$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa File: 6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa (raw, json) Hash identifier: yICVr/xoVeYUn+XOegduoMPZkUqFOu9We6EsRVdECBA= Subject key identifier: C4:9A:D7:27:8B:A5:5D:42:7A:61:AC:AB:1A:4E:CC:4B:77:AB:79:0C Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584AC01644F069683CF7F4EE1380 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 394996 IP address blocks: 209.38.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:44:f0:69:68:3c:f7:f4:ee:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=7ce4b5a5-8c02-44c7-a5dd-787c415e8063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:90:df:75:eb:29:b9:39:5e:6d:a9:24:a0:86: 1f:22:dc:cc:67:7c:bc:93:7b:4c:b9:c0:18:28:1b: 81:99:e0:c4:b7:f1:86:03:85:19:34:22:34:4a:d1: f8:94:dd:47:4c:f0:db:47:ce:bd:6e:f9:c1:7d:88: 5c:7a:10:f8:02:e3:d5:7d:2d:ee:8d:25:bd:a1:bc: 84:c0:35:d2:47:4d:58:ea:6f:ff:61:72:62:a9:af: 7d:25:11:d5:21:fd:49:a5:a7:5e:6f:e3:d0:23:ad: 2d:bb:c4:56:40:43:28:1c:77:97:b0:f9:62:15:13: 84:87:59:11:d5:0a:65:32:b5:3e:ed:d4:f8:a6:fe: d3:00:6e:7b:4b:20:79:73:b0:24:94:d4:b2:c9:82: b5:9f:f1:3d:37:30:41:2e:f7:39:c1:9d:fb:41:54: 62:32:4f:83:c2:b8:57:cc:4d:a7:22:04:33:a8:94: d0:42:b2:45:16:92:2f:6b:ce:1f:af:ff:37:00:a2: fe:0f:3c:b5:0f:89:5a:81:39:8c:80:87:0c:f0:e8: 86:fe:90:16:84:dc:ce:06:06:eb:d1:c9:ae:03:7a: 03:9c:71:12:69:cc:65:30:85:68:0e:9f:27:f4:b5: a2:d3:a5:e1:94:af:53:a0:40:85:90:07:c1:a2:d6: 6a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9A:D7:27:8B:A5:5D:42:7A:61:AC:AB:1A:4E:CC:4B:77:AB:79:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 209.38.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:1e:0c:85:4b:f1:27:a2:fe:71:6d:3b:03:0f:f4:07:bf:50: 16:0f:4a:c8:cc:89:16:5c:14:e5:db:b7:8c:41:57:b8:b4:4a: 21:9a:d0:0e:04:0a:92:73:0c:5c:49:10:fe:58:90:39:a9:3e: 1f:59:7c:6f:98:af:95:78:19:c7:e4:4c:79:7e:f4:cd:90:bf: fb:6d:4a:8b:5a:99:8c:42:ab:a6:1d:36:4c:26:71:ba:3a:09: e3:a2:d2:4e:b7:c2:80:b5:dc:fa:21:c4:8b:0b:f6:e6:ab:67: aa:a9:c9:1a:36:09:49:b7:ae:dd:4b:f3:0e:55:02:3f:e1:f2: 99:e4:06:9d:d3:f8:b4:dd:a6:4c:36:15:ee:3f:31:05:4d:61: 69:e3:76:fd:46:60:a3:13:cd:62:cf:7f:79:29:5c:fe:c2:65: a3:09:60:4b:81:53:b8:e7:c5:7b:0c:69:b2:76:ab:13:23:74: 6e:92:79:3b:ca:8e:0e:50:47:b1:45:be:7a:9d:de:28:56:a9: 94:43:16:d4:fc:38:7a:8b:c9:88:c8:7c:d8:fc:5a:b2:6a:82: b0:78:b7:50:99:41:12:fa:54:bb:13:1b:fd:88:75:18:ec:b8: f8:5d:a7:3d:7c:fd:14:1a:7b:09:ec:cf:ad:60:08:7d:b2:46: 51:81:59:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFkTwaWg89/TuE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk N2NlNGI1YTUtOGMwMi00NGM3LWE1ZGQtNzg3YzQxNWU4MDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZDfdespuTlebakkoIYfItzMZ3y8k3tMucAY KBuBmeDEt/GGA4UZNCI0StH4lN1HTPDbR869bvnBfYhcehD4AuPVfS3ujSW9obyE wDXSR01Y6m//YXJiqa99JRHVIf1Jpadeb+PQI60tu8RWQEMoHHeXsPliFROEh1kR 1QplMrU+7dT4pv7TAG57SyB5c7AklNSyyYK1n/E9NzBBLvc5wZ37QVRiMk+DwrhX zE2nIgQzqJTQQrJFFpIva84fr/83AKL+Dzy1D4lagTmMgIcM8OiG/pAWhNzOBgbr 0cmuA3oDnHESacxlMIVoDp8n9LWi06XhlK9ToECFkAfBotZqCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSa1yeLpV1CemGsqxpOzEt3q3kMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNmMyOWQ5YWQtNGFmMi0z NDljLThkOWQtYWExMWM1M2FhNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SYDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgeDIVL8Sei/nFtOwMP9Ae/UBYPSsjMiRZcFOXbt4xBV7i0SiGa0A4E CpJzDFxJEP5YkDmpPh9ZfG+Yr5V4GcfkTHl+9M2Qv/ttSotamYxCq6YdNkwmcbo6 CeOi0k63woC13PohxIsL9uarZ6qpyRo2CUm3rt1L8w5VAj/h8pnkBp3T+LTdpkw2 Fe4/MQVNYWnjdv1GYKMTzWLPf3kpXP7CZaMJYEuBU7jnxXsMabJ2qxMjdG6SeTvK jg5QR7FFvnqd3ihWqZRDFtT8OHqLyYjIfNj8WrJqgrB4t1CZQRL6VLsTG/2IdRjs uPhdpz18/RQaewnsz61gCH2yRlGBWYo= -----END CERTIFICATE-----Generated at Tue Aug 5 20:08:47 2025 by rpki-client