$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa File: 85b99b16-3c92-33b6-9ed8-133467e30af3.roa (raw, json) Hash identifier: q675g70PFrleodNNkrqV0VMgHxQIuj6uuJIH1v4jdg0= Subject key identifier: 48:7D:9B:29:A9:E5:E2:11:04:07:AE:4C:30:14:27:33:D1:E1:92:18 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AADF138508C3F02CF981A2680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7342 IP address blocks: 209.131.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:38:50:8c:3f:02:cf:98:1a:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=d99ce5e9-29c8-465e-9885-9f76cbdf55ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c8:78:6e:79:88:0d:97:a9:72:4f:f9:75:96: 63:e9:20:57:ca:a8:5b:58:1c:23:f8:c9:de:b2:b9: 5c:f1:e9:93:50:7c:01:29:d9:9a:96:50:50:e9:37: 36:33:64:8d:92:13:de:9e:ff:b6:58:1e:e9:98:18: c5:b5:48:a5:65:6d:d2:48:df:b3:75:42:f2:95:20: 3b:79:aa:1a:1f:56:73:89:ef:dd:5f:12:40:69:af: 4e:d9:de:df:14:79:25:b6:ba:cc:91:2c:cf:74:2f: e2:3b:fe:78:f8:9d:16:e0:d9:45:b9:f1:e8:87:32: 32:cf:9f:ab:31:04:85:02:8a:fd:b7:55:b4:5e:3a: 47:d2:86:12:6c:17:28:29:23:09:a9:15:ee:54:c7: 07:21:81:bb:b4:b5:95:2c:33:64:a7:da:c8:5d:e6: 25:e7:5d:f5:c7:09:47:52:8e:96:fe:6e:2f:e3:9b: 54:d4:5c:9b:8d:79:bb:1e:23:38:a6:48:2b:28:f5: f3:df:a7:06:b9:84:63:12:83:b0:0f:5c:81:ef:fd: 1f:b3:71:ea:8b:97:bb:99:4a:d1:f2:3f:88:e8:e5: 2e:f3:e2:4a:20:42:2f:50:5e:9f:6c:61:4a:96:62: 4e:64:6b:0a:48:0f:e6:a7:8e:7b:ed:39:4d:4d:c0: 30:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7D:9B:29:A9:E5:E2:11:04:07:AE:4C:30:14:27:33:D1:E1:92:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:2e:4b:ef:8f:df:cd:e1:e5:b1:8d:64:78:59:ed:09:1a:2f: 1a:83:51:bf:c0:60:69:dd:c2:ba:a0:61:6c:26:59:5b:b9:77: b5:db:27:3e:72:db:0d:f3:b7:c4:1e:f3:60:a6:ed:c9:b2:e3: 34:72:8f:db:ac:6b:fa:62:6d:0f:84:33:4a:50:62:1b:8f:fe: 09:7f:cc:e1:b6:3d:3e:c2:5f:fa:a3:d8:7f:b4:ae:e9:75:f0: 7d:f3:b3:e6:41:86:6d:02:2c:b5:c3:3f:55:bb:83:c5:89:16: 93:4c:33:ca:ba:d9:0f:e4:bf:63:56:a2:d9:71:22:4e:41:6a: d0:47:db:ca:15:ec:13:cb:b7:c9:47:e3:70:78:05:12:30:78: 00:5a:3e:37:c9:e3:11:f0:97:28:e4:43:4d:af:ea:7a:24:3c: 57:07:d3:4f:b7:73:e4:23:8b:b3:ea:54:ea:6d:4f:e4:42:2f: e2:d5:67:3a:83:e8:46:5e:e2:87:aa:b9:2e:c3:30:3a:d6:5d: cc:ee:10:de:81:9c:9f:14:ab:81:3c:28:7b:85:62:48:e1:0a: 14:db:39:e1:f3:28:d6:c3:89:ed:f5:84:23:f5:cf:8e:d8:65: 3b:e4:03:e5:4e:42:cd:bb:8f:6c:6f:18:87:b2:be:66:33:1a: 93:37:a9:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8ThQjD8Cz5gaJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZDk5Y2U1ZTktMjljOC00NjVlLTk4ODUtOWY3NmNiZGY1NWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58h4bnmIDZepck/5dZZj6SBXyqhbWBwj+Mne srlc8emTUHwBKdmallBQ6Tc2M2SNkhPenv+2WB7pmBjFtUilZW3SSN+zdULylSA7 eaoaH1Zzie/dXxJAaa9O2d7fFHkltrrMkSzPdC/iO/54+J0W4NlFufHohzIyz5+r MQSFAor9t1W0XjpH0oYSbBcoKSMJqRXuVMcHIYG7tLWVLDNkp9rIXeYl5131xwlH Uo6W/m4v45tU1FybjXm7HiM4pkgrKPXz36cGuYRjEoOwD1yB7/0fs3Hqi5e7mUrR 8j+I6OUu8+JKIEIvUF6fbGFKlmJOZGsKSA/mp4577TlNTcAwdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEh9mymp5eIRBAeuTDAUJzPR4ZIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODViOTliMTYtM2M5Mi0z M2I2LTllZDgtMTMzNDY3ZTMwYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsuS++P383h5bGNZHhZ7QkaLxqDUb/AYGndwrqgYWwmWVu5d7XbJz5y 2w3zt8Qe82Cm7cmy4zRyj9usa/pibQ+EM0pQYhuP/gl/zOG2PT7CX/qj2H+0rul1 8H3zs+ZBhm0CLLXDP1W7g8WJFpNMM8q62Q/kv2NWotlxIk5BatBH28oV7BPLt8lH 43B4BRIweABaPjfJ4xHwlyjkQ02v6nokPFcH00+3c+Qji7PqVOptT+RCL+LVZzqD 6EZe4oequS7DMDrWXczuEN6BnJ8Uq4E8KHuFYkjhChTbOeHzKNbDie31hCP1z47Y ZTvkA+VOQs27j2xvGIeyvmYzGpM3qaw= -----END CERTIFICATE-----Generated at Thu Aug 7 03:57:49 2025 by rpki-client