$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa File: e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa (raw, json) Hash identifier: 29qM8WgsBl5mGReaWt98zdRjKpzLaTJ8hnvEg/VF2bo= Subject key identifier: 5D:7C:45:F6:0B:68:02:74:1D:BF:CD:C0:97:F6:60:B9:8F:A8:11:AC Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584AB650DD73A7A73660F04A8BC0 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 13984 IP address blocks: 209.151.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:dd:73:a7:a7:36:60:f0:4a:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=135d99e0-37fe-41b0-9314-952081099936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:da:77:a4:23:44:33:ea:f0:0a:b4:d0:56:c8: eb:01:21:2b:e7:e3:6f:0a:40:94:30:f3:71:c7:d0: 4d:67:2e:6c:46:db:4e:90:ba:08:5c:fb:cd:57:5c: 22:ee:cc:90:b7:a3:65:88:6f:16:48:d4:b1:bb:c8: f3:14:d9:e5:7c:37:56:62:f7:66:4d:b2:55:d3:f3: 21:6e:c8:ac:79:c3:f5:e1:cb:e1:f1:5b:67:9b:0b: ec:b0:a6:df:cc:c4:01:c4:74:5f:4d:1f:f3:27:2f: b5:cd:06:8c:e5:f8:31:65:9c:e4:79:c9:98:a5:e7: 9f:fc:30:6a:1d:7c:5a:68:ce:fd:1a:eb:54:86:ef: a8:4f:bd:17:d6:a4:3d:2c:ba:67:8c:0e:68:77:97: d3:c8:93:98:76:1b:c1:3e:ea:2e:50:21:26:87:2d: 00:5f:f8:f6:8a:bd:42:40:84:7f:79:11:39:ad:0c: 33:0d:03:ea:3a:b1:d5:cc:71:84:09:74:98:0d:f8: ad:8e:e8:96:45:0a:7b:0b:a9:c1:2b:18:35:72:2f: c0:45:d3:b7:ff:11:6b:6e:e0:01:83:92:d4:38:fd: 7d:00:0c:5e:02:2b:1c:9f:29:2e:49:d7:f6:b7:3b: 15:29:2a:bd:fe:52:11:d6:a1:14:ac:96:33:fa:61: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7C:45:F6:0B:68:02:74:1D:BF:CD:C0:97:F6:60:B9:8F:A8:11:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 209.151.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d2:a4:64:1d:08:3d:5d:5b:02:f4:04:a2:cb:8a:82:36:c3: 85:3e:4d:53:bd:c0:5a:ae:5f:16:57:b4:fd:43:68:dd:25:9f: ed:6e:3a:73:98:ee:c1:a3:b7:5b:ed:3c:12:0a:64:0e:93:cc: f0:33:84:c1:c1:a1:1a:cb:2e:54:1e:ef:90:c1:cc:59:bf:49: aa:ed:e7:f9:84:a9:01:2f:e1:3d:99:0d:49:cf:a8:e6:d8:9b: 11:53:bf:8b:9f:25:46:6d:f2:1c:28:a8:64:fe:b8:d3:cd:6c: a0:59:f7:10:b5:23:3a:79:1e:e6:75:56:b4:f9:ad:f6:66:93: e4:39:ea:6b:a2:36:92:15:64:a2:8e:b7:9d:2a:34:8d:69:57: 00:5b:93:48:33:be:2f:cf:f2:2b:bf:c0:bb:fc:3b:e8:0f:8b: d4:86:dd:10:64:dd:85:dc:ee:4a:53:1c:ae:10:81:ac:5d:f3: c8:63:8f:a8:d1:05:f5:ce:be:93:b1:0b:35:06:86:28:06:9f: 71:36:d9:fe:c2:9f:12:c7:9a:5f:f4:c7:96:e8:cb:4c:bc:51: 50:3b:f3:3c:c8:10:fa:23:1a:e1:0b:c1:d1:c5:cb:b0:ec:6d: ea:a2:cd:31:4a:46:1c:31:f9:8d:6f:d5:8e:fe:4b:2d:17:a5: 05:53:72:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UN1zp6c2YPBKi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MTM1ZDk5ZTAtMzdmZS00MWIwLTkzMTQtOTUyMDgxMDk5OTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtp3pCNEM+rwCrTQVsjrASEr5+NvCkCUMPNx x9BNZy5sRttOkLoIXPvNV1wi7syQt6NliG8WSNSxu8jzFNnlfDdWYvdmTbJV0/Mh bsisecP14cvh8VtnmwvssKbfzMQBxHRfTR/zJy+1zQaM5fgxZZzkecmYpeef/DBq HXxaaM79GutUhu+oT70X1qQ9LLpnjA5od5fTyJOYdhvBPuouUCEmhy0AX/j2ir1C QIR/eRE5rQwzDQPqOrHVzHGECXSYDfitjuiWRQp7C6nBKxg1ci/ARdO3/xFrbuAB g5LUOP19AAxeAiscnykuSdf2tzsVKSq9/lIR1qEUrJYz+mE2gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF18RfYLaAJ0Hb/NwJf2YLmPqBGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvZTQ3ZjJmZTQtMWU1Zi0z MDkwLWI5NDUtZTMzNDJhYTEyN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ZfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXSpGQdCD1dWwL0BKLLioI2w4U+TVO9wFquXxZXtP1DaN0ln+1uOnOY 7sGjt1vtPBIKZA6TzPAzhMHBoRrLLlQe75DBzFm/Sart5/mEqQEv4T2ZDUnPqObY mxFTv4ufJUZt8hwoqGT+uNPNbKBZ9xC1Izp5HuZ1VrT5rfZmk+Q56muiNpIVZKKO t50qNI1pVwBbk0gzvi/P8iu/wLv8O+gPi9SG3RBk3YXc7kpTHK4Qgaxd88hjj6jR BfXOvpOxCzUGhigGn3E22f7CnxLHml/0x5boy0y8UVA78zzIEPojGuELwdHFy7Ds beqizTFKRhwx+Y1v1Y7+Sy0XpQVTclI= -----END CERTIFICATE-----Generated at Wed Aug 6 16:04:36 2025 by rpki-client