$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/3ca90d71-e99d-3433-b96c-600f20210bd8.roa File: 3ca90d71-e99d-3433-b96c-600f20210bd8.roa (raw, json) Hash identifier: MUrgdPHDNdD0yQzOipImo+uzjxsNAyxLTXlhKnlJStM= Subject key identifier: 9C:C4:2C:25:1E:A1:44:F0:1D:9C:3A:D5:EA:77:A6:5D:69:AC:8D:2A Certificate issuer: /CN=46b96165-9c22-47d1-962f-486840cec7fa Certificate serial: 010D0C9F4328584AB18823782CCEB0CC5D139F80 Authority key identifier: 7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/3ca90d71-e99d-3433-b96c-600f20210bd8.roa Signing time: Wed 30 Jul 2025 19:53:09 +0000 ROA not before: Wed 30 Jul 2025 19:53:09 +0000 ROA not after: Tue 28 Oct 2025 19:53:09 +0000 asID: 3320 IP address blocks: 209.205.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b1:88:23:78:2c:ce:b0:cc:5d:13:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46b96165-9c22-47d1-962f-486840cec7fa Validity Not Before: Jul 30 19:53:09 2025 GMT Not After : Oct 28 19:53:09 2025 GMT Subject: CN=318ee3c2-d79e-46ba-8da3-2301195a794d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:94:f2:d6:9c:54:70:79:c0:44:77:e9:58:0b: 8b:87:07:4d:07:4a:6d:da:3f:6b:54:34:84:e9:f8: 7a:47:fe:10:e3:7d:39:24:08:d8:ae:c7:33:ca:0f: e6:c9:1e:ff:9d:0d:53:b4:4d:c3:b2:c0:b8:f5:6a: 45:81:79:27:ed:ba:52:f3:f3:9c:0a:1f:02:79:58: d4:ec:27:28:2a:20:a3:2e:de:38:e3:f8:4e:3b:6f: 12:7b:87:6b:d9:b6:69:96:20:de:e5:1e:e5:9e:aa: 24:45:ac:a0:3a:56:f0:0e:c1:87:72:06:2c:55:aa: c1:e9:e8:f4:33:7d:11:dd:97:96:22:eb:77:7c:01: a4:c3:0f:1d:70:23:72:b8:2a:5d:20:60:4c:97:81: 73:94:69:df:06:41:08:f1:0d:99:5f:74:79:c3:43: e6:a6:e4:22:14:3c:52:1f:84:9d:ba:2a:8e:f6:66: 5d:c1:69:ab:f3:30:03:73:a0:67:6c:48:5c:a7:df: 24:a9:22:22:7c:d0:ad:11:39:4b:4d:a5:49:dd:86: b4:a7:4c:a2:67:75:06:56:03:18:cb:f9:51:3f:a6: ce:91:ff:57:86:5e:16:85:0a:f6:a3:eb:f7:cb:de: 78:a8:8e:bf:b0:dc:1e:d9:a4:d0:ba:92:23:0c:fe: a7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C4:2C:25:1E:A1:44:F0:1D:9C:3A:D5:EA:77:A6:5D:69:AC:8D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/3ca90d71-e99d-3433-b96c-600f20210bd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl X509v3 Authority Key Identifier: keyid:7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer sbgp-ipAddrBlock: critical IPv4: 209.205.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f8:04:1d:fe:a2:e7:19:4d:2f:e4:07:08:0d:d5:4c:a4:25: f6:f9:9e:f7:ce:47:2a:b7:00:20:52:3c:28:58:86:43:ba:d4: 98:f1:8b:39:28:8d:15:b7:a6:cb:07:38:df:69:f4:c6:57:48: 05:35:aa:4d:70:23:85:1a:a3:96:76:f1:f4:30:d6:c4:c9:ea: 40:d2:ad:ff:b1:d1:1b:a5:23:aa:cf:09:a1:07:78:04:78:04: 35:f0:96:64:a8:f3:dc:29:71:9c:a5:04:b7:70:96:07:8b:2d: 0f:79:d7:5f:8e:2b:e8:bb:32:47:4d:ab:15:13:c6:cd:0f:29: 31:79:68:32:f6:8b:16:25:87:ea:6f:b5:aa:f2:a7:cb:bf:df: 6b:f1:d6:45:06:ea:9f:79:54:1c:3d:e9:aa:e3:90:b2:64:cb: f5:89:2a:9b:c7:be:18:75:c7:50:56:68:45:09:3d:d8:71:11: 58:12:00:7d:d5:a7:d9:18:79:8d:ae:58:b1:e7:9e:61:40:e8: 14:1f:cf:11:b1:f6:40:a8:c4:00:11:59:43:b5:87:0b:81:b5: 38:8d:40:15:95:06:49:9b:71:0c:68:da:98:ae:58:c4:d6:d5: b6:f8:e5:75:d7:2c:0d:b4:98:85:7e:e7:d5:36:ba:96:f0:81: 46:a4:1a:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqxiCN4LM6wzF0Tn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDZiOTYxNjUtOWMyMi00N2QxLTk2MmYtNDg2ODQwY2Vj N2ZhMB4XDTI1MDczMDE5NTMwOVoXDTI1MTAyODE5NTMwOVowLzEtMCsGA1UEAxMk MzE4ZWUzYzItZDc5ZS00NmJhLThkYTMtMjMwMTE5NWE3OTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Ty1pxUcHnARHfpWAuLhwdNB0pt2j9rVDSE 6fh6R/4Q4305JAjYrsczyg/myR7/nQ1TtE3DssC49WpFgXkn7bpS8/OcCh8CeVjU 7CcoKiCjLt444/hOO28Se4dr2bZpliDe5R7lnqokRaygOlbwDsGHcgYsVarB6ej0 M30R3ZeWIut3fAGkww8dcCNyuCpdIGBMl4FzlGnfBkEI8Q2ZX3R5w0PmpuQiFDxS H4SduiqO9mZdwWmr8zADc6BnbEhcp98kqSIifNCtETlLTaVJ3Ya0p0yiZ3UGVgMY y/lRP6bOkf9Xhl4WhQr2o+v3y954qI6/sNwe2aTQupIjDP6n6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzELCUeoUTwHZw61ep3pl1prI0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NmI5 NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4NDBjZWM3ZmEvM2NhOTBkNzEtZTk5ZC0z NDMzLWI5NmMtNjAwZjIwMjEwYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDZiOTYxNjUtOWMyMi00N2QxLTk2 MmYtNDg2ODQwY2VjN2ZhLzQ2Yjk2MTY1LTljMjItNDdkMS05NjJmLTQ4Njg0MGNl YzdmYS5jcmwwHwYDVR0jBBgwFoAUfmjYquszCjN8iNk++n3h/DShL6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NmI5NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4 NDBjZWM3ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0c3mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj4BB3+oucZTS/kBwgN1UykJfb5nvfORyq3ACBSPChYhkO61Jjxizko jRW3pssHON9p9MZXSAU1qk1wI4Uao5Z28fQw1sTJ6kDSrf+x0RulI6rPCaEHeAR4 BDXwlmSo89wpcZylBLdwlgeLLQ9511+OK+i7MkdNqxUTxs0PKTF5aDL2ixYlh+pv taryp8u/32vx1kUG6p95VBw96arjkLJky/WJKpvHvhh1x1BWaEUJPdhxEVgSAH3V p9kYeY2uWLHnnmFA6BQfzxGx9kCoxAARWUO1hwuBtTiNQBWVBkmbcQxo2piuWMTW 1bb45XXXLA20mIV+59U2upbwgUakGrQ= -----END CERTIFICATE-----Generated at Fri Aug 8 12:55:21 2025 by rpki-client