$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/22be48d5-f877-34f2-a9e9-e415ed6320a6.roa File: 22be48d5-f877-34f2-a9e9-e415ed6320a6.roa (raw, json) Hash identifier: hi7tUTnzWL83J0/3B4NlsgEVV5IBlgIbxfGLm04+r8A= Subject key identifier: 35:E7:AA:90:8C:5D:94:20:69:D8:02:E3:12:B9:65:08:28:85:09:87 Certificate issuer: /CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8 Certificate serial: 010D0C9F4328584AFEE6A7BCBDF026F2BD7A5D00 Authority key identifier: 0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/22be48d5-f877-34f2-a9e9-e415ed6320a6.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 400764 IP address blocks: 204.11.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a7:bc:bd:f0:26:f2:bd:7a:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=ca21b3fc-1873-4f30-bc1d-cd22a963a4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:65:12:89:22:a6:e5:fc:6e:ed:7d:13:5e:fe: 3c:88:fb:55:06:a4:6c:a3:17:45:cc:11:1c:fb:31: a8:00:27:7b:c0:bf:1c:32:1c:be:44:59:47:66:17: a4:b3:de:9a:04:11:9e:c9:73:41:8c:cb:f8:03:56: ae:c3:76:5e:55:b5:93:eb:06:33:dd:43:a5:ce:ef: 71:94:75:ce:5c:4c:0d:27:94:82:6b:f7:78:4b:b7: 95:55:ad:15:da:ea:01:4f:88:71:a1:72:d3:63:46: 45:b2:8c:e1:ff:0b:60:33:d7:ef:0d:db:77:16:65: ea:00:76:c5:1e:d2:2f:7b:53:d0:4c:06:51:53:05: 33:8c:9c:38:53:32:af:5a:63:73:46:fe:ed:f2:40: 39:b6:bb:79:8a:e8:fd:f9:9d:01:af:dc:c9:c0:d0: 74:f8:58:14:51:79:63:31:63:f3:b7:ef:e2:9c:48: 08:06:2e:c0:fc:0e:e2:b4:b6:24:09:74:29:15:10: 64:12:18:72:c4:f2:d3:4f:0e:f4:ed:07:9b:5b:a8: 6d:56:46:a6:79:b0:80:ad:b3:71:9e:79:8b:e0:de: 27:6d:ee:13:04:9b:f6:fe:c2:c0:5a:f9:1c:07:30: b9:d3:a2:52:7f:a3:12:03:29:61:d7:af:50:4f:bc: c5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E7:AA:90:8C:5D:94:20:69:D8:02:E3:12:B9:65:08:28:85:09:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/22be48d5-f877-34f2-a9e9-e415ed6320a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl X509v3 Authority Key Identifier: keyid:0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer sbgp-ipAddrBlock: critical IPv4: 204.11.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:0f:6d:1c:d9:ac:ce:16:3d:98:90:0f:4d:33:d3:79:63:de: 5f:2b:9e:c6:dd:0d:c7:f9:20:93:6e:52:0f:e2:9a:13:80:2d: bc:0c:6a:63:15:0f:11:d9:19:4f:9a:af:a5:dc:cc:1e:05:e5: ce:6c:1e:6d:e8:84:ed:3e:0c:b6:c6:f8:56:68:0a:2c:d5:2e: 07:d4:54:b5:4a:cd:3b:76:9b:b5:53:51:a5:40:bd:6b:6b:d9: 6e:a8:2c:6d:56:ad:3b:84:b1:20:1b:09:f4:cb:04:00:b3:12: 6f:c6:4c:8f:c5:30:8b:a7:dc:ad:2b:78:7b:74:1e:2f:fc:fa: 5a:ed:0a:eb:57:cb:b1:48:b4:0b:ca:be:76:bd:f7:f3:53:db: e3:5a:5d:4c:86:56:58:1a:86:4a:0c:a7:b0:d1:8e:7d:77:70: 01:4f:9c:47:8b:42:da:8c:e4:b0:33:5a:e8:88:18:93:7d:4c: 55:1c:db:ad:4e:a1:47:29:e2:36:d7:e1:f8:7c:52:8c:9b:12: 4e:8e:75:d3:84:f0:71:b4:19:15:1f:c8:d5:57:40:75:57:5a: 3f:e3:87:f7:40:bf:f9:3f:ef:f6:d6:ef:d6:dc:a4:16:5c:56: e3:a1:57:c6:de:43:70:48:e0:b6:c2:be:fc:9c:de:44:5d:f6: a8:98:00:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qe8vfAm8r16XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhkOTlmOGItYTg1YS00MWU5LTg5YjQtNjEyYzZiOWMx MGE4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk Y2EyMWIzZmMtMTg3My00ZjMwLWJjMWQtY2QyMmE5NjNhNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGUSiSKm5fxu7X0TXv48iPtVBqRsoxdFzBEc +zGoACd7wL8cMhy+RFlHZheks96aBBGeyXNBjMv4A1auw3ZeVbWT6wYz3UOlzu9x lHXOXEwNJ5SCa/d4S7eVVa0V2uoBT4hxoXLTY0ZFsozh/wtgM9fvDdt3FmXqAHbF HtIve1PQTAZRUwUzjJw4UzKvWmNzRv7t8kA5trt5iuj9+Z0Br9zJwNB0+FgUUXlj MWPzt+/inEgIBi7A/A7itLYkCXQpFRBkEhhyxPLTTw707QebW6htVkamebCArbNx nnmL4N4nbe4TBJv2/sLAWvkcBzC506JSf6MSAylh169QT7zFXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXnqpCMXZQgadgC4xK5ZQgohQmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOGQ5 OWY4Yi1hODVhLTQxZTktODliNC02MTJjNmI5YzEwYTgvMjJiZTQ4ZDUtZjg3Ny0z NGYyLWE5ZTktZTQxNWVkNjMyMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDhkOTlmOGItYTg1YS00MWU5LTg5 YjQtNjEyYzZiOWMxMGE4L2Q4ZDk5ZjhiLWE4NWEtNDFlOS04OWI0LTYxMmM2Yjlj MTBhOC5jcmwwHwYDVR0jBBgwFoAUC3KTapyDteNst3bjWSGKYYdWzuYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kOGQ5OWY4Yi1hODVhLTQxZTktODliNC02MTJj NmI5YzEwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkPbRzZrM4WPZiQD00z03lj3l8rnsbdDcf5IJNuUg/imhOALbwMamMV DxHZGU+ar6XczB4F5c5sHm3ohO0+DLbG+FZoCizVLgfUVLVKzTt2m7VTUaVAvWtr 2W6oLG1WrTuEsSAbCfTLBACzEm/GTI/FMIun3K0reHt0Hi/8+lrtCutXy7FItAvK vna99/NT2+NaXUyGVlgahkoMp7DRjn13cAFPnEeLQtqM5LAzWuiIGJN9TFUc261O oUcp4jbX4fh8UoybEk6OddOE8HG0GRUfyNVXQHVXWj/jh/dAv/k/7/bW79bcpBZc VuOhV8beQ3BI4LbCvvyc3kRd9qiYADM= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:16 2025 by rpki-client