$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa File: 8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa (raw, json) Hash identifier: rDb+eYw2qP56YQdxquPsRdKxSz8DfFJJs99RKRnDrNY= Subject key identifier: 92:B1:59:D5:3E:F4:97:CD:FA:DD:00:60:99:29:3A:C7:60:93:EA:F3 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A9900C0FBAE3E473DA134A700 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 397422 IP address blocks: 209.237.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c0:fb:ae:3e:47:3d:a1:34:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=29beb97d-9b7d-442b-ad9a-067ffccd3f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:85:1c:68:01:31:94:6b:e1:14:7c:da:5c:57: a8:1a:6b:9b:fe:fb:30:ed:86:3a:d1:58:46:29:ef: 54:32:b8:a7:5c:db:11:9c:bf:3b:91:ad:00:8b:80: 27:9e:6a:aa:26:f4:95:9d:4b:9e:8c:5c:af:6e:65: 16:3f:34:cb:1d:52:43:4d:18:43:50:e3:12:f1:b0: 01:d8:0b:18:5d:8e:a4:fb:d2:5f:a3:77:7b:9b:c1: 01:cb:4d:76:21:a1:ed:1f:c4:65:44:d4:18:a3:57: dd:7d:1f:1d:e3:e8:99:8d:d8:95:b6:69:51:4c:4c: cb:0f:2f:13:2a:38:3d:88:ea:7b:ea:3a:47:16:c8: e3:73:92:a9:7c:49:02:74:10:cb:60:f8:8e:ea:4a: d6:b5:13:27:99:5e:e8:90:5b:bb:1b:5e:e4:4a:80: 65:b1:08:00:9c:a5:e6:d4:59:34:2c:a8:f5:3b:5b: e1:4b:b9:5c:b4:b0:59:1d:3e:d1:33:ce:76:0b:a3: e0:d0:5b:4a:ac:cd:b1:7c:74:35:af:d9:90:3b:e2: ad:96:15:04:51:50:b0:4a:4e:aa:8a:f4:a1:1d:c3: e7:57:a7:d8:e5:8c:19:6d:b3:d7:7b:8d:fb:ef:32: 1a:2c:78:3b:e9:01:ae:66:72:80:23:dc:4c:f0:42: 0d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B1:59:D5:3E:F4:97:CD:FA:DD:00:60:99:29:3A:C7:60:93:EA:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:03:0c:57:eb:f3:9e:72:15:3a:5a:bc:1a:1f:ce:10:2c:d4: f9:6f:e1:27:99:f1:92:ff:18:15:ae:93:08:1f:fb:16:01:f8: 18:3c:69:02:df:dc:27:92:2d:44:85:ff:50:13:4d:67:45:8b: e5:cc:3d:6d:9c:bc:3d:1f:46:e1:a2:34:32:82:44:da:b7:7b: 9e:cb:61:d7:bb:a9:af:ff:ee:54:a3:1b:41:23:76:ad:ba:8d: 16:b2:b4:c9:0c:8f:a8:70:16:ef:a8:5e:a8:b1:ad:d8:72:9f: af:f5:bc:78:c7:8f:de:dd:1f:55:2a:56:03:42:5d:0c:3a:8d: 7e:81:6e:1d:f5:ea:07:db:ec:18:77:02:0f:c9:62:43:a2:2c: ee:48:8e:1c:01:1b:37:d6:60:51:c5:fd:d7:7a:5b:f7:c5:3b: 90:73:86:21:40:7a:b8:42:75:9b:a8:09:3f:6a:75:d4:56:2e: 20:d6:b3:e2:18:56:3d:9b:f3:0a:d5:32:c2:c8:6e:df:00:21: 7a:52:1c:c2:e8:c3:0c:45:c3:5e:3b:7a:55:7f:89:77:9b:cf: 27:38:c1:03:7b:a4:94:38:e1:49:d9:9a:34:47:f3:6b:b6:73: c9:2e:0c:ca:b5:e7:a5:a3:fd:d9:e7:f6:6c:19:1d:c4:d7:29: 3e:66:82:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMD7rj5HPaE0pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MjliZWI5N2QtOWI3ZC00NDJiLWFkOWEtMDY3ZmZjY2QzZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4UcaAExlGvhFHzaXFeoGmub/vsw7YY60VhG Ke9UMrinXNsRnL87ka0Ai4AnnmqqJvSVnUuejFyvbmUWPzTLHVJDTRhDUOMS8bAB 2AsYXY6k+9Jfo3d7m8EBy012IaHtH8RlRNQYo1fdfR8d4+iZjdiVtmlRTEzLDy8T Kjg9iOp76jpHFsjjc5KpfEkCdBDLYPiO6krWtRMnmV7okFu7G17kSoBlsQgAnKXm 1Fk0LKj1O1vhS7lctLBZHT7RM852C6Pg0FtKrM2xfHQ1r9mQO+KtlhUEUVCwSk6q ivShHcPnV6fY5YwZbbPXe4377zIaLHg76QGuZnKAI9xM8EINIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKxWdU+9JfN+t0AYJkpOsdgk+rzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvOGMzMzk1YzItOWE1Zi0z Zjg4LWEyZmItMzcwMmM4Zjc1YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsDDFfr855yFTpavBofzhAs1Plv4SeZ8ZL/GBWukwgf+xYB+Bg8aQLf 3CeSLUSF/1ATTWdFi+XMPW2cvD0fRuGiNDKCRNq3e57LYde7qa//7lSjG0Ejdq26 jRaytMkMj6hwFu+oXqixrdhyn6/1vHjHj97dH1UqVgNCXQw6jX6Bbh316gfb7Bh3 Ag/JYkOiLO5IjhwBGzfWYFHF/dd6W/fFO5BzhiFAerhCdZuoCT9qddRWLiDWs+IY Vj2b8wrVMsLIbt8AIXpSHMLowwxFw147elV/iXebzyc4wQN7pJQ44UnZmjRH82u2 c8kuDMq156Wj/dnn9mwZHcTXKT5mgvI= -----END CERTIFICATE-----Generated at Mon Aug 4 21:42:48 2025 by rpki-client