$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa File: 00d48a25-0292-390b-8771-b64ad9beccdb.roa (raw, json) Hash identifier: F9XwQjZ0Hj6EbzFKXKYnRw9dv0eOZVU6qSZLOTJhvK0= Subject key identifier: 78:1E:9A:AA:22:03:38:CC:77:79:74:70:ED:47:92:D8:B0:E1:BA:E7 Certificate issuer: /CN=a91fff12-f74d-4a80-9a5d-f225534bc527 Certificate serial: 010D0C9F4328584A9636940E2B09DE1B1A572D54 Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 46595 IP address blocks: 209.169.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:94:0e:2b:09:de:1b:1a:57:2d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=baba8320-2b40-41d7-b284-8ab6a4a2e858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:34:1e:9e:2f:ec:f6:3b:6b:17:6b:de:6c:5e: 4d:29:f5:92:72:e5:c3:74:1f:1b:a6:0c:4b:b8:bb: a4:dd:9d:be:2f:03:8d:6b:42:74:0d:3a:18:ce:c6: fc:25:2a:90:63:84:74:e3:be:b7:ce:b3:56:18:29: 1f:01:35:1a:65:e7:ee:57:eb:25:a9:d3:d0:a3:15: 01:36:99:c6:ba:cd:22:1c:9c:68:ee:69:56:7e:b0: fa:5a:8d:66:bf:fc:2b:e0:ba:3d:0c:55:eb:80:70: 5d:49:e4:5f:dd:0e:53:c6:21:0e:da:49:05:c3:b6: 2a:a1:f7:4c:3c:5a:24:ae:4d:60:3b:df:73:97:3c: 9c:41:94:84:c3:07:e2:c6:c2:5d:ba:89:3b:c2:45: 4b:e9:eb:41:5f:86:6d:e1:a6:ea:bf:5d:cd:11:7b: 87:a1:5b:8a:d4:e8:04:fc:a6:f4:96:6b:bb:1b:d4: 82:6f:d5:61:73:5e:bc:94:75:e9:bd:fd:b1:12:8e: 88:89:ea:7a:78:d8:ff:b4:dd:a9:d1:a0:60:cc:53: 2a:79:47:e8:a6:6e:47:4d:96:f1:0e:47:30:b1:04: d1:54:ea:4c:52:2b:7c:9e:18:1c:5c:94:dd:66:17: 0f:18:02:4c:e2:09:38:63:8d:17:e9:3e:cb:d2:94: 9b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1E:9A:AA:22:03:38:CC:77:79:74:70:ED:47:92:D8:B0:E1:BA:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl X509v3 Authority Key Identifier: keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer sbgp-ipAddrBlock: critical IPv4: 209.169.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a6:a1:a3:ed:0b:7e:96:8a:50:e4:6d:a8:ec:ba:93:cc:3b: 43:50:e5:96:62:ab:97:60:58:8d:70:05:cf:95:62:0f:c2:0b: b6:cc:4c:ef:c7:d3:b0:42:cb:69:71:b9:fd:62:1c:2e:c5:70: 81:19:51:1c:f9:5f:dc:f4:54:11:67:b0:c0:0e:2a:32:60:c2: ad:37:59:e1:a9:e3:b3:25:b5:6b:3d:ab:08:10:7b:8b:a6:84: ae:6f:3b:fe:55:4b:21:7b:f9:2b:50:bc:d2:32:eb:20:17:3f: 3b:c1:6d:47:99:bd:b9:b3:20:48:60:9a:41:e2:45:93:34:ca: 0c:b8:1b:c0:ca:2b:9f:be:e5:0e:e2:3e:8e:88:60:09:30:8c: 7c:28:2b:60:4f:fe:3b:14:4a:47:f1:df:c3:6f:c0:cd:48:d4: 9c:13:78:76:37:0c:6e:05:cd:6d:ff:3b:59:55:8a:99:92:7b: bd:68:c9:cf:0f:da:c2:49:77:05:45:f5:b3:ff:83:d4:27:5e: 42:cf:1a:cc:a9:47:17:ee:a0:cb:e1:c0:0d:83:a3:28:69:bd: 8f:7e:58:6b:81:61:b3:20:db:de:1a:8f:ce:81:2f:07:72:11: 66:02:07:15:a8:15:bc:4e:7f:dc:3c:d8:63:43:62:34:1d:44: a7:c4:a0:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpQOKwneGxpXLVQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkxZmZmMTItZjc0ZC00YTgwLTlhNWQtZjIyNTUzNGJj NTI3MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YmFiYTgzMjAtMmI0MC00MWQ3LWIyODQtOGFiNmE0YTJlODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTQeni/s9jtrF2vebF5NKfWScuXDdB8bpgxL uLuk3Z2+LwONa0J0DToYzsb8JSqQY4R04763zrNWGCkfATUaZefuV+slqdPQoxUB NpnGus0iHJxo7mlWfrD6Wo1mv/wr4Lo9DFXrgHBdSeRf3Q5TxiEO2kkFw7YqofdM PFokrk1gO99zlzycQZSEwwfixsJduok7wkVL6etBX4Zt4abqv13NEXuHoVuK1OgE /Kb0lmu7G9SCb9Vhc168lHXpvf2xEo6Iiep6eNj/tN2p0aBgzFMqeUfopm5HTZbx DkcwsQTRVOpMUit8nhgcXJTdZhcPGAJM4gk4Y40X6T7L0pSblwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgemqoiAzjMd3l0cO1Hktiw4brnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hOTFm ZmYxMi1mNzRkLTRhODAtOWE1ZC1mMjI1NTM0YmM1MjcvMDBkNDhhMjUtMDI5Mi0z OTBiLTg3NzEtYjY0YWQ5YmVjY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTkxZmZmMTItZjc0ZC00YTgwLTlh NWQtZjIyNTUzNGJjNTI3L2E5MWZmZjEyLWY3NGQtNGE4MC05YTVkLWYyMjU1MzRi YzUyNy5jcmwwHwYDVR0jBBgwFoAUArhCAeKkLoXp5IhjfTqSng/BxOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hOTFmZmYxMi1mNzRkLTRhODAtOWE1ZC1mMjI1 NTM0YmM1MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0akAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGmoaPtC36WilDkbajsupPMO0NQ5ZZiq5dgWI1wBc+VYg/CC7bMTO/H 07BCy2lxuf1iHC7FcIEZURz5X9z0VBFnsMAOKjJgwq03WeGp47MltWs9qwgQe4um hK5vO/5VSyF7+StQvNIy6yAXPzvBbUeZvbmzIEhgmkHiRZM0ygy4G8DKK5++5Q7i Po6IYAkwjHwoK2BP/jsUSkfx38NvwM1I1JwTeHY3DG4FzW3/O1lVipmSe71oyc8P 2sJJdwVF9bP/g9QnXkLPGsypRxfuoMvhwA2DoyhpvY9+WGuBYbMg294aj86BLwdy EWYCBxWoFbxOf9w82GNDYjQdRKfEoHk= -----END CERTIFICATE-----Generated at Wed Aug 6 09:38:43 2025 by rpki-client