$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa File: 588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa (raw, json) Hash identifier: lyDfy3fOE2RmfdkSC/Mwt+R+8YPw9VsNN31Lqj9MLSM= Subject key identifier: 16:B1:F6:BB:9C:80:96:0D:E1:9D:0B:D2:98:01:3F:76:18:C9:85:F1 Certificate issuer: /CN=99df77a9-4870-495f-bbda-89f8e0ae31d2 Certificate serial: 010D0C9F4328584A609217E22F39C59770D84300 Authority key identifier: 16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa Signing time: Tue 01 Jul 2025 19:52:43 +0000 ROA not before: Tue 01 Jul 2025 19:52:43 +0000 ROA not after: Mon 29 Sep 2025 19:52:43 +0000 asID: 13725 IP address blocks: 209.205.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:92:17:e2:2f:39:c5:97:70:d8:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99df77a9-4870-495f-bbda-89f8e0ae31d2 Validity Not Before: Jul 1 19:52:43 2025 GMT Not After : Sep 29 19:52:43 2025 GMT Subject: CN=0e8901c0-4e81-41bc-b39b-274394107f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:5e:25:b5:6b:73:80:b5:c9:5d:6b:94:ff: 7b:69:2c:c0:49:14:3c:b3:15:17:cb:d4:28:49:5b: 27:90:39:c5:6b:95:ef:49:76:07:8a:74:b5:0b:f0: 56:5f:c0:c1:d2:d7:13:4a:08:2b:89:90:e4:52:5b: 6b:fd:82:aa:3f:8d:99:7a:67:84:4c:31:f6:a7:d3: 20:b5:2f:7f:75:2d:86:74:5a:b8:8f:93:96:b0:32: 59:0a:dc:81:ae:74:64:68:db:9e:8e:23:bb:57:bd: 18:39:f8:43:8c:05:15:6a:e0:33:8b:37:ee:1d:4d: 26:5e:ff:54:09:98:3a:78:06:20:b3:b8:bd:8e:4a: af:79:35:bb:82:ec:2b:37:58:6f:96:37:0e:4d:c5: b4:91:f6:05:d9:a0:e1:62:df:13:a6:ff:6f:93:0a: 84:2d:db:ef:ce:cd:bb:79:07:c6:3e:53:91:a2:d7: ad:f4:44:26:21:f9:88:e5:4c:5a:e3:76:67:21:da: b4:9f:74:02:47:dd:40:b3:15:5a:76:80:1e:b8:85: cd:9a:74:d5:57:6b:5f:93:9f:7a:8d:37:d4:44:4e: 2f:80:77:de:62:16:17:90:a0:e3:da:1e:7b:c8:e9: 11:de:d7:9d:92:a7:9b:ef:28:58:52:b8:7e:e9:cb: 4f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B1:F6:BB:9C:80:96:0D:E1:9D:0B:D2:98:01:3F:76:18:C9:85:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.crl X509v3 Authority Key Identifier: keyid:16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer sbgp-ipAddrBlock: critical IPv4: 209.205.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:dd:9b:62:9a:ff:af:ee:c6:89:99:18:e0:bc:a6:a1:48:01: 10:56:da:bb:85:4d:99:91:8a:41:80:48:de:8f:7c:35:39:87: 78:1d:f8:97:23:28:8c:5e:43:76:00:d7:9f:bc:7e:8c:2f:6d: fb:97:53:96:5a:6d:e9:b1:17:0a:02:3e:f2:7b:6b:f3:24:ff: 88:2e:d4:62:de:51:42:7c:9d:df:00:9d:69:d7:af:1d:75:7f: 98:6c:3a:ee:c1:f4:ea:24:c3:8d:75:d1:be:1d:70:cd:67:24: f1:e4:56:04:ee:56:92:ec:9d:ff:fd:8d:cb:91:75:66:1b:9c: 85:df:13:61:7b:02:c5:c9:20:41:bb:84:5b:11:76:c5:a1:6c: d6:01:91:19:85:04:2f:aa:39:49:2a:5f:0b:eb:40:22:f0:98: ed:7c:62:07:ed:05:a3:23:ce:41:32:e4:f3:40:b8:b9:c5:82: 31:97:14:5c:d4:63:c3:70:1c:4e:2d:34:0a:e4:5d:51:b0:82: c0:89:ad:82:f3:4e:a1:b0:0e:99:a9:37:7a:67:79:88:60:ad: 8f:61:6e:d3:55:db:6b:80:61:b2:ee:fa:e6:bd:fd:20:e1:91: 9e:2c:66:91:2a:14:e0:c0:d8:fa:ad:55:a9:ef:db:24:61:90: f5:2c:f2:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpgkhfiLznFl3DYQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlkZjc3YTktNDg3MC00OTVmLWJiZGEtODlmOGUwYWUz MWQyMB4XDTI1MDcwMTE5NTI0M1oXDTI1MDkyOTE5NTI0M1owLzEtMCsGA1UEAxMk MGU4OTAxYzAtNGU4MS00MWJjLWIzOWItMjc0Mzk0MTA3ZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2JeJbVrc4C1yV1rlP97aSzASRQ8sxUXy9Qo SVsnkDnFa5XvSXYHinS1C/BWX8DB0tcTSggriZDkUltr/YKqP42ZemeETDH2p9Mg tS9/dS2GdFq4j5OWsDJZCtyBrnRkaNuejiO7V70YOfhDjAUVauAzizfuHU0mXv9U CZg6eAYgs7i9jkqveTW7guwrN1hvljcOTcW0kfYF2aDhYt8Tpv9vkwqELdvvzs27 eQfGPlORotet9EQmIfmI5Uxa43ZnIdq0n3QCR91AsxVadoAeuIXNmnTVV2tfk596 jTfURE4vgHfeYhYXkKDj2h57yOkR3tedkqeb7yhYUrh+6ctPsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBax9rucgJYN4Z0L0pgBP3YYyYXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OWRm NzdhOS00ODcwLTQ5NWYtYmJkYS04OWY4ZTBhZTMxZDIvNTg4MDA1ZmYtN2ZmMy0z MmUyLTkwNjUtOGExNmMxNWM2YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTlkZjc3YTktNDg3MC00OTVmLWJi ZGEtODlmOGUwYWUzMWQyLzk5ZGY3N2E5LTQ4NzAtNDk1Zi1iYmRhLTg5ZjhlMGFl MzFkMi5jcmwwHwYDVR0jBBgwFoAUFo7+SAwbWBtQwWq+4d3Ws53rl30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OWRmNzdhOS00ODcwLTQ5NWYtYmJkYS04OWY4 ZTBhZTMxZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0c3uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTdm2Ka/6/uxomZGOC8pqFIARBW2ruFTZmRikGASN6PfDU5h3gd+Jcj KIxeQ3YA15+8fowvbfuXU5ZabemxFwoCPvJ7a/Mk/4gu1GLeUUJ8nd8AnWnXrx11 f5hsOu7B9Ookw4110b4dcM1nJPHkVgTuVpLsnf/9jcuRdWYbnIXfE2F7AsXJIEG7 hFsRdsWhbNYBkRmFBC+qOUkqXwvrQCLwmO18YgftBaMjzkEy5PNAuLnFgjGXFFzU Y8NwHE4tNArkXVGwgsCJrYLzTqGwDpmpN3pneYhgrY9hbtNV22uAYbLu+ua9/SDh kZ4sZpEqFODA2PqtVanv2yRhkPUs8gc= -----END CERTIFICATE-----Generated at Sat Aug 9 22:41:34 2025 by rpki-client