$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/9aa7958f-f196-3a7a-b81c-c403cd9be274.roa File: 9aa7958f-f196-3a7a-b81c-c403cd9be274.roa (raw, json) Hash identifier: V6imil/y+79Ib3ao8tC/JGehBjUceDzbTRT2yvrpvAA= Subject key identifier: B8:F6:E2:CA:DC:F1:2B:F7:EC:C1:08:63:8B:5A:20:0A:BE:CD:40:F5 Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F4328584BA39D215F03D639B0DEFAF880 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/9aa7958f-f196-3a7a-b81c-c403cd9be274.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 77 IP address blocks: 204.9.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:21:5f:03:d6:39:b0:de:fa:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=cbdbf82d-c8c8-484b-9f12-da8a0b5edf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fa:3a:92:6c:32:87:3c:e9:fc:52:01:c4:27: 6c:0e:4c:f1:28:44:05:84:ef:d1:42:2d:4c:21:55: e2:54:8b:88:30:bd:4c:f7:d2:d8:00:38:23:8f:69: f2:c4:ee:e3:f5:b9:d2:74:80:15:eb:22:23:13:b4: cb:c7:dc:00:20:33:88:24:53:1b:b0:74:ca:d7:83: 8b:65:b3:f2:55:6a:f7:66:76:45:9c:8c:d2:25:64: f6:2e:e9:4b:f4:d7:4f:bf:9c:9a:27:c2:46:ea:2d: ba:59:46:5c:06:ed:03:6a:73:9d:e4:34:78:7c:62: 5a:21:b9:29:39:1a:6e:cb:e6:fc:47:14:90:81:78: a0:93:d9:cc:38:a6:b3:9f:fd:2a:b5:34:b6:27:0e: 25:78:2f:5d:0e:bd:6f:db:0d:80:a7:48:27:f1:d2: 9d:12:a4:aa:b4:57:c2:b7:b5:8b:5f:49:cc:e8:6b: 10:ac:db:a4:d6:6f:58:1a:af:9a:a9:a3:89:59:27: 15:a4:94:ad:06:e3:60:01:29:a8:e9:ae:e7:da:6d: 22:ad:53:17:29:c9:2c:f8:39:04:ea:09:95:8c:23: 7b:db:de:8e:ac:69:cb:9b:db:36:ea:46:d2:1e:5e: 66:d3:37:e2:9a:54:0f:ff:97:24:69:94:7a:14:ae: f1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F6:E2:CA:DC:F1:2B:F7:EC:C1:08:63:8B:5A:20:0A:BE:CD:40:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/9aa7958f-f196-3a7a-b81c-c403cd9be274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv4: 204.9.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:24:d3:e2:2f:f4:86:bf:7c:2b:6e:fe:1f:51:3c:c4:da:09: c7:c1:bd:87:1f:17:4f:79:92:a3:ca:5a:dd:af:f1:4b:8b:a5: ab:a6:e5:83:04:36:45:33:14:dd:1f:d6:c4:ef:d4:66:3f:47: 67:29:57:5d:67:62:32:3e:42:ad:38:e5:8b:d8:9e:66:66:0e: ae:c5:a6:ca:51:9b:18:b4:38:d2:cf:8e:c7:ad:b9:13:32:6b: d3:5a:cc:84:40:d8:17:59:7a:88:f8:46:32:68:8a:1f:63:42: 1a:10:c5:1a:86:16:3e:1d:f3:56:ce:01:2e:67:32:ab:03:c7: 91:e0:4d:0d:86:7d:16:2c:ef:44:82:c6:17:69:bb:6d:1a:32: 1f:18:a0:9f:97:18:cc:e3:28:08:a1:7e:ea:5c:f0:1a:78:68: 8d:5d:52:4d:06:f0:47:51:14:27:1a:82:20:f0:f6:c5:30:17: b0:b7:04:2a:82:5f:5d:c8:bf:0f:de:63:ad:7c:bd:9a:5d:39: d7:f0:84:38:b4:cd:e6:39:e0:0e:91:50:1e:1b:e9:08:9f:11: 8e:d1:ce:c6:51:d8:6b:af:33:13:61:24:7d:b6:78:05:70:1e: e7:4b:c8:66:a6:34:6d:7f:cc:7a:5e:9b:4d:64:42:31:c5:04: 95:fa:d2:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSFfA9Y5sN76+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Y2JkYmY4MmQtYzhjOC00ODRiLTlmMTItZGE4YTBiNWVkZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvo6kmwyhzzp/FIBxCdsDkzxKEQFhO/RQi1M IVXiVIuIML1M99LYADgjj2nyxO7j9bnSdIAV6yIjE7TLx9wAIDOIJFMbsHTK14OL ZbPyVWr3ZnZFnIzSJWT2LulL9NdPv5yaJ8JG6i26WUZcBu0DanOd5DR4fGJaIbkp ORpuy+b8RxSQgXigk9nMOKazn/0qtTS2Jw4leC9dDr1v2w2Ap0gn8dKdEqSqtFfC t7WLX0nM6GsQrNuk1m9YGq+aqaOJWScVpJStBuNgASmo6a7n2m0irVMXKcks+DkE 6gmVjCN7296OrGnLm9s26kbSHl5m0zfimlQP/5ckaZR6FK7xxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj24src8Sv37MEIY4taIAq+zUD1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvOWFhNzk1OGYtZjE5Ni0z YTdhLWI4MWMtYzQwM2NkOWJlMjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAmCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIk0+Iv9Ia/fCtu/h9RPMTaCcfBvYcfF095kqPKWt2v8UuLpaum5YME NkUzFN0f1sTv1GY/R2cpV11nYjI+Qq045YvYnmZmDq7FpspRmxi0ONLPjsetuRMy a9NazIRA2BdZeoj4RjJoih9jQhoQxRqGFj4d81bOAS5nMqsDx5HgTQ2GfRYs70SC xhdpu20aMh8YoJ+XGMzjKAihfupc8Bp4aI1dUk0G8EdRFCcagiDw9sUwF7C3BCqC X13Ivw/eY618vZpdOdfwhDi0zeY54A6RUB4b6QifEY7RzsZR2GuvMxNhJH22eAVw HudLyGamNG1/zHpem01kQjHFBJX60mE= -----END CERTIFICATE-----Generated at Wed Nov 5 14:57:08 2025 by rpki-client