$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa File: cd834625-5e03-3003-a219-1f2ecf641d36.roa (raw, json) Hash identifier: Fmv8Vrf+p5yGgj0QWFQHvkmyVgI+/UK+jQUN9+Z2xV0= Subject key identifier: 98:E3:8C:A4:BB:71:38:FE:CE:FC:8E:E2:95:02:1F:65:7E:11:79:B6 Certificate issuer: /CN=da6a16ad-9697-4d95-a04c-86394f7b78c8 Certificate serial: 010D0C9F4328584AE19673C1C4D03231BB2D91E0 Authority key identifier: F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 204.10.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:73:c1:c4:d0:32:31:bb:2d:91:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6a16ad-9697-4d95-a04c-86394f7b78c8 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=e6b44c92-264c-4cee-8992-3c81eabee3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:ac:89:a1:c2:41:48:d4:11:36:70:b5:47: 32:99:3f:f9:45:d4:81:cf:56:04:63:0c:a7:b4:42: f1:91:7e:78:da:fb:8c:c2:72:8a:57:b7:c7:70:7f: 75:d8:f9:f9:c9:60:92:da:76:3c:a5:26:4b:23:35: d6:df:f5:6e:da:81:29:f3:38:aa:e1:5b:5f:30:a9: 72:62:f0:6d:7e:b5:41:ce:69:5e:df:ec:87:0b:25: 6f:0c:7a:b1:ea:4e:d9:98:69:39:ce:7f:2f:4b:65: b8:69:b2:e7:33:32:f1:af:7f:69:e5:7f:55:6f:c4: 29:0f:12:c3:5c:18:ea:57:01:34:15:e9:85:c4:09: 7b:f3:14:71:b3:0f:a1:85:20:60:2f:b9:c6:e2:87: e9:13:b6:a7:d3:cd:d4:57:64:1b:48:d7:09:f1:6e: 6c:3a:9f:76:bc:f7:52:33:03:48:ce:a3:df:70:bb: 70:17:5d:9c:29:55:98:58:c7:0f:a4:c1:81:d1:84: 99:a3:14:eb:26:5d:31:09:52:21:c3:eb:54:10:54: ff:a2:1e:89:bc:c3:0a:e4:fd:4a:6c:91:ad:02:8e: c1:1a:32:a6:f2:61:a2:2c:4f:52:cb:29:ea:9b:f9: 55:a5:70:58:d2:f3:66:4d:bf:64:c7:2b:80:88:e7: 70:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E3:8C:A4:BB:71:38:FE:CE:FC:8E:E2:95:02:1F:65:7E:11:79:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.crl X509v3 Authority Key Identifier: keyid:F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer sbgp-ipAddrBlock: critical IPv4: 204.10.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:60:82:2d:c4:4b:0b:92:17:6d:5e:bd:63:8b:09:77:81:3b: f1:04:7c:28:24:2b:02:0f:5a:8e:2d:76:5b:91:c1:6e:2f:bc: be:02:88:35:b2:24:5c:b0:f3:14:f0:24:e4:97:73:8f:aa:87: 78:1d:e7:cb:63:4d:65:99:7e:1c:2b:35:1e:45:34:ac:78:31: e5:79:fc:f1:3d:3d:70:04:16:2d:48:51:0b:59:a9:3f:20:bd: a0:f0:e5:74:0f:86:60:49:5b:cd:2d:d2:8e:ff:c2:cc:26:6b: 81:98:4d:33:bb:af:7b:17:66:76:85:f8:4c:9a:67:ad:f6:7a: 74:04:d1:5a:de:eb:4c:13:fe:d6:09:98:a1:e2:ee:7f:38:53: a9:35:74:06:47:31:44:49:35:c9:65:71:80:37:0f:10:a5:2a: de:91:1d:d8:e6:14:2d:a8:97:86:b9:8d:dc:9d:3c:c2:9c:d6: 30:c4:f7:52:9a:c1:7c:87:a0:d2:52:44:14:e3:a0:87:b5:ab: 55:55:5f:0a:5d:2c:bc:2e:88:e7:eb:a7:8c:1f:0e:e3:89:e5: e0:40:7e:4d:23:c4:dc:8a:39:03:90:d6:77:92:21:c4:85:08: ac:70:40:f8:d0:4e:c4:48:01:13:d1:20:9d:af:65:f1:d0:e6: 58:f2:45:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlnPBxNAyMbstkeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2YTE2YWQtOTY5Ny00ZDk1LWEwNGMtODYzOTRmN2I3 OGM4MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk ZTZiNDRjOTItMjY0Yy00Y2VlLTg5OTItM2M4MWVhYmVlM2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjqsiaHCQUjUETZwtUcymT/5RdSBz1YEYwyn tELxkX542vuMwnKKV7fHcH912Pn5yWCS2nY8pSZLIzXW3/Vu2oEp8ziq4VtfMKly YvBtfrVBzmle3+yHCyVvDHqx6k7ZmGk5zn8vS2W4abLnMzLxr39p5X9Vb8QpDxLD XBjqVwE0FemFxAl78xRxsw+hhSBgL7nG4ofpE7an083UV2QbSNcJ8W5sOp92vPdS MwNIzqPfcLtwF12cKVWYWMcPpMGB0YSZoxTrJl0xCVIhw+tUEFT/oh6JvMMK5P1K bJGtAo7BGjKm8mGiLE9Syynqm/lVpXBY0vNmTb9kxyuAiOdwGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjjjKS7cTj+zvyO4pUCH2V+EXm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTZh MTZhZC05Njk3LTRkOTUtYTA0Yy04NjM5NGY3Yjc4YzgvY2Q4MzQ2MjUtNWUwMy0z MDAzLWEyMTktMWYyZWNmNjQxZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGE2YTE2YWQtOTY5Ny00ZDk1LWEw NGMtODYzOTRmN2I3OGM4L2RhNmExNmFkLTk2OTctNGQ5NS1hMDRjLTg2Mzk0Zjdi NzhjOC5jcmwwHwYDVR0jBBgwFoAU9GfqmmCwnE5urS68W5wIlLqmBFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTZhMTZhZC05Njk3LTRkOTUtYTA0Yy04NjM5 NGY3Yjc4YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzApgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZggi3ESwuSF21evWOLCXeBO/EEfCgkKwIPWo4tdluRwW4vvL4CiDWy JFyw8xTwJOSXc4+qh3gd58tjTWWZfhwrNR5FNKx4MeV5/PE9PXAEFi1IUQtZqT8g vaDw5XQPhmBJW80t0o7/wswma4GYTTO7r3sXZnaF+EyaZ632enQE0Vre60wT/tYJ mKHi7n84U6k1dAZHMURJNcllcYA3DxClKt6RHdjmFC2ol4a5jdydPMKc1jDE91Ka wXyHoNJSRBTjoIe1q1VVXwpdLLwuiOfrp4wfDuOJ5eBAfk0jxNyKOQOQ1neSIcSF CKxwQPjQTsRIARPRIJ2vZfHQ5ljyRW4= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:20 2025 by rpki-client