$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa File: aaf1c443-fe8e-397a-9abb-97486c685ca2.roa (raw, json) Hash identifier: lxvRxVMbQ9trYp6LWkAARUbd4ef0UcYfRMFb/haY5cY= Subject key identifier: 6C:49:A7:81:62:1B:AB:3E:94:D5:33:26:2B:66:6F:B4:1D:66:9B:E6 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584B0FA6C472CC2167A5EBED5B38 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 21947 IP address blocks: 204.11.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c4:72:cc:21:67:a5:eb:ed:5b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=0ec2372c-ded1-4a7d-84a5-11e6eec5caab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6d:7e:8c:f5:56:e4:d7:2a:f8:6d:d1:ff:bc: 29:87:ce:38:7b:00:20:7b:74:09:f3:b9:3e:dc:4a: ba:1a:7a:7d:18:0a:b4:08:99:93:d5:d4:71:dc:52: 42:7c:da:62:bf:4e:9b:9f:99:9d:65:e7:4b:f2:97: f3:e1:be:bf:d4:5e:07:60:7a:1c:d8:aa:a8:f8:07: 5c:af:a8:f5:76:f6:50:fb:fe:d8:50:68:00:42:a6: 54:e0:1e:ff:f9:12:ee:aa:4e:65:20:51:8a:5b:a4: f5:67:27:de:af:d2:3e:bc:dd:59:72:f0:4f:8b:68: de:07:ca:d0:a1:66:2b:46:3c:a7:4e:2c:50:a1:26: 18:82:3e:86:c6:9e:c4:20:c7:27:61:14:ca:8f:66: 72:25:76:c9:12:1a:f4:50:f4:53:7c:6e:53:9f:f3: 10:62:4f:7b:e5:45:8e:5c:c6:5b:a2:2d:13:1b:17: 39:77:d1:fd:f1:de:50:c3:33:87:f7:51:6e:b0:58: 35:ce:d2:90:08:97:76:b9:6f:30:66:77:19:02:2d: e5:b3:ac:bc:ba:69:8c:2e:b5:de:07:08:8a:4d:91: f0:ca:bf:84:10:24:d7:1d:7c:8f:6c:c0:d7:5c:ff: 92:d0:98:c4:05:90:88:36:e2:39:3e:03:73:a9:43: 77:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:49:A7:81:62:1B:AB:3E:94:D5:33:26:2B:66:6F:B4:1D:66:9B:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 204.11.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:73:bb:ff:35:1d:1a:1b:4d:33:c3:ea:7a:75:0a:4f:ea:c9: 20:8c:ba:71:65:7a:19:2a:a0:b9:4b:0f:2a:49:f6:f4:7b:76: a5:6e:ec:97:aa:0c:b1:43:13:82:cf:8d:0d:9a:dc:da:c9:9c: 2a:0a:bd:3c:e3:ac:9b:17:f2:ec:59:77:c0:89:47:cf:a0:c5: 58:a3:9c:80:c5:c2:f0:43:20:91:1a:ac:09:17:52:3e:1d:92: fe:bd:88:2e:4a:78:be:7f:ce:65:b9:8f:3f:35:b8:1e:45:22: 14:00:91:af:c3:8b:86:4f:9c:c4:ab:c9:fb:07:a9:10:24:83: d2:f5:8e:e7:35:ae:12:05:ff:da:84:b3:2a:8f:bf:fe:fc:84: 30:b0:70:d4:76:12:cb:55:35:2c:ce:45:c4:91:07:1b:17:34: 01:6d:fb:89:be:fb:4c:87:5c:69:a8:a2:e1:a1:e6:b4:4b:84: e3:fd:c4:ee:5c:55:20:fd:68:f5:80:57:cf:3a:87:72:f2:0d: 23:c4:3a:55:86:25:66:01:15:e5:d1:b3:e5:6f:21:35:cd:77: b5:8a:fc:df:37:85:0c:3a:3d:f9:d3:f9:fb:77:6e:d0:b2:4a: 14:c1:fa:84:a8:5c:50:2c:68:56:4c:4d:aa:35:ce:ac:e7:6b: db:90:00:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsRyzCFnpevtWzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk MGVjMjM3MmMtZGVkMS00YTdkLTg0YTUtMTFlNmVlYzVjYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG1+jPVW5Ncq+G3R/7wph844ewAge3QJ87k+ 3Eq6Gnp9GAq0CJmT1dRx3FJCfNpiv06bn5mdZedL8pfz4b6/1F4HYHoc2Kqo+Adc r6j1dvZQ+/7YUGgAQqZU4B7/+RLuqk5lIFGKW6T1Zyfer9I+vN1ZcvBPi2jeB8rQ oWYrRjynTixQoSYYgj6Gxp7EIMcnYRTKj2ZyJXbJEhr0UPRTfG5Tn/MQYk975UWO XMZboi0TGxc5d9H98d5QwzOH91FusFg1ztKQCJd2uW8wZncZAi3ls6y8ummMLrXe BwiKTZHwyr+EECTXHXyPbMDXXP+S0JjEBZCINuI5PgNzqUN3jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxJp4FiG6s+lNUzJitmb7QdZpvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYWFmMWM0NDMtZmU4ZS0z OTdhLTlhYmItOTc0ODZjNjg1Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5zu/81HRobTTPD6np1Ck/qySCMunFlehkqoLlLDypJ9vR7dqVu7Jeq DLFDE4LPjQ2a3NrJnCoKvTzjrJsX8uxZd8CJR8+gxVijnIDFwvBDIJEarAkXUj4d kv69iC5KeL5/zmW5jz81uB5FIhQAka/Di4ZPnMSryfsHqRAkg9L1juc1rhIF/9qE syqPv/78hDCwcNR2EstVNSzORcSRBxsXNAFt+4m++0yHXGmoouGh5rRLhOP9xO5c VSD9aPWAV886h3LyDSPEOlWGJWYBFeXRs+VvITXNd7WK/N83hQw6PfnT+ft3btCy ShTB+oSoXFAsaFZMTao1zqzna9uQAFw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:06 2025 by rpki-client