$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1de1fb3f-1157-396f-898a-42e29591f7a1.roa File: 1de1fb3f-1157-396f-898a-42e29591f7a1.roa (raw, json) Hash identifier: tivK1wXP55gLSx1oxebLdkEU6jg+Q5rhNFj9Dk/qgT8= Subject key identifier: EB:9F:F2:EB:A4:96:EF:B9:F1:08:43:72:D5:3F:C4:72:F8:25:35:56 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584ABA80C59A108ACA885C927A00 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1de1fb3f-1157-396f-898a-42e29591f7a1.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 2734 IP address blocks: 204.9.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:c5:9a:10:8a:ca:88:5c:92:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=510b12e9-3751-4aa8-9b85-4ca11f1ed41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:58:f2:3e:67:55:89:65:9b:0c:39:24:c9: 82:d8:eb:7a:0d:c1:ae:ed:03:0c:34:de:c8:67:1a: c6:25:40:74:42:59:ba:90:c2:7e:85:3b:af:eb:f6: 9a:81:e8:07:7c:1e:86:4f:2a:f8:dc:ef:09:ed:b3: 2e:54:d3:57:ae:69:fc:4b:f9:8f:4e:c9:67:82:bd: 55:06:56:3f:96:d8:d5:cd:7c:72:83:b1:a1:13:c2: 02:9d:89:3e:cf:e7:f1:bd:97:e3:ee:c0:d5:42:1a: fb:b3:3d:e2:a9:d1:af:c5:4b:13:20:83:aa:db:d2: 6a:15:aa:54:5a:39:41:30:89:1b:81:8e:b4:b8:dc: 23:cf:38:51:84:c3:3a:81:4c:9f:a8:5d:75:2c:4a: 26:9b:23:80:5e:69:97:1c:a6:aa:98:3b:ee:79:cd: 38:58:0e:d5:20:43:d2:54:b4:54:8b:10:3b:81:e0: 45:fb:c9:59:2f:49:0b:7b:5a:b9:09:f4:4d:92:75: 6c:6b:39:7c:8a:5b:f8:68:84:7e:15:59:62:f7:22: 47:00:58:40:59:62:04:5f:2d:02:24:ae:71:42:2b: 04:be:9f:8d:fa:b8:e8:e2:8c:76:de:2d:f3:68:7d: 4f:25:a7:cb:8a:90:9e:42:c5:77:18:76:a8:62:bf: 4c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9F:F2:EB:A4:96:EF:B9:F1:08:43:72:D5:3F:C4:72:F8:25:35:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1de1fb3f-1157-396f-898a-42e29591f7a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 204.9.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:bc:b9:9d:3e:14:93:56:99:78:17:65:fd:76:47:47:ee:56: 96:c5:d8:24:87:ee:d3:0e:97:df:54:0f:fc:d2:bd:46:94:30: 1a:af:25:e5:bc:95:28:d1:1f:0d:2d:cf:20:e0:38:aa:6c:99: 85:64:62:aa:e1:69:7c:88:4d:d0:fc:52:15:66:73:ae:2e:0c: 33:19:36:0f:f1:a1:cc:66:8d:0b:ba:3f:34:d9:cb:01:ed:cc: 20:28:a3:74:19:aa:1b:b6:cd:f7:42:72:a8:22:76:0d:34:85: 4d:fc:0b:59:dc:d2:e7:fd:50:64:02:46:98:89:37:9a:9a:eb: d4:98:4f:54:06:91:ad:4c:70:c2:95:38:89:67:38:61:7b:dd: 1a:2c:88:a6:5b:fa:52:d6:6a:d6:52:a0:a9:ba:c4:25:da:71: 40:ca:2a:d9:9b:6d:71:ef:88:11:df:f6:96:0b:82:8a:4a:a3: 0d:c9:52:47:af:fa:3e:27:28:b6:bc:80:4b:59:93:65:f9:fd: 48:d1:1c:ab:92:8b:15:63:ec:cc:99:ee:b3:2e:1c:d2:73:5d: 86:bc:61:4d:98:dc:21:62:8c:29:16:57:dc:c9:f1:42:34:ad: a4:bb:29:fd:f0:e6:de:68:62:82:57:05:64:23:c5:33:f9:63: 33:86:db:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6gMWaEIrKiFySegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk NTEwYjEyZTktMzc1MS00YWE4LTliODUtNGNhMTFmMWVkNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI5Y8j5nVYllmww5JMmC2Ot6DcGu7QMMNN7I ZxrGJUB0Qlm6kMJ+hTuv6/aagegHfB6GTyr43O8J7bMuVNNXrmn8S/mPTslngr1V BlY/ltjVzXxyg7GhE8ICnYk+z+fxvZfj7sDVQhr7sz3iqdGvxUsTIIOq29JqFapU WjlBMIkbgY60uNwjzzhRhMM6gUyfqF11LEommyOAXmmXHKaqmDvuec04WA7VIEPS VLRUixA7geBF+8lZL0kLe1q5CfRNknVsazl8ilv4aIR+FVli9yJHAFhAWWIEXy0C JK5xQisEvp+N+rjo4ox23i3zaH1PJafLipCeQsV3GHaoYr9MmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuf8uuklu+58QhDctU/xHL4JTVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvMWRlMWZiM2YtMTE1Ny0z OTZmLTg5OGEtNDJlMjk1OTFmN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi8uZ0+FJNWmXgXZf12R0fuVpbF2CSH7tMOl99UD/zSvUaUMBqvJeW8 lSjRHw0tzyDgOKpsmYVkYqrhaXyITdD8UhVmc64uDDMZNg/xocxmjQu6PzTZywHt zCAoo3QZqhu2zfdCcqgidg00hU38C1nc0uf9UGQCRpiJN5qa69SYT1QGka1McMKV OIlnOGF73RosiKZb+lLWatZSoKm6xCXacUDKKtmbbXHviBHf9pYLgopKow3JUkev +j4nKLa8gEtZk2X5/UjRHKuSixVj7MyZ7rMuHNJzXYa8YU2Y3CFijCkWV9zJ8UI0 raS7Kf3w5t5oYoJXBWQjxTP5YzOG29s= -----END CERTIFICATE-----Generated at Wed Aug 6 12:37:27 2025 by rpki-client