$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/afb5daae-194e-3c70-a1c7-61e5faf147c0.roa File: afb5daae-194e-3c70-a1c7-61e5faf147c0.roa (raw, json) Hash identifier: 7w/gDFmbE+6L8Vo3UvyWBD5ooHKC/vNYlX2ilV7aGsI= Subject key identifier: 66:85:99:B4:AA:45:05:DC:63:7E:E9:FA:CA:72:75:15:06:8B:67:C7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB01105D8FFFE8AE789FD40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/afb5daae-194e-3c70-a1c7-61e5faf147c0.roa Signing time: Sun 03 Aug 2025 02:35:52 +0000 ROA not before: Sun 03 Aug 2025 02:35:52 +0000 ROA not after: Sat 01 Nov 2025 02:35:52 +0000 asID: 22616 IP address blocks: 209.55.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:11:05:d8:ff:fe:8a:e7:89:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:52 2025 GMT Not After : Nov 1 02:35:52 2025 GMT Subject: CN=be8d034e-d4c1-4ba3-a8c7-6ba68ef1196d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:01:1f:fd:1a:88:b3:01:0b:ae:ed:be:e6:41: 74:7a:a8:f5:9c:cf:b8:9a:68:c8:a2:d1:80:80:04: cb:14:8b:78:54:e8:6e:76:97:6a:4c:f7:64:a6:7c: fd:84:88:bf:1a:a1:53:49:c7:9f:f2:a7:fc:15:3d: e5:a6:88:94:1b:3e:59:86:37:a5:6b:cd:a9:60:43: d7:9a:47:e9:14:0e:cf:3e:35:1a:3c:e4:55:7c:d4: a8:45:88:1e:51:27:94:2e:b7:54:27:da:da:ab:c4: c2:49:66:5a:d4:fb:df:cf:3b:e2:ab:bd:94:eb:c8: 10:d4:dc:c1:96:be:5d:57:f9:1c:83:b5:16:f5:7b: 9e:b0:18:78:d2:07:f7:4d:84:85:3a:80:a9:97:04: 25:94:85:a7:a4:b3:22:ff:ca:51:78:d0:ee:14:d8: 09:6a:5f:57:40:d8:18:0a:75:c7:5d:cd:68:a9:ba: e6:b5:f9:f0:dc:6a:4d:35:d1:87:f8:bb:d3:af:07: 3d:6a:72:81:a1:86:50:4f:53:63:17:cc:d7:db:60: d4:4a:fa:36:08:5c:7c:a4:87:19:7a:cb:28:d9:fb: e7:2f:f5:75:25:92:a8:b4:89:29:61:e4:89:57:97: e1:5b:38:d5:af:30:15:01:fe:4b:5b:ca:e0:1f:63: f0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:85:99:B4:AA:45:05:DC:63:7E:E9:FA:CA:72:75:15:06:8B:67:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/afb5daae-194e-3c70-a1c7-61e5faf147c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:48:84:fc:fe:04:11:93:f5:52:60:d2:c5:35:37:f9:2c:2c: 8f:b8:b8:b7:95:50:48:92:47:44:40:3e:3e:f2:d3:d0:ce:55: 6c:51:20:42:7d:a1:4b:b0:63:0d:5d:3f:14:52:ce:f5:96:11: 31:d2:e7:ae:70:4a:91:48:5b:9f:40:e0:fc:dd:15:60:88:e3: 3f:3a:1b:4d:ae:d6:c3:60:93:bf:47:61:c1:3e:82:88:d0:e4: e1:cb:ea:75:19:6c:15:b6:5c:44:55:22:af:b0:12:b2:1d:11: e1:26:d1:2b:32:cc:8d:7d:a7:81:6e:b2:4b:5c:07:a8:d6:b9: 09:00:21:1b:79:d9:92:d2:69:35:e9:99:d1:10:dc:7d:57:38: aa:6c:b0:cd:a9:e4:fd:7a:33:04:d0:9a:f5:9d:b0:42:44:91: 51:fe:e8:7b:54:fe:5b:46:49:80:c5:d3:a1:4b:28:08:ce:3d: 8f:0b:08:37:26:f2:1f:2d:30:0e:66:e5:af:f9:3b:29:aa:1f: ef:37:8e:86:a4:20:d0:18:e2:43:0b:2f:06:66:b5:80:56:e2: 0f:16:18:c6:74:fb:8c:de:9a:fc:0d:42:6b:92:35:44:5b:bf: 8d:ad:13:a4:a9:5f:9b:c9:58:9e:48:02:9f:e7:d1:ff:ae:25: 88:aa:89:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sBEF2P/+iueJ/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU1MloXDTI1MTEwMTAyMzU1MlowLzEtMCsGA1UEAxMk YmU4ZDAzNGUtZDRjMS00YmEzLWE4YzctNmJhNjhlZjExOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gEf/RqIswELru2+5kF0eqj1nM+4mmjIotGA gATLFIt4VOhudpdqTPdkpnz9hIi/GqFTScef8qf8FT3lpoiUGz5Zhjela82pYEPX mkfpFA7PPjUaPORVfNSoRYgeUSeULrdUJ9raq8TCSWZa1Pvfzzviq72U68gQ1NzB lr5dV/kcg7UW9XuesBh40gf3TYSFOoCplwQllIWnpLMi/8pReNDuFNgJal9XQNgY CnXHXc1oqbrmtfnw3GpNNdGH+LvTrwc9anKBoYZQT1NjF8zX22DUSvo2CFx8pIcZ esso2fvnL/V1JZKotIkpYeSJV5fhWzjVrzAVAf5LW8rgH2PwGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaFmbSqRQXcY37p+spydRUGi2fHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYWZiNWRhYWUtMTk0ZS0z YzcwLWExYzctNjFlNWZhZjE0N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFIhPz+BBGT9VJg0sU1N/ksLI+4uLeVUEiSR0RAPj7y09DOVWxRIEJ9 oUuwYw1dPxRSzvWWETHS565wSpFIW59A4PzdFWCI4z86G02u1sNgk79HYcE+gojQ 5OHL6nUZbBW2XERVIq+wErIdEeEm0SsyzI19p4FusktcB6jWuQkAIRt52ZLSaTXp mdEQ3H1XOKpssM2p5P16MwTQmvWdsEJEkVH+6HtU/ltGSYDF06FLKAjOPY8LCDcm 8h8tMA5m5a/5OymqH+83joakINAY4kMLLwZmtYBW4g8WGMZ0+4zemvwNQmuSNURb v42tE6SpX5vJWJ5IAp/n0f+uJYiqic4= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:32 2025 by rpki-client