$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa File: d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa (raw, json) Hash identifier: hWKWoUf3JCpz9Zqgm5FvkmkaJBHYy4WR/gna7kJYpiE= Subject key identifier: 87:11:F6:80:FA:91:C0:8F:E2:A6:CF:15:45:AA:2D:6B:7E:83:91:0D Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283 Certificate serial: 010D0C9F4328584ABBE62E9929C39430010B60E0 Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 395301 IP address blocks: 209.251.28.0/24 maxlen: 24 209.251.29.0/24 maxlen: 24 209.251.30.0/24 maxlen: 24 209.251.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:2e:99:29:c3:94:30:01:0b:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=3c8316a0-72fe-4339-b89f-88ee0fe1f142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:75:b3:a1:e6:b4:07:3c:71:25:ab:da:95:21: e2:bf:53:59:b4:dd:8b:56:c0:53:c0:94:3a:e8:4b: 71:42:af:71:33:9a:14:ca:e1:79:f9:56:2d:99:e5: 47:ff:b2:10:63:00:01:55:27:be:32:7b:72:04:27: 34:f9:c4:8a:f5:8d:db:de:9b:62:0c:bd:54:74:80: b6:d2:49:22:4d:1d:3c:70:51:55:13:8d:ab:1e:f9: 4d:4e:e1:ab:c8:a1:05:40:b2:fc:0f:97:8c:76:d5: 6b:aa:f7:b2:4e:e0:62:b2:98:15:9b:82:ad:79:ef: 33:1e:ad:95:59:f5:ac:3a:c5:a0:46:08:5f:3a:25: b5:9a:34:f7:8a:6e:5d:eb:7f:27:bb:90:85:19:92: 14:a6:1b:d3:ab:9c:9c:01:eb:64:5e:a5:48:46:bc: 5f:1c:ae:59:16:80:d2:ca:01:a5:5c:b6:1e:7a:2a: d3:ac:3b:6a:69:90:a9:0e:cc:5c:b6:6c:7c:1a:24: 33:a2:47:29:0d:7a:3f:46:88:f8:a8:bc:26:cc:1b: f6:19:99:08:74:9c:23:8a:ec:bc:f6:30:e6:73:67: 85:80:01:f2:9e:be:ba:00:c7:e6:fb:d1:1f:5a:2f: 24:02:10:4f:96:f0:09:1e:a6:4c:75:c0:f2:47:86: 17:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:11:F6:80:FA:91:C0:8F:E2:A6:CF:15:45:AA:2D:6B:7E:83:91:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl X509v3 Authority Key Identifier: keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer sbgp-ipAddrBlock: critical IPv4: 209.251.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:cc:18:99:8b:f8:b4:34:fa:3f:60:04:4e:d2:63:75:29:96: 16:fb:ef:fe:6d:f5:10:c8:cb:0f:6b:0a:79:5d:61:8f:b6:1c: 9a:b4:55:ee:a2:5a:b2:37:d1:d6:0c:f6:f6:9d:e7:46:28:90: 7b:43:d2:e6:fd:85:d1:3b:96:17:a2:a3:8f:b6:7c:df:a4:80: b5:ab:85:0f:d2:ca:a1:bc:66:0e:28:84:1d:8e:ae:5f:51:0b: 8c:b7:e4:aa:be:a9:96:40:20:36:b1:14:1e:d5:2f:c6:35:88: 0e:bb:71:38:9c:e9:d6:71:2a:78:5a:ae:12:37:fd:2e:27:b7: 94:b6:de:6b:e3:97:1f:27:8b:6e:00:74:10:e1:73:e8:ff:a5: f3:c2:d0:07:2f:bb:d7:4c:ac:68:03:bc:88:d0:54:70:23:bb: 89:72:8d:14:4e:93:9c:61:25:ce:8b:6c:7b:fb:ca:4c:ae:ea: fd:ce:28:3b:a9:c3:68:f3:af:08:18:cb:65:76:01:91:c2:ec: 42:0d:b8:5c:83:56:4e:d8:94:3b:77:af:8b:70:db:f4:0b:63: d0:0a:62:e1:fe:66:09:7b:84:0b:25:fd:d4:77:92:c8:41:38: 6c:12:74:ac:19:94:64:08:b0:5e:bd:5c:8d:f0:94:49:f5:1a: be:74:0f:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq75i6ZKcOUMAELYOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw MjgzMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk M2M4MzE2YTAtNzJmZS00MzM5LWI4OWYtODhlZTBmZTFmMTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXWzoea0BzxxJavalSHiv1NZtN2LVsBTwJQ6 6EtxQq9xM5oUyuF5+VYtmeVH/7IQYwABVSe+MntyBCc0+cSK9Y3b3ptiDL1UdIC2 0kkiTR08cFFVE42rHvlNTuGryKEFQLL8D5eMdtVrqveyTuBispgVm4Ktee8zHq2V WfWsOsWgRghfOiW1mjT3im5d638nu5CFGZIUphvTq5ycAetkXqVIRrxfHK5ZFoDS ygGlXLYeeirTrDtqaZCpDsxctmx8GiQzokcpDXo/Roj4qLwmzBv2GZkIdJwjiuy8 9jDmc2eFgAHynr66AMfm+9EfWi8kAhBPlvAJHqZMdcDyR4YXgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcR9oD6kcCP4qbPFUWqLWt+g5ENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1 OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvZDFjOTdhMWEtNGU1NS0z NjRhLWI0MDctOWY2ZTFhOWJjOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHMGJmL+LQ0+j9gBE7SY3Uplhb77/5t9RDIyw9rCnldYY+2HJq0Ve6i WrI30dYM9vad50YokHtD0ub9hdE7lheio4+2fN+kgLWrhQ/SyqG8Zg4ohB2Orl9R C4y35Kq+qZZAIDaxFB7VL8Y1iA67cTic6dZxKnharhI3/S4nt5S23mvjlx8ni24A dBDhc+j/pfPC0Acvu9dMrGgDvIjQVHAju4lyjRROk5xhJc6LbHv7ykyu6v3OKDup w2jzrwgYy2V2AZHC7EINuFyDVk7YlDt3r4tw2/QLY9AKYuH+Zgl7hAsl/dR3kshB OGwSdKwZlGQIsF69XI3wlEn1Gr50D+E= -----END CERTIFICATE-----Generated at Sat Aug 9 14:19:37 2025 by rpki-client