$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa File: 938a1a8b-5d4c-3f95-8273-2135590b1d77.roa (raw, json) Hash identifier: zXycz1QdQY25HhJHehlhTyszd/3DB+zXGBaKMNO2bpI= Subject key identifier: 82:1F:CE:EE:FC:89:61:50:8A:FF:6B:DB:7A:22:E6:E0:7A:93:7D:E5 Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584A7A4B4A6D7E4AECD50DABD100 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 0 IP address blocks: 204.9.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:4a:6d:7e:4a:ec:d5:0d:ab:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=084996dd-aa16-4d08-ad1c-dbc8748b636f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:c4:c3:04:3f:de:23:73:48:84:68:4e:0e: 4b:8c:4b:3b:c3:ad:7a:5a:b6:9a:21:b3:29:2b:38: 73:ae:b0:ce:d4:72:33:56:5d:3a:4a:32:2e:1d:e8: fa:2a:a6:78:17:c2:ff:38:f6:ec:60:ab:c8:78:5e: 2c:62:2b:b5:01:41:ff:b5:ee:71:ae:58:1c:93:65: b3:e9:12:54:1b:13:d1:c1:d2:89:c4:26:8a:29:c8: fc:1c:d0:45:e8:4a:76:85:f2:6a:be:29:89:0a:e8: 79:45:fa:5e:7d:45:ec:fc:a0:f3:7d:c5:7c:da:d5: de:e1:37:a6:9a:4e:d7:93:ba:88:4a:81:b3:68:82: 83:4a:bd:98:bf:72:bd:cf:95:a2:58:9a:6d:69:d9: 25:84:8e:41:69:df:df:8a:7f:72:28:f8:1c:74:75: 14:b4:48:a0:0e:2c:3f:36:e6:43:00:23:a2:9c:76: c6:62:73:e6:e9:25:51:de:57:16:a7:61:bc:ca:6e: 43:4a:fc:90:92:b3:ce:72:1b:e7:b0:d1:3e:b4:73: 97:37:e5:24:78:1f:b3:82:91:a2:8c:d9:17:52:4d: 27:67:48:83:15:eb:d9:c4:90:b0:36:c5:2b:c9:5f: 8a:42:3f:42:d4:9a:15:19:d5:da:55:6a:b5:8b:16: 9b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1F:CE:EE:FC:89:61:50:8A:FF:6B:DB:7A:22:E6:E0:7A:93:7D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 204.9.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:15:60:64:6b:50:87:39:31:6e:59:69:d0:09:91:9a:3d:5b: cc:d8:70:72:1a:a7:c8:32:00:40:d0:42:59:fb:30:16:5e:a7: 14:6f:74:6c:09:10:cc:a1:07:fe:72:94:59:a3:09:5f:63:72: 92:ed:2b:bf:5b:89:f6:ef:b7:4c:e9:dc:ce:47:41:66:fd:b0: bb:1f:7b:4a:cf:b2:be:ea:8d:cb:0d:85:5e:b0:51:95:6b:c8: 9e:74:5a:6b:b7:7b:09:fb:b4:40:48:f8:72:69:af:3a:3b:73: d0:af:c9:3d:b2:64:97:6e:80:7c:71:68:ef:55:11:a4:c4:53: 2a:e3:ba:c5:55:4a:72:fb:9d:c2:f9:8c:a7:c4:27:81:0e:37: 11:a8:23:21:8f:aa:6d:28:4b:f3:a2:dc:f1:5d:c2:96:0c:1f: d0:3a:3e:56:2d:65:f6:b7:a3:32:25:16:03:b4:bb:ea:91:2a: 91:3c:a2:b7:ca:58:e9:9a:4b:1a:97:0e:f0:d3:b9:59:e8:9d: 10:05:47:b1:67:7f:bc:34:d8:65:e4:e6:1b:13:93:21:ac:8c: 56:96:51:4f:46:55:46:dd:e5:13:23:02:e5:1c:3f:dd:b5:63: a2:50:16:77:eb:dd:be:f6:99:0b:63:8e:aa:d0:d5:f9:d2:f7: f7:7f:17:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0ptfkrs1Q2r0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MDg0OTk2ZGQtYWExNi00ZDA4LWFkMWMtZGJjODc0OGI2MzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCDEwwQ/3iNzSIRoTg5LjEs7w616WraaIbMp KzhzrrDO1HIzVl06SjIuHej6KqZ4F8L/OPbsYKvIeF4sYiu1AUH/te5xrlgck2Wz 6RJUGxPRwdKJxCaKKcj8HNBF6Ep2hfJqvimJCuh5RfpefUXs/KDzfcV82tXe4Tem mk7Xk7qISoGzaIKDSr2Yv3K9z5WiWJptadklhI5Bad/fin9yKPgcdHUUtEigDiw/ NuZDACOinHbGYnPm6SVR3lcWp2G8ym5DSvyQkrPOchvnsNE+tHOXN+UkeB+zgpGi jNkXUk0nZ0iDFevZxJCwNsUryV+KQj9C1JoVGdXaVWq1ixabPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIfzu78iWFQiv9r23oi5uB6k33lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvOTM4YTFhOGItNWQ0Yy0z Zjk1LTgyNzMtMjEzNTU5MGIxZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0VYGRrUIc5MW5ZadAJkZo9W8zYcHIap8gyAEDQQln7MBZepxRvdGwJ EMyhB/5ylFmjCV9jcpLtK79bifbvt0zp3M5HQWb9sLsfe0rPsr7qjcsNhV6wUZVr yJ50Wmu3ewn7tEBI+HJprzo7c9CvyT2yZJdugHxxaO9VEaTEUyrjusVVSnL7ncL5 jKfEJ4EONxGoIyGPqm0oS/Oi3PFdwpYMH9A6PlYtZfa3ozIlFgO0u+qRKpE8orfK WOmaSxqXDvDTuVnonRAFR7Fnf7w02GXk5hsTkyGsjFaWUU9GVUbd5RMjAuUcP921 Y6JQFnfr3b72mQtjjqrQ1fnS9/d/F/M= -----END CERTIFICATE-----Generated at Mon Aug 4 15:08:22 2025 by rpki-client