$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa File: 504539a8-a450-354d-9c7e-6a0128d4ded2.roa (raw, json) Hash identifier: gs/sLVWWD6OEoNLKdDdizBeZJMikttKbPxlCerthdSo= Subject key identifier: 42:79:FF:29:F3:CE:35:82:98:7A:DC:91:4C:2E:16:0B:A0:EA:C8:D9 Certificate issuer: /CN=c003af2f-f626-4f2a-a59d-433951f53b3b Certificate serial: 010D0C9F4328584B28C6E2CCADA81724D1DD2C80 Authority key identifier: A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 7132 IP address blocks: 204.17.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:e2:cc:ad:a8:17:24:d1:dd:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c003af2f-f626-4f2a-a59d-433951f53b3b Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=3f910712-de76-4a15-85e6-0dcd84ae17ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:47:e9:1f:18:2d:bd:ff:a0:d5:3f:3b:21:0f: d1:e8:e9:b4:11:a7:d7:10:ae:fc:04:27:3c:ad:4c: b3:43:09:58:47:d6:39:5b:e7:b2:78:25:a5:7c:21: e3:29:d7:e6:ad:6e:2c:47:56:e2:9f:9a:7b:6f:b1: 6e:78:dc:38:3c:a5:8b:2e:e2:d2:ed:db:fa:56:73: 17:39:f0:c9:c5:2e:f3:20:75:17:17:d1:e8:01:ba: 97:62:f6:2b:02:52:aa:86:b0:19:55:f5:2f:a9:91: 62:13:27:d1:20:00:63:b9:00:cd:f3:7a:17:e4:df: 68:d8:73:a3:80:20:14:13:1a:6e:e7:db:3e:8c:82: de:af:63:d1:b9:ba:9d:c1:90:2d:8f:07:00:1e:6c: 15:d1:e8:7b:7b:7b:ec:6b:dc:39:ee:5a:14:1a:25: 79:ea:22:96:74:6d:41:07:be:77:57:2f:6b:15:e1: ab:97:e2:49:11:ca:f5:9e:a8:50:0f:2e:7d:97:81: 13:1a:b5:7b:74:92:6c:b6:8e:64:33:09:cd:53:d6: c6:2a:69:71:df:bd:1b:0e:9d:9b:2b:bb:c2:f1:c0: d7:9c:50:ce:ee:8d:81:c6:e6:3f:d8:07:13:ab:23: cb:21:3f:12:2b:99:e2:15:96:d3:8a:a2:b2:3a:19: a5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:79:FF:29:F3:CE:35:82:98:7A:DC:91:4C:2E:16:0B:A0:EA:C8:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.crl X509v3 Authority Key Identifier: keyid:A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer sbgp-ipAddrBlock: critical IPv4: 204.17.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:37:bf:6b:5d:67:ba:20:ff:9c:ee:2b:0a:a4:07:05:a3:34: 70:11:a3:da:52:e8:55:9f:ce:60:80:bd:89:9a:c5:79:fe:16: 2e:7e:14:26:b4:b0:d1:1b:9f:1f:9c:53:c5:5f:09:03:32:e0: 48:d1:a7:fd:5b:e8:74:9a:4a:f8:6a:de:9b:f0:80:41:fd:2b: ba:f0:1e:ec:dd:c6:33:c7:97:aa:f8:3b:1c:9c:8b:55:ea:b8: f8:f8:79:43:b3:1c:55:2c:aa:7b:1c:fa:ba:58:e8:92:f8:84: 3a:05:17:56:f4:d3:00:b3:ee:13:7b:96:9d:52:2b:cb:61:59: 18:59:ac:a9:52:e2:b0:e7:37:62:02:af:fd:d5:94:de:9d:9a: 16:8b:46:23:82:25:4c:40:51:aa:0e:9f:f9:f9:9f:93:e0:09: 9f:d6:20:53:c7:2f:5e:a7:0a:7d:07:4d:32:77:5a:37:f8:f1: d9:eb:4c:d8:f2:ba:1d:48:5e:4d:9c:f2:45:ea:c3:99:aa:81: 8a:a6:09:9b:33:6e:c3:bf:3b:84:fa:a8:a4:64:a4:2a:3d:2d: 0d:c2:68:7c:23:32:ce:a1:3b:2b:4c:4d:ca:3d:bf:03:f0:b7: c5:a6:50:fb:56:54:b1:cc:48:9f:b7:e0:65:32:35:45:da:82: 3c:98:24:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuLMragXJNHdLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwM2FmMmYtZjYyNi00ZjJhLWE1OWQtNDMzOTUxZjUz YjNiMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk M2Y5MTA3MTItZGU3Ni00YTE1LTg1ZTYtMGRjZDg0YWUxN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kfpHxgtvf+g1T87IQ/R6Om0EafXEK78BCc8 rUyzQwlYR9Y5W+eyeCWlfCHjKdfmrW4sR1bin5p7b7FueNw4PKWLLuLS7dv6VnMX OfDJxS7zIHUXF9HoAbqXYvYrAlKqhrAZVfUvqZFiEyfRIABjuQDN83oX5N9o2HOj gCAUExpu59s+jILer2PRubqdwZAtjwcAHmwV0eh7e3vsa9w57loUGiV56iKWdG1B B753Vy9rFeGrl+JJEcr1nqhQDy59l4ETGrV7dJJsto5kMwnNU9bGKmlx370bDp2b K7vC8cDXnFDO7o2BxuY/2AcTqyPLIT8SK5niFZbTiqKyOhmlRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ5/ynzzjWCmHrckUwuFgug6sjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDAz YWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5NTFmNTNiM2IvNTA0NTM5YTgtYTQ1MC0z NTRkLTljN2UtNmEwMTI4ZDRkZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzAwM2FmMmYtZjYyNi00ZjJhLWE1 OWQtNDMzOTUxZjUzYjNiL2MwMDNhZjJmLWY2MjYtNGYyYS1hNTlkLTQzMzk1MWY1 M2IzYi5jcmwwHwYDVR0jBBgwFoAUodsX5jXPLcuqUy/oANCS8ZQkroIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDAzYWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5 NTFmNTNiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM3v2tdZ7og/5zuKwqkBwWjNHARo9pS6FWfzmCAvYmaxXn+Fi5+FCa0 sNEbnx+cU8VfCQMy4EjRp/1b6HSaSvhq3pvwgEH9K7rwHuzdxjPHl6r4Oxyci1Xq uPj4eUOzHFUsqnsc+rpY6JL4hDoFF1b00wCz7hN7lp1SK8thWRhZrKlS4rDnN2IC r/3VlN6dmhaLRiOCJUxAUaoOn/n5n5PgCZ/WIFPHL16nCn0HTTJ3Wjf48dnrTNjy uh1IXk2c8kXqw5mqgYqmCZszbsO/O4T6qKRkpCo9LQ3CaHwjMs6hOytMTco9vwPw t8WmUPtWVLHMSJ+34GUyNUXagjyYJAc= -----END CERTIFICATE-----Generated at Thu Oct 9 03:48:47 2025 by rpki-client