$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3ee7387b-a555-3a1c-a374-5e7368e9a5f6.roa File: 3ee7387b-a555-3a1c-a374-5e7368e9a5f6.roa (raw, json) Hash identifier: EQddq+skA4Mzu17kTi2h1eg7YOziVSuyUSLcVjnvEU0= Subject key identifier: A2:76:44:3A:FC:67:80:E3:36:16:47:50:CA:F4:C0:29:B0:16:21:70 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A16DD54BDA6A7D0BFFA500 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3ee7387b-a555-3a1c-a374-5e7368e9a5f6.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 204.84.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:6d:d5:4b:da:6a:7d:0b:ff:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=0dba7099-cb4f-4bff-8eda-9f2712469b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:eb:76:d9:27:aa:65:7a:05:a5:bc:0b:c6:b6: 3c:18:9b:2e:c9:d3:c7:76:7d:37:fd:f5:e2:c5:fa: da:f1:bb:0c:0c:0c:14:16:5a:a3:7a:01:1f:e5:cf: 44:07:3a:a4:3d:2a:aa:b5:f5:ab:15:be:15:cb:68: 3b:52:3e:79:e8:08:84:39:93:86:09:86:e7:eb:c2: 1e:ce:59:b5:f9:5b:a2:11:27:9f:82:23:60:f7:04: 7f:23:d3:72:fe:11:0b:e5:90:96:d8:80:51:f9:95: bd:07:99:52:ab:dc:d3:81:b6:47:43:54:ea:59:d9: 94:f1:47:8b:5b:fb:0c:24:a6:9c:59:9f:41:39:38: 8a:e3:1b:ad:23:5e:68:38:4f:da:34:a9:97:e2:4f: 1f:f6:5a:8d:59:f9:54:22:3b:27:d4:1d:ff:1b:c5: 72:61:ed:01:50:5d:6a:bc:3a:2c:15:14:e2:7d:2d: c2:c8:00:1e:43:f6:3e:0b:20:bc:a6:24:fd:1a:57: 38:0d:70:1c:2b:79:29:23:91:f9:5a:3a:1c:be:37: f2:50:c9:dd:c3:0e:d2:36:6d:74:28:81:5d:44:84: 0e:0b:2e:3b:8d:a1:4b:c7:b8:d4:1c:6a:5e:17:af: 8a:60:85:d0:88:30:61:87:5e:f2:65:6d:fd:29:84: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:76:44:3A:FC:67:80:E3:36:16:47:50:CA:F4:C0:29:B0:16:21:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3ee7387b-a555-3a1c-a374-5e7368e9a5f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.84.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e3:38:17:1e:73:1a:e5:a8:ec:64:49:87:e9:fb:6d:5f:7f: 7e:95:50:30:8a:32:f3:be:e1:e3:0d:64:0d:ef:ef:07:95:db: 14:f2:0b:a3:d0:f9:ed:d6:b4:ad:2d:b2:82:46:a5:57:c4:fd: 36:5d:14:20:53:7b:92:93:55:62:2d:2e:63:d2:ba:70:45:79: 00:78:44:8e:51:48:11:48:9e:5b:ec:c5:57:3d:bf:69:b2:ca: f5:ad:d4:ec:be:28:61:95:6f:8f:ef:30:51:94:9b:1a:38:b6: d8:90:fb:ee:c4:81:f0:d7:d4:1c:d2:1b:8a:00:eb:3c:a3:48: 76:68:aa:78:f1:2d:e9:8e:10:4d:44:0a:b8:3c:f1:03:b6:95: b1:36:af:ef:7d:3e:ea:b8:b6:19:b9:64:f5:36:f6:5e:91:d3: d5:67:e6:d9:be:74:5d:65:37:fc:0a:0e:a4:39:42:f4:e2:11: 34:53:c0:00:ac:66:ae:7c:56:0c:2f:3c:87:ce:8f:b0:94:da: 07:e7:6a:f0:fe:c0:ac:d4:1e:ea:32:a0:25:fe:4f:f5:87:84: 0e:33:d1:04:11:4f:16:58:93:38:68:a3:c1:ee:24:8c:79:cc: 81:30:b1:59:14:cf:5e:f7:81:bd:2f:be:c2:00:b5:27:08:90: 5c:63:67:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoW3VS9pqfQv/pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk MGRiYTcwOTktY2I0Zi00YmZmLThlZGEtOWYyNzEyNDY5YjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlut22SeqZXoFpbwLxrY8GJsuydPHdn03/fXi xfra8bsMDAwUFlqjegEf5c9EBzqkPSqqtfWrFb4Vy2g7Uj556AiEOZOGCYbn68Ie zlm1+VuiESefgiNg9wR/I9Ny/hEL5ZCW2IBR+ZW9B5lSq9zTgbZHQ1TqWdmU8UeL W/sMJKacWZ9BOTiK4xutI15oOE/aNKmX4k8f9lqNWflUIjsn1B3/G8VyYe0BUF1q vDosFRTifS3CyAAeQ/Y+CyC8piT9Glc4DXAcK3kpI5H5WjocvjfyUMndww7SNm10 KIFdRIQOCy47jaFLx7jUHGpeF6+KYIXQiDBhh17yZW39KYT/nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ2RDr8Z4DjNhZHUMr0wCmwFiFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2VlNzM4N2ItYTU1NS0z YTFjLWEzNzQtNWU3MzY4ZTlhNWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFTzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjjOBcecxrlqOxkSYfp+21ff36VUDCKMvO+4eMNZA3v7weV2xTyC6PQ +e3WtK0tsoJGpVfE/TZdFCBTe5KTVWItLmPSunBFeQB4RI5RSBFInlvsxVc9v2my yvWt1Oy+KGGVb4/vMFGUmxo4ttiQ++7EgfDX1BzSG4oA6zyjSHZoqnjxLemOEE1E Crg88QO2lbE2r+99Puq4thm5ZPU29l6R09Vn5tm+dF1lN/wKDqQ5QvTiETRTwACs Zq58VgwvPIfOj7CU2gfnavD+wKzUHuoyoCX+T/WHhA4z0QQRTxZYkzhoo8HuJIx5 zIEwsVkUz173gb0vvsIAtScIkFxjZ1Q= -----END CERTIFICATE-----Generated at Tue Sep 9 08:06:03 2025 by rpki-client