$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa File: 4894f3df-aa63-3248-9184-fd1db1926b55.roa (raw, json) Hash identifier: 1NAWLIWnk0NHAUUdDDDQp0CQm9br0QYlpiKPJ8kQi8M= Subject key identifier: 8A:C9:BE:13:B0:2E:77:C8:9A:D9:BD:4A:31:95:2A:B9:C2:9A:57:47 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AA6F623D32333329B52EE2240 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 199527 IP address blocks: 209.213.196.0/24 maxlen: 24 209.213.198.0/23 maxlen: 24 209.213.204.0/23 maxlen: 24 209.213.208.0/23 maxlen: 24 209.213.210.0/24 maxlen: 24 209.213.212.0/23 maxlen: 24 209.213.214.0/24 maxlen: 24 209.213.218.0/24 maxlen: 24 209.213.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:23:d3:23:33:32:9b:52:ee:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=455f6304-ec1d-438e-8d16-898526916a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:0a:fe:bb:38:59:bc:b2:bf:32:a1:74:a2: 24:98:d5:a8:50:17:17:be:d6:9a:79:40:6c:a4:49: 30:20:8b:78:a3:0e:91:90:2d:78:8b:74:c3:23:5d: ac:0e:36:ae:54:0d:32:d8:72:b4:d2:b8:56:51:59: b1:07:49:d9:05:0a:49:83:c0:7c:1c:7a:0d:8b:cf: 18:c4:d5:2b:69:00:0f:42:30:55:b9:57:1b:af:da: 97:55:9d:92:7f:b6:b7:66:c3:70:9b:a2:69:f3:7b: b5:d6:b1:a5:f5:2c:eb:b8:0e:76:2b:93:83:e0:c7: a8:04:3f:bf:80:89:50:d9:8f:be:58:50:7d:ed:31: fe:d9:ac:50:bd:ef:31:90:ac:45:c8:e1:a0:2d:b4: b7:8c:c9:89:a4:18:53:f8:41:66:67:2f:86:30:47: 35:2f:0b:e2:ba:b9:2e:b7:29:0e:98:e7:80:f0:76: 8a:d9:ec:ab:a1:b2:8c:0e:63:5a:53:09:d0:97:c7: db:7b:59:77:7c:1d:e8:f3:fa:22:93:69:cf:67:95: 5b:72:da:fb:b6:c8:c7:e6:49:c0:36:a8:13:34:19: 93:0f:fc:ba:f3:48:fd:f6:4b:04:52:18:29:9a:80: c9:ba:db:b4:4a:8c:f6:67:62:71:62:22:2f:06:0b: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C9:BE:13:B0:2E:77:C8:9A:D9:BD:4A:31:95:2A:B9:C2:9A:57:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.213.196.0/24 209.213.198.0/23 209.213.204.0/23 209.213.208.0-209.213.210.255 209.213.212.0-209.213.214.255 209.213.218.0/24 209.213.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:9f:4b:a0:13:51:fd:c0:3c:f1:b2:a3:7a:b3:67:c2:bf:6c: b9:b8:3d:57:47:c0:45:ea:58:27:f0:c5:62:c1:ce:3e:a3:6c: 11:22:90:56:00:b4:ae:f5:21:5c:e7:3c:a7:7e:dd:55:93:f3: e4:d1:7b:ae:af:a9:ff:da:6e:cd:75:b8:e6:ea:f2:87:50:f6: ec:ce:9f:44:42:64:15:e8:6e:94:5a:55:38:13:f9:71:95:63: b7:4f:2b:71:ea:88:27:c8:ea:f0:1e:38:47:7d:50:20:b0:41: 8e:df:12:a3:6d:d2:6d:8d:68:f9:64:3b:e0:3e:86:19:5d:63: bd:81:99:70:1f:73:41:da:c9:a7:02:93:cf:72:7f:14:4f:74: 74:7e:53:5c:61:8d:1b:9b:51:ed:08:af:e0:71:53:2d:15:3e: 1c:93:58:8d:f5:25:f6:97:5e:0e:48:a0:ef:6d:a1:48:d9:36: c5:68:5c:23:1d:0b:13:81:a1:57:08:cb:0d:e8:b3:21:c3:be: c7:1d:58:d8:db:23:f0:37:86:f8:95:24:c1:43:af:da:d4:56: bd:d0:73:1e:31:88:69:65:38:61:bf:52:a0:28:1f:55:df:ec: 29:98:02:d1:e9:fd:c8:b2:48:aa:d4:90:f8:af:e2:7a:51:15: 35:77:b2:05 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWEqm9iPTIzMym1LuIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NDU1ZjYzMDQtZWMxZC00MzhlLThkMTYtODk4NTI2OTE2YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApokK/rs4WbyyvzKhdKIkmNWoUBcXvtaaeUBs pEkwIIt4ow6RkC14i3TDI12sDjauVA0y2HK00rhWUVmxB0nZBQpJg8B8HHoNi88Y xNUraQAPQjBVuVcbr9qXVZ2Sf7a3ZsNwm6Jp83u11rGl9SzruA52K5OD4MeoBD+/ gIlQ2Y++WFB97TH+2axQve8xkKxFyOGgLbS3jMmJpBhT+EFmZy+GMEc1Lwviurku tykOmOeA8HaK2eyrobKMDmNaUwnQl8fbe1l3fB3o8/oik2nPZ5Vbctr7tsjH5knA NqgTNBmTD/y680j99ksEUhgpmoDJutu0Soz2Z2JxYiIvBguecQIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFIrJvhOwLnfImtm9SjGVKrnCmldHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDg5NGYzZGYtYWE2My0z MjQ4LTkxODQtZmQxZGIxOTI2YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQA0dXEAwQB 0dXGAwQB0dXMMAwDBATR1dADBADR1dIwDAMEAtHV1AMEANHV1gMEANHV2gMEANHV 3zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCRn0ugE1H9wDzxsqN6s2fCv2y5uD1XR8BF6lgn8MViwc4+o2wR IpBWALSu9SFc5zynft1Vk/Pk0Xuur6n/2m7Ndbjm6vKHUPbszp9EQmQV6G6UWlU4 E/lxlWO3Tytx6ognyOrwHjhHfVAgsEGO3xKjbdJtjWj5ZDvgPoYZXWO9gZlwH3NB 2smnApPPcn8UT3R0flNcYY0bm1HtCK/gcVMtFT4ck1iN9SX2l14OSKDvbaFI2TbF aFwjHQsTgaFXCMsN6LMhw77HHVjY2yPwN4b4lSTBQ6/a1Fa90HMeMYhpZThhv1Kg KB9V3+wpmALR6f3Iskiq1JD4r+J6URU1d7IF -----END CERTIFICATE-----Generated at Sat Aug 9 23:22:42 2025 by rpki-client