$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa File: f73b5053-f5db-33cf-aecf-f99a7cff535a.roa (raw, json) Hash identifier: fv7qHnXFJIGQQUzIeINEFUH6cpdphBu0Q3TBA8OxYEs= Subject key identifier: 84:6F:BE:60:06:B6:0D:9A:72:34:E4:B4:0E:98:68:DC:8E:12:32:B8 Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F4328584B6367430C3270EBA75AA4F440 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 36290 IP address blocks: 204.16.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:43:0c:32:70:eb:a7:5a:a4:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=ee343e30-cdd4-445a-b41f-f63a5caf162c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2b:1a:44:87:55:39:c8:55:c1:0a:e5:9e:c1: 03:42:a1:f2:63:4d:86:be:4f:81:dc:11:5c:28:66: 29:0c:ac:d0:15:c2:b3:f6:02:4b:5e:60:73:e7:3a: 53:a9:eb:11:1c:79:08:ef:e5:50:a8:b5:0c:07:23: 00:7d:78:ce:5a:1e:6d:cb:a2:9a:9e:6b:fb:c4:8e: 10:81:32:66:21:da:ba:8e:20:34:28:32:af:b2:b2: 36:3d:42:6b:1f:5d:1d:cf:28:25:cb:49:de:f2:d6: af:f4:ac:cd:67:40:df:8f:cd:0e:39:d4:2c:72:59: de:61:7a:b2:a3:79:c0:ff:67:d4:84:0c:b3:6e:fa: a9:78:aa:26:24:ab:8f:b0:17:37:8c:ed:4a:cd:3f: 7c:22:5a:66:4e:be:40:80:ff:85:8b:7e:50:07:30: 7b:37:6d:a2:90:08:bf:f8:a0:ac:10:df:28:97:66: b9:f1:2e:73:3c:d5:11:4a:dc:2c:08:31:0f:e9:8f: 65:e5:3f:48:0e:aa:46:e5:a2:5a:ba:9b:a0:48:e1: 70:9e:e6:3f:0e:55:00:b6:99:4e:7d:50:d6:9d:4b: c5:77:40:65:b2:b5:c2:9c:e0:03:d9:4b:d3:8d:40: bd:7e:07:bc:b8:6a:f2:cd:e7:65:2f:24:0d:d8:ea: 98:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6F:BE:60:06:B6:0D:9A:72:34:E4:B4:0E:98:68:DC:8E:12:32:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 204.16.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:3f:e1:83:71:d9:6c:82:00:f9:9d:30:9c:cb:f6:e2:ab:4e: fb:69:05:02:d2:1e:7d:bf:02:27:0e:bc:dd:3b:83:0c:57:f2: 02:67:a8:d9:a1:b0:04:94:29:fe:e2:76:23:b5:8c:c9:56:93: ee:4b:3b:39:fb:77:da:84:2a:7b:e7:37:1e:20:66:e0:ab:70: a1:45:50:b7:35:6f:b6:e3:cb:39:37:7c:ea:b6:14:e1:f5:dc: 1a:df:74:6f:d0:22:a2:7e:31:6a:0e:dc:fa:b2:e1:24:14:f0: 46:88:9c:e0:1f:95:59:bd:7f:4a:1a:29:54:26:98:28:ca:6e: 9c:67:33:6e:8d:d5:7e:6b:44:e7:5b:9f:10:98:ba:d9:53:f7: fc:0b:16:eb:21:c8:fc:f6:f2:4b:8a:e7:08:65:45:a1:23:51: 2a:61:13:2b:7c:bb:58:38:34:27:66:23:00:ef:73:f8:24:74: a7:1c:12:cf:56:82:1a:8b:d9:a3:4d:46:09:e0:d0:5e:ac:0f: 58:7c:a8:c3:f2:f8:33:b0:5c:8c:43:a1:36:97:68:53:8c:87: 1d:7b:68:67:26:5a:1e:1d:1a:c1:ef:46:99:be:e2:99:40:14: 5d:a5:33:3a:da:a5:50:f2:f0:ee:8b:01:a9:ec:78:10:a4:24: 76:3f:28:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0MMMnDrp1qk9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZWUzNDNlMzAtY2RkNC00NDVhLWI0MWYtZjYzYTVjYWYxNjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgysaRIdVOchVwQrlnsEDQqHyY02Gvk+B3BFc KGYpDKzQFcKz9gJLXmBz5zpTqesRHHkI7+VQqLUMByMAfXjOWh5ty6Kanmv7xI4Q gTJmIdq6jiA0KDKvsrI2PUJrH10dzygly0ne8tav9KzNZ0Dfj80OOdQsclneYXqy o3nA/2fUhAyzbvqpeKomJKuPsBc3jO1KzT98IlpmTr5AgP+Fi35QBzB7N22ikAi/ +KCsEN8ol2a58S5zPNURStwsCDEP6Y9l5T9IDqpG5aJaupugSOFwnuY/DlUAtplO fVDWnUvFd0BlsrXCnOAD2UvTjUC9fge8uGryzedlLyQN2OqYfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRvvmAGtg2acjTktA6YaNyOEjK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvZjczYjUwNTMtZjVkYi0z M2NmLWFlY2YtZjk5YTdjZmY1MzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQ/4YNx2WyCAPmdMJzL9uKrTvtpBQLSHn2/AicOvN07gwxX8gJnqNmh sASUKf7idiO1jMlWk+5LOzn7d9qEKnvnNx4gZuCrcKFFULc1b7bjyzk3fOq2FOH1 3BrfdG/QIqJ+MWoO3Pqy4SQU8EaInOAflVm9f0oaKVQmmCjKbpxnM26N1X5rROdb nxCYutlT9/wLFushyPz28kuK5whlRaEjUSphEyt8u1g4NCdmIwDvc/gkdKccEs9W ghqL2aNNRgng0F6sD1h8qMPy+DOwXIxDoTaXaFOMhx17aGcmWh4dGsHvRpm+4plA FF2lMzrapVDy8O6LAanseBCkJHY/KHY= -----END CERTIFICATE-----Generated at Wed Nov 5 15:07:32 2025 by rpki-client