$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa File: 69d00425-cf12-3785-aecf-3a474d2c9aaf.roa (raw, json) Hash identifier: Ss43EH4o+I6D8pS/Sx/9mbyZsd0PU61S+tSZ7Fe6k+0= Subject key identifier: 61:86:B0:C2:8F:7E:15:20:0D:E7:E9:F3:86:3C:C8:A5:14:29:48:C4 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584AD23C32D95AFB133B38137AC0 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 9009 IP address blocks: 204.11.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:32:d9:5a:fb:13:3b:38:13:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=5336f18c-e21c-4fcf-ac39-5144a9765703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:46:1d:0a:b6:81:4d:e0:09:ee:44:9e:93: 20:24:ab:a6:a1:f9:2a:75:d1:6f:3b:66:dd:b8:39: ce:92:c9:3c:d2:af:41:fd:4e:16:1c:17:5d:fd:af: e4:12:b1:7c:b6:8f:5a:44:e7:cc:7a:96:86:fa:dd: 40:5b:be:1c:0c:3d:e5:d9:ee:54:80:fb:db:81:e2: f0:95:fe:cd:21:e6:8a:7f:dd:f7:10:95:87:ee:ec: 8b:20:10:58:2f:c4:fe:9a:74:4e:0f:1d:c0:0d:a3: 57:39:5d:6c:65:99:46:ec:28:07:ec:b8:9e:97:90: 07:42:1f:77:e8:c1:6d:fd:fd:1b:e2:d6:1b:20:59: 88:c7:bd:c9:46:1e:c6:c4:5e:5f:18:5d:9a:5c:7a: 25:b7:a2:47:a3:ee:66:18:19:64:a2:06:17:97:26: e5:52:fc:24:ac:5f:71:04:bb:68:69:76:d5:a2:62: 31:71:aa:fc:fa:48:f3:9a:eb:b7:20:9c:13:f4:87: d6:99:39:22:e2:92:47:38:5d:56:93:4a:06:5e:c5: 65:bf:fe:ba:15:1b:2a:b0:85:99:72:ed:22:a2:44: 34:68:84:12:36:65:4c:55:20:24:a9:14:e5:f3:f4: 7b:25:fe:d6:cc:fb:52:79:17:21:7c:ef:21:f4:a3: 0d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:86:B0:C2:8F:7E:15:20:0D:E7:E9:F3:86:3C:C8:A5:14:29:48:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 204.11.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f4:50:6a:bd:b3:38:fc:3d:32:95:05:fc:8b:5b:19:2e:4e: 9e:c0:65:d1:94:55:eb:dd:77:04:9a:36:4c:d6:e5:e4:5e:07: 0f:70:29:d3:3c:ff:83:bb:4f:58:88:f5:2f:ca:3f:7f:5c:2c: 84:b9:0e:f7:cf:56:c3:16:f0:57:1d:bc:d5:f6:b5:49:e8:41: b5:65:77:60:8e:b0:8e:e6:1f:3f:84:8f:d2:2a:89:43:ff:56: 9b:b8:59:df:5c:ad:96:09:a8:8c:79:5e:63:45:58:b7:cc:e5: 78:10:2a:43:e6:85:65:8e:0b:e9:45:d2:e6:27:74:7f:0e:69: 55:8c:43:98:e9:f6:ba:c4:86:1a:f8:d8:84:69:bc:82:83:fb: 84:00:54:17:ee:73:0b:a9:6a:6a:24:b1:37:16:5e:dc:46:9b: 9a:88:08:a2:89:ef:20:96:50:17:5c:64:8f:0b:27:3f:e7:37: a8:a7:4e:78:26:0f:2e:cc:b8:a6:68:7c:e8:6e:ea:c9:09:e4: 25:ec:e4:99:1a:92:46:a1:fa:c0:dd:14:5c:49:95:e8:3a:87: e3:78:9c:36:0d:77:a0:5d:2f:a0:56:42:11:66:b9:f6:2b:d1: af:3c:28:74:26:9c:c7:4e:9b:3a:e6:63:33:97:e4:64:af:56: f4:a3:20:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPDLZWvsTOzgTesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NTMzNmYxOGMtZTIxYy00ZmNmLWFjMzktNTE0NGE5NzY1NzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQlGHQq2gU3gCe5EnpMgJKumofkqddFvO2bd uDnOksk80q9B/U4WHBdd/a/kErF8to9aROfMepaG+t1AW74cDD3l2e5UgPvbgeLw lf7NIeaKf933EJWH7uyLIBBYL8T+mnRODx3ADaNXOV1sZZlG7CgH7Liel5AHQh93 6MFt/f0b4tYbIFmIx73JRh7GxF5fGF2aXHolt6JHo+5mGBlkogYXlyblUvwkrF9x BLtoaXbVomIxcar8+kjzmuu3IJwT9IfWmTki4pJHOF1Wk0oGXsVlv/66FRsqsIWZ cu0iokQ0aIQSNmVMVSAkqRTl8/R7Jf7WzPtSeRchfO8h9KMNHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGGsMKPfhUgDefp84Y8yKUUKUjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNjlkMDA0MjUtY2YxMi0z Nzg1LWFlY2YtM2E0NzRkMmM5YWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn0UGq9szj8PTKVBfyLWxkuTp7AZdGUVevddwSaNkzW5eReBw9wKdM8 /4O7T1iI9S/KP39cLIS5DvfPVsMW8FcdvNX2tUnoQbVld2COsI7mHz+Ej9IqiUP/ Vpu4Wd9crZYJqIx5XmNFWLfM5XgQKkPmhWWOC+lF0uYndH8OaVWMQ5jp9rrEhhr4 2IRpvIKD+4QAVBfucwupamoksTcWXtxGm5qICKKJ7yCWUBdcZI8LJz/nN6inTngm Dy7MuKZofOhu6skJ5CXs5Jkakkah+sDdFFxJleg6h+N4nDYNd6BdL6BWQhFmufYr 0a88KHQmnMdOmzrmYzOX5GSvVvSjIO4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:03:01 2025 by rpki-client