$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa File: d77f1a9d-1504-37be-979a-7b6e3ced878c.roa (raw, json) Hash identifier: lIUT4CK35c81z4hX1RFWLj53KKbOypuOkGFQYgAXzvc= Subject key identifier: 83:6A:0A:6C:40:29:2D:2D:76:2E:98:D4:73:32:0E:30:6B:7D:8D:C2 Certificate issuer: /CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Certificate serial: 010D0C9F4328584B6367429126B339B558EDD980 Authority key identifier: 22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 18612 IP address blocks: 204.14.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:42:91:26:b3:39:b5:58:ed:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=f386b40a-5b09-4fbe-b18c-40aa0e42ca41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2f:58:87:1d:6a:20:05:1f:78:e4:d1:d0:ec: 0f:b3:44:85:4e:23:13:b3:e9:99:c6:40:36:46:51: ba:f2:07:3a:d7:89:23:f8:e0:b0:8a:4f:fd:3b:5c: 16:b3:04:a1:b8:ca:a2:d0:1e:3d:52:8e:0e:7e:db: 00:97:96:22:c5:05:04:27:75:cc:1f:70:d5:03:5f: b8:dc:76:23:a7:62:2a:b9:cc:ae:18:f9:d1:e7:eb: 17:92:58:5d:74:e2:ea:9d:05:07:04:9b:11:2e:4e: f3:02:67:40:4b:1d:76:30:75:0b:80:ca:c4:1e:73: 07:ff:77:29:3b:e3:19:54:18:4d:37:53:80:e1:60: 10:3a:31:ac:a4:18:53:3a:ca:df:6a:0d:43:80:f7: dc:19:a8:f1:6e:67:29:7e:97:72:9d:e5:30:2d:95: 09:85:01:35:d2:12:4b:11:d7:7a:49:98:c2:5f:05: 69:10:53:b7:3b:2a:32:10:94:28:61:e8:0d:29:04: 53:68:b0:c9:5f:b3:56:f1:db:b9:95:a0:e6:cf:61: e5:17:a6:2a:62:34:a2:72:89:c5:85:41:81:5b:fa: 4d:0b:1c:40:1f:6c:d6:86:dc:23:84:d9:77:5c:56: a0:85:61:0d:71:0c:95:a6:91:5c:2f:96:75:5d:0d: 54:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6A:0A:6C:40:29:2D:2D:76:2E:98:D4:73:32:0E:30:6B:7D:8D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl X509v3 Authority Key Identifier: keyid:22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer sbgp-ipAddrBlock: critical IPv4: 204.14.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9d:f5:68:1d:fa:74:eb:05:50:10:b7:42:2e:df:28:3a:71: a4:dc:d7:c0:d2:44:63:2b:28:6e:b5:4e:24:3f:79:ea:7d:a2: 72:93:e3:34:2f:8c:f7:54:42:5b:f4:e3:5c:38:e4:09:1a:b1: ee:13:53:d6:ea:65:06:46:39:f8:29:43:6c:b3:1a:0a:7a:b0: cb:eb:08:10:8a:ff:b3:9c:6f:37:98:2a:39:ea:cd:bc:05:57: 61:d9:6c:cf:1e:67:17:00:0c:26:9f:17:50:ec:e7:46:a8:e2: f6:ce:b9:ed:9e:a4:91:bc:f7:d8:86:4b:16:e1:e0:b7:fd:3c: 34:69:cf:d9:ef:ce:26:1c:ec:8f:dd:a7:ea:eb:c1:16:a9:bf: e7:7f:54:8d:da:9d:10:fb:eb:a9:65:b3:ae:79:96:3f:14:7d: 1d:6b:bb:9b:0f:b9:59:e6:fb:bc:34:64:b5:94:df:92:58:54: 68:af:67:15:3c:a7:6d:db:30:ca:9e:70:65:89:2d:6f:1e:43: 50:15:b2:89:b3:5f:42:4f:3e:0d:4a:bd:bd:d8:74:2b:80:37: 50:08:cd:01:b2:e5:62:dd:c7:cb:f3:27:c6:87:0a:24:5f:d1: b5:03:d9:c7:c3:7a:ac:98:d6:00:7f:a7:0a:49:60:78:88:27: bf:d3:42:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0KRJrM5tVjt2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFkMDhlNWMtNzllNC00Njk3LWEwMmUtZjM3ZWEyZGIy ODljMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZjM4NmI0MGEtNWIwOS00ZmJlLWIxOGMtNDBhYTBlNDJjYTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli9Yhx1qIAUfeOTR0OwPs0SFTiMTs+mZxkA2 RlG68gc614kj+OCwik/9O1wWswShuMqi0B49Uo4OftsAl5YixQUEJ3XMH3DVA1+4 3HYjp2IqucyuGPnR5+sXklhddOLqnQUHBJsRLk7zAmdASx12MHULgMrEHnMH/3cp O+MZVBhNN1OA4WAQOjGspBhTOsrfag1DgPfcGajxbmcpfpdyneUwLZUJhQE10hJL Edd6SZjCXwVpEFO3OyoyEJQoYegNKQRTaLDJX7NW8du5laDmz2HlF6YqYjSiconF hUGBW/pNCxxAH2zWhtwjhNl3XFaghWENcQyVppFcL5Z1XQ1U/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINqCmxAKS0tdi6Y1HMyDjBrfY3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MWQw OGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdlYTJkYjI4OWMvZDc3ZjFhOWQtMTUwNC0z N2JlLTk3OWEtN2I2ZTNjZWQ4NzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjFkMDhlNWMtNzllNC00Njk3LWEw MmUtZjM3ZWEyZGIyODljLzYxZDA4ZTVjLTc5ZTQtNDY5Ny1hMDJlLWYzN2VhMmRi Mjg5Yy5jcmwwHwYDVR0jBBgwFoAUIl1mkAJyYRWljfPscpZzsqSMpdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MWQwOGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdl YTJkYjI4OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2d9Wgd+nTrBVAQt0Iu3yg6caTc18DSRGMrKG61TiQ/eep9onKT4zQv jPdUQlv041w45Akase4TU9bqZQZGOfgpQ2yzGgp6sMvrCBCK/7OcbzeYKjnqzbwF V2HZbM8eZxcADCafF1Ds50ao4vbOue2epJG899iGSxbh4Lf9PDRpz9nvziYc7I/d p+rrwRapv+d/VI3anRD766lls655lj8UfR1ru5sPuVnm+7w0ZLWU35JYVGivZxU8 p23bMMqecGWJLW8eQ1AVsomzX0JPPg1Kvb3YdCuAN1AIzQGy5WLdx8vzJ8aHCiRf 0bUD2cfDeqyY1gB/pwpJYHiIJ7/TQlA= -----END CERTIFICATE-----Generated at Fri Oct 10 03:55:33 2025 by rpki-client