$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/663e90a8-582d-388a-8c51-a87ffad4ecb2.roa File: 663e90a8-582d-388a-8c51-a87ffad4ecb2.roa (raw, json) Hash identifier: u1esS6yrNTOEB3rH7T5xuS/t/mjHmCY3Matdr3w6yc0= Subject key identifier: D7:0A:D6:B6:60:D7:15:90:45:C3:64:84:7E:FF:0C:9A:DC:D8:37:E2 Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F4328584AC2E1050ECC80130EBF325BC0 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/663e90a8-582d-388a-8c51-a87ffad4ecb2.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 77 IP address blocks: 204.9.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:05:0e:cc:80:13:0e:bf:32:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=4bb34203-3c18-43b9-a4b2-6b30af316ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4b:31:a7:da:8a:17:a8:e3:4f:c5:4e:e7:08: 68:ff:f6:47:e7:b1:c8:28:33:69:23:43:fa:a5:8f: e0:8b:27:3d:67:9a:d5:e8:74:90:86:c2:ff:3f:ea: e6:42:87:bd:ba:2a:46:1c:8a:40:c5:24:b5:6a:ba: ac:ab:23:fd:ae:25:a8:05:7b:3d:c1:8e:ca:f3:23: d0:a2:51:42:11:18:69:aa:6e:a6:68:1e:86:02:32: 6e:ba:87:34:8c:12:dc:59:b7:f2:5b:bc:21:48:cd: ba:b8:ea:dd:39:e4:95:e1:ea:40:4b:dd:0c:b9:cb: 6c:b1:03:39:98:e2:29:4c:f9:19:24:8c:03:11:bf: 31:8b:95:e2:55:cf:27:02:78:5f:c2:69:81:a6:b8: 83:9b:f7:41:a8:16:b5:2c:93:06:9a:da:f6:3b:2c: 1c:4f:32:3e:05:31:4a:cf:56:6f:35:32:c2:91:f0: 2c:7b:e1:2c:39:4b:00:d4:fa:e1:73:b3:2e:07:1b: 78:9f:9e:a0:99:df:76:4a:db:2e:56:b4:27:7a:84: 0a:bd:94:1b:c5:91:5d:37:7c:17:21:13:d1:41:3f: 0e:bd:bf:d2:44:40:19:66:7d:26:26:15:c0:9d:75: 20:00:4a:b9:48:20:23:7c:c2:8f:52:3f:97:eb:df: 67:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0A:D6:B6:60:D7:15:90:45:C3:64:84:7E:FF:0C:9A:DC:D8:37:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/663e90a8-582d-388a-8c51-a87ffad4ecb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv4: 204.9.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:61:3b:2b:3f:65:70:b7:84:54:df:9f:54:9f:4c:7f:d6:29: ac:05:cf:ee:e4:24:c8:58:66:a5:8b:af:81:9e:3e:70:16:82: 16:d5:8a:00:41:8e:9f:8e:d2:ae:3f:ca:79:03:1c:05:ca:90: 43:29:81:bf:1d:ef:b0:df:e5:77:51:f6:21:7b:79:c1:7d:81: 15:52:41:88:4c:17:03:a1:05:74:ad:24:71:f1:db:1a:eb:14: e8:e8:d1:33:2e:91:91:fd:c1:92:d4:66:22:ff:9e:ad:7b:15: dd:05:af:25:b4:61:04:1e:08:ce:fd:2c:60:b3:67:bf:6b:ef: 3f:af:4c:17:ba:33:7f:84:6d:34:e0:90:bd:8f:48:dc:1e:c1: 0e:e1:15:2e:84:3e:49:92:52:1c:17:2f:98:1e:20:58:c9:e0: 62:b3:5f:ae:66:a8:af:70:7a:19:69:12:db:2e:56:e6:4c:90: 39:23:ec:85:cb:a2:21:df:49:9b:90:4e:33:cc:15:54:15:8e: 8d:5c:a6:b1:a3:bf:63:3e:d2:ca:88:1b:75:25:91:0e:7f:31: b1:2b:3f:55:77:b6:ac:2e:c9:7c:5b:07:e4:1e:0e:f3:f3:a5: 9a:ba:b8:42:15:30:6f:92:9e:a2:4b:4d:b4:2f:0e:cb:55:fa: 17:cf:a8:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4QUOzIATDr8yW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NGJiMzQyMDMtM2MxOC00M2I5LWE0YjItNmIzMGFmMzE2ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEsxp9qKF6jjT8VO5who//ZH57HIKDNpI0P6 pY/giyc9Z5rV6HSQhsL/P+rmQoe9uipGHIpAxSS1arqsqyP9riWoBXs9wY7K8yPQ olFCERhpqm6maB6GAjJuuoc0jBLcWbfyW7whSM26uOrdOeSV4epAS90MuctssQM5 mOIpTPkZJIwDEb8xi5XiVc8nAnhfwmmBpriDm/dBqBa1LJMGmtr2OywcTzI+BTFK z1ZvNTLCkfAse+EsOUsA1Prhc7MuBxt4n56gmd92StsuVrQneoQKvZQbxZFdN3wX IRPRQT8Ovb/SREAZZn0mJhXAnXUgAEq5SCAjfMKPUj+X699n5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcK1rZg1xWQRcNkhH7/DJrc2DfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvNjYzZTkwYTgtNTgyZC0z ODhhLThjNTEtYTg3ZmZhZDRlY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN5hOys/ZXC3hFTfn1SfTH/WKawFz+7kJMhYZqWLr4GePnAWghbVigBB jp+O0q4/ynkDHAXKkEMpgb8d77Df5XdR9iF7ecF9gRVSQYhMFwOhBXStJHHx2xrr FOjo0TMukZH9wZLUZiL/nq17Fd0FryW0YQQeCM79LGCzZ79r7z+vTBe6M3+EbTTg kL2PSNwewQ7hFS6EPkmSUhwXL5geIFjJ4GKzX65mqK9wehlpEtsuVuZMkDkj7IXL oiHfSZuQTjPMFVQVjo1cprGjv2M+0sqIG3UlkQ5/MbErP1V3tqwuyXxbB+QeDvPz pZq6uEIVMG+SnqJLTbQvDstV+hfPqBM= -----END CERTIFICATE-----Generated at Sat Aug 9 20:41:04 2025 by rpki-client