$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa File: f73b5053-f5db-33cf-aecf-f99a7cff535a.roa (raw, json) Hash identifier: izDkBr6jI5wyS5uzZ5/lFYby+0rnfv5/sJiFMKZ7Kw8= Subject key identifier: D0:59:71:56:49:1A:07:98:B4:CD:26:E4:37:70:B1:2E:DF:7A:B0:BD Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F4328584A82AB4CBAE21FA251AD1351B0 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 36290 IP address blocks: 204.16.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4c:ba:e2:1f:a2:51:ad:13:51:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=90b23f7e-cf0b-4b75-8a58-ccb11eeb41c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:00:11:ac:49:35:f3:30:a0:1d:ec:07:30: 46:b7:e5:fb:66:c2:06:86:63:16:8b:a5:26:de:18: 2f:74:18:de:98:f3:e3:75:39:d9:f6:92:f2:80:c6: 42:01:cb:c5:cc:99:e4:ed:46:22:cc:0f:11:f3:5e: d2:e2:8c:1b:35:77:ec:0d:23:d8:7a:57:7a:c5:68: 55:23:2c:7c:a4:b6:da:ba:5b:21:8a:eb:b4:05:77: d2:70:0a:5e:a6:ee:c6:0d:4d:2d:5a:c5:ee:2d:a7: aa:34:bc:d8:e3:98:c1:18:b6:23:0d:18:29:fc:0b: 30:bf:bb:1b:9a:86:c0:e8:39:c9:ea:a0:fc:b8:d3: 21:94:21:2c:b9:4f:45:9f:36:fd:d3:3a:c3:b1:df: e1:4e:82:69:95:28:1e:e4:e2:aa:e6:a5:3e:68:e3: 30:65:37:c1:eb:76:08:60:10:fd:21:bc:15:00:c7: 76:ae:8b:7c:22:03:87:fa:d7:86:63:ad:54:12:eb: f3:ea:b9:03:34:1d:da:0a:09:db:db:c7:23:d4:b0: 73:07:4c:21:16:92:35:ac:49:65:a5:e7:96:47:c2: b2:73:a4:14:ba:6c:74:29:9e:7d:b1:31:64:34:06: de:c2:4b:7e:35:7d:b3:a1:a1:8d:c2:ad:d8:56:6b: 12:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:59:71:56:49:1A:07:98:B4:CD:26:E4:37:70:B1:2E:DF:7A:B0:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 204.16.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:a9:e1:5b:d6:6d:e8:30:20:03:49:59:90:13:7d:f3:3a:4c: 1f:ba:25:72:af:ea:dc:7b:c9:d1:f7:c3:af:d4:80:88:5c:10: b9:a8:34:8c:c4:38:1a:d1:09:80:ae:b5:31:eb:59:f1:aa:b1: e4:e4:e4:fb:f8:c4:e4:87:6e:1f:f8:69:ec:b2:8b:6b:8f:6c: ce:ec:5f:9a:6c:41:fc:bd:e3:d4:12:98:87:4e:b5:97:0b:7a: 57:5b:c2:e1:45:e8:0b:a9:fe:62:dd:52:07:e2:ea:d6:19:3b: 8d:87:21:c7:b7:6e:9d:9f:85:14:2c:cc:86:cb:df:7d:71:1f: d8:a8:50:f6:ed:df:8a:d9:c4:7d:f8:d5:2b:8f:1a:ca:4a:fb: 6d:df:ee:50:e4:d0:2b:d0:4c:9d:4a:7b:02:a6:61:9e:66:6b: a7:02:f8:48:1e:f7:b7:7f:ec:be:16:8b:b3:4d:11:dd:11:94: a2:ca:04:03:b1:6f:8a:c4:13:72:66:2b:b7:4b:0f:56:05:e2: 95:65:64:7a:30:bc:17:34:7a:2d:69:0c:b5:95:ed:ab:b7:29: 89:fc:b8:bd:67:26:8d:e5:1e:2d:06:8a:bf:5a:ab:0a:b5:44: a3:95:d2:9b:1f:8b:2c:43:3c:38:5f:88:c6:4f:e0:2d:60:71: 97:4c:79:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0y64h+iUa0TUbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk OTBiMjNmN2UtY2YwYi00Yjc1LThhNTgtY2NiMTFlZWI0MWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBUAEaxJNfMwoB3sBzBGt+X7ZsIGhmMWi6Um 3hgvdBjemPPjdTnZ9pLygMZCAcvFzJnk7UYizA8R817S4owbNXfsDSPYeld6xWhV Iyx8pLbaulshiuu0BXfScApepu7GDU0tWsXuLaeqNLzY45jBGLYjDRgp/Aswv7sb mobA6DnJ6qD8uNMhlCEsuU9Fnzb90zrDsd/hToJplSge5OKq5qU+aOMwZTfB63YI YBD9IbwVAMd2rot8IgOH+teGY61UEuvz6rkDNB3aCgnb28cj1LBzB0whFpI1rEll peeWR8Kyc6QUumx0KZ59sTFkNAbewkt+NX2zoaGNwq3YVmsSgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBZcVZJGgeYtM0m5DdwsS7ferC9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvZjczYjUwNTMtZjVkYi0z M2NmLWFlY2YtZjk5YTdjZmY1MzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMip4VvWbegwIANJWZATffM6TB+6JXKv6tx7ydH3w6/UgIhcELmoNIzE OBrRCYCutTHrWfGqseTk5Pv4xOSHbh/4aeyyi2uPbM7sX5psQfy949QSmIdOtZcL eldbwuFF6Aup/mLdUgfi6tYZO42HIce3bp2fhRQszIbL331xH9ioUPbt34rZxH34 1SuPGspK+23f7lDk0CvQTJ1KewKmYZ5ma6cC+Ege97d/7L4Wi7NNEd0RlKLKBAOx b4rEE3JmK7dLD1YF4pVlZHowvBc0ei1pDLWV7au3KYn8uL1nJo3lHi0Gir9aqwq1 RKOV0psfiyxDPDhfiMZP4C1gcZdMefA= -----END CERTIFICATE-----Generated at Sun Aug 10 13:41:44 2025 by rpki-client