$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/1208c61d-795d-39aa-83bd-93a914e71179.roa File: 1208c61d-795d-39aa-83bd-93a914e71179.roa (raw, json) Hash identifier: PZUNi3klw2XQ8b+JE4WvY8rxC6bp1YW9hqg/ICB2+PU= Subject key identifier: 43:70:0B:06:0E:F4:CB:BC:2E:CD:23:8C:DE:2B:12:65:0F:82:F4:5C Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F4328584B0B76A43DE88203D51741D380 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/1208c61d-795d-39aa-83bd-93a914e71179.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 204.77.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a4:3d:e8:82:03:d5:17:41:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=17b0eeb8-7240-44cc-9e23-bffc99664ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:d4:da:b1:8f:39:31:08:ca:d6:d9:1a:36: 08:70:fb:2f:f9:0d:5b:48:be:27:b0:ba:ad:7b:e6: 52:da:25:e2:d0:9c:e0:bd:9c:a9:f1:64:fd:aa:b5: 81:0d:4b:43:b1:0d:78:d9:da:e4:5f:00:eb:7b:a1: be:5a:f5:29:87:3f:5b:62:64:ae:02:b7:1c:53:41: 8f:33:35:ff:34:d4:37:93:7c:dd:d6:c7:dc:96:95: 1a:ef:07:50:2b:95:a5:3e:37:30:b2:62:e8:de:97: 1c:3a:ec:48:f3:91:58:cf:1e:c4:05:9c:0b:06:39: 5d:4e:5f:f6:60:97:1e:79:a3:95:be:62:f1:29:e8: 24:28:1b:f2:61:e9:ae:41:ec:92:2a:96:41:03:34: 82:95:b9:87:22:43:51:eb:5d:15:26:45:f9:b6:56: a6:d5:c7:e1:07:56:90:ae:5a:27:76:05:2a:2e:9f: 2f:10:f9:33:35:4d:fb:ab:39:c9:32:a8:c4:f4:b9: c8:e1:f6:08:88:5f:4d:f0:17:c8:51:5a:5c:59:4e: 1f:5e:30:c7:a8:fc:f8:01:9a:8b:b5:73:72:03:ac: 3b:d0:b4:ef:2d:a5:e0:f0:db:d1:a7:9e:12:a2:e1: f0:20:33:c6:ee:e0:4a:f4:25:33:d2:90:96:c9:9c: 46:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:70:0B:06:0E:F4:CB:BC:2E:CD:23:8C:DE:2B:12:65:0F:82:F4:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/1208c61d-795d-39aa-83bd-93a914e71179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:51:2d:1c:4f:60:58:1f:df:e4:2f:1e:92:00:f7:9e:57:b7: 08:83:c1:dc:2f:ca:d9:d7:d2:64:d2:17:4d:83:39:d9:10:43: df:af:cd:1e:42:a6:30:1a:4b:be:42:0f:e7:ed:97:a3:13:51: 33:99:2c:38:23:8f:7a:58:d2:12:33:5d:22:10:d9:77:6a:3e: 98:d7:cb:36:d8:67:3b:27:23:09:92:9c:86:8b:f0:12:62:2a: 34:25:14:0a:bf:ff:f8:34:07:d6:b4:ee:f4:4d:58:83:3d:9a: 0b:1b:ae:d0:9f:e4:e2:c6:67:38:79:0a:7c:f3:cc:35:bc:88: 36:16:ba:0c:cc:4a:4a:fd:92:9d:60:82:79:28:0e:c6:24:73: 2e:41:b7:fb:2c:57:55:dc:bc:97:a2:41:78:0e:98:11:ae:76: 13:ec:a6:13:0d:d0:9a:9f:c7:b0:66:9a:a1:e8:a9:87:a9:be: aa:c3:27:ae:91:0f:5d:f9:41:9e:80:8c:51:9c:85:b6:21:d3: 7e:bc:bf:eb:5d:d4:07:9c:3a:4c:e2:1d:f5:4b:b0:75:a1:f1: 6f:69:77:a6:10:0d:7e:72:22:0c:4f:d4:9c:ca:53:f2:2e:fd: 69:ca:a8:10:da:32:51:7d:3c:de:eb:60:9c:68:33:28:7c:e0: dd:f7:69:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqQ96IID1RdB04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MTdiMGVlYjgtNzI0MC00NGNjLTllMjMtYmZmYzk5NjY0ZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpTU2rGPOTEIytbZGjYIcPsv+Q1bSL4nsLqt e+ZS2iXi0JzgvZyp8WT9qrWBDUtDsQ142drkXwDre6G+WvUphz9bYmSuArccU0GP MzX/NNQ3k3zd1sfclpUa7wdQK5WlPjcwsmLo3pccOuxI85FYzx7EBZwLBjldTl/2 YJceeaOVvmLxKegkKBvyYemuQeySKpZBAzSClbmHIkNR610VJkX5tlam1cfhB1aQ rlondgUqLp8vEPkzNU37qznJMqjE9LnI4fYIiF9N8BfIUVpcWU4fXjDHqPz4AZqL tXNyA6w70LTvLaXg8NvRp54SouHwIDPG7uBK9CUz0pCWyZxGSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENwCwYO9Mu8Ls0jjN4rEmUPgvRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvMTIwOGM2MWQtNzk1ZC0z OWFhLTgzYmQtOTNhOTE0ZTcxMTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVRLRxPYFgf3+QvHpIA955XtwiDwdwvytnX0mTSF02DOdkQQ9+vzR5C pjAaS75CD+ftl6MTUTOZLDgjj3pY0hIzXSIQ2XdqPpjXyzbYZzsnIwmSnIaL8BJi KjQlFAq///g0B9a07vRNWIM9mgsbrtCf5OLGZzh5CnzzzDW8iDYWugzMSkr9kp1g gnkoDsYkcy5Bt/ssV1XcvJeiQXgOmBGudhPsphMN0Jqfx7BmmqHoqYepvqrDJ66R D135QZ6AjFGchbYh0368v+td1AecOkziHfVLsHWh8W9pd6YQDX5yIgxP1JzKU/Iu /WnKqBDaMlF9PN7rYJxoMyh84N33aao= -----END CERTIFICATE-----Generated at Wed Nov 5 08:00:55 2025 by rpki-client