6e: 39:9f:66:ec:8e:de:e3:7a:8e:01:fc:b9:35:ee:bf:1a:17:de: 77:f9:65:a0:ad:7e:9f:7f:f4:5e:ce:a2:17:7b:a2:af:8c:36: 43:31:7b:87:09:5b:9c:5f:d4:ea:0a:0a:82:20:26:73:1f:74: fe:43:c5:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ug3Y1iunHSXZScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OWVhZDA2ODQtMThlMS00NTEyLTk1ODctYmU2OWZkY2FiOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5tvF9TAZYocfNGuSHEOXE6vz0rC4ZsHoGNB czpi2048J0UvsOO/CZsp/i3ExRrHZeJW2l6FhpXDk99ZU37LCBiubxRF17nAc6WP saOTThLHfAVcas5P/2TcbYYLoDgDG1EldAf58B4x4zpM9z4+vLK3XomL+zSor55o Kv4B9eGq6Yg7CIAe9f/9v9EP/AOZ8u0f2qa3uoE4HpSsc7GkCN27oTvT9pQeYl1K 15JHxvIhtca/78drwFvB/OpZU907uzudnPO2yvTdUUYCKwxNBOqKny+X3mwd88Kh JNDQNsnlEDx+uAd8nDd7FSDNTKa0H/70l60lhsXFYi8dzAH6PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrZbfFsKaQDCrKwBENQeTMo9qWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvZGYzN2NjOGYtY2E2My0z M2RkLTllOTYtMzRiZDJjZDMxMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKIX/3AF01ZVkTnU3lyApwzyKVNl8c2cBDe7NnVBfI5y9OSmqf9/TdE ObuCHjjY63k2xB7rbvVsC60wNQ5EPeqDWi/q5Vsz6fqQntRrEsc4+9d2kBtL6gyU dUSw3+a9HldxRSSd3nYeJnFFutdZwtAtMwCVuIu02y18/9RrqeSkyccG6K/OkDhU TX52a8lG28Gpsx/L0R+lGW++xJmiCcPw+/yJRPK3vbZ2ruwQhpAQMACPcMP5ei9Z xoEsY+Vt9fw0CDjgbjmfZuyO3uN6jgH8uTXuvxoX3nf5ZaCtfp9/9F7Oohd7oq+M NkMxe4cJW5xf1OoKCoIgJnMfdP5DxUQ= -----END CERTIFICATE-----Generated at Fri Oct 17 13:03:03 2025 by rpki-client