$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d84f62-51d4-3c50-ac70-43d409c29abd.roa File: a8d84f62-51d4-3c50-ac70-43d409c29abd.roa (raw, json) Hash identifier: +r6LMMXQz1HjbyyXZKhHQDbG2IZSxs5qmyF1lTBUJ6w= Subject key identifier: CC:05:6A:FC:58:15:39:A8:A5:10:7B:F1:FF:7F:1A:86:A8:63:A1:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9636999E4708738AC9CF4620 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d84f62-51d4-3c50-ac70-43d409c29abd.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 7342 IP address blocks: 209.131.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:99:9e:47:08:73:8a:c9:cf:46:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=31e566a3-eecc-4f39-aa21-f6fb2f33d5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:da:31:25:d5:52:d1:03:8d:a1:f4:03:87: b3:f0:3e:2f:ef:58:d0:f3:ee:d4:ee:ad:c9:8f:5d: e6:6e:c4:4f:54:b8:cd:0e:b6:50:8c:de:3a:9f:4a: 30:38:a7:27:c7:17:05:eb:36:8b:36:aa:f4:f5:46: 52:f5:be:4b:de:fa:5c:7f:4f:cd:fd:8b:1d:8f:16: 44:17:63:31:0a:8b:08:a6:3b:0d:51:b9:23:08:53: 52:cb:e3:bc:a5:a1:1d:df:ac:23:3c:42:40:d7:5d: 57:ce:e7:cb:c4:5a:13:b5:a0:8f:2c:19:55:b6:4c: 2e:18:07:25:54:c3:f2:28:f2:ed:82:f5:9c:30:63: 62:c7:d6:f2:40:be:7b:36:b8:28:a9:81:b6:18:f5: eb:ea:57:41:c3:ae:b1:ea:2c:5d:13:a3:01:3c:97: f5:52:17:0d:47:ae:06:a9:85:a4:ce:d4:65:25:7d: 47:69:be:21:37:7d:26:e7:7e:3a:91:25:0e:97:36: 95:cc:66:c3:51:fb:f7:6c:71:d5:35:de:b1:41:97: 84:f0:54:ff:55:d2:2d:c4:d6:f3:ea:e8:2f:14:82: 01:85:5b:80:d8:d1:fb:0a:24:da:5b:7f:4b:be:2f: 7d:5d:91:71:61:83:70:a4:d2:60:17:c6:a0:f4:9a: 64:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:05:6A:FC:58:15:39:A8:A5:10:7B:F1:FF:7F:1A:86:A8:63:A1:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d84f62-51d4-3c50-ac70-43d409c29abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:67:34:01:56:e7:21:84:dd:6e:c7:9c:78:48:e6:b6:20:12: 70:60:40:43:60:69:0a:e7:ec:88:86:e1:48:be:0c:83:53:a6: 9d:8e:89:11:cd:ca:37:d4:cc:72:41:17:6c:8b:6c:39:78:1f: fe:11:15:68:0e:22:e8:5f:57:d0:59:a9:68:b5:9c:5a:d9:10: b8:3d:e3:8b:9e:e4:64:29:d0:69:05:99:9a:ae:24:a5:75:1b: c5:63:41:6e:ec:b3:fc:a7:ef:15:9f:e1:ac:41:e7:01:fd:50: cb:a3:88:b1:e1:2a:ac:70:ae:21:dc:7b:cf:70:f5:f3:f9:23: 73:3a:9f:3d:e8:fc:cd:64:5f:73:70:32:f0:f1:f0:59:c8:17: 06:c3:61:ed:cf:99:46:8c:2f:6f:bd:c9:66:d5:9d:16:19:e8: 8a:df:fa:c5:ad:68:07:c9:9f:d6:cd:d2:b2:4d:ad:53:e9:90: 6c:c2:45:a8:6c:bf:71:96:d8:bc:11:61:12:a1:56:bb:a5:3e: 95:34:4f:0e:94:98:1d:00:ca:ad:46:0e:19:a5:54:b6:8c:e9: 7c:2f:7a:aa:19:7b:5e:6c:3c:a9:ee:bf:dc:c0:2e:e6:1b:06: 40:f3:c1:1b:b6:60:e3:c3:89:27:ef:8d:67:8d:1c:4b:bd:6d: d5:9d:9e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpmeRwhzisnPRiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzFlNTY2YTMtZWVjYy00ZjM5LWFhMjEtZjZmYjJmMzNkNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqbaMSXVUtEDjaH0A4ez8D4v71jQ8+7U7q3J j13mbsRPVLjNDrZQjN46n0owOKcnxxcF6zaLNqr09UZS9b5L3vpcf0/N/YsdjxZE F2MxCosIpjsNUbkjCFNSy+O8paEd36wjPEJA111XzufLxFoTtaCPLBlVtkwuGAcl VMPyKPLtgvWcMGNix9byQL57NrgoqYG2GPXr6ldBw66x6ixdE6MBPJf1UhcNR64G qYWkztRlJX1Hab4hN30m5346kSUOlzaVzGbDUfv3bHHVNd6xQZeE8FT/VdItxNbz 6ugvFIIBhVuA2NH7CiTaW39Lvi99XZFxYYNwpNJgF8ag9JpkuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwFavxYFTmopRB78f9/GoaoY6GNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYThkODRmNjItNTFkNC0z YzUwLWFjNzAtNDNkNDA5YzI5YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJnNAFW5yGE3W7HnHhI5rYgEnBgQENgaQrn7IiG4Ui+DINTpp2OiRHN yjfUzHJBF2yLbDl4H/4RFWgOIuhfV9BZqWi1nFrZELg944ue5GQp0GkFmZquJKV1 G8VjQW7ss/yn7xWf4axB5wH9UMujiLHhKqxwriHce89w9fP5I3M6nz3o/M1kX3Nw MvDx8FnIFwbDYe3PmUaML2+9yWbVnRYZ6Irf+sWtaAfJn9bN0rJNrVPpkGzCRahs v3GW2LwRYRKhVrulPpU0Tw6UmB0Ayq1GDhmlVLaM6XwveqoZe15sPKnuv9zALuYb BkDzwRu2YOPDiSfvjWeNHEu9bdWdnp0= -----END CERTIFICATE-----Generated at Wed Aug 6 04:06:28 2025 by rpki-client