$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/d38d2318-c196-35bd-940f-43a4eb1b63c8.roa File: d38d2318-c196-35bd-940f-43a4eb1b63c8.roa (raw, json) Hash identifier: M2cTOmDrn/QTHXJpnEsnx6NqV9bH5T88t0d6dQwPI/w= Subject key identifier: DF:8A:49:1E:A1:20:AC:88:A4:F1:AA:7A:63:DC:D4:D6:9E:18:48:27 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584AB46648417567C3435FB03720 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/d38d2318-c196-35bd-940f-43a4eb1b63c8.roa Signing time: Thu 31 Jul 2025 20:32:21 +0000 ROA not before: Thu 31 Jul 2025 20:32:21 +0000 ROA not after: Wed 29 Oct 2025 20:32:21 +0000 asID: 91 IP address blocks: 204.76.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:66:48:41:75:67:c3:43:5f:b0:37:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Jul 31 20:32:21 2025 GMT Not After : Oct 29 20:32:21 2025 GMT Subject: CN=ed08a79c-f8e0-4726-a22d-5f295e59c155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:50:58:4a:f5:58:cb:b2:28:4b:84:f0:8b:4c: 1d:37:3b:fc:74:80:47:0d:fa:fc:a8:6d:77:95:a2: 00:08:d2:56:47:5c:99:8c:4e:84:56:7d:fc:77:fc: 0c:a6:5b:f0:c5:2a:ba:83:65:b2:59:9d:30:77:4b: 72:69:b4:da:99:be:c7:1e:4a:02:56:c2:22:f6:94: ad:49:87:1b:b4:55:7c:a5:d1:c8:08:b5:3d:fd:c5: c6:73:ee:ce:85:47:e3:3e:55:05:c3:00:36:bd:ec: a1:9c:2d:0a:49:4c:1a:f3:8b:22:dc:d5:4a:34:16: 5b:11:5d:be:e4:5b:8d:ab:cd:1a:b5:8d:62:76:79: 29:d1:72:3a:78:01:87:f2:81:41:a6:0d:80:e0:90: cf:35:1c:bb:97:4c:51:66:8f:15:3c:80:68:f6:20: 65:d2:44:22:04:8b:73:88:c6:ca:03:7b:c5:f8:9a: e7:27:91:5f:15:9f:c5:cb:3f:c6:7b:2c:81:43:1d: 58:da:57:3a:bd:17:3f:42:d1:b9:88:12:bc:2f:65: 13:b4:53:4c:6b:d2:51:25:fa:5a:81:3b:e0:cc:26: be:bc:ed:e8:3a:60:9f:96:56:ed:ff:d0:a6:a8:ab: 24:fd:b8:5b:47:d0:bd:9f:d1:26:1d:04:f7:ac:1f: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8A:49:1E:A1:20:AC:88:A4:F1:AA:7A:63:DC:D4:D6:9E:18:48:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/d38d2318-c196-35bd-940f-43a4eb1b63c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 204.76.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:32:34:e1:a0:09:08:8e:d2:62:81:d9:56:04:66:0e:35:01: 14:d8:41:d2:44:5f:57:8f:8a:df:b6:d0:7a:de:82:06:34:b4: d3:7b:8c:79:1b:0a:76:80:87:bb:a9:da:25:7c:1b:6a:d0:35: 77:0e:27:45:9e:28:93:40:16:ea:9e:19:2a:cf:8d:82:48:90: 7a:47:5a:d7:25:1b:5c:62:ea:30:be:0e:22:f5:c1:45:cb:e4: a1:07:4c:dd:b5:90:02:3c:58:67:03:94:56:f1:c9:e8:df:e8: 96:38:11:12:5b:84:1a:c7:eb:51:04:4e:3c:90:5e:b2:77:7f: 87:7b:27:ca:52:55:b8:d1:cf:cf:04:a1:6b:f8:88:3d:82:8d: 8d:64:8b:75:19:07:eb:b7:c0:2d:7d:1f:c0:3c:2c:8f:0b:05: 6b:07:18:74:36:98:d3:45:48:67:77:8f:32:71:e2:82:05:74: 29:b2:b8:f0:38:e2:0e:47:89:ff:52:e4:89:71:6d:04:db:1e: 9b:a1:2c:71:de:4d:93:5d:25:58:08:52:6e:d3:29:2b:a7:34: dd:3d:77:7d:b4:aa:ed:2f:c1:1f:b9:9e:2b:f6:d1:3d:42:da: 95:f4:fc:32:77:67:8c:0d:d7:5d:6d:43:bb:20:1e:99:1d:44: b2:2d:49:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0ZkhBdWfDQ1+wNyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI1MDczMTIwMzIyMVoXDTI1MTAyOTIwMzIyMVowLzEtMCsGA1UEAxMk ZWQwOGE3OWMtZjhlMC00NzI2LWEyMmQtNWYyOTVlNTljMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFBYSvVYy7IoS4Twi0wdNzv8dIBHDfr8qG13 laIACNJWR1yZjE6EVn38d/wMplvwxSq6g2WyWZ0wd0tyabTamb7HHkoCVsIi9pSt SYcbtFV8pdHICLU9/cXGc+7OhUfjPlUFwwA2veyhnC0KSUwa84si3NVKNBZbEV2+ 5FuNq80atY1idnkp0XI6eAGH8oFBpg2A4JDPNRy7l0xRZo8VPIBo9iBl0kQiBItz iMbKA3vF+JrnJ5FfFZ/Fyz/GeyyBQx1Y2lc6vRc/QtG5iBK8L2UTtFNMa9JRJfpa gTvgzCa+vO3oOmCfllbt/9CmqKsk/bhbR9C9n9EmHQT3rB/hqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+KSR6hIKyIpPGqemPc1NaeGEgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvZDM4ZDIzMTgtYzE5Ni0z NWJkLTk0MGYtNDNhNGViMWI2M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzEzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwyNOGgCQiO0mKB2VYEZg41ARTYQdJEX1ePit+20HreggY0tNN7jHkb CnaAh7up2iV8G2rQNXcOJ0WeKJNAFuqeGSrPjYJIkHpHWtclG1xi6jC+DiL1wUXL 5KEHTN21kAI8WGcDlFbxyejf6JY4ERJbhBrH61EETjyQXrJ3f4d7J8pSVbjRz88E oWv4iD2CjY1ki3UZB+u3wC19H8A8LI8LBWsHGHQ2mNNFSGd3jzJx4oIFdCmyuPA4 4g5Hif9S5IlxbQTbHpuhLHHeTZNdJVgIUm7TKSunNN09d320qu0vwR+5niv20T1C 2pX0/DJ3Z4wN111tQ7sgHpkdRLItSbM= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:51 2025 by rpki-client