$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa File: caa97378-5f08-3b0d-b7e1-827ad74af39f.roa (raw, json) Hash identifier: UwEQiZ0FKJXVhuEQJpZgZ+U5O5wyG2xxYdDaLdBt2Pg= Subject key identifier: 1D:8F:F0:C3:C7:56:BF:81:AF:B6:D3:78:FB:C8:B7:30:DD:91:9C:78 Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F4328584B636743215612D48DE9B2A740 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 36290 IP address blocks: 204.19.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:43:21:56:12:d4:8d:e9:b2:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=8cab2922-2c75-4880-9847-3b55829776b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:37:5f:32:ec:d0:36:29:04:1e:d0:48:6b: 9c:49:f9:43:e6:7c:33:c6:fc:01:75:bf:d2:48:ab: c2:9e:9c:df:7a:df:4a:c3:48:83:68:33:ab:41:cf: 5c:2e:39:1c:86:2e:09:8b:18:78:cc:e0:2a:94:e8: 92:3a:a8:b9:00:f1:54:ee:49:e4:df:c6:93:8b:31: 0c:79:50:59:00:56:8b:ca:ea:8b:c5:36:d2:55:78: 6f:14:3e:4a:17:d4:f8:7e:aa:f3:f0:ba:49:19:f4: 7f:15:7c:ff:f1:9d:fb:ff:53:b5:cf:40:bc:cf:ff: 43:75:9b:2a:2d:f5:88:79:f9:66:7e:13:64:73:63: c4:af:8f:c2:27:c7:b2:b2:a2:7d:73:83:7d:79:3f: 7f:e2:9d:9f:cd:0e:dc:25:59:95:f9:6b:12:ac:b2: 8b:0c:20:69:78:38:e4:c6:43:41:9c:52:24:0d:0b: 45:6e:24:36:d3:d9:e9:4e:51:35:98:76:59:5d:46: 41:1d:c3:04:bb:07:e1:02:b9:95:a9:06:27:56:b2: d2:a0:19:23:e6:8a:ca:f9:13:be:2b:0b:1e:41:ad: b8:bc:a2:ed:00:2b:8a:9b:8e:a9:f4:8d:95:c5:df: 42:2c:e9:20:3c:3d:86:89:d7:49:d2:04:08:54:b6: f8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8F:F0:C3:C7:56:BF:81:AF:B6:D3:78:FB:C8:B7:30:DD:91:9C:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 204.19.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:33:7e:55:32:8c:8c:21:36:ea:9d:1e:ec:18:d0:59:a6:a3: b9:b6:2a:b1:a8:0e:ae:44:a8:d5:47:51:c5:8e:30:13:22:93: d1:bc:03:a4:c4:83:2d:91:fe:ce:c9:e3:1a:3b:5e:64:d6:85: 57:b5:25:e1:bf:6f:ad:94:3b:ae:ad:9d:d4:79:2d:86:4e:68: 87:da:cc:c7:61:f1:4c:e8:6c:1a:91:be:09:ee:9e:a9:28:c5: 55:a4:73:3b:b6:f4:f6:30:26:6b:5d:f9:ee:9d:d3:4c:b9:3e: 8a:aa:db:bb:46:65:54:85:df:0b:6e:9e:d3:b8:4d:96:37:b7: 3b:b2:fe:73:85:ef:21:b7:e5:41:b8:d3:39:6f:2e:e5:5d:fa: 60:2e:96:8b:9f:ff:73:3b:da:78:7d:01:88:ef:7e:0f:16:4e: 1f:91:0c:11:8f:cb:96:96:17:c6:8b:d5:fb:18:cb:c8:d7:79: 74:b5:76:75:4d:ae:a2:a7:c3:57:58:86:ff:8f:9a:fe:20:9a: bf:9c:83:f4:7d:5d:ee:14:fd:50:35:c6:70:79:e0:8d:cc:88: db:f3:7c:b1:49:e1:aa:5c:36:7f:14:d9:bc:0e:c8:dd:cd:15: 9b:b0:78:31:24:9a:88:e6:96:cc:2d:be:a8:59:16:bb:73:3a: f5:7c:e3:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0MhVhLUjemyp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk OGNhYjI5MjItMmM3NS00ODgwLTk4NDctM2I1NTgyOTc3NmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0g3XzLs0DYpBB7QSGucSflD5nwzxvwBdb/S SKvCnpzfet9Kw0iDaDOrQc9cLjkchi4Jixh4zOAqlOiSOqi5APFU7knk38aTizEM eVBZAFaLyuqLxTbSVXhvFD5KF9T4fqrz8LpJGfR/FXz/8Z37/1O1z0C8z/9DdZsq LfWIeflmfhNkc2PEr4/CJ8eysqJ9c4N9eT9/4p2fzQ7cJVmV+WsSrLKLDCBpeDjk xkNBnFIkDQtFbiQ209npTlE1mHZZXUZBHcMEuwfhArmVqQYnVrLSoBkj5orK+RO+ KwseQa24vKLtACuKm46p9I2Vxd9CLOkgPD2GiddJ0gQIVLb44QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2P8MPHVr+Br7bTePvItzDdkZx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvY2FhOTczNzgtNWYwOC0z YjBkLWI3ZTEtODI3YWQ3NGFmMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMczflUyjIwhNuqdHuwY0Fmmo7m2KrGoDq5EqNVHUcWOMBMik9G8A6TE gy2R/s7J4xo7XmTWhVe1JeG/b62UO66tndR5LYZOaIfazMdh8UzobBqRvgnunqko xVWkczu29PYwJmtd+e6d00y5Poqq27tGZVSF3wtuntO4TZY3tzuy/nOF7yG35UG4 0zlvLuVd+mAulouf/3M72nh9AYjvfg8WTh+RDBGPy5aWF8aL1fsYy8jXeXS1dnVN rqKnw1dYhv+Pmv4gmr+cg/R9Xe4U/VA1xnB54I3MiNvzfLFJ4apcNn8U2bwOyN3N FZuweDEkmojmlswtvqhZFrtzOvV846Q= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:21 2025 by rpki-client