$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/587e22e6-2045-3194-899c-e6cbe61b93c2.roa File: 587e22e6-2045-3194-899c-e6cbe61b93c2.roa (raw, json) Hash identifier: dutJBWd9T48lS4n02Ez1SRXM4ILeJoRKqz7knxuHgjo= Subject key identifier: F2:C9:3A:4C:4B:E5:A5:DB:BE:A9:26:FE:55:90:97:CF:1C:1B:31:9C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB00D934E2982A1FFC1F2F8 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/587e22e6-2045-3194-899c-e6cbe61b93c2.roa Signing time: Sun 03 Aug 2025 02:35:50 +0000 ROA not before: Sun 03 Aug 2025 02:35:50 +0000 ROA not after: Sat 01 Nov 2025 02:35:50 +0000 asID: 62044 IP address blocks: 209.55.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:0d:93:4e:29:82:a1:ff:c1:f2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:50 2025 GMT Not After : Nov 1 02:35:50 2025 GMT Subject: CN=7c4be1c7-80a9-4635-a31c-e919358dd9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:41:75:3a:57:c4:4c:79:cf:6f:ba:53:57: 0d:ea:21:8f:d2:59:57:38:49:9d:15:9b:e6:67:c1: c9:78:49:e1:cb:d8:a6:05:63:89:3d:db:f4:74:7e: 81:36:d2:40:37:a6:7c:6b:86:11:c3:cc:c2:c9:3e: 93:c6:77:0c:1e:3d:03:3d:e5:03:c9:69:93:9f:c8: f6:be:46:15:b5:55:08:12:6b:96:ab:1c:95:b2:8f: 66:86:f3:f8:92:d1:f0:3e:ad:b2:49:55:ac:c2:ba: f8:a2:f5:0a:e8:b9:ba:f7:0e:90:f6:5c:e3:1a:c3: 9c:a3:80:05:51:a2:86:51:c2:16:10:e1:9f:9c:a3: 4b:ea:76:8d:cc:d9:12:69:66:0f:03:8f:92:8c:3e: 80:73:6a:a9:ad:90:1c:1c:8f:c6:75:a9:88:08:11: b1:50:c5:35:09:08:42:30:45:b9:ce:55:4c:f9:bf: b6:30:5e:17:33:f2:67:ae:ba:0f:0f:a4:6c:45:c4: dd:df:70:06:44:1a:e3:91:33:ec:98:bf:ce:7f:02: 31:e1:74:ce:14:c4:99:91:1d:81:1c:17:3a:79:c6: 14:36:2a:f2:3a:1c:ee:39:d0:e4:56:d3:a4:fd:24: 68:c9:ba:41:af:4c:d0:03:06:47:69:5e:4d:3e:8a: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C9:3A:4C:4B:E5:A5:DB:BE:A9:26:FE:55:90:97:CF:1C:1B:31:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/587e22e6-2045-3194-899c-e6cbe61b93c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:32:7c:d0:47:47:07:0e:14:aa:bf:6a:82:9a:6a:1c:29:7f: 38:c9:e1:38:25:d3:b0:42:3c:08:af:cc:78:7c:3e:c3:cc:44: 1b:65:c8:13:9e:1a:77:d0:b9:ae:5f:da:8e:fb:cd:6e:23:ee: 08:d1:58:ea:5e:c2:bb:b1:67:8c:92:5c:af:a9:c9:d4:2e:ed: 59:a6:d9:41:03:55:1f:5d:e9:c6:ed:b3:d7:f3:42:28:13:2a: 59:ed:ef:f9:21:d8:63:0e:b8:ac:c2:22:6d:c3:5e:96:c3:23: b3:e5:38:b1:84:e4:00:36:ca:2e:fc:6d:a3:a0:77:19:f3:f2: f9:09:44:86:06:84:a5:0c:28:dc:c8:04:3c:fc:47:9a:e9:05: cb:0c:69:7a:2f:15:97:71:ff:1e:a1:e7:46:b6:6e:96:20:76: a0:b3:cd:c3:55:4d:29:69:0a:a9:2e:67:d0:09:70:b5:5d:8f: 4d:f3:57:ca:1c:97:cb:cf:7b:fe:23:75:09:c5:bb:9c:03:02: 65:df:da:d6:74:a6:68:9b:96:65:40:7d:39:88:e9:cd:a6:c7: 71:d3:8a:70:c9:21:65:4a:2f:48:ec:b8:fe:a8:79:97:29:ac: b7:6c:23:ab:59:61:e8:d5:1a:e2:b4:d4:06:0c:60:3d:e9:f8: ad:bd:2c:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sA2TTimCof/B8vgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU1MFoXDTI1MTEwMTAyMzU1MFowLzEtMCsGA1UEAxMk N2M0YmUxYzctODBhOS00NjM1LWEzMWMtZTkxOTM1OGRkOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvidBdTpXxEx5z2+6U1cN6iGP0llXOEmdFZvm Z8HJeEnhy9imBWOJPdv0dH6BNtJAN6Z8a4YRw8zCyT6TxncMHj0DPeUDyWmTn8j2 vkYVtVUIEmuWqxyVso9mhvP4ktHwPq2ySVWswrr4ovUK6Lm69w6Q9lzjGsOco4AF UaKGUcIWEOGfnKNL6naNzNkSaWYPA4+SjD6Ac2qprZAcHI/GdamICBGxUMU1CQhC MEW5zlVM+b+2MF4XM/JnrroPD6RsRcTd33AGRBrjkTPsmL/OfwIx4XTOFMSZkR2B HBc6ecYUNiryOhzuOdDkVtOk/SRoybpBr0zQAwZHaV5NPop0+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLJOkxL5aXbvqkm/lWQl88cGzGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTg3ZTIyZTYtMjA0NS0z MTk0LTg5OWMtZTZjYmU2MWI5M2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TeZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYyfNBHRwcOFKq/aoKaahwpfzjJ4Tgl07BCPAivzHh8PsPMRBtlyBOe GnfQua5f2o77zW4j7gjRWOpewruxZ4ySXK+pydQu7Vmm2UEDVR9d6cbts9fzQigT Klnt7/kh2GMOuKzCIm3DXpbDI7PlOLGE5AA2yi78baOgdxnz8vkJRIYGhKUMKNzI BDz8R5rpBcsMaXovFZdx/x6h50a2bpYgdqCzzcNVTSlpCqkuZ9AJcLVdj03zV8oc l8vPe/4jdQnFu5wDAmXf2tZ0pmiblmVAfTmI6c2mx3HTinDJIWVKL0jsuP6oeZcp rLdsI6tZYejVGuK01AYMYD3p+K29LAg= -----END CERTIFICATE-----Generated at Tue Aug 5 20:14:09 2025 by rpki-client