$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a9deed77-c1a7-3be7-84ca-b023d79399ac.roa File: a9deed77-c1a7-3be7-84ca-b023d79399ac.roa (raw, json) Hash identifier: p36WA2V2zHFl25KZi1IeT085/UWIXhTf2sGZANugBJg= Subject key identifier: 04:97:A4:E7:98:8F:A3:63:73:62:47:12:D1:D5:5D:66:75:3D:9D:5B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF0EF09762BB2BC335E29C6D0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a9deed77-c1a7-3be7-84ca-b023d79399ac.roa Signing time: Fri 22 Aug 2025 12:56:24 +0000 ROA not before: Fri 22 Aug 2025 12:56:24 +0000 ROA not after: Thu 20 Nov 2025 13:56:24 +0000 asID: 31898 IP address blocks: 204.216.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:ef:09:76:2b:b2:bc:33:5e:29:c6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 12:56:24 2025 GMT Not After : Nov 20 13:56:24 2025 GMT Subject: CN=effc0c9c-e5fa-47e4-bc5b-0a63e0f2daa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:db:22:f6:d6:be:c1:e6:59:17:a7:7c:18:ab: 5a:fd:e2:7a:9f:53:fa:12:c1:60:d6:ef:ea:74:9e: 5a:b4:db:25:62:1e:ec:72:c8:95:5b:94:34:1b:09: 8b:49:86:de:0d:f7:ed:be:43:02:4e:4f:21:fd:9c: 67:11:74:5e:4c:9f:1c:d9:c4:4e:57:56:be:4b:fe: b0:eb:12:3b:95:23:a8:39:35:d5:2a:ab:f3:da:eb: cb:e3:7e:87:2a:e9:36:42:fb:44:a9:64:36:39:13: 1a:a1:e3:d3:85:35:78:88:ed:3b:78:d7:40:98:4c: c3:73:b9:15:33:a9:33:2e:c1:54:c6:db:78:da:5d: 28:b8:cf:a2:80:bd:cb:71:23:dd:8a:5b:e0:1e:a7: f5:0c:0d:98:be:70:ee:b9:b0:f7:af:4c:86:81:c6: 00:a5:bb:3e:b1:6f:ce:d7:12:2b:e1:23:18:0c:e2: 35:59:36:6a:f3:dc:5f:00:bd:f0:2b:17:c7:4e:2e: 80:8a:77:6a:28:1c:23:7f:cf:e1:a6:d3:10:ec:df: fd:cc:a4:3e:ce:f6:de:c9:08:1b:9f:ed:99:20:5b: bc:70:3f:b9:05:8f:e9:da:27:79:f1:ae:4c:29:96: b5:5d:92:31:4a:3e:62:20:a8:c9:7e:7e:8d:3b:a0: 44:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:97:A4:E7:98:8F:A3:63:73:62:47:12:D1:D5:5D:66:75:3D:9D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a9deed77-c1a7-3be7-84ca-b023d79399ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 204.216.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:be:f9:aa:44:30:66:58:5c:bc:fb:0b:7e:88:0d:c3:3e:15: fb:44:e9:02:f1:39:a0:e2:02:3a:53:c5:b5:d0:37:38:83:f8: c4:76:ac:64:61:91:85:24:c6:43:dc:58:6a:d5:4b:76:4f:71: 94:2b:a8:71:04:82:0a:2b:08:76:a9:8d:97:af:53:34:8d:e6: 86:14:6d:2c:42:b9:a1:0e:25:62:51:ff:2f:3e:b4:95:26:87: 4c:df:29:78:3f:f9:b9:c6:9d:f7:9f:1d:e3:72:03:a7:11:b6: 88:69:a2:88:d4:be:ce:3a:ae:62:c4:15:3f:ca:7e:61:c6:9a: 8f:60:aa:18:17:95:2e:c1:3a:d8:68:ab:f7:91:c8:b1:5a:7a: 35:97:b3:b3:12:1a:84:4f:ec:ca:54:43:37:e0:f1:3b:b0:63: 50:67:81:86:da:65:b4:73:e7:27:e4:6c:76:e5:55:08:5e:4c: df:d3:5f:71:f0:f4:fb:39:b4:fe:91:4e:c2:65:cf:83:ac:e0: 1d:ca:e9:15:b4:03:f7:8c:19:26:4b:a7:67:4f:96:59:08:52: 95:80:31:eb:5c:17:32:96:50:4d:e0:4f:85:37:46:d6:5e:20: 11:51:92:ce:2a:43:77:3f:a4:66:37:6a:07:08:d8:b0:aa:bd: 60:15:8c:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw7wl2K7K8M14pxtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjEyNTYyNFoXDTI1MTEyMDEzNTYyNFowLzEtMCsGA1UEAxMk ZWZmYzBjOWMtZTVmYS00N2U0LWJjNWItMGE2M2UwZjJkYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNsi9ta+weZZF6d8GKta/eJ6n1P6EsFg1u/q dJ5atNslYh7scsiVW5Q0GwmLSYbeDfftvkMCTk8h/ZxnEXReTJ8c2cROV1a+S/6w 6xI7lSOoOTXVKqvz2uvL436HKuk2QvtEqWQ2ORMaoePThTV4iO07eNdAmEzDc7kV M6kzLsFUxtt42l0ouM+igL3LcSPdilvgHqf1DA2YvnDuubD3r0yGgcYApbs+sW/O 1xIr4SMYDOI1WTZq89xfAL3wKxfHTi6AindqKBwjf8/hptMQ7N/9zKQ+zvbeyQgb n+2ZIFu8cD+5BY/p2id58a5MKZa1XZIxSj5iIKjJfn6NO6BEzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASXpOeYj6Njc2JHEtHVXWZ1PZ1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTlkZWVkNzctYzFhNy0z YmU3LTg0Y2EtYjAyM2Q3OTM5OWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzNhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW++apEMGZYXLz7C36IDcM+FftE6QLxOaDiAjpTxbXQNziD+MR2rGRh kYUkxkPcWGrVS3ZPcZQrqHEEggorCHapjZevUzSN5oYUbSxCuaEOJWJR/y8+tJUm h0zfKXg/+bnGnfefHeNyA6cRtohpoojUvs46rmLEFT/KfmHGmo9gqhgXlS7BOtho q/eRyLFaejWXs7MSGoRP7MpUQzfg8TuwY1BngYbaZbRz5yfkbHblVQheTN/TX3Hw 9Ps5tP6RTsJlz4Os4B3K6RW0A/eMGSZLp2dPllkIUpWAMetcFzKWUE3gT4U3RtZe IBFRks4qQ3c/pGY3agcI2LCqvWAVjGw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:36:29 2025 by rpki-client