$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa File: 3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa (raw, json) Hash identifier: hVMEQ6wDCo/bnh+rvF8m80EXuLgpxTu53TZM8nGHS0c= Subject key identifier: 6F:96:3F:D1:C3:9D:C3:DC:B7:FE:10:5C:51:C3:C3:2B:DB:1F:C2:BE Certificate issuer: /CN=883ca040-a898-4e47-b1e1-f2461996a058 Certificate serial: 010D0C9F4328584ACB412207F4687C177E63A3C0 Authority key identifier: BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 54249 IP address blocks: 209.189.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:22:07:f4:68:7c:17:7e:63:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883ca040-a898-4e47-b1e1-f2461996a058 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=b50f99f0-d424-4bc1-92dd-aa1d5885e507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:9e:84:34:a8:de:f6:54:60:26:f3:ce:4d: 23:82:f4:cb:ec:f3:f6:cd:b0:78:ed:f9:0d:f3:cd: 59:f9:6b:58:b5:9e:4b:1f:80:5c:1a:09:19:38:72: 65:66:3e:9a:23:15:94:f8:db:7a:8b:d3:db:e9:15: 50:e2:c8:96:57:00:3a:16:e2:25:e7:c6:de:ec:ff: 44:2b:69:0b:d3:0e:92:d9:ff:ae:c8:a4:e5:77:3b: f7:7d:9d:2f:19:f1:da:52:2f:58:ee:1b:23:31:6d: 5e:23:ec:b7:0e:49:8b:dd:51:cf:24:55:f3:1e:05: fd:e5:28:99:bb:07:2f:17:61:e5:4f:b0:b3:98:d7: 65:f2:34:a2:45:de:73:51:9b:97:62:2d:63:f9:37: 4c:2a:9b:6e:f4:88:38:3d:30:3d:2c:b9:d3:fc:28: 9c:d0:64:7d:cb:41:9c:52:c5:f6:a4:34:db:fb:a1: da:4a:f9:38:a9:37:9d:e4:00:38:45:3e:c4:71:1e: 13:d6:f4:9f:27:08:59:0d:44:f4:d1:b8:4e:fc:81: ae:75:7e:cd:f1:04:a1:a4:3a:9c:40:5c:2e:7d:11: 05:54:4e:da:94:e4:fd:39:aa:40:26:bb:f8:d6:85: 5f:10:4e:a4:ea:d2:66:c9:75:9c:49:7a:8b:de:46: 60:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:96:3F:D1:C3:9D:C3:DC:B7:FE:10:5C:51:C3:C3:2B:DB:1F:C2:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl X509v3 Authority Key Identifier: keyid:BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer sbgp-ipAddrBlock: critical IPv4: 209.189.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:02:91:c0:57:b0:a5:03:c5:c6:ce:5d:5e:fa:a2:ac:c2:b2: ae:c0:fa:b6:ab:b4:0c:b1:2c:8c:93:ed:34:7b:cd:ec:9c:61: 29:c3:98:e4:ab:d5:d9:7b:14:f0:3b:73:24:c0:c0:48:be:9b: 1e:be:7e:d8:08:37:ce:de:9e:82:c4:c4:df:1c:23:5a:8f:1d: 45:ae:aa:71:c4:4e:c2:52:a2:aa:bd:b1:de:7f:1f:15:78:43: d7:b8:f5:27:76:35:44:ee:e9:3d:a9:2f:1a:cf:31:52:cf:13: e5:6c:c1:e6:2b:1a:42:6f:a6:5b:28:2a:6c:a7:8d:37:75:c9: 4e:3f:f2:70:41:a8:f2:de:5c:43:21:74:d3:50:7a:6d:35:74: f4:fb:03:5e:8c:5e:ae:87:83:9d:01:00:a8:11:fa:9c:7b:1a: d9:1c:41:11:a1:62:d4:b1:76:f2:fd:c3:26:f2:80:d7:79:48: 3f:dc:6f:d6:79:ec:54:8f:f8:9f:da:19:02:ac:c3:58:a9:4a: 78:87:ac:4f:f9:79:03:14:a8:3d:56:48:0a:cd:e0:8c:08:c6: 5a:12:d8:e4:36:a3:96:8a:76:dc:fe:74:1d:b4:1c:e6:e4:4b: d5:84:7d:22:3e:0b:70:94:93:6d:0d:97:cb:9b:7d:e0:22:47: f8:bf:dd:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQSIH9Gh8F35jo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgzY2EwNDAtYTg5OC00ZTQ3LWIxZTEtZjI0NjE5OTZh MDU4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YjUwZjk5ZjAtZDQyNC00YmMxLTkyZGQtYWExZDU4ODVlNTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyCehDSo3vZUYCbzzk0jgvTL7PP2zbB47fkN 881Z+WtYtZ5LH4BcGgkZOHJlZj6aIxWU+Nt6i9Pb6RVQ4siWVwA6FuIl58be7P9E K2kL0w6S2f+uyKTldzv3fZ0vGfHaUi9Y7hsjMW1eI+y3DkmL3VHPJFXzHgX95SiZ uwcvF2HlT7CzmNdl8jSiRd5zUZuXYi1j+TdMKptu9Ig4PTA9LLnT/Cic0GR9y0Gc UsX2pDTb+6HaSvk4qTed5AA4RT7EcR4T1vSfJwhZDUT00bhO/IGudX7N8QShpDqc QFwufREFVE7alOT9OapAJrv41oVfEE6k6tJmyXWcSXqL3kZgHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+WP9HDncPct/4QXFHDwyvbH8K+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ODNj YTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2MTk5NmEwNTgvMzEyM2RkODctNDkzMS0z ZGNmLTg3ZWEtYmZhMTI2ZTEwZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODgzY2EwNDAtYTg5OC00ZTQ3LWIx ZTEtZjI0NjE5OTZhMDU4Lzg4M2NhMDQwLWE4OTgtNGU0Ny1iMWUxLWYyNDYxOTk2 YTA1OC5jcmwwHwYDVR0jBBgwFoAUvQ9TXi7MLYdA9N6h/A4cyUu4cJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ODNjYTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2 MTk5NmEwNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0b2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkCkcBXsKUDxcbOXV76oqzCsq7A+rartAyxLIyT7TR7zeycYSnDmOSr 1dl7FPA7cyTAwEi+mx6+ftgIN87enoLExN8cI1qPHUWuqnHETsJSoqq9sd5/HxV4 Q9e49Sd2NUTu6T2pLxrPMVLPE+VsweYrGkJvplsoKmynjTd1yU4/8nBBqPLeXEMh dNNQem01dPT7A16MXq6Hg50BAKgR+px7GtkcQRGhYtSxdvL9wybygNd5SD/cb9Z5 7FSP+J/aGQKsw1ipSniHrE/5eQMUqD1WSArN4IwIxloS2OQ2o5aKdtz+dB20HObk S9WEfSI+C3CUk20Nl8ubfeAiR/i/3YI= -----END CERTIFICATE-----Generated at Sat Aug 9 15:13:45 2025 by rpki-client