$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa File: caa97378-5f08-3b0d-b7e1-827ad74af39f.roa (raw, json) Hash identifier: oB2yrOWAfYywfVxj27Gn4CC8oDIoEufw7W11xc55KI4= Subject key identifier: BB:61:D0:36:BD:2D:87:7D:FC:91:7E:10:4A:90:96:71:AB:CA:26:41 Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F4328584A82AB4CC877B6A3B2FAE86C80 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 36290 IP address blocks: 204.19.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4c:c8:77:b6:a3:b2:fa:e8:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=81adac95-9a61-48a3-ac4d-540dc2181e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ad:af:f7:45:1a:52:89:c9:49:07:2b:a6:2e: db:24:20:07:03:83:f0:0d:4d:6b:0d:d3:76:dc:e0: 8f:1d:9e:e6:5f:22:0b:14:ef:6e:23:aa:03:ad:ca: 66:99:1e:97:b7:9d:1d:93:07:51:76:0d:97:50:b7: 61:9e:1c:ae:96:e2:d8:68:13:46:92:21:15:70:2f: 68:99:53:75:22:66:9b:f0:3e:84:c1:19:b8:7e:db: c5:4a:28:5b:1d:34:97:99:3a:65:60:f8:b4:04:71: 24:9c:d5:0e:90:e2:0b:7d:02:b0:eb:7d:41:5c:07: d3:53:cf:13:bb:07:92:b2:25:46:55:6e:dd:4a:17: 20:24:a8:a0:78:7c:85:0d:73:f7:dd:1c:38:a4:20: 22:07:09:80:bc:fd:32:ac:4d:bc:9b:78:14:14:3d: 83:b3:35:df:3c:41:08:10:78:69:3c:13:92:7a:23: 2d:69:60:45:d7:77:37:14:a4:08:ae:c7:7b:76:0d: 33:00:95:51:76:28:86:fb:8d:e4:72:a7:52:27:67: fd:47:05:e8:76:b2:72:d7:fa:07:ca:d9:e2:97:de: fd:9a:6c:56:f3:0d:99:b5:52:63:35:64:51:18:87: ac:2c:b0:88:41:9a:b6:eb:ef:42:33:f0:57:73:c5: a9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:61:D0:36:BD:2D:87:7D:FC:91:7E:10:4A:90:96:71:AB:CA:26:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 204.19.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8b:23:7f:fc:c3:c0:f2:91:9f:29:3a:09:c8:6d:ab:2f:40: 8f:e5:c7:b1:8e:b6:74:e5:2c:34:a8:d8:e7:c0:95:a1:3c:fa: 3e:ef:a3:f7:af:22:dc:48:52:66:1d:1d:bb:6e:62:c9:95:a7: 93:69:28:32:bb:bb:f6:3a:36:09:74:55:c6:18:4d:aa:c8:8d: 5f:3f:a8:74:26:7d:d1:04:d2:4a:f5:6f:31:b9:9b:b4:64:b1: 75:37:4f:d6:02:fd:3b:8e:ae:1d:32:9d:d9:14:93:dd:5c:7b: a9:44:31:c1:bb:a7:bb:0a:ac:24:a1:62:31:8c:6e:5b:71:da: 59:32:a8:0d:fd:0c:2d:67:5f:38:bf:5d:70:f8:c6:6c:f4:d5: 27:d7:75:c3:bd:c7:30:6a:94:6b:1c:d9:4b:1a:f1:37:9b:83: d0:8b:13:75:88:90:10:32:14:89:d8:f2:76:01:84:6b:12:10: ee:5c:15:a6:3e:4a:cd:6a:fa:e6:52:a2:76:6c:3d:00:1f:d2: b5:d2:be:f6:28:33:6a:1c:76:38:b2:27:ad:6e:e7:87:b7:17: 63:d6:70:2a:24:29:9e:4f:0d:64:ad:6e:d2:8c:dd:1f:c9:23: f4:36:fb:79:74:21:9e:bd:fe:67:3a:84:35:f0:f2:59:4d:28: 1e:04:e4:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0zId7ajsvrobIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk ODFhZGFjOTUtOWE2MS00OGEzLWFjNGQtNTQwZGMyMTgxZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy62v90UaUonJSQcrpi7bJCAHA4PwDU1rDdN2 3OCPHZ7mXyILFO9uI6oDrcpmmR6Xt50dkwdRdg2XULdhnhyuluLYaBNGkiEVcC9o mVN1Imab8D6EwRm4ftvFSihbHTSXmTplYPi0BHEknNUOkOILfQKw631BXAfTU88T uweSsiVGVW7dShcgJKigeHyFDXP33Rw4pCAiBwmAvP0yrE28m3gUFD2DszXfPEEI EHhpPBOSeiMtaWBF13c3FKQIrsd7dg0zAJVRdiiG+43kcqdSJ2f9RwXodrJy1/oH ytnil979mmxW8w2ZtVJjNWRRGIesLLCIQZq26+9CM/BXc8WpuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLth0Da9LYd9/JF+EEqQlnGryiZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvY2FhOTczNzgtNWYwOC0z YjBkLWI3ZTEtODI3YWQ3NGFmMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2LI3/8w8DykZ8pOgnIbasvQI/lx7GOtnTlLDSo2OfAlaE8+j7vo/ev ItxIUmYdHbtuYsmVp5NpKDK7u/Y6Ngl0VcYYTarIjV8/qHQmfdEE0kr1bzG5m7Rk sXU3T9YC/TuOrh0yndkUk91ce6lEMcG7p7sKrCShYjGMbltx2lkyqA39DC1nXzi/ XXD4xmz01SfXdcO9xzBqlGsc2Usa8Tebg9CLE3WIkBAyFInY8nYBhGsSEO5cFaY+ Ss1q+uZSonZsPQAf0rXSvvYoM2ocdjiyJ61u54e3F2PWcCokKZ5PDWStbtKM3R/J I/Q2+3l0IZ69/mc6hDXw8llNKB4E5FQ= -----END CERTIFICATE-----Generated at Sun Aug 10 13:43:42 2025 by rpki-client