$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa File: d23c1663-1dc9-338f-b7d7-799b68465589.roa (raw, json) Hash identifier: 4QyrY5RnJ6dwx9KizyqRqlvNnICPZae38ljCp3WTCHQ= Subject key identifier: B5:B8:1E:29:03:6E:E5:B5:F7:17:BC:3D:09:1E:F2:62:4C:53:B2:17 Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F4328584A58CB081EA1A90BF5A1CFFA80 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 77 IP address blocks: 204.9.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:08:1e:a1:a9:0b:f5:a1:cf:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=95130818-1f92-4bb1-8814-6073c53efe4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1c:fc:18:02:a6:90:b3:25:21:00:87:99:b7: b2:60:97:6f:ed:fe:54:04:ac:8a:ff:40:ea:24:57: db:b9:12:0b:6b:f7:ce:9e:ca:78:f1:dc:9d:26:04: e1:e5:cb:84:32:59:38:e4:21:bb:07:e1:3a:7e:dc: 8e:14:80:3d:b0:33:d5:18:89:21:81:71:39:53:67: 85:87:0b:f8:62:94:80:8f:1e:0d:41:47:69:f6:56: b8:93:28:03:88:9c:b0:ee:59:20:fc:9c:fb:a8:19: bb:2a:a6:48:30:75:e2:3c:88:53:9d:8b:dc:d2:57: 44:af:6f:8e:8a:bd:8a:27:ba:48:a3:82:8c:7e:b8: d5:b5:27:1b:71:8d:4a:aa:00:46:52:97:52:8c:c9: e4:a1:fd:c9:7b:93:4f:8a:15:5e:77:69:d4:10:6e: 4a:a4:14:00:e2:27:c0:9c:da:b4:c6:a9:48:58:fe: 42:d9:c3:13:c7:f7:a2:4c:54:6b:97:79:92:a2:0f: 04:71:7f:a5:f7:47:fa:64:b4:41:b5:0c:5e:5a:52: 28:7a:2d:8e:37:ba:21:86:6f:9c:2f:66:e1:33:16: 63:a2:49:da:2e:dc:c3:e0:ca:6e:ab:aa:3d:5a:f3: 32:e7:2a:0a:b2:bf:7e:26:a0:51:80:5b:4d:b7:1c: 71:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B8:1E:29:03:6E:E5:B5:F7:17:BC:3D:09:1E:F2:62:4C:53:B2:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv4: 204.9.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c2:40:4f:b3:62:c2:45:6c:5f:15:f2:18:38:80:f5:aa:44: ae:d4:56:15:eb:72:b0:c1:04:7e:f0:4a:b2:aa:7d:4c:11:ed: ad:41:6c:86:d4:42:21:c9:f7:cf:a0:07:f1:d8:c4:2b:a2:e7: dc:41:23:42:6e:c9:a0:ed:bb:de:84:96:16:17:43:d0:2a:53: f1:de:0d:61:ce:2d:57:50:a7:53:12:d8:33:cd:76:c9:4f:d7: a3:46:bf:26:d6:60:25:68:7c:e1:0c:63:ab:83:5d:81:1f:45: 85:96:de:2e:4a:5f:4b:f9:5b:20:cd:ca:5f:b4:fc:3b:18:b1: f0:2f:62:09:69:7d:db:66:af:54:cc:9d:ba:1b:7b:cc:0a:79: 78:6d:41:50:73:6d:ea:81:5f:24:e4:e8:86:a5:c4:85:dc:6d: 38:2d:aa:54:27:1b:cf:76:bd:ec:0c:a6:71:e2:22:df:fa:e6: 8d:9b:37:15:b4:72:16:4c:98:18:c6:82:d2:19:9f:39:49:85: 75:67:5e:02:62:ed:57:0c:7f:ea:21:7e:97:6e:a9:14:b3:d0: de:6a:4e:24:20:1c:2f:11:f7:63:11:ac:e0:95:62:32:8a:34: 3c:51:08:67:20:43:6a:d2:dc:66:79:4e:92:4b:8b:43:c4:b9: 7c:52:b7:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywgeoakL9aHP+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk OTUxMzA4MTgtMWY5Mi00YmIxLTg4MTQtNjA3M2M1M2VmZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghz8GAKmkLMlIQCHmbeyYJdv7f5UBKyK/0Dq JFfbuRILa/fOnsp48dydJgTh5cuEMlk45CG7B+E6ftyOFIA9sDPVGIkhgXE5U2eF hwv4YpSAjx4NQUdp9la4kygDiJyw7lkg/Jz7qBm7KqZIMHXiPIhTnYvc0ldEr2+O ir2KJ7pIo4KMfrjVtScbcY1KqgBGUpdSjMnkof3Je5NPihVed2nUEG5KpBQA4ifA nNq0xqlIWP5C2cMTx/eiTFRrl3mSog8EcX+l90f6ZLRBtQxeWlIoei2ON7ohhm+c L2bhMxZjoknaLtzD4Mpuq6o9WvMy5yoKsr9+JqBRgFtNtxxx4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLW4HikDbuW19xe8PQke8mJMU7IXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvZDIzYzE2NjMtMWRjOS0z MzhmLWI3ZDctNzk5YjY4NDY1NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHCQE+zYsJFbF8V8hg4gPWqRK7UVhXrcrDBBH7wSrKqfUwR7a1BbIbU QiHJ98+gB/HYxCui59xBI0JuyaDtu96ElhYXQ9AqU/HeDWHOLVdQp1MS2DPNdslP 16NGvybWYCVofOEMY6uDXYEfRYWW3i5KX0v5WyDNyl+0/DsYsfAvYglpfdtmr1TM nbobe8wKeXhtQVBzbeqBXyTk6IalxIXcbTgtqlQnG892vewMpnHiIt/65o2bNxW0 chZMmBjGgtIZnzlJhXVnXgJi7VcMf+ohfpduqRSz0N5qTiQgHC8R92MRrOCVYjKK NDxRCGcgQ2rS3GZ5TpJLi0PEuXxSty0= -----END CERTIFICATE-----Generated at Fri Jul 4 10:08:00 2025 by rpki-client