$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/02d146e7-6325-3de2-9714-da4c42be27c1.roa File: 02d146e7-6325-3de2-9714-da4c42be27c1.roa (raw, json) Hash identifier: XZmk8Zlik5RB3BPzafH6qj0+ZBK4TyMWGI4XSySN0hM= Subject key identifier: DE:E4:0E:4E:3A:49:41:CC:5F:FC:7F:7E:49:49:80:06:94:3B:B5:A4 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584AB650D6DFE17BB916B2A260C0 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/02d146e7-6325-3de2-9714-da4c42be27c1.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 13984 IP address blocks: 209.151.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:d6:df:e1:7b:b9:16:b2:a2:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=49dcf5cf-c5c8-4c1b-99ba-77cb09d3a368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ef:bf:7a:e6:e7:7d:36:73:c7:48:e4:28:69: 39:2c:1f:d4:e6:4e:e5:8d:49:7b:81:2e:ff:4b:cf: d8:91:a7:36:3e:83:aa:fe:db:52:c0:9c:c7:11:8b: 78:66:c4:93:20:59:59:d4:19:08:c0:35:2c:c7:38: 3c:e9:db:78:00:59:43:02:49:da:c7:f9:61:b1:03: 2e:a4:20:1c:f7:59:17:c7:f6:ae:4e:85:91:ac:73: 14:e0:12:5c:57:00:6a:a3:6e:c6:5e:7b:35:a0:f5: 8c:14:3e:98:e8:e7:ef:69:8a:2d:dd:0b:7c:64:1d: fc:b3:f4:d8:92:29:bd:6c:b6:f7:cb:00:d8:e1:3d: 4c:9e:4c:d5:25:a0:42:d6:03:9c:6a:d9:74:1c:22: 13:1b:4a:b8:e4:4d:f1:85:30:4f:eb:ff:78:95:7d: 22:4e:70:9a:1e:ed:83:39:c1:c5:40:14:f3:dc:bd: 21:6c:8a:74:06:a8:ad:d4:08:83:11:86:b8:3e:2e: 3f:52:99:a6:65:2c:bd:8e:74:17:b4:ad:60:d5:23: 05:13:47:39:bd:ca:20:03:dc:be:b7:1d:d5:a3:34: 12:9e:2c:74:c4:c4:80:64:c8:45:df:fd:58:29:8f: b2:74:ac:40:54:2c:35:05:fd:88:de:aa:81:b0:84: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E4:0E:4E:3A:49:41:CC:5F:FC:7F:7E:49:49:80:06:94:3B:B5:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/02d146e7-6325-3de2-9714-da4c42be27c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 209.151.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:37:c9:75:3c:44:d3:0d:19:eb:11:56:dc:72:a3:9e:d6:bb: 20:e6:dc:e4:db:a5:6d:c1:13:89:b8:25:d3:1c:81:f8:79:8e: be:bf:d8:cd:17:6d:bb:6c:35:37:8e:b6:38:f3:6e:0c:b4:45: d6:c2:04:37:4b:eb:af:42:ad:70:50:ad:5c:ee:24:14:6f:71: f0:96:09:c6:91:19:14:21:67:61:78:75:7f:44:34:13:53:05: 57:0f:71:06:84:d6:52:61:a8:1b:cd:28:f2:43:a7:57:ab:7b: ed:e5:a0:40:89:1d:5a:cf:71:95:f5:6d:0d:ae:46:a1:43:76: c1:ea:24:e5:a4:d2:5e:1a:26:12:85:e6:74:08:49:86:be:7c: 94:7b:6e:05:3c:5b:98:44:86:45:b0:14:8a:dd:43:fc:15:f6: ee:18:bc:38:b8:19:67:fa:26:a4:5e:f5:df:48:4f:de:ad:bd: f5:83:6f:99:34:0e:ca:9d:5c:0e:ac:a5:24:c6:49:12:ec:27: 87:4a:5d:27:13:11:60:2d:6d:48:a7:ec:6c:30:39:13:24:e8: 87:84:da:03:38:04:ce:c0:12:70:c3:55:54:0b:2f:33:c7:cc: cd:dc:2c:6d:f6:d8:15:d8:51:7f:18:27:50:b4:18:a4:92:cc: e2:ff:6a:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UNbf4Xu5FrKiYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk NDlkY2Y1Y2YtYzVjOC00YzFiLTk5YmEtNzdjYjA5ZDNhMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO+/eubnfTZzx0jkKGk5LB/U5k7ljUl7gS7/ S8/Ykac2PoOq/ttSwJzHEYt4ZsSTIFlZ1BkIwDUsxzg86dt4AFlDAknax/lhsQMu pCAc91kXx/auToWRrHMU4BJcVwBqo27GXns1oPWMFD6Y6OfvaYot3Qt8ZB38s/TY kim9bLb3ywDY4T1MnkzVJaBC1gOcatl0HCITG0q45E3xhTBP6/94lX0iTnCaHu2D OcHFQBTz3L0hbIp0Bqit1AiDEYa4Pi4/UpmmZSy9jnQXtK1g1SMFE0c5vcogA9y+ tx3VozQSnix0xMSAZMhF3/1YKY+ydKxAVCw1Bf2I3qqBsIRNcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7kDk46SUHMX/x/fklJgAaUO7WkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvMDJkMTQ2ZTctNjMyNS0z ZGUyLTk3MTQtZGE0YzQyYmUyN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZfZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg3yXU8RNMNGesRVtxyo57WuyDm3OTbpW3BE4m4JdMcgfh5jr6/2M0X bbtsNTeOtjjzbgy0RdbCBDdL669CrXBQrVzuJBRvcfCWCcaRGRQhZ2F4dX9ENBNT BVcPcQaE1lJhqBvNKPJDp1ere+3loECJHVrPcZX1bQ2uRqFDdsHqJOWk0l4aJhKF 5nQISYa+fJR7bgU8W5hEhkWwFIrdQ/wV9u4YvDi4GWf6JqRe9d9IT96tvfWDb5k0 DsqdXA6spSTGSRLsJ4dKXScTEWAtbUin7GwwORMk6IeE2gM4BM7AEnDDVVQLLzPH zM3cLG322BXYUX8YJ1C0GKSSzOL/agM= -----END CERTIFICATE-----Generated at Wed Aug 6 12:43:37 2025 by rpki-client