$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/4bc41d4e-de9b-38be-8c22-020c187a2056.roa File: 4bc41d4e-de9b-38be-8c22-020c187a2056.roa (raw, json) Hash identifier: nSbkjdsmOp952ljIPSKHeFv5vY/kkP0bR4UAsnNO3p8= Subject key identifier: AD:F5:74:17:26:44:6A:76:17:C7:7B:A4:C4:83:E2:48:21:35:1A:98 Certificate issuer: /CN=46b96165-9c22-47d1-962f-486840cec7fa Certificate serial: 010D0C9F4328584AB18194655C9E47C60D449740 Authority key identifier: 7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/4bc41d4e-de9b-38be-8c22-020c187a2056.roa Signing time: Wed 30 Jul 2025 19:39:56 +0000 ROA not before: Wed 30 Jul 2025 19:39:56 +0000 ROA not after: Tue 28 Oct 2025 19:39:56 +0000 asID: 3320 IP address blocks: 209.205.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b1:81:94:65:5c:9e:47:c6:0d:44:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46b96165-9c22-47d1-962f-486840cec7fa Validity Not Before: Jul 30 19:39:56 2025 GMT Not After : Oct 28 19:39:56 2025 GMT Subject: CN=91af6120-a5e5-4a41-8737-d789136d74ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:65:33:93:81:c0:2c:b3:ed:75:9d:49:74:e4: 61:c6:cf:a2:1b:86:95:36:7e:9a:82:08:46:86:0a: 4c:62:5d:b9:b8:a0:38:da:40:41:d4:0e:a2:44:b0: 79:bc:fa:26:f4:26:70:30:a3:ed:62:11:b7:42:d0: d1:cd:01:3c:ff:1a:44:69:20:59:fb:af:51:8c:fe: f9:f4:11:c7:62:32:43:09:97:54:ec:47:a7:21:f9: 4b:0b:e1:ad:93:9a:3f:67:a1:e2:72:f8:8c:f7:14: d5:db:47:1a:53:be:b7:5a:f0:25:c1:6d:42:5f:b3: 50:b1:85:fd:97:b8:6b:f5:88:de:df:a5:e6:7f:41: 95:0d:51:2b:7c:0e:4c:d2:82:cb:1f:f5:12:e0:30: 96:80:59:8c:bb:5a:6f:ca:ad:c9:93:50:fc:5f:10: b2:9d:9c:da:46:f3:a1:66:89:9f:20:86:bb:ab:dd: 2d:57:fd:94:76:20:68:36:81:d0:94:e2:54:6b:f8: 53:3e:38:db:93:0a:b3:b3:9c:63:2d:54:bb:87:6f: 91:fd:ce:66:2e:16:68:72:98:b1:b2:90:71:f0:1f: 93:b9:69:89:4d:c8:53:6d:f5:8a:3c:ee:41:52:c8: 28:2f:d7:7f:f0:79:05:2a:6c:50:be:e6:7d:53:97: 4e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F5:74:17:26:44:6A:76:17:C7:7B:A4:C4:83:E2:48:21:35:1A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/4bc41d4e-de9b-38be-8c22-020c187a2056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl X509v3 Authority Key Identifier: keyid:7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer sbgp-ipAddrBlock: critical IPv4: 209.205.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:7b:5a:e7:65:87:5c:cf:d8:12:4b:5d:09:2f:d7:ab:49:9a: b5:8b:7f:a9:b5:bf:ae:78:22:fa:3c:d6:94:99:e4:b6:1a:1f: 27:88:de:b7:f9:4d:a6:2c:4b:cd:03:c5:30:fc:f5:c4:0f:c5: da:0b:07:d5:e3:5f:76:53:ff:59:23:ed:c8:95:4f:0a:7e:43: eb:93:b1:07:5f:ce:de:57:af:02:b1:e5:cd:92:0e:7c:f4:c5: e5:e3:d0:10:3e:05:c2:7d:38:26:6f:05:ba:ba:d3:44:83:16: e1:e0:2e:a4:0e:fb:28:db:b2:21:2a:92:b9:6b:44:03:2e:4a: 90:ed:24:29:6e:2d:af:da:1d:1f:eb:cc:fb:97:cd:e1:67:de: 17:6d:50:13:df:81:66:b6:95:07:d6:11:37:bf:4a:e9:ed:11: 78:d8:d1:40:6e:f2:a1:15:c8:de:bd:66:91:52:83:07:16:ec: 1b:98:cb:83:f6:d1:90:c5:9a:ab:e2:a4:0b:b5:29:d9:bb:7d: 48:16:94:69:8b:b1:24:0e:a8:73:85:5e:dd:17:b7:66:2e:71: 5b:03:ce:71:36:a5:f7:1b:71:bd:42:79:87:e6:f6:3f:df:b4: 08:c9:db:9a:b8:64:14:52:bd:81:e3:12:ce:70:e4:ea:5f:21: d3:48:36:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqxgZRlXJ5Hxg1El0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDZiOTYxNjUtOWMyMi00N2QxLTk2MmYtNDg2ODQwY2Vj N2ZhMB4XDTI1MDczMDE5Mzk1NloXDTI1MTAyODE5Mzk1NlowLzEtMCsGA1UEAxMk OTFhZjYxMjAtYTVlNS00YTQxLTg3MzctZDc4OTEzNmQ3NGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWUzk4HALLPtdZ1JdORhxs+iG4aVNn6agghG hgpMYl25uKA42kBB1A6iRLB5vPom9CZwMKPtYhG3QtDRzQE8/xpEaSBZ+69RjP75 9BHHYjJDCZdU7EenIflLC+Gtk5o/Z6HicviM9xTV20caU763WvAlwW1CX7NQsYX9 l7hr9Yje36Xmf0GVDVErfA5M0oLLH/US4DCWgFmMu1pvyq3Jk1D8XxCynZzaRvOh ZomfIIa7q90tV/2UdiBoNoHQlOJUa/hTPjjbkwqzs5xjLVS7h2+R/c5mLhZocpix spBx8B+TuWmJTchTbfWKPO5BUsgoL9d/8HkFKmxQvuZ9U5dO/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK31dBcmRGp2F8d7pMSD4kghNRqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NmI5 NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4NDBjZWM3ZmEvNGJjNDFkNGUtZGU5Yi0z OGJlLThjMjItMDIwYzE4N2EyMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDZiOTYxNjUtOWMyMi00N2QxLTk2 MmYtNDg2ODQwY2VjN2ZhLzQ2Yjk2MTY1LTljMjItNDdkMS05NjJmLTQ4Njg0MGNl YzdmYS5jcmwwHwYDVR0jBBgwFoAUfmjYquszCjN8iNk++n3h/DShL6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NmI5NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4 NDBjZWM3ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0c3lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMR7Wudlh1zP2BJLXQkv16tJmrWLf6m1v654Ivo81pSZ5LYaHyeI3rf5 TaYsS80DxTD89cQPxdoLB9XjX3ZT/1kj7ciVTwp+Q+uTsQdfzt5XrwKx5c2SDnz0 xeXj0BA+BcJ9OCZvBbq600SDFuHgLqQO+yjbsiEqkrlrRAMuSpDtJCluLa/aHR/r zPuXzeFn3hdtUBPfgWa2lQfWETe/SuntEXjY0UBu8qEVyN69ZpFSgwcW7BuYy4P2 0ZDFmqvipAu1Kdm7fUgWlGmLsSQOqHOFXt0Xt2YucVsDznE2pfcbcb1CeYfm9j/f tAjJ25q4ZBRSvYHjEs5w5OpfIdNINqo= -----END CERTIFICATE-----Generated at Thu Aug 7 05:10:21 2025 by rpki-client