$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/bb955220-0f5d-30f8-ac95-539c7effc165.roa File: bb955220-0f5d-30f8-ac95-539c7effc165.roa (raw, json) Hash identifier: Pvmh6KQD4OQyA8khG3Gi/+8SWgWhAgRmTIpd5afXgdc= Subject key identifier: 25:97:21:C7:1E:87:DD:CC:E9:55:DA:92:8A:A9:02:64:3E:6A:03:54 Certificate issuer: /CN=9cc872db-b713-439a-b9ef-c97cff0cbfae Certificate serial: 010D0C9F4328584B8EACD002014AA8E896A8E058 Authority key identifier: 37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/bb955220-0f5d-30f8-ac95-539c7effc165.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 40555 IP address blocks: 204.174.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d0:02:01:4a:a8:e8:96:a8:e0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc872db-b713-439a-b9ef-c97cff0cbfae Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=c12d807d-877e-44ec-af20-d792e359bc21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:70:de:1b:c7:6f:a4:cc:7e:93:a0:fd:0f: 20:ed:62:e1:7e:d8:06:8f:41:a2:df:f4:48:41:0a: 6c:e8:43:f1:86:d0:d8:ff:4e:e6:7d:f2:bb:ce:56: ec:f8:e3:09:6a:41:c4:77:17:c8:e4:c2:c5:e8:27: 7e:08:fd:33:23:fb:aa:c7:58:38:97:8f:0f:23:7e: 59:5c:3e:91:40:84:f2:2e:4d:03:78:6b:14:72:3d: d0:ed:f0:7f:7d:3a:ed:e2:6f:16:e3:e0:54:49:d3: 5a:53:e6:4b:b2:d3:d1:6b:00:b2:24:5f:ce:e5:2a: c2:df:18:74:91:26:47:83:d8:e0:d3:0b:a1:47:ab: db:8e:97:fc:36:59:07:37:22:92:59:da:b1:eb:56: 4c:ad:ee:44:b8:58:44:d4:1a:b6:7a:e1:34:2b:ec: 17:7a:f4:36:6c:c8:ca:b3:86:7c:c0:e6:9c:40:bb: 1d:84:0f:1e:a2:1e:96:b8:21:b5:ef:ce:9a:e4:1d: e5:fb:8d:ab:f6:7a:86:e2:5c:7b:19:bb:ab:ff:84: e9:2e:bd:a6:29:73:2e:4e:9d:43:c9:84:a3:c3:e3: 9a:a9:9b:de:a9:9d:a2:35:ff:62:ba:a4:2d:25:6a: 31:a4:47:7d:e5:6d:06:32:66:f6:4e:73:13:5c:86: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:97:21:C7:1E:87:DD:CC:E9:55:DA:92:8A:A9:02:64:3E:6A:03:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/bb955220-0f5d-30f8-ac95-539c7effc165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl X509v3 Authority Key Identifier: keyid:37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer sbgp-ipAddrBlock: critical IPv4: 204.174.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:23:ec:67:b0:29:cf:af:70:b2:35:39:19:c7:a3:3d:3e:1a: a7:2f:9c:0b:69:c2:dc:f3:00:fc:27:07:6a:84:71:e4:13:4e: 2b:87:c5:43:eb:f1:dc:a9:84:8a:18:22:d3:20:af:31:a5:59: ab:e5:d8:b6:8d:b9:53:7b:97:77:c2:cd:f4:3e:ee:49:ae:52: cf:0f:4a:23:d9:b5:b5:4f:b2:f4:2a:61:11:bb:ef:b8:54:ce: 49:7d:98:bd:46:ce:f3:fe:71:f4:87:e8:22:d0:87:e6:a3:25: 39:ec:7d:08:db:9d:90:fb:88:b4:f9:7f:87:68:5a:4f:d7:75: f3:59:9a:2f:22:20:1e:d1:35:dd:62:a5:aa:85:41:f5:6e:d2: fe:00:8e:e7:48:36:dc:ff:51:b5:8b:d0:ef:26:52:4e:d1:ee: 8d:b2:f2:58:14:93:c9:2b:17:98:28:e6:94:f8:c6:5d:5c:91: 74:25:f4:6d:cf:47:39:45:36:68:fb:7c:3f:79:86:64:0c:86: 31:db:e3:70:f7:68:ce:b8:ac:9b:5f:a4:83:74:4d:fe:1d:3b: 90:3c:8b:fa:7b:f6:d9:1f:dc:e0:e3:69:80:01:41:7a:e9:d4: 61:a1:b2:c3:23:80:c9:47:f6:9a:15:63:5f:e6:64:38:ba:8c: 5b:24:18:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNACAUqo6Jao4FgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNjODcyZGItYjcxMy00MzlhLWI5ZWYtYzk3Y2ZmMGNi ZmFlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YzEyZDgwN2QtODc3ZS00NGVjLWFmMjAtZDc5MmUzNTliYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNZw3hvHb6TMfpOg/Q8g7WLhftgGj0Gi3/RI QQps6EPxhtDY/07mffK7zlbs+OMJakHEdxfI5MLF6Cd+CP0zI/uqx1g4l48PI35Z XD6RQITyLk0DeGsUcj3Q7fB/fTrt4m8W4+BUSdNaU+ZLstPRawCyJF/O5SrC3xh0 kSZHg9jg0wuhR6vbjpf8NlkHNyKSWdqx61ZMre5EuFhE1Bq2euE0K+wXevQ2bMjK s4Z8wOacQLsdhA8eoh6WuCG1786a5B3l+42r9nqG4lx7Gbur/4TpLr2mKXMuTp1D yYSjw+OaqZveqZ2iNf9iuqQtJWoxpEd95W0GMmb2TnMTXIYcrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWXIcceh93M6VXakoqpAmQ+agNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Y2M4 NzJkYi1iNzEzLTQzOWEtYjllZi1jOTdjZmYwY2JmYWUvYmI5NTUyMjAtMGY1ZC0z MGY4LWFjOTUtNTM5YzdlZmZjMTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWNjODcyZGItYjcxMy00MzlhLWI5 ZWYtYzk3Y2ZmMGNiZmFlLzljYzg3MmRiLWI3MTMtNDM5YS1iOWVmLWM5N2NmZjBj YmZhZS5jcmwwHwYDVR0jBBgwFoAUN3M2EnpRuuetmhRlonQD9z+WwgYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85Y2M4NzJkYi1iNzEzLTQzOWEtYjllZi1jOTdj ZmYwY2JmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzK5oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEj7GewKc+vcLI1ORnHoz0+GqcvnAtpwtzzAPwnB2qEceQTTiuHxUPr 8dyphIoYItMgrzGlWavl2LaNuVN7l3fCzfQ+7kmuUs8PSiPZtbVPsvQqYRG777hU zkl9mL1GzvP+cfSH6CLQh+ajJTnsfQjbnZD7iLT5f4doWk/XdfNZmi8iIB7RNd1i paqFQfVu0v4AjudINtz/UbWL0O8mUk7R7o2y8lgUk8krF5go5pT4xl1ckXQl9G3P RzlFNmj7fD95hmQMhjHb43D3aM64rJtfpIN0Tf4dO5A8i/p79tkf3ODjaYABQXrp 1GGhssMjgMlH9poVY1/mZDi6jFskGIo= -----END CERTIFICATE-----Generated at Tue Oct 21 18:01:40 2025 by rpki-client