$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa File: cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa (raw, json) Hash identifier: yQEhtUJFrOhVNZ3f/Wwq7/lyYifQor8khmmlFHwZXTQ= Subject key identifier: 4F:63:B2:88:49:64:C7:5D:7E:82:3B:61:F5:E8:2F:A3:00:C7:0F:51 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584B99D7801D3645C34D9BB72900 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 1280 IP address blocks: 204.152.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:80:1d:36:45:c3:4d:9b:b7:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=b8229055-9823-47f8-b1f1-f855c8e5f03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1d:ba:0b:42:d2:8d:b7:80:a2:11:27:e0:68: 8c:08:f6:d7:d3:d2:94:3a:7e:5b:8f:9e:d3:d3:f4: 22:fc:13:cd:6f:4c:8c:e6:11:37:aa:5c:4b:db:b6: e2:34:98:6c:b6:96:6d:38:ec:08:3e:7e:ba:39:fa: 21:db:65:46:32:49:11:3f:2a:6b:21:9b:b3:07:e8: 61:36:a0:71:58:3e:26:b6:ac:2a:10:78:04:5c:3c: e3:e1:51:d4:fa:99:db:94:a8:cd:9c:05:41:7c:52: 2f:d5:ca:f5:48:21:45:ea:ab:3f:35:a2:3c:37:62: fc:cc:71:0f:ff:0c:ca:75:c4:45:27:6b:bc:15:b0: b0:f7:88:11:a7:9e:62:95:9e:09:b9:2e:da:8d:a2: 03:38:5a:34:3b:1b:55:82:05:4b:43:25:f4:20:6d: a2:96:ee:fa:c0:da:24:97:6d:c6:e1:07:f2:72:6c: af:35:56:22:09:d1:15:05:36:98:c3:c1:eb:57:9a: 40:d3:96:02:fe:67:73:99:cc:2f:8e:29:89:d3:f3: a6:24:5b:80:a4:9b:6e:6d:5d:10:3e:f2:8d:91:ed: 67:3a:fc:8f:a3:5b:f5:3c:c5:4c:4c:78:1d:cb:81: ee:e6:cc:a8:15:4d:0f:13:a6:d9:d3:3f:15:3b:cd: 90:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:63:B2:88:49:64:C7:5D:7E:82:3B:61:F5:E8:2F:A3:00:C7:0F:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:94:ed:f1:ae:74:8b:9e:1c:fc:0e:4f:ab:3e:9f:33:5e:24: 34:2c:58:94:de:bf:75:c2:ff:6f:10:ae:7a:e3:c0:cd:9f:00: 4a:54:64:a2:64:d4:6d:ad:25:e3:31:97:d9:8e:fe:31:36:ea: aa:15:c2:80:2d:a6:7b:9a:f7:b8:42:bb:07:9a:03:77:3a:88: f7:5f:e3:4f:35:78:42:eb:8b:fd:4d:78:bd:ef:41:b6:04:cf: 21:f5:53:5a:db:51:04:23:57:71:dd:00:a5:a7:b7:18:e4:9f: 5d:48:f9:20:f8:ab:e9:06:19:61:a2:10:b5:a9:18:66:83:5f: f8:34:b8:0c:29:2b:b1:21:e7:fa:3a:96:8a:ec:10:0c:50:58: 0d:96:2c:05:25:11:17:c5:9b:94:3f:fc:cf:c8:f7:29:c5:01: d0:2d:67:24:8d:b1:40:fe:7e:f3:5a:96:3a:13:0b:21:e9:10: b7:17:6a:08:8f:02:a4:b1:c6:1d:d0:b5:05:ef:7b:f5:16:ce: f9:a8:f8:96:03:b2:a5:ac:38:60:4a:b4:02:7e:2e:e8:6b:08: 24:bb:41:d0:5a:78:ae:a3:bd:14:c8:1d:1c:85:18:ea:3c:2d: ac:33:f1:44:aa:ab:38:24:d3:99:bf:d0:fe:53:9a:5f:0a:c1: b6:18:1f:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14AdNkXDTZu3KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YjgyMjkwNTUtOTgyMy00N2Y4LWIxZjEtZjg1NWM4ZTVmMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx26C0LSjbeAohEn4GiMCPbX09KUOn5bj57T 0/Qi/BPNb0yM5hE3qlxL27biNJhstpZtOOwIPn66Ofoh22VGMkkRPyprIZuzB+hh NqBxWD4mtqwqEHgEXDzj4VHU+pnblKjNnAVBfFIv1cr1SCFF6qs/NaI8N2L8zHEP /wzKdcRFJ2u8FbCw94gRp55ilZ4JuS7ajaIDOFo0OxtVggVLQyX0IG2ilu76wNok l23G4QfycmyvNVYiCdEVBTaYw8HrV5pA05YC/mdzmcwvjimJ0/OmJFuApJtubV0Q PvKNke1nOvyPo1v1PMVMTHgdy4Hu5syoFU0PE6bZ0z8VO82QAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9jsohJZMddfoI7YfXoL6MAxw9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvY2ZlYTMyZjQtZDU5MS0z YTM3LTljMjItNGZlYjZmYTRhM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyU7fGudIueHPwOT6s+nzNeJDQsWJTev3XC/28QrnrjwM2fAEpUZKJk 1G2tJeMxl9mO/jE26qoVwoAtpnua97hCuweaA3c6iPdf4081eELri/1NeL3vQbYE zyH1U1rbUQQjV3HdAKWntxjkn11I+SD4q+kGGWGiELWpGGaDX/g0uAwpK7Eh5/o6 lorsEAxQWA2WLAUlERfFm5Q//M/I9ynFAdAtZySNsUD+fvNaljoTCyHpELcXagiP AqSxxh3QtQXve/UWzvmo+JYDsqWsOGBKtAJ+LuhrCCS7QdBaeK6jvRTIHRyFGOo8 Lawz8USqqzgk05m/0P5Tml8KwbYYH5Q= -----END CERTIFICATE-----Generated at Sun Oct 26 01:47:47 2025 by rpki-client