$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa File: b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa (raw, json) Hash identifier: wOdtj5SozPlY2ydA6192vo+sVxXKfsGgzfIAyH5GE9c= Subject key identifier: 20:17:5C:85:84:3E:6C:AA:7D:19:E5:37:E4:AE:18:CE:B8:96:06:AB Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584A8575F95D639F9FAB34A6D808 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 16433 IP address blocks: 204.9.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:f9:5d:63:9f:9f:ab:34:a6:d8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=03105a8a-d3a7-497b-b6dc-1d1d69c15536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:32:29:4a:37:f4:92:37:54:31:44:22:ce: b3:e4:6b:fb:99:69:f7:80:25:87:3a:71:9c:78:d5: 19:f2:99:8e:35:b1:38:81:02:61:9e:8c:72:ca:4a: ba:76:07:87:da:88:a8:e3:78:6f:6a:74:88:d1:36: e4:a5:0a:2e:81:18:1e:0f:0d:9e:ba:22:ad:dd:33: e7:ca:c1:ae:72:0e:d6:3b:69:7c:ad:72:64:27:34: 6c:15:86:c3:97:a4:5c:e4:fc:b0:c8:b3:87:70:64: 4e:cb:9b:a6:46:b7:48:54:ad:40:ef:a0:d4:43:75: 4b:b3:50:64:f6:12:41:25:b2:6f:eb:ef:44:06:e0: 4f:5f:08:76:74:c5:a0:bd:fa:81:da:a8:72:d5:61: 9b:94:a8:d2:a0:f8:8c:43:bf:34:49:df:9c:28:b2: 5c:48:8d:5c:2c:20:bc:8f:74:b3:0e:75:3a:d8:52: 5f:fa:f4:f7:11:5e:4c:9a:08:8e:c3:f9:a5:bd:55: 3a:60:03:c1:9c:c6:1a:54:98:cf:9d:4d:89:d3:e2: a8:51:65:a2:1d:0d:75:c3:0c:eb:5a:f9:37:15:c6: ed:e6:06:2a:e6:c5:1d:19:40:5e:58:9b:e2:e5:63: 48:03:77:39:1c:3a:19:cb:ba:e1:16:de:46:80:c1: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:17:5C:85:84:3E:6C:AA:7D:19:E5:37:E4:AE:18:CE:B8:96:06:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 204.9.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:9a:43:5d:6e:9e:35:76:59:d8:47:43:1c:c2:f6:8e:5b:d3: f5:3f:dc:7f:80:1a:7b:6c:17:27:b3:9a:7c:9e:f9:c9:de:aa: 0d:e4:78:72:3f:74:8e:7d:a6:6f:4c:e6:49:9e:1d:f3:b6:0d: 72:21:e9:2e:0d:40:88:0f:4e:5c:92:99:24:ff:b4:bd:17:61: 7d:02:14:ee:7e:12:43:ff:8b:04:5c:93:8e:38:ad:c3:8e:bb: 67:09:e2:ad:7f:d1:e5:3b:e9:9e:30:df:27:dd:e3:48:95:fb: 71:7e:f7:b1:34:8e:9b:d1:9f:e7:0a:b3:70:a4:1e:7f:35:45: 5d:83:b1:4b:55:74:79:c8:42:a4:b1:ce:72:2b:f8:aa:3e:58: 8b:41:76:ec:a1:0e:fd:b0:1e:f2:17:5c:f6:67:59:d8:8e:2f: 17:9b:0a:90:7c:1c:5e:61:79:e1:ee:34:a7:73:c8:b7:e4:b6: 4d:8d:53:0c:28:f5:cf:f6:52:2f:ac:10:b0:09:26:64:5b:5f: 49:4d:86:f4:be:74:5e:f0:38:a0:95:44:8a:75:f6:aa:8d:ed: d9:ea:74:68:81:ce:6f:37:72:d1:9b:80:c6:b4:23:b6:5f:e0: 88:b4:43:88:01:07:56:21:71:dd:a4:7e:72:d7:68:5d:c8:e9: 74:67:5f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfldY5+fqzSm2AgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk MDMxMDVhOGEtZDNhNy00OTdiLWI2ZGMtMWQxZDY5YzE1NTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjkyKUo39JI3VDFEIs6z5Gv7mWn3gCWHOnGc eNUZ8pmONbE4gQJhnoxyykq6dgeH2oio43hvanSI0TbkpQougRgeDw2euiKt3TPn ysGucg7WO2l8rXJkJzRsFYbDl6Rc5PywyLOHcGROy5umRrdIVK1A76DUQ3VLs1Bk 9hJBJbJv6+9EBuBPXwh2dMWgvfqB2qhy1WGblKjSoPiMQ780Sd+cKLJcSI1cLCC8 j3SzDnU62FJf+vT3EV5MmgiOw/mlvVU6YAPBnMYaVJjPnU2J0+KoUWWiHQ11wwzr Wvk3Fcbt5gYq5sUdGUBeWJvi5WNIA3c5HDoZy7rhFt5GgMHJ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAXXIWEPmyqfRnlN+SuGM64lgarMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvYjA2NjkyZjQtYTZkYy0z ZjE3LWJiZGYtOWIzZTBlZjc2NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCaQ11unjV2WdhHQxzC9o5b0/U/3H+AGntsFyezmnye+cneqg3keHI/ dI59pm9M5kmeHfO2DXIh6S4NQIgPTlySmST/tL0XYX0CFO5+EkP/iwRck444rcOO u2cJ4q1/0eU76Z4w3yfd40iV+3F+97E0jpvRn+cKs3CkHn81RV2DsUtVdHnIQqSx znIr+Ko+WItBduyhDv2wHvIXXPZnWdiOLxebCpB8HF5heeHuNKdzyLfktk2NUwwo 9c/2Ui+sELAJJmRbX0lNhvS+dF7wOKCVRIp19qqN7dnqdGiBzm83ctGbgMa0I7Zf 4Ii0Q4gBB1Yhcd2kfnLXaF3I6XRnX0A= -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:43 2025 by rpki-client