$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/333c4625-2011-380b-81cd-9ac18b847081.roa File: 333c4625-2011-380b-81cd-9ac18b847081.roa (raw, json) Hash identifier: XWZHAE3kfm61Pn6hrwAoeorJWj5kzBK63ZPBqbU0Y1Y= Subject key identifier: A1:4E:AB:69:74:85:B3:2D:8E:D4:96:AF:54:CB:B3:A1:81:A4:43:AE Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584B99D791B0179B568F67DFCB40 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/333c4625-2011-380b-81cd-9ac18b847081.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 62720 IP address blocks: 204.186.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:91:b0:17:9b:56:8f:67:df:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=2b5b878f-a251-4469-899f-5d4a8b2126ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fd:5e:e6:02:1b:84:42:15:5d:af:09:fc:22: df:d2:8e:3a:0b:79:18:88:a0:67:07:58:bd:c7:6a: f2:0e:f3:d1:56:9a:9b:83:fc:30:d2:e5:44:3e:59: f5:8a:e8:fb:da:a9:87:f1:ec:50:79:58:f2:b4:d2: b7:d5:a3:ac:4f:60:73:64:3a:84:d5:ff:ed:46:b6: 4b:07:ff:42:93:db:d4:cc:a5:c0:5f:90:7a:ba:df: 6d:cd:a9:c4:62:6c:35:f3:6b:a8:0f:60:82:f7:44: 3b:2a:a6:27:5f:08:d6:75:24:0c:6f:ff:82:2d:84: 42:f7:b6:c9:4e:36:8b:34:ca:fb:cb:43:b5:01:5a: 6c:1d:8b:74:96:00:e8:8e:a4:b8:c4:9c:6c:ef:86: 78:83:76:b0:cd:ad:93:3d:d3:a5:88:b5:75:f8:ee: 38:89:92:1f:fc:d0:30:39:47:64:58:f6:b0:32:5b: cd:e6:3f:39:d7:ca:dd:e0:ea:19:32:9d:97:48:02: ee:4f:6a:ee:c6:40:ae:ff:8b:31:a2:b4:89:9a:35: 5c:0e:8b:4a:be:dc:1d:43:00:83:33:0c:6f:13:ca: 90:c6:91:29:15:23:a8:03:dd:b4:cd:43:c1:f0:5e: ac:dd:a3:ff:20:a0:be:a1:80:36:6f:4f:17:96:f8: 2d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4E:AB:69:74:85:B3:2D:8E:D4:96:AF:54:CB:B3:A1:81:A4:43:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/333c4625-2011-380b-81cd-9ac18b847081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 204.186.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:be:f0:c8:7f:27:bc:67:f1:2e:bb:d8:d3:41:4f:ae:b6:ea: dd:73:ed:73:e4:f2:ab:d6:91:c9:fa:a3:e2:6d:10:70:e8:9d: 89:68:25:69:6c:a6:88:a6:94:08:11:18:8c:95:7e:75:9d:cd: c4:30:fb:ea:03:af:a3:19:3c:d4:2e:6d:66:7e:ff:4a:4e:8b: c9:10:c5:0e:79:bd:c2:74:0b:5a:d9:62:c8:fd:72:7f:fc:45: 8f:e9:4e:1c:69:eb:96:65:ec:07:fe:df:30:82:47:62:00:4a: 34:6e:74:a9:ec:ea:de:a6:90:08:59:5b:b5:22:55:ff:27:ef: 90:8a:6e:ce:b9:bb:d6:87:70:8a:bd:04:12:ef:97:c5:cd:22: 38:db:16:45:e2:e1:ee:aa:70:71:06:4d:2c:02:5c:30:b6:3e: d1:e0:53:16:18:bb:0f:2e:e2:86:9d:8c:ac:81:15:06:a2:80: a0:fc:c0:bb:49:c3:43:65:ad:d9:30:5b:d0:41:8c:8c:8d:11: 6d:25:13:d8:4d:c5:01:f3:8a:8a:4c:cb:d7:9e:6e:26:ee:71: 5a:72:6d:ec:9a:26:c0:a5:b2:cf:08:ed:e0:0d:96:19:40:2b: 82:ac:b3:7d:93:c6:e8:02:a2:1c:60:3d:26:79:b0:f2:90:96: f4:91:06:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15GwF5tWj2ffy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MmI1Yjg3OGYtYTI1MS00NDY5LTg5OWYtNWQ0YThiMjEyNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP1e5gIbhEIVXa8J/CLf0o46C3kYiKBnB1i9 x2ryDvPRVpqbg/ww0uVEPln1iuj72qmH8exQeVjytNK31aOsT2BzZDqE1f/tRrZL B/9Ck9vUzKXAX5B6ut9tzanEYmw182uoD2CC90Q7KqYnXwjWdSQMb/+CLYRC97bJ TjaLNMr7y0O1AVpsHYt0lgDojqS4xJxs74Z4g3awza2TPdOliLV1+O44iZIf/NAw OUdkWPawMlvN5j8518rd4OoZMp2XSALuT2ruxkCu/4sxorSJmjVcDotKvtwdQwCD MwxvE8qQxpEpFSOoA920zUPB8F6s3aP/IKC+oYA2b08XlvgtawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFOq2l0hbMtjtSWr1TLs6GBpEOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvMzMzYzQ2MjUtMjAxMS0z ODBiLTgxY2QtOWFjMThiODQ3MDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzLoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACe+8Mh/J7xn8S672NNBT6626t1z7XPk8qvWkcn6o+JtEHDonYloJWls poimlAgRGIyVfnWdzcQw++oDr6MZPNQubWZ+/0pOi8kQxQ55vcJ0C1rZYsj9cn/8 RY/pThxp65Zl7Af+3zCCR2IASjRudKns6t6mkAhZW7UiVf8n75CKbs65u9aHcIq9 BBLvl8XNIjjbFkXi4e6qcHEGTSwCXDC2PtHgUxYYuw8u4oadjKyBFQaigKD8wLtJ w0NlrdkwW9BBjIyNEW0lE9hNxQHziopMy9eebibucVpybeyaJsClss8I7eANlhlA K4Kss32TxugCohxgPSZ5sPKQlvSRBns= -----END CERTIFICATE-----Generated at Wed Nov 5 03:42:51 2025 by rpki-client