$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/c93ad848-49e8-3d11-af84-2311731f7c5d.roa File: c93ad848-49e8-3d11-af84-2311731f7c5d.roa (raw, json) Hash identifier: IhbJzlLx0RF89WIl/L8CZS+sdrLS3ZDF2ZSHxEmT5aI= Subject key identifier: 20:96:4B:A3:D0:8A:11:75:E8:3B:83:AE:32:E1:AE:98:FF:BB:3E:F7 Certificate issuer: /CN=46b96165-9c22-47d1-962f-486840cec7fa Certificate serial: 010D0C9F4328584AB193165E0059F8E267F4AF80 Authority key identifier: 7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/c93ad848-49e8-3d11-af84-2311731f7c5d.roa Signing time: Wed 30 Jul 2025 20:15:12 +0000 ROA not before: Wed 30 Jul 2025 20:15:12 +0000 ROA not after: Tue 28 Oct 2025 20:15:12 +0000 asID: 3320 IP address blocks: 209.205.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b1:93:16:5e:00:59:f8:e2:67:f4:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46b96165-9c22-47d1-962f-486840cec7fa Validity Not Before: Jul 30 20:15:12 2025 GMT Not After : Oct 28 20:15:12 2025 GMT Subject: CN=bde05122-3361-4274-a014-727f06f569dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:5e:b6:1f:ea:97:2b:04:5a:cc:6c:49:e2: a7:c9:4d:68:47:ff:1c:94:aa:e8:00:00:fd:07:05: 59:10:ee:b7:ee:73:49:bf:c3:f8:5e:f8:7a:7e:8b: e0:b4:f6:3a:f3:42:be:40:6a:1a:05:56:e6:5a:5d: 61:2c:6c:c1:5d:43:52:2d:48:8a:92:c7:50:fd:31: cd:79:5a:39:3f:72:f1:52:56:aa:f9:33:47:69:7c: 65:1c:34:e5:dc:eb:91:77:fa:2f:10:ad:4b:53:e9: c5:97:83:7a:3c:46:27:0b:15:38:0e:15:c9:45:05: 71:ff:e8:f0:35:17:ae:64:a8:77:08:55:e3:c9:e9: 93:39:79:09:74:9d:04:c2:8d:bf:d6:ec:b2:32:6b: 66:82:4a:01:e2:1e:cb:ef:8b:5c:1a:6b:42:d5:0a: 9f:3b:01:f4:68:27:dd:f3:ba:a8:93:34:fd:b2:f0: 9e:57:02:8b:05:9b:d7:ac:e4:27:7b:fa:63:e0:7f: 40:7d:a1:c2:2c:f2:95:b3:14:98:1b:ab:e5:09:ce: 63:24:e5:07:2c:fa:fb:d8:79:4d:9d:ef:a3:13:c2: 31:a0:eb:ab:7d:98:3a:63:b4:8a:42:db:51:c0:b0: d7:25:7f:7f:4e:cf:5d:a3:e2:c8:cd:49:46:e9:49: 5c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:96:4B:A3:D0:8A:11:75:E8:3B:83:AE:32:E1:AE:98:FF:BB:3E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/c93ad848-49e8-3d11-af84-2311731f7c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl X509v3 Authority Key Identifier: keyid:7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer sbgp-ipAddrBlock: critical IPv4: 209.205.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:cf:f1:e6:35:f6:ca:15:8a:2f:51:49:a6:49:f2:8b:a8:79: e3:1f:48:f6:5e:e3:ee:87:e4:df:01:4f:c1:52:a1:59:05:9f: 6e:e9:6e:ff:5a:24:e0:fa:12:88:eb:52:ad:48:82:a9:bd:be: 85:af:9c:6b:aa:74:07:9c:1f:44:f3:37:16:73:27:01:87:39: ac:3b:88:66:a1:f0:8a:2f:20:54:51:64:48:0e:66:fa:e4:5f: 07:98:a8:a1:bb:4b:99:82:66:29:63:bb:15:65:73:d7:f5:62: 69:cf:0e:99:bb:85:af:98:cb:76:7c:14:03:42:a7:22:c7:55: 3a:69:f5:d6:da:c2:73:84:ff:fa:30:2b:ad:60:27:e6:33:1e: 4e:07:7e:ea:01:ce:e9:be:6a:25:28:83:f5:36:17:7f:36:03: 9e:66:91:54:9b:50:71:cf:b5:75:17:40:71:e4:83:52:de:fd: 4e:50:8e:d8:7d:5a:f3:4c:55:29:aa:12:70:f1:b2:7f:7a:65: 01:98:30:6e:4d:76:2c:d0:21:31:af:d6:d2:13:9b:88:4e:5e: 16:1e:ce:99:21:f3:c1:72:f1:a7:f5:de:2e:ba:b7:df:6b:b5: 3d:2e:c7:33:21:34:ce:ac:ea:94:a1:41:02:b8:72:04:be:33: 88:d3:b9:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqxkxZeAFn44mf0r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDZiOTYxNjUtOWMyMi00N2QxLTk2MmYtNDg2ODQwY2Vj N2ZhMB4XDTI1MDczMDIwMTUxMloXDTI1MTAyODIwMTUxMlowLzEtMCsGA1UEAxMk YmRlMDUxMjItMzM2MS00Mjc0LWEwMTQtNzI3ZjA2ZjU2OWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdleth/qlysEWsxsSeKnyU1oR/8clKroAAD9 BwVZEO637nNJv8P4Xvh6fovgtPY680K+QGoaBVbmWl1hLGzBXUNSLUiKksdQ/THN eVo5P3LxUlaq+TNHaXxlHDTl3OuRd/ovEK1LU+nFl4N6PEYnCxU4DhXJRQVx/+jw NReuZKh3CFXjyemTOXkJdJ0Ewo2/1uyyMmtmgkoB4h7L74tcGmtC1QqfOwH0aCfd 87qokzT9svCeVwKLBZvXrOQne/pj4H9AfaHCLPKVsxSYG6vlCc5jJOUHLPr72HlN ne+jE8IxoOurfZg6Y7SKQttRwLDXJX9/Ts9do+LIzUlG6UlcmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCWS6PQihF16DuDrjLhrpj/uz73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NmI5 NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4NDBjZWM3ZmEvYzkzYWQ4NDgtNDllOC0z ZDExLWFmODQtMjMxMTczMWY3YzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDZiOTYxNjUtOWMyMi00N2QxLTk2 MmYtNDg2ODQwY2VjN2ZhLzQ2Yjk2MTY1LTljMjItNDdkMS05NjJmLTQ4Njg0MGNl YzdmYS5jcmwwHwYDVR0jBBgwFoAUfmjYquszCjN8iNk++n3h/DShL6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NmI5NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4 NDBjZWM3ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0c3nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjP8eY19soVii9RSaZJ8ouoeeMfSPZe4+6H5N8BT8FSoVkFn27pbv9a JOD6EojrUq1Igqm9voWvnGuqdAecH0TzNxZzJwGHOaw7iGah8IovIFRRZEgOZvrk XweYqKG7S5mCZiljuxVlc9f1YmnPDpm7ha+Yy3Z8FANCpyLHVTpp9dbawnOE//ow K61gJ+YzHk4HfuoBzum+aiUog/U2F382A55mkVSbUHHPtXUXQHHkg1Le/U5Qjth9 WvNMVSmqEnDxsn96ZQGYMG5NdizQITGv1tITm4hOXhYezpkh88Fy8af13i66t99r tT0uxzMhNM6s6pShQQK4cgS+M4jTufE= -----END CERTIFICATE-----Generated at Wed Aug 6 00:55:20 2025 by rpki-client