$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa File: dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa (raw, json) Hash identifier: BTNG+rdKmkF4Bk26fo6MEpny+x78qYUfmnIbysqOjXk= Subject key identifier: 6C:D9:10:E8:0E:CF:79:60:73:7D:37:D4:7F:D8:AB:BC:E4:39:59:84 Certificate issuer: /CN=b5f49734-696b-4966-8db9-1388a58a153f Certificate serial: 010D0C9F4328584AE1969225FD815189B198AE30 Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 17055 IP address blocks: 204.99.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:92:25:fd:81:51:89:b1:98:ae:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=c2b0ae90-e69e-430b-b3ae-c8b553d13593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:5a:58:de:67:ca:34:53:23:cd:cc:ff:81: 33:42:d7:21:fe:3d:ec:55:d8:8d:1e:93:3c:b0:ef: af:49:ad:61:5a:47:be:c0:f4:53:5e:0f:45:f1:eb: 47:b8:b7:e1:03:83:9c:35:b0:44:b9:7e:81:7f:d1: 76:46:a1:e2:7d:b1:3c:40:2f:69:fd:5d:d6:05:b2: f4:b3:29:50:b7:2a:bc:a5:25:76:d4:54:26:3b:bc: 5e:7f:05:ff:2d:52:bd:83:8a:06:33:01:03:74:f6: b1:22:ab:d3:d7:b4:68:f9:da:24:5e:0e:92:86:31: e1:af:be:e0:a3:20:1b:6d:ce:53:39:b4:ed:63:f2: b2:09:c9:28:f2:8d:19:ef:00:58:b5:b8:78:02:24: 1f:23:22:04:3a:19:ff:2f:ea:a8:f6:af:77:9e:7b: cf:29:f5:c6:a8:29:ef:3f:65:80:83:9f:d6:ba:9e: 22:64:4b:d2:b0:b2:21:57:6a:24:d3:87:f0:67:2e: 70:52:36:a5:f5:6d:98:78:e8:b2:e2:7e:c8:91:23: d7:85:3a:2b:5d:c1:f0:9a:6c:50:e3:64:3b:b1:c1: 48:0f:82:09:6c:37:4f:90:77:11:ce:a5:a8:e7:2f: 64:50:31:57:ce:3b:74:f0:77:f0:6f:3b:db:d4:0d: 53:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D9:10:E8:0E:CF:79:60:73:7D:37:D4:7F:D8:AB:BC:E4:39:59:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl X509v3 Authority Key Identifier: keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer sbgp-ipAddrBlock: critical IPv4: 204.99.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:06:ad:bb:9c:c6:3a:8a:6e:8b:5e:c3:52:f8:4f:a8:97:08: c8:bc:ed:9a:40:60:86:86:3c:67:2b:23:d6:bd:3f:7b:d7:35: 13:96:22:a3:31:46:28:0c:cf:c3:32:b7:58:f7:45:e4:09:1c: b2:d7:3b:34:67:d8:99:70:c8:81:dd:d6:4a:d5:9b:26:2a:48: bc:f7:25:31:7c:f5:bf:0a:45:c7:76:dc:00:95:03:ff:81:de: 7c:f9:f9:09:e7:47:3b:84:bb:9e:3a:a5:c3:34:e9:2c:9b:00: 48:df:9b:a0:45:cf:dc:01:01:1b:1b:cc:de:c9:23:cd:f0:4e: 6d:7e:2e:b7:8e:3e:55:2f:d3:c7:ee:47:f7:e8:33:b6:eb:ee: be:3c:f9:e7:3b:1f:cf:d8:9b:7a:bf:77:7d:d4:3a:4a:1d:fb: 43:e2:05:15:6a:0f:b9:54:86:19:1a:5e:68:60:7f:2d:a8:f0: 96:f3:8b:04:eb:f0:9a:54:8c:86:8a:bb:29:45:78:d2:84:72: f8:8f:d7:c4:b7:d1:dd:d3:e1:f0:87:3d:23:f0:76:b8:db:ba: 1a:2b:c5:a6:a2:3f:4e:ce:8d:ad:bf:6d:1e:7f:e5:d0:24:86: c6:47:50:4f:d9:d8:aa:c7:e8:3d:e0:e7:fe:65:3f:03:f7:49: 23:b6:8e:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlpIl/YFRibGYrjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx NTNmMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YzJiMGFlOTAtZTY5ZS00MzBiLWIzYWUtYzhiNTUzZDEzNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlZaWN5nyjRTI83M/4EzQtch/j3sVdiNHpM8 sO+vSa1hWke+wPRTXg9F8etHuLfhA4OcNbBEuX6Bf9F2RqHifbE8QC9p/V3WBbL0 sylQtyq8pSV21FQmO7xefwX/LVK9g4oGMwEDdPaxIqvT17Ro+dokXg6ShjHhr77g oyAbbc5TObTtY/KyCcko8o0Z7wBYtbh4AiQfIyIEOhn/L+qo9q93nnvPKfXGqCnv P2WAg5/Wup4iZEvSsLIhV2ok04fwZy5wUjal9W2YeOiy4n7IkSPXhTorXcHwmmxQ 42Q7scFID4IJbDdPkHcRzqWo5y9kUDFXzjt08Hfwbzvb1A1T0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzZEOgOz3lgc3031H/Yq7zkOVmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0 OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvZGZiODlkMzYtZTgzMS0z ZmNlLWFhZTAtY2ZmMzg0MmExYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4 YTU4YTE1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0GrbucxjqKbotew1L4T6iXCMi87ZpAYIaGPGcrI9a9P3vXNROWIqMx RigMz8Myt1j3ReQJHLLXOzRn2JlwyIHd1krVmyYqSLz3JTF89b8KRcd23ACVA/+B 3nz5+QnnRzuEu546pcM06SybAEjfm6BFz9wBARsbzN7JI83wTm1+LreOPlUv08fu R/foM7br7r48+ec7H8/Ym3q/d33UOkod+0PiBRVqD7lUhhkaXmhgfy2o8JbziwTr 8JpUjIaKuylFeNKEcviP18S30d3T4fCHPSPwdrjbuhorxaaiP07Oja2/bR5/5dAk hsZHUE/Z2KrH6D3g5/5lPwP3SSO2jnU= -----END CERTIFICATE-----Generated at Fri Aug 22 17:01:48 2025 by rpki-client