$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/193a1e6c-bcd1-3017-8bd4-9101cdc1d7e9.roa File: 193a1e6c-bcd1-3017-8bd4-9101cdc1d7e9.roa (raw, json) Hash identifier: c9oErMA6atyXRw4znLotXvZKMCw6oZ6ySJJnCEs+K6w= Subject key identifier: E4:97:75:7C:94:74:2E:7F:12:D0:5C:48:12:C0:6A:2D:23:E2:16:CC Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584AA85B9628E8E8F73268954920 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/193a1e6c-bcd1-3017-8bd4-9101cdc1d7e9.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 398465 IP address blocks: 209.250.8.0/23 maxlen: 23 209.250.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:96:28:e8:e8:f7:32:68:95:49:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=6a064493-4aae-4b56-8a00-03478678bd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5a:bf:75:e8:b0:dc:ba:13:d4:06:51:e2:1d: e4:81:f9:0e:09:6b:c5:6c:85:ea:ee:6f:cd:89:5b: 2b:37:f1:2c:b4:e0:d6:fa:2c:7a:8e:de:b1:8f:14: 0e:34:b0:e9:0b:be:bc:37:ab:85:1a:10:38:26:5b: 21:ea:5e:7c:92:6a:1a:6c:f5:b7:43:57:77:35:75: 6f:f6:02:42:a4:6b:51:90:0a:ae:86:be:e0:47:63: 4d:ca:39:f9:f3:d5:50:92:34:d3:45:c8:66:cf:11: fa:dc:39:76:ed:89:fe:e0:90:b1:8b:77:7c:c0:6e: 30:5f:54:29:e1:7c:4f:2f:54:30:c3:2f:9f:68:af: de:69:a6:a5:a6:da:f1:d6:f6:a8:6a:9d:0e:10:34: 00:6d:d6:49:ed:16:48:7c:fd:98:a6:5a:64:40:c4: 49:90:d9:3a:6d:41:02:38:b9:d4:b1:84:ed:27:ba: 9e:8b:d9:4a:61:9e:dd:f2:d0:22:57:ed:ce:a3:46: f6:33:81:a8:ae:6c:9e:bb:72:84:c1:5a:d7:ce:ac: a1:93:e9:df:ef:bf:d5:e0:68:15:ae:db:8a:75:f2: 1d:d1:38:d3:65:01:fd:4f:e4:8b:6d:12:03:6d:1a: ed:dd:10:01:78:7a:39:f9:d8:69:b7:23:29:e0:69: ec:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:97:75:7C:94:74:2E:7F:12:D0:5C:48:12:C0:6A:2D:23:E2:16:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/193a1e6c-bcd1-3017-8bd4-9101cdc1d7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.8.0/23 209.250.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:10:bf:76:bd:b8:8e:83:06:cb:35:e2:2b:03:60:31:a8:7a: 49:0a:8c:68:6d:27:1c:f3:81:b1:30:93:52:0e:68:12:72:4b: 87:ac:16:18:ac:00:99:9c:a0:93:47:67:85:b0:b5:f9:d6:5f: 98:45:25:11:8e:a4:85:61:1b:7e:7d:87:d8:af:25:3e:f3:a7: e4:2d:d0:08:e1:e7:e2:dc:06:a0:e3:70:ce:87:bc:23:83:8b: 96:d5:dd:08:ef:3d:bc:0e:e4:55:01:67:ca:18:11:22:24:a5: 23:be:7b:24:81:ba:6c:84:a1:b1:10:18:fc:8a:0e:23:fb:63: 21:b6:f0:a4:b1:5e:c6:24:41:1d:a4:c0:be:9c:7e:31:71:ce: 64:ab:da:fd:c9:19:a3:18:32:b6:3b:05:fe:ca:d1:c1:b8:53: 9a:cb:ba:5c:57:3e:c9:e3:15:98:d5:0b:50:3e:55:80:ae:9d: fc:a6:67:5c:43:8f:26:70:c7:77:71:53:d1:82:10:2d:04:4c: e2:16:d2:3c:0b:4c:e6:66:0b:ef:64:95:84:1a:f7:de:e9:49: 7b:3d:55:2d:0a:ad:6b:8a:7d:45:70:0a:f0:5c:7c:f0:70:81: 00:20:2a:a9:a9:5e:80:5f:1b:90:a5:a3:0d:68:d8:db:26:9b: 99:75:98:bf -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqoW5Yo6Oj3MmiVSSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk NmEwNjQ0OTMtNGFhZS00YjU2LThhMDAtMDM0Nzg2NzhiZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFq/deiw3LoT1AZR4h3kgfkOCWvFbIXq7m/N iVsrN/EstODW+ix6jt6xjxQONLDpC768N6uFGhA4Jlsh6l58kmoabPW3Q1d3NXVv 9gJCpGtRkAquhr7gR2NNyjn589VQkjTTRchmzxH63Dl27Yn+4JCxi3d8wG4wX1Qp 4XxPL1Qwwy+faK/eaaalptrx1vaoap0OEDQAbdZJ7RZIfP2YplpkQMRJkNk6bUEC OLnUsYTtJ7qei9lKYZ7d8tAiV+3Oo0b2M4Gormyeu3KEwVrXzqyhk+nf77/V4GgV rtuKdfId0TjTZQH9T+SLbRIDbRrt3RABeHo5+dhptyMp4GnsvwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOSXdXyUdC5/EtBcSBLAai0j4hbMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvMTkzYTFlNmMtYmNkMS0z MDE3LThiZDQtOTEwMWNkYzFkN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0foIAwQB 0foMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAAQv3a9uI6DBss14isDYDGoekkKjGhtJxzzgbEwk1IOaBJy S4esFhisAJmcoJNHZ4WwtfnWX5hFJRGOpIVhG359h9ivJT7zp+Qt0Ajh5+LcBqDj cM6HvCODi5bV3QjvPbwO5FUBZ8oYESIkpSO+eySBumyEobEQGPyKDiP7YyG28KSx XsYkQR2kwL6cfjFxzmSr2v3JGaMYMrY7Bf7K0cG4U5rLulxXPsnjFZjVC1A+VYCu nfymZ1xDjyZwx3dxU9GCEC0ETOIW0jwLTOZmC+9klYQa997pSXs9VS0KrWuKfUVw CvBcfPBwgQAgKqmpXoBfG5Clow1o2Nsmm5l1mL8= -----END CERTIFICATE-----Generated at Wed Aug 6 11:22:08 2025 by rpki-client