$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa File: caef0813-709f-3639-aad7-06f54ab67b07.roa (raw, json) Hash identifier: D8jpTBPueIYRpIzUuKKW5EBl6iNP4cBYdP5htPGmHn0= Subject key identifier: 8C:D7:3C:88:1C:C9:47:84:8B:90:5E:5E:45:67:75:15:04:2E:76:11 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A94D0D700E910A5CE312BE080 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 55246 IP address blocks: 209.237.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d7:00:e9:10:a5:ce:31:2b:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=ef1a8f43-fca6-4f66-8412-5fa6b5f30449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:64:20:94:13:aa:a8:6f:46:b8:df:d1:05: 29:5d:13:fa:3b:00:30:0a:67:78:0e:36:ac:ac:fb: f3:f4:8c:74:75:2c:2a:3f:41:4e:94:84:6e:b4:68: ef:c9:7c:6f:d9:66:2d:9f:1e:37:8f:af:73:5a:73: 6d:24:c9:85:1e:45:a9:d4:44:50:b5:e2:6b:cf:b0: 33:75:69:5d:7f:fe:0b:8b:f2:9b:df:ec:3c:3f:7d: 86:dc:ba:45:cb:4c:ed:ac:85:51:ec:a3:bb:64:52: 22:d6:0f:f4:d8:e9:83:98:18:94:cf:ce:b5:aa:ec: b8:cc:c4:77:f6:3f:53:c9:f3:28:08:58:ae:a5:c7: 68:c3:7b:7d:d6:ea:c0:46:3e:6b:ba:ff:f6:e9:d3: 55:9a:99:d2:75:50:e3:a6:bf:2c:ff:52:bb:0d:b1: fa:54:82:ff:68:0a:cf:4f:ca:25:aa:48:33:71:9d: 9d:d7:9b:c0:fd:89:f7:2a:f4:d7:70:3b:f2:de:aa: 76:cb:ed:65:63:bb:bf:69:cd:ba:5b:96:ba:0e:8a: 21:ea:76:60:13:43:a9:be:af:a8:09:e8:96:f0:46: bc:25:9d:52:d4:bf:4f:f4:9f:14:03:87:60:04:7f: 8f:d2:5c:a5:d8:d2:f6:fb:1e:4a:f4:e6:16:06:d7: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D7:3C:88:1C:C9:47:84:8B:90:5E:5E:45:67:75:15:04:2E:76:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c6:cc:b7:c3:63:9e:14:0e:68:de:93:11:e8:f8:78:14:24: 60:6e:96:b2:7a:1f:6c:2b:4b:ed:96:fc:19:78:22:57:1f:69: 9d:ff:74:30:57:f4:54:07:4b:06:15:2b:c1:22:86:ec:b3:6a: 5d:51:ba:88:4b:98:fa:a5:ac:9c:25:99:94:08:05:1b:80:8f: 12:98:53:91:ac:3a:38:ee:58:2a:20:60:7b:59:ca:4a:1e:04: ad:75:49:8f:0f:3c:e4:0f:7d:a3:d2:ae:2d:41:a9:ac:83:92: 55:b9:62:e3:c2:fb:08:1d:22:13:ac:fb:82:7f:fe:6f:51:77: d9:cf:ab:df:08:43:80:47:ba:18:b4:f9:29:7d:d6:51:2e:f9: 55:53:e3:10:1e:38:73:cc:7a:5b:e7:b1:f4:01:1c:2c:cf:2f: d3:60:69:9a:62:15:61:5c:49:65:c4:b0:53:e8:c0:8e:d4:1e: 3c:c8:fc:fc:2c:8e:1a:b5:39:58:88:5a:00:b6:af:0e:03:59: 43:31:56:a2:9a:a9:79:cd:bc:5b:66:43:3a:aa:e2:98:27:5c: bf:65:c6:6f:d2:8f:5e:87:a7:91:14:69:7e:18:c7:41:da:c4: 6f:87:07:c5:87:3e:bf:8d:d7:be:4d:d2:04:a0:7c:3b:01:81: c8:8f:78:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NcA6RClzjEr4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk ZWYxYThmNDMtZmNhNi00ZjY2LTg0MTItNWZhNmI1ZjMwNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvFkIJQTqqhvRrjf0QUpXRP6OwAwCmd4Djas rPvz9Ix0dSwqP0FOlIRutGjvyXxv2WYtnx43j69zWnNtJMmFHkWp1ERQteJrz7Az dWldf/4Li/Kb3+w8P32G3LpFy0ztrIVR7KO7ZFIi1g/02OmDmBiUz861quy4zMR3 9j9TyfMoCFiupcdow3t91urARj5ruv/26dNVmpnSdVDjpr8s/1K7DbH6VIL/aArP T8olqkgzcZ2d15vA/Yn3KvTXcDvy3qp2y+1lY7u/ac26W5a6Dooh6nZgE0Opvq+o CeiW8Ea8JZ1S1L9P9J8UA4dgBH+P0lyl2NL2+x5K9OYWBtfLUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzXPIgcyUeEi5BeXkVndRUELnYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvY2FlZjA4MTMtNzA5Zi0z NjM5LWFhZDctMDZmNTRhYjY3YjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzGzLfDY54UDmjekxHo+HgUJGBulrJ6H2wrS+2W/Bl4IlcfaZ3/dDBX 9FQHSwYVK8Eihuyzal1RuohLmPqlrJwlmZQIBRuAjxKYU5GsOjjuWCogYHtZykoe BK11SY8PPOQPfaPSri1BqayDklW5YuPC+wgdIhOs+4J//m9Rd9nPq98IQ4BHuhi0 +Sl91lEu+VVT4xAeOHPMelvnsfQBHCzPL9NgaZpiFWFcSWXEsFPowI7UHjzI/Pws jhq1OViIWgC2rw4DWUMxVqKaqXnNvFtmQzqq4pgnXL9lxm/Sj16Hp5EUaX4Yx0Ha xG+HB8WHPr+N175N0gSgfDsBgciPeCU= -----END CERTIFICATE-----Generated at Mon Aug 4 21:39:57 2025 by rpki-client