$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9771c943-4148-3f5a-bfa6-1361d78e20eb.roa File: 9771c943-4148-3f5a-bfa6-1361d78e20eb.roa (raw, json) Hash identifier: wkLPRddY1mBglmhbyjRvpUdAUetWE6MnSGDEa2X0aU8= Subject key identifier: E3:FB:AC:9C:C4:12:D5:03:E9:49:8B:5B:FB:0F:38:26:5B:D9:B0:5D Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B2A2C3BC97E36CC26CA382580 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9771c943-4148-3f5a-bfa6-1361d78e20eb.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 209 IP address blocks: 204.167.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3b:c9:7e:36:cc:26:ca:38:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=48e99f55-317e-4860-8fa6-58e36f34a12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:bf:e6:86:c4:4e:2e:e9:30:7d:48:21:5c: 57:70:93:3a:51:83:3c:25:7e:6e:a9:f3:a7:f5:fc: 19:1e:61:7e:1d:8e:31:ca:85:ec:a4:ea:c6:bf:8b: 08:d2:2d:ce:5f:42:85:f9:96:cb:7e:4d:37:0b:f2: 0a:02:d3:d4:84:b2:de:d5:dd:59:94:8d:22:de:8f: 59:b0:ed:88:3f:e8:f7:f0:b1:2b:c4:9a:e3:d2:88: 51:7b:a8:01:1e:be:af:d1:22:a7:76:a0:3e:71:f3: e6:6b:1b:8f:2b:d2:58:41:f6:57:08:53:32:7b:d9: a5:fc:15:29:f7:22:00:2a:51:a7:cb:e2:0b:86:8c: f5:ef:2f:47:19:82:1c:b0:25:c4:80:aa:d3:48:e9: c2:79:e1:41:af:6f:ad:25:c8:26:0c:a2:31:fc:19: 8e:1e:59:4a:0f:bb:9f:a1:d5:ac:85:36:9f:9d:a8: bb:a0:36:ac:f8:d1:dc:ab:5d:8e:6f:9b:63:98:8b: 9c:b1:43:ca:cf:c5:d3:5d:0c:f7:dd:78:82:de:4d: c9:8b:08:92:6f:dd:07:4f:9b:4d:d3:90:d1:39:22: ce:9f:31:48:62:0e:dc:04:e5:08:9c:6b:d6:62:42: 5c:b1:0d:b2:ee:16:db:2a:12:ec:00:6e:cd:09:2e: d7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FB:AC:9C:C4:12:D5:03:E9:49:8B:5B:FB:0F:38:26:5B:D9:B0:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9771c943-4148-3f5a-bfa6-1361d78e20eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 204.167.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e3:22:f6:d0:cc:0f:e2:e0:5b:e8:ce:53:c3:ad:f4:00:07: 9b:b7:6a:4c:61:ef:81:2f:bb:52:77:3c:79:1d:60:da:8a:97: 02:26:36:78:70:bd:b8:51:ef:a1:07:bd:68:14:c6:f1:6a:a9: b0:30:b0:15:7b:1d:f9:2a:7b:cf:cf:e2:ab:6a:d2:30:f7:c8: c1:a1:3a:32:d2:5e:0a:4d:97:e6:3e:99:a9:4e:2b:af:42:68: e6:3d:eb:0e:21:bf:4b:f8:c6:82:c9:7e:24:02:1c:49:8b:ff: 30:78:75:0c:f8:dd:01:ac:64:ca:10:64:72:ef:85:6c:e1:6f: 23:30:4e:54:40:96:d0:e5:9b:3b:72:a5:26:a1:4a:70:8b:e5: a5:e3:de:6e:2e:e9:3b:c5:53:b8:a9:91:17:dd:ba:03:9f:d2: ae:68:65:cc:27:11:17:5a:13:0e:1b:41:7a:78:c4:1c:ee:86: bd:e0:87:6f:98:6f:68:1e:81:b4:d5:38:1b:12:80:1b:ce:33: e3:6b:74:4c:c8:71:f1:b7:7b:5a:4a:35:1c:35:27:73:71:4b: 07:35:57:0e:f0:84:04:c3:68:41:2b:4f:62:91:d1:0a:aa:56: 23:4c:be:4b:e0:c0:ce:09:af:86:73:80:be:d5:94:4d:62:97: 1a:52:f1:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDvJfjbMJso4JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NDhlOTlmNTUtMzE3ZS00ODYwLThmYTYtNThlMzZmMzRhMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLG/5obETi7pMH1IIVxXcJM6UYM8JX5uqfOn 9fwZHmF+HY4xyoXspOrGv4sI0i3OX0KF+ZbLfk03C/IKAtPUhLLe1d1ZlI0i3o9Z sO2IP+j38LErxJrj0ohRe6gBHr6v0SKndqA+cfPmaxuPK9JYQfZXCFMye9ml/BUp 9yIAKlGny+ILhoz17y9HGYIcsCXEgKrTSOnCeeFBr2+tJcgmDKIx/BmOHllKD7uf odWshTafnai7oDas+NHcq12Ob5tjmIucsUPKz8XTXQz33XiC3k3JiwiSb90HT5tN 05DROSLOnzFIYg7cBOUInGvWYkJcsQ2y7hbbKhLsAG7NCS7XZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP7rJzEEtUD6UmLW/sPOCZb2bBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOTc3MWM5NDMtNDE0OC0z ZjVhLWJmYTYtMTM2MWQ3OGUyMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzKfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3jIvbQzA/i4FvozlPDrfQAB5u3akxh74Evu1J3PHkdYNqKlwImNnhw vbhR76EHvWgUxvFqqbAwsBV7Hfkqe8/P4qtq0jD3yMGhOjLSXgpNl+Y+malOK69C aOY96w4hv0v4xoLJfiQCHEmL/zB4dQz43QGsZMoQZHLvhWzhbyMwTlRAltDlmzty pSahSnCL5aXj3m4u6TvFU7ipkRfdugOf0q5oZcwnERdaEw4bQXp4xBzuhr3gh2+Y b2gegbTVOBsSgBvOM+NrdEzIcfG3e1pKNRw1J3NxSwc1Vw7whATDaEErT2KR0Qqq ViNMvkvgwM4Jr4ZzgL7VlE1ilxpS8ak= -----END CERTIFICATE-----Generated at Sun Oct 19 23:57:02 2025 by rpki-client