$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/639b3d5b-1477-3efd-86ea-1a0bd36acaab.roa File: 639b3d5b-1477-3efd-86ea-1a0bd36acaab.roa (raw, json) Hash identifier: rOrXXTSQ3B8hpmZdGPG5S6ZbjL2NbNuV0WjXJVGXfb0= Subject key identifier: A1:9C:81:C9:7F:18:7E:8D:AC:7A:CB:48:18:E0:B4:07:97:9C:7F:B7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD44083A093F28063B17C200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/639b3d5b-1477-3efd-86ea-1a0bd36acaab.roa Signing time: Tue 26 Aug 2025 22:57:21 +0000 ROA not before: Tue 26 Aug 2025 22:57:21 +0000 ROA not after: Mon 24 Nov 2025 23:57:21 +0000 asID: 31898 IP address blocks: 204.152.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:08:3a:09:3f:28:06:3b:17:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:57:21 2025 GMT Not After : Nov 24 23:57:21 2025 GMT Subject: CN=f9eb697a-9e96-465c-ac5a-ab52009bdfdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:ce:0c:3d:f3:a2:2f:9a:fd:b6:1b:6c:5f: fa:25:22:5b:94:46:9a:e2:28:0d:23:cd:b6:d8:0e: f0:98:7f:3d:12:bb:89:0d:99:5b:af:61:43:76:ad: d4:f5:c6:bf:82:0c:b4:b8:00:7d:86:00:0e:8e:1c: 44:db:a0:4d:ff:84:71:34:b7:d0:b1:c5:23:0e:a1: ee:9a:46:76:89:d5:54:16:05:6f:32:25:b6:53:4c: 65:da:10:cb:23:43:b0:9f:36:53:11:8c:d6:6f:9a: ed:0a:0d:67:28:17:db:ea:d3:d0:8a:b6:95:11:d8: 49:c2:07:02:5d:80:0c:12:3b:c1:97:b0:9e:2b:db: 22:1f:22:b0:71:a2:d6:f0:df:b5:b0:f1:28:ed:4c: 5f:50:f5:e9:aa:23:84:11:0f:62:8f:bc:b2:e5:7f: aa:38:e0:97:1a:00:c2:4c:c6:fb:97:9c:f0:3a:33: e1:4a:7d:5b:9e:22:89:36:93:b3:c2:bb:a5:b2:01: 09:1c:15:a7:e3:83:d4:34:1a:86:9f:d4:c2:80:e6: 5a:85:67:21:af:b0:4f:ce:71:dd:29:3c:23:19:78: 1c:d0:94:82:1e:8b:5c:c5:ce:b0:8f:9c:f7:9b:ae: 5f:9f:8d:9b:a2:5a:85:64:a5:71:1e:9b:52:49:9e: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9C:81:C9:7F:18:7E:8D:AC:7A:CB:48:18:E0:B4:07:97:9C:7F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/639b3d5b-1477-3efd-86ea-1a0bd36acaab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 204.152.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:64:0d:b9:52:16:38:da:2f:36:6f:8e:7d:0e:4b:e4:99:27: f0:ff:e1:af:e5:a4:ae:93:e0:2b:f5:21:30:a2:0a:2e:e0:e6: 88:cf:50:a5:cd:43:dc:a9:bf:0b:9a:f1:fd:9a:02:62:0e:02: 95:90:68:d4:29:b8:ad:df:ad:1d:90:7e:cf:36:c2:34:b3:d8: 7e:ed:2d:3d:a4:0a:08:f7:cd:d5:38:d6:35:51:2e:f3:c6:62: 75:9b:2c:6e:53:18:00:72:a6:fb:7b:9c:af:15:a9:d4:28:28: 56:ea:02:a3:64:d9:08:cc:5e:76:94:56:a4:fc:a9:4c:c8:b7: ba:8c:d9:08:44:68:32:c1:a0:49:9a:55:a7:67:1a:51:b2:ee: 6b:08:70:72:1a:a9:42:a4:1c:49:6a:51:c3:9f:6a:44:99:86: c8:8e:62:bb:84:d6:3a:ce:e3:44:9c:bf:47:85:c8:b3:38:70: 92:10:de:41:61:8c:f0:a0:7c:de:7d:25:5f:ac:f6:d7:20:44: 97:17:5f:43:34:38:cf:11:a7:18:f2:dd:ce:df:20:b0:e2:81: 9f:fe:97:45:4b:9c:93:b1:8f:3f:cb:88:53:ff:02:7c:65:80: 59:ee:4f:7d:3d:48:a6:e4:60:98:db:e3:7b:a3:b7:0a:da:e7: f8:f5:72:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9RAg6CT8oBjsXwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTcyMVoXDTI1MTEyNDIzNTcyMVowLzEtMCsGA1UEAxMk ZjllYjY5N2EtOWU5Ni00NjVjLWFjNWEtYWI1MjAwOWJkZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZbODD3zoi+a/bYbbF/6JSJblEaa4igNI822 2A7wmH89EruJDZlbr2FDdq3U9ca/ggy0uAB9hgAOjhxE26BN/4RxNLfQscUjDqHu mkZ2idVUFgVvMiW2U0xl2hDLI0OwnzZTEYzWb5rtCg1nKBfb6tPQiraVEdhJwgcC XYAMEjvBl7CeK9siHyKwcaLW8N+1sPEo7UxfUPXpqiOEEQ9ij7yy5X+qOOCXGgDC TMb7l5zwOjPhSn1bniKJNpOzwrulsgEJHBWn44PUNBqGn9TCgOZahWchr7BPznHd KTwjGXgc0JSCHotcxc6wj5z3m65fn42bolqFZKVxHptSSZ4xSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGcgcl/GH6NrHrLSBjgtAeXnH+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjM5YjNkNWItMTQ3Ny0z ZWZkLTg2ZWEtMWEwYmQzNmFjYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9kDblSFjjaLzZvjn0OS+SZJ/D/4a/lpK6T4Cv1ITCiCi7g5ojPUKXN Q9ypvwua8f2aAmIOApWQaNQpuK3frR2Qfs82wjSz2H7tLT2kCgj3zdU41jVRLvPG YnWbLG5TGABypvt7nK8VqdQoKFbqAqNk2QjMXnaUVqT8qUzIt7qM2QhEaDLBoEma VadnGlGy7msIcHIaqUKkHElqUcOfakSZhsiOYruE1jrO40Scv0eFyLM4cJIQ3kFh jPCgfN59JV+s9tcgRJcXX0M0OM8Rpxjy3c7fILDigZ/+l0VLnJOxjz/LiFP/Anxl gFnuT309SKbkYJjb43ujtwra5/j1cus= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:44 2025 by rpki-client