$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ad030b44-d8fd-38cd-83cf-1051a9762467.roa File: ad030b44-d8fd-38cd-83cf-1051a9762467.roa (raw, json) Hash identifier: 6OEBUfEFnF7gMI8TKG/LZPln7eZ4klu9Yf60RJRtcTU= Subject key identifier: 15:63:A0:8F:65:45:B5:45:B9:93:66:A2:F4:BF:7D:FA:B7:AB:50:38 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584B110C04DD206A20BC68FE09C0 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ad030b44-d8fd-38cd-83cf-1051a9762467.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 21559 IP address blocks: 204.77.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:04:dd:20:6a:20:bc:68:fe:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=d96b7e39-953c-4e3c-beff-d61661728e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:41:17:b1:6b:e8:1a:af:15:07:b5:58:a2:97: ed:25:2b:af:9b:69:15:85:5a:cd:b5:7d:58:82:a2: 74:77:1c:18:52:96:41:a2:25:fa:bc:b7:d6:ba:8d: 8b:51:53:53:f4:f9:0c:fe:a2:92:9a:25:9d:6c:fc: e3:49:e9:b9:5f:3f:e9:3a:a6:34:84:02:69:17:8e: 45:f5:1b:11:c7:40:42:3b:58:49:35:49:94:d5:a4: 4f:53:c9:3e:0c:07:a2:5d:0c:74:e1:12:14:58:f0: 18:ad:bd:4e:2d:68:f7:6a:23:17:71:3e:8a:cd:92: 0e:3d:70:70:bc:54:5f:b2:5a:cd:4f:06:c5:c2:17: b9:6a:44:2e:55:8e:9b:54:0d:68:3d:b4:3e:2c:d1: 2d:43:85:df:52:5a:70:bb:1b:5d:e4:68:88:a6:04: 9b:f8:8c:23:18:e5:46:9e:37:23:76:75:f4:d1:f2: 1c:09:8e:90:75:17:59:c3:42:a2:88:db:bb:5a:bd: 3d:f5:9e:df:34:72:7b:d6:f0:18:2f:af:06:49:de: 9f:8e:1a:08:65:f0:5d:6b:0c:43:2e:f9:4e:2f:ab: 3c:51:8d:08:b7:ab:72:2d:33:f0:28:67:36:24:88: ff:41:c1:67:ef:c4:46:d3:1a:a4:09:1f:24:11:9a: b1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:63:A0:8F:65:45:B5:45:B9:93:66:A2:F4:BF:7D:FA:B7:AB:50:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ad030b44-d8fd-38cd-83cf-1051a9762467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 204.77.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9f:cf:cf:ed:10:a5:ee:6b:2f:51:a2:99:5d:36:9e:cc:33: 43:17:20:dd:c7:f2:af:d8:c9:7d:28:3c:22:3f:f8:12:f5:64: 4c:b7:fe:f5:17:75:ff:a2:cc:bd:9f:fb:51:f9:35:5f:63:47: 35:c0:85:d6:38:19:cd:61:10:5a:ff:95:36:f1:09:66:c3:21: 88:79:33:30:ee:da:1d:44:77:16:5b:25:75:f9:56:c4:8b:30: 07:88:41:95:fb:b0:98:9b:0f:4d:7c:11:30:c9:01:f7:9b:93: f4:57:6c:33:0c:d5:72:09:ff:7c:da:e6:26:27:ac:76:84:ca: 96:a9:5e:9e:65:72:61:82:48:fd:67:71:69:5e:a1:4a:81:a1: fa:db:67:49:f2:b7:40:ab:02:b7:8b:b3:28:51:a0:86:1a:02: b6:fd:74:36:2f:9a:82:2a:be:67:0a:1d:37:4e:72:30:e7:73: f3:ed:a9:48:dc:7d:51:e8:01:8d:14:88:70:e1:f8:1b:c6:70: 87:ae:a7:51:e9:d3:eb:dc:24:d4:28:1f:75:11:0d:e7:cc:4f: 52:f2:90:f2:df:77:2e:d2:94:0c:c7:4d:0e:d0:f0:c4:2d:5f: 57:0c:8b:92:d9:2f:09:ca:cb:85:e5:48:86:af:54:a1:2d:fd: 7a:55:c6:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDATdIGogvGj+CcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDk2YjdlMzktOTUzYy00ZTNjLWJlZmYtZDYxNjYxNzI4ZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEEXsWvoGq8VB7VYopftJSuvm2kVhVrNtX1Y gqJ0dxwYUpZBoiX6vLfWuo2LUVNT9PkM/qKSmiWdbPzjSem5Xz/pOqY0hAJpF45F 9RsRx0BCO1hJNUmU1aRPU8k+DAeiXQx04RIUWPAYrb1OLWj3aiMXcT6KzZIOPXBw vFRfslrNTwbFwhe5akQuVY6bVA1oPbQ+LNEtQ4XfUlpwuxtd5GiIpgSb+IwjGOVG njcjdnX00fIcCY6QdRdZw0KiiNu7Wr099Z7fNHJ71vAYL68GSd6fjhoIZfBdawxD LvlOL6s8UY0It6tyLTPwKGc2JIj/QcFn78RG0xqkCR8kEZqxSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVjoI9lRbVFuZNmovS/ffq3q1A4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvYWQwMzBiNDQtZDhmZC0z OGNkLTgzY2YtMTA1MWE5NzYyNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzE0KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEifz8/tEKXuay9RopldNp7MM0MXIN3H8q/YyX0oPCI/+BL1ZEy3/vUX df+izL2f+1H5NV9jRzXAhdY4Gc1hEFr/lTbxCWbDIYh5MzDu2h1EdxZbJXX5VsSL MAeIQZX7sJibD018ETDJAfebk/RXbDMM1XIJ/3za5iYnrHaEypapXp5lcmGCSP1n cWleoUqBofrbZ0nyt0CrAreLsyhRoIYaArb9dDYvmoIqvmcKHTdOcjDnc/PtqUjc fVHoAY0UiHDh+BvGcIeup1Hp0+vcJNQoH3URDefMT1LykPLfdy7SlAzHTQ7Q8MQt X1cMi5LZLwnKy4XlSIavVKEt/XpVxlE= -----END CERTIFICATE-----Generated at Tue Oct 21 18:02:57 2025 by rpki-client