$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/cc5a7709-a56d-3530-a29a-c30861d58af7.roa File: cc5a7709-a56d-3530-a29a-c30861d58af7.roa (raw, json) Hash identifier: MWfcgTB7Mnku9zSejoXEA3MsQhoQqQHADVEod1NYSHc= Subject key identifier: 45:1E:EA:99:18:96:76:D7:B2:47:4F:58:DD:59:D2:83:2B:4A:92:C3 Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab Certificate serial: 010D0C9F4328584B328C425295CB7E007C329980 Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/cc5a7709-a56d-3530-a29a-c30861d58af7.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 204.155.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:42:52:95:cb:7e:00:7c:32:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=b4daecff-9336-48a3-b598-4b5c97c9fdf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:12:c9:ec:14:99:df:51:b2:46:80:e1:17: 5c:f5:b2:d0:ec:20:a2:1a:f5:36:f5:da:8c:d0:13: 5b:39:c2:c3:b3:de:57:e2:d1:63:e6:69:f8:3d:7a: ba:31:f7:ab:fc:66:85:a1:89:71:a7:66:e8:6e:f4: 47:b5:d0:a3:6a:69:1b:b3:5f:d5:7d:ec:77:bd:24: d5:4c:00:c6:6b:e5:c4:40:12:10:9d:93:fc:f7:26: 47:fa:76:92:9a:83:5d:5f:3a:c4:e4:1c:30:f0:24: 61:15:c2:b0:9c:ea:28:ee:d1:d9:2f:8c:90:27:12: 1e:55:e2:46:78:07:59:87:55:88:2c:6f:0a:38:65: 9f:5b:49:54:94:31:88:27:cf:d1:4b:29:8b:c4:02: 4d:8e:c1:69:5c:dc:a5:2c:ab:a3:02:7e:20:70:31: 31:b8:d5:98:7a:4b:f5:cf:4e:c1:b2:07:f9:67:40: 65:fa:eb:88:2a:75:02:1d:7c:e5:82:74:74:45:10: 97:74:4a:22:50:79:ec:f5:9f:b2:ae:44:2a:a2:5a: f0:66:ee:79:e6:ca:de:95:d1:f6:72:d3:22:b7:c7: a7:a4:17:b0:15:91:a6:bd:05:f9:dd:90:54:b5:90: d6:b6:de:9d:54:9e:56:57:58:99:d3:ea:b8:d4:c7: 41:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1E:EA:99:18:96:76:D7:B2:47:4F:58:DD:59:D2:83:2B:4A:92:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/cc5a7709-a56d-3530-a29a-c30861d58af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl X509v3 Authority Key Identifier: keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer sbgp-ipAddrBlock: critical IPv4: 204.155.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:41:23:4a:50:31:99:73:98:50:43:9b:58:1d:87:2b:31:23: 52:2e:35:b9:fc:4b:eb:d3:71:8a:77:3a:7d:c9:9a:a9:47:67: 73:62:a3:53:96:ea:ce:9a:2c:f5:6d:d8:02:0b:ec:98:0f:1b: c5:17:37:8d:2d:43:34:40:26:64:ec:44:96:10:55:e9:6b:79: 52:1b:4f:61:13:5b:cf:9e:d8:4d:70:19:7b:1c:a2:06:1f:9d: 8e:df:ab:d5:6b:37:22:cc:aa:92:c8:b7:cd:59:48:37:38:ee: a7:ee:8a:5b:2d:96:5b:fd:4a:0c:12:3b:1c:30:d5:7a:05:e3: b8:4b:4e:c1:f7:8e:b6:c2:7b:fe:52:83:c7:8d:af:25:f9:c8: d4:15:67:5e:9d:0e:fa:78:57:93:51:70:ba:80:a8:00:56:98: 23:45:19:0f:50:54:f0:42:b0:35:e8:74:13:9b:3d:40:e6:37: 50:cd:a4:12:85:a5:d4:39:c3:3d:35:cf:78:6d:aa:14:61:96: 8a:77:d3:aa:a0:37:8f:21:c1:94:af:3e:1c:d9:3c:77:84:72: 43:83:12:22:70:17:6c:6b:2c:63:c2:76:54:8f:02:39:76:aa: 90:49:c8:cc:b6:ce:74:b1:8c:d9:fa:09:7a:fa:3c:fa:11:20: 18:9b:ce:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEJSlct+AHwymYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3 NWFiMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YjRkYWVjZmYtOTMzNi00OGEzLWI1OTgtNGI1Yzk3YzlmZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIkSyewUmd9RskaA4Rdc9bLQ7CCiGvU29dqM 0BNbOcLDs95X4tFj5mn4PXq6Mfer/GaFoYlxp2bobvRHtdCjamkbs1/Vfex3vSTV TADGa+XEQBIQnZP89yZH+naSmoNdXzrE5Bww8CRhFcKwnOoo7tHZL4yQJxIeVeJG eAdZh1WILG8KOGWfW0lUlDGIJ8/RSymLxAJNjsFpXNylLKujAn4gcDExuNWYekv1 z07Bsgf5Z0Bl+uuIKnUCHXzlgnR0RRCXdEoiUHns9Z+yrkQqolrwZu555sreldH2 ctMit8enpBewFZGmvQX53ZBUtZDWtt6dVJ5WV1iZ0+q41MdBoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUe6pkYlnbXskdPWN1Z0oMrSpLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3 MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvY2M1YTc3MDktYTU2ZC0z NTMwLWEyOWEtYzMwODYxZDU4YWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3 NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzJt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9BI0pQMZlzmFBDm1gdhysxI1IuNbn8S+vTcYp3On3JmqlHZ3Nio1OW 6s6aLPVt2AIL7JgPG8UXN40tQzRAJmTsRJYQVelreVIbT2ETW8+e2E1wGXscogYf nY7fq9VrNyLMqpLIt81ZSDc47qfuilstllv9SgwSOxww1XoF47hLTsH3jrbCe/5S g8eNryX5yNQVZ16dDvp4V5NRcLqAqABWmCNFGQ9QVPBCsDXodBObPUDmN1DNpBKF pdQ5wz01z3htqhRhlop306qgN48hwZSvPhzZPHeEckODEiJwF2xrLGPCdlSPAjl2 qpBJyMy2znSxjNn6CXr6PPoRIBibzvQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:54 2025 by rpki-client