$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa File: b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa (raw, json) Hash identifier: zO1GlxWsa8sqbgGKS5ScL15+HA41K960kSozVV0fR0k= Subject key identifier: 8B:00:3B:D0:99:DD:0B:C4:AF:A9:8C:67:84:15:C3:3E:C1:67:55:DB Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584B6631F7E46ECCD8A85BF09E00 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 16433 IP address blocks: 204.9.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f7:e4:6e:cc:d8:a8:5b:f0:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=5f232c6a-c30b-403d-9745-4172f4375334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:33:a9:da:24:87:0b:9c:f5:77:84:be:f6:4c: b3:15:71:a8:e1:b9:a2:cf:53:72:50:8f:81:87:5c: cb:c3:0a:34:42:04:04:00:fc:e0:ca:79:3a:32:a6: 57:94:13:5f:6d:ee:d3:25:f9:18:f9:9f:b9:81:9b: 99:37:74:2e:b5:f6:ef:67:4e:a8:2b:ca:e1:0c:c0: e5:c0:b3:4a:7d:29:a6:29:f0:dc:40:f7:c9:0e:3b: a0:16:9a:44:8f:1f:4f:d7:54:37:fb:ef:a5:18:c5: 2f:3d:fe:5e:ca:0c:38:f1:d2:c5:41:05:35:86:c5: 63:3a:d3:0c:f7:80:cd:02:a7:fd:f3:15:83:17:da: 19:0e:06:ac:e5:66:e4:57:04:0c:4d:3a:8d:24:3c: fb:7c:14:50:5b:23:3a:bc:ff:bb:98:15:42:b9:8f: 68:75:fd:2b:c4:57:6f:80:8e:99:9c:59:69:94:79: 3b:cd:e1:3b:ed:d4:ac:a5:74:e5:85:98:69:97:21: fa:a6:f7:7d:86:1a:00:7c:06:87:e7:12:22:77:e2: f1:ca:cc:04:53:80:49:eb:d0:7f:9a:45:ba:8c:da: 7f:e4:fb:ef:4a:97:68:b5:b1:57:9f:d0:9b:1d:22: f7:80:b7:57:ab:6c:10:cf:f5:71:a3:60:89:99:93: 5a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:00:3B:D0:99:DD:0B:C4:AF:A9:8C:67:84:15:C3:3E:C1:67:55:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 204.9.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:07:da:92:5d:f4:ad:22:fa:02:e4:08:3a:6c:68:f5:f6:d4: 11:93:9e:a3:bf:a0:73:e2:ec:6b:e3:42:24:10:c5:36:72:3e: 22:66:42:5b:3e:4c:f0:15:62:07:da:8d:2f:2c:3e:36:ef:ea: 76:d4:16:b5:32:59:97:79:2f:48:65:76:ff:b8:be:15:ae:0b: 7e:5e:a5:3e:da:1d:6b:96:63:95:71:9b:8c:16:86:36:a8:92: b6:58:b3:5c:06:da:f7:cf:20:5b:d5:b0:19:86:78:36:8a:6a: 00:5d:ea:4a:35:26:79:ba:a9:f3:1f:cd:79:d9:02:8e:a0:39: 9e:6a:af:b1:92:f9:71:c2:9a:43:74:e7:14:e6:2f:97:d1:95: 8a:31:f7:02:92:15:17:a4:03:a4:5c:d8:46:e0:10:23:e2:78: 42:43:87:c0:89:34:6c:e1:03:c1:e2:0a:1e:04:04:f6:2c:a9: 35:b3:a8:54:68:d2:23:75:18:a8:10:b8:9b:72:95:06:32:22: b7:c8:70:85:69:59:21:d7:33:d5:ed:c5:b3:30:0c:35:0e:c6: 7b:1c:e1:7b:10:6e:18:07:91:0a:42:e5:b2:00:24:00:b4:a0: 00:99:71:a0:e9:27:5f:62:89:65:f4:3a:6b:d4:b2:75:05:15: 51:81:a1:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMffkbszYqFvwngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk NWYyMzJjNmEtYzMwYi00MDNkLTk3NDUtNDE3MmY0Mzc1MzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjOp2iSHC5z1d4S+9kyzFXGo4bmiz1NyUI+B h1zLwwo0QgQEAPzgynk6MqZXlBNfbe7TJfkY+Z+5gZuZN3QutfbvZ06oK8rhDMDl wLNKfSmmKfDcQPfJDjugFppEjx9P11Q3+++lGMUvPf5eygw48dLFQQU1hsVjOtMM 94DNAqf98xWDF9oZDgas5WbkVwQMTTqNJDz7fBRQWyM6vP+7mBVCuY9odf0rxFdv gI6ZnFlplHk7zeE77dSspXTlhZhplyH6pvd9hhoAfAaH5xIid+LxyswEU4BJ69B/ mkW6jNp/5PvvSpdotbFXn9CbHSL3gLdXq2wQz/Vxo2CJmZNaXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsAO9CZ3QvEr6mMZ4QVwz7BZ1XbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvYjA2NjkyZjQtYTZkYy0z ZjE3LWJiZGYtOWIzZTBlZjc2NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQH2pJd9K0i+gLkCDpsaPX21BGTnqO/oHPi7GvjQiQQxTZyPiJmQls+ TPAVYgfajS8sPjbv6nbUFrUyWZd5L0hldv+4vhWuC35epT7aHWuWY5Vxm4wWhjao krZYs1wG2vfPIFvVsBmGeDaKagBd6ko1Jnm6qfMfzXnZAo6gOZ5qr7GS+XHCmkN0 5xTmL5fRlYox9wKSFRekA6Rc2EbgECPieEJDh8CJNGzhA8HiCh4EBPYsqTWzqFRo 0iN1GKgQuJtylQYyIrfIcIVpWSHXM9XtxbMwDDUOxnsc4XsQbhgHkQpC5bIAJAC0 oACZcaDpJ19iiWX0OmvUsnUFFVGBoec= -----END CERTIFICATE-----Generated at Sun Oct 19 00:59:45 2025 by rpki-client