$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa File: d23c1663-1dc9-338f-b7d7-799b68465589.roa (raw, json) Hash identifier: 0bsCsrdSkyI2nh+LFmhQzdg6S5zVh5D4J3lbvQ5/788= Subject key identifier: 35:D2:19:B9:39:C3:F8:68:27:EB:E8:C9:7A:A5:33:5E:2C:92:03:66 Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F4328584B3987081A1172C86675CEB600 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 77 IP address blocks: 204.9.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:08:1a:11:72:c8:66:75:ce:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=51bcfa2a-33df-4865-8ae6-60b019f27289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:f2:c4:7a:02:30:6c:db:97:ad:c1:e7:b9: 33:38:80:f0:6e:f4:68:d6:ed:5f:10:f6:5e:78:47: 6c:65:1b:fd:ba:4e:64:95:29:8f:a4:65:9b:74:08: c1:c6:eb:9b:97:52:38:47:95:ee:53:cb:42:4c:08: f2:73:f1:0d:ef:b9:66:91:eb:a7:c2:cf:61:ea:8a: ff:43:cf:58:6a:47:71:db:dd:68:f5:13:f1:83:29: 56:24:c1:f0:63:70:10:2e:17:d6:73:50:82:a1:91: 50:69:30:6a:d2:99:3e:d2:a7:9d:66:a4:ad:ca:a6: 21:57:e2:d7:c3:b7:d9:35:ac:f4:0c:fe:2d:d3:6f: a6:fa:d0:4e:45:7a:f9:24:ed:ab:7a:11:d8:ce:88: 37:82:a7:cf:ee:ae:09:cb:11:07:7f:2d:cf:3f:08: d8:20:7d:f3:82:8d:4c:5e:dc:4a:bf:5e:bc:99:5c: 74:bc:59:a5:2c:3d:ea:ea:f9:24:c9:b6:f6:1f:8c: 88:a0:06:1b:0e:d4:24:a8:36:1d:40:cd:60:07:93: cd:69:4c:57:c2:08:cf:81:8d:43:46:59:01:2e:79: f4:5b:f5:dc:1c:97:c7:db:0c:5a:23:ef:5c:29:e8: cb:32:8f:48:2f:ea:21:56:57:a6:fd:8d:58:05:a2: 54:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D2:19:B9:39:C3:F8:68:27:EB:E8:C9:7A:A5:33:5E:2C:92:03:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv4: 204.9.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:80:98:14:77:bf:8a:ef:6c:af:8b:1c:75:54:53:08:73:e9: ed:b8:f0:95:9b:16:63:08:7a:19:28:3b:37:52:5d:f5:58:b6: 52:a8:7c:ec:f5:7b:dd:d9:63:15:f3:30:0a:88:3f:b3:23:d4: 04:2c:52:83:f6:75:47:44:49:b6:c6:ff:8f:d9:de:92:62:f5: 03:ac:33:75:bc:b7:b6:2d:57:08:03:04:6e:09:ed:be:c2:41: ee:38:a1:27:85:27:e3:13:65:e8:3b:ba:91:d8:b4:7d:66:43: 26:5b:45:f5:6e:b0:4f:a7:27:3a:d4:c0:35:98:83:43:e7:72: e4:43:93:d1:e8:0a:91:87:17:c7:88:8c:0b:bc:bb:7d:63:a0: fb:7f:8e:8c:26:1f:49:b5:8a:68:07:3f:c2:74:0b:fd:64:e5: 08:8f:54:df:17:e0:12:54:11:10:6e:e3:74:f4:76:b1:3e:fa: d3:da:b4:17:53:da:7d:80:e9:53:b2:be:3b:fa:9d:05:3c:2c: cc:74:ff:9c:c2:57:10:49:52:57:08:00:54:3d:34:a6:c5:1e: b8:df:f8:5f:44:69:b7:30:09:ae:17:b7:2d:d9:c4:a4:f0:a7: 1a:3a:a2:7c:18:7c:9a:51:8f:5d:5b:ef:fc:70:06:ae:a4:2b: 5b:05:d9:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwgaEXLIZnXOtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk NTFiY2ZhMmEtMzNkZi00ODY1LThhZTYtNjBiMDE5ZjI3Mjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIPyxHoCMGzbl63B57kzOIDwbvRo1u1fEPZe eEdsZRv9uk5klSmPpGWbdAjBxuubl1I4R5XuU8tCTAjyc/EN77lmkeunws9h6or/ Q89Yakdx291o9RPxgylWJMHwY3AQLhfWc1CCoZFQaTBq0pk+0qedZqStyqYhV+LX w7fZNaz0DP4t02+m+tBORXr5JO2rehHYzog3gqfP7q4JyxEHfy3PPwjYIH3zgo1M XtxKv168mVx0vFmlLD3q6vkkybb2H4yIoAYbDtQkqDYdQM1gB5PNaUxXwgjPgY1D RlkBLnn0W/XcHJfH2wxaI+9cKejLMo9IL+ohVlem/Y1YBaJUAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXSGbk5w/hoJ+voyXqlM14skgNmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvZDIzYzE2NjMtMWRjOS0z MzhmLWI3ZDctNzk5YjY4NDY1NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGAmBR3v4rvbK+LHHVUUwhz6e248JWbFmMIehkoOzdSXfVYtlKofOz1 e93ZYxXzMAqIP7Mj1AQsUoP2dUdESbbG/4/Z3pJi9QOsM3W8t7YtVwgDBG4J7b7C Qe44oSeFJ+MTZeg7upHYtH1mQyZbRfVusE+nJzrUwDWYg0PncuRDk9HoCpGHF8eI jAu8u31joPt/jowmH0m1imgHP8J0C/1k5QiPVN8X4BJUERBu43T0drE++tPatBdT 2n2A6VOyvjv6nQU8LMx0/5zCVxBJUlcIAFQ9NKbFHrjf+F9EabcwCa4Xty3ZxKTw pxo6onwYfJpRj11b7/xwBq6kK1sF2Yg= -----END CERTIFICATE-----Generated at Wed Oct 22 14:45:58 2025 by rpki-client