$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa File: 4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa (raw, json) Hash identifier: DIW/RuHwLEGbcOLCvLL6OLyLV3SbfS20zZTeEYOyrOU= Subject key identifier: 69:48:9E:F8:2D:F7:8E:94:D4:64:F2:10:B4:7B:00:71:04:FE:FF:AF Certificate issuer: /CN=2a093e3f-1d9b-4e68-9317-1de77daf9698 Certificate serial: 010D0C9F4328584B0A116C9B31F9138CA4F7AF00 Authority key identifier: C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 174 IP address blocks: 204.114.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:6c:9b:31:f9:13:8c:a4:f7:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a093e3f-1d9b-4e68-9317-1de77daf9698 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=66a15141-bc54-4879-a5e2-3fce9a15724b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:b0:92:16:aa:1d:21:6f:62:b7:b9:1f:49: c8:d4:88:1c:a7:9a:1a:3f:5d:be:b9:d1:99:1f:2c: 39:96:e9:1e:f8:f9:dd:34:09:e6:b7:28:75:c6:6c: d9:67:2f:42:5c:76:f4:97:b3:42:1a:5f:18:c1:be: 0a:cd:e2:29:04:1c:bd:fa:e6:e2:5e:53:ae:96:16: 2f:9c:3c:ef:85:a3:54:b0:81:df:50:bc:3d:46:e9: 71:a0:13:cc:50:db:58:b0:82:57:e9:5a:ac:aa:16: 08:61:2d:6e:de:69:c7:51:88:2d:c9:6f:ef:25:bf: 3e:ca:83:3d:ef:c3:e4:c5:16:f6:9f:31:dd:4e:c4: 1e:c3:64:7d:80:45:45:76:05:0f:38:5a:8e:6f:8f: 5b:7b:59:19:43:e9:45:10:ee:db:ae:6e:a3:e6:77: f5:17:45:d9:1c:64:2d:54:5e:5f:a0:0e:fe:d4:cf: 7d:91:1c:13:5c:6c:6b:fb:90:d5:00:d2:69:21:97: bb:8a:00:7b:73:9c:e3:92:57:43:dd:20:19:3b:0e: df:18:e4:aa:ae:ac:88:d3:ba:cb:53:a3:e2:49:18: ce:80:fc:e8:c5:f5:c1:61:70:4d:26:80:c2:f6:3f: 96:22:9a:2a:04:14:ee:b8:c4:c8:3d:20:47:20:b1: be:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:48:9E:F8:2D:F7:8E:94:D4:64:F2:10:B4:7B:00:71:04:FE:FF:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl X509v3 Authority Key Identifier: keyid:C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer sbgp-ipAddrBlock: critical IPv4: 204.114.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:57:65:ba:b8:94:83:e2:e3:9c:ef:2a:0c:a8:a2:27:48:db: 12:e9:bc:d9:e1:4e:09:4d:7f:da:27:36:c0:5d:30:6e:c4:90: 12:61:79:c3:44:ea:32:52:ae:2b:ed:52:8f:9a:30:cc:e9:a9: 7b:9b:22:ef:30:e3:ff:24:9a:52:79:38:f5:cb:21:28:bf:a2: 22:f2:a9:29:16:ad:d8:bb:c3:39:45:ea:b2:d3:47:2d:86:a2: cb:36:8c:07:a6:b0:64:57:fb:18:27:3d:71:d6:82:5b:37:c2: c0:96:05:4d:17:80:18:37:4b:2c:20:a8:33:90:ff:08:db:f1: 21:c1:01:af:26:cb:6f:5c:05:96:17:0a:69:58:cf:5c:9c:32: a4:25:91:06:12:b5:b8:d4:33:76:dd:cb:93:4f:7a:dd:42:ad: a4:73:c4:bf:4f:4d:06:27:dc:4d:b7:9a:d1:51:83:93:b2:19: 99:eb:b2:b0:bb:53:91:6a:39:1f:8c:48:61:86:dd:f4:1f:c3: 1b:cd:e9:dc:e4:40:c7:1e:fe:05:1c:fd:23:b8:72:87:54:38: 32:ea:2b:36:0d:f8:7c:2d:c3:ac:28:34:70:88:d2:1f:22:39: 36:a1:d1:02:16:18:dc:36:8b:15:63:84:af:db:49:a0:e6:4f: ac:6b:fb:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWybMfkTjKT3rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEwOTNlM2YtMWQ5Yi00ZTY4LTkzMTctMWRlNzdkYWY5 Njk4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NjZhMTUxNDEtYmM1NC00ODc5LWE1ZTItM2ZjZTlhMTU3MjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi2wkhaqHSFvYre5H0nI1Igcp5oaP12+udGZ Hyw5luke+PndNAnmtyh1xmzZZy9CXHb0l7NCGl8Ywb4KzeIpBBy9+ubiXlOulhYv nDzvhaNUsIHfULw9RulxoBPMUNtYsIJX6VqsqhYIYS1u3mnHUYgtyW/vJb8+yoM9 78PkxRb2nzHdTsQew2R9gEVFdgUPOFqOb49be1kZQ+lFEO7brm6j5nf1F0XZHGQt VF5foA7+1M99kRwTXGxr+5DVANJpIZe7igB7c5zjkldD3SAZOw7fGOSqrqyI07rL U6PiSRjOgPzoxfXBYXBNJoDC9j+WIpoqBBTuuMTIPSBHILG+VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlInvgt946U1GTyELR7AHEE/v+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5 M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3N2RhZjk2OTgvNGEwNTNkOTQtZjc3OC0z Y2YzLTk4YTktYzZlYTBhMzIwOTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmEwOTNlM2YtMWQ5Yi00ZTY4LTkz MTctMWRlNzdkYWY5Njk4LzJhMDkzZTNmLTFkOWItNGU2OC05MzE3LTFkZTc3ZGFm OTY5OC5jcmwwHwYDVR0jBBgwFoAUxw25EFn1EfxVkVJscoLB6kVFp3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3 N2RhZjk2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzHJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtXZbq4lIPi45zvKgyooidI2xLpvNnhTglNf9onNsBdMG7EkBJhecNE 6jJSrivtUo+aMMzpqXubIu8w4/8kmlJ5OPXLISi/oiLyqSkWrdi7wzlF6rLTRy2G oss2jAemsGRX+xgnPXHWgls3wsCWBU0XgBg3SywgqDOQ/wjb8SHBAa8my29cBZYX CmlYz1ycMqQlkQYStbjUM3bdy5NPet1CraRzxL9PTQYn3E23mtFRg5OyGZnrsrC7 U5FqOR+MSGGG3fQfwxvN6dzkQMce/gUc/SO4codUODLqKzYN+Hwtw6woNHCI0h8i OTah0QIWGNw2ixVjhK/bSaDmT6xr+/c= -----END CERTIFICATE-----Generated at Mon Sep 8 09:52:42 2025 by rpki-client