$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa File: 471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa (raw, json) Hash identifier: vQmbYZiK3Gs95/xNTwiMvHCwItxlRLyARgDhei/Cfg8= Subject key identifier: 8B:CE:36:7A:E7:B4:BE:BF:70:D9:50:18:7D:4E:1D:68:36:A3:96:0E Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584AADF1034AD9B09C2B78190640 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7782 IP address blocks: 162.218.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:03:4a:d9:b0:9c:2b:78:19:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=223110bf-b52c-4e25-b5b7-7075b4c28bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:b0:c1:19:59:ae:b9:f0:5b:dc:a5:00:38: 93:9a:5e:22:7d:25:f3:76:60:84:6d:24:72:8b:b7: 4f:49:ae:04:87:3d:6b:cd:f5:04:b9:c2:0d:5c:fb: 50:c4:f3:8f:8c:0e:f6:ba:eb:9c:73:b1:90:01:74: db:6d:0b:9a:64:35:45:cb:0f:6a:4b:88:a3:6b:16: 9a:e6:b1:24:0e:47:3b:87:d8:bc:24:94:78:e7:71: 0f:d4:68:b3:25:ea:eb:d0:14:49:36:2a:ae:a3:c3: a9:a8:18:af:a4:41:74:9f:9f:a9:2f:15:ab:30:60: 4d:8e:61:02:04:e7:50:b2:c9:d1:ec:a9:4e:7e:56: 77:c4:92:38:33:09:ee:34:ce:c9:6b:e6:b8:83:d6: cc:c5:f5:4a:90:be:98:d6:b5:08:e4:fe:d5:9e:14: 10:3d:b2:0f:d2:41:16:59:1a:3b:cc:98:1e:3b:e7: 3f:33:52:8b:a3:95:21:e4:25:0b:03:8e:69:50:04: 94:35:ae:2e:04:62:8b:81:a8:68:7e:7e:6b:56:a0: ef:bd:d8:4f:bf:8a:7a:05:0a:44:05:40:39:cd:1d: 3e:42:a6:54:0a:35:03:42:fe:07:17:78:fa:35:50: 2d:1c:b6:74:dc:96:ae:bf:1d:2a:13:69:76:f3:5c: 37:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CE:36:7A:E7:B4:BE:BF:70:D9:50:18:7D:4E:1D:68:36:A3:96:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 162.218.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f9:4d:f0:8d:7c:65:c8:a7:7b:9d:88:63:5a:9f:85:aa:eb: 7e:fc:c6:44:22:87:fd:cb:b0:9f:89:65:05:42:21:71:cc:4c: 07:be:fd:86:8f:a9:b2:fd:63:50:d4:ec:44:46:52:fe:d7:54: 8c:d8:2a:29:10:4a:14:ac:71:6b:72:36:8c:fe:a1:32:bc:2b: 9f:9e:9e:e9:d1:72:c2:d5:ed:99:d7:14:16:db:e8:f5:c9:fb: 3c:2f:14:99:11:43:3c:bc:be:64:ae:04:f1:c1:94:c5:9e:ce: 21:66:90:1a:cd:d2:52:ba:91:08:74:58:2f:be:a4:75:21:a9: a6:97:65:13:1b:62:51:9d:1a:9f:c7:6f:8c:7b:c4:59:78:c5: 7c:3f:24:10:11:5d:10:cc:58:ed:27:0b:98:42:01:73:e1:4c: 94:35:df:47:c2:4f:fc:eb:51:6b:a9:d5:85:cc:9f:1f:7f:d7: 41:ca:a0:1e:f2:0c:53:56:66:d7:28:c3:d8:6f:6e:a9:12:33: ef:24:04:c5:b7:bb:1c:94:63:70:53:25:7f:79:a8:f3:d0:63: 1c:be:9c:67:41:a6:bf:30:78:eb:4f:cc:6e:e1:08:8c:41:d1: 83:98:ed:da:d9:79:4c:c1:61:c0:41:41:04:1a:ac:f3:8e:7a: 7b:39:79:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QNK2bCcK3gZBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MjIzMTEwYmYtYjUyYy00ZTI1LWI1YjctNzA3NWI0YzI4YmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOOwwRlZrrnwW9ylADiTml4ifSXzdmCEbSRy i7dPSa4Ehz1rzfUEucINXPtQxPOPjA72uuucc7GQAXTbbQuaZDVFyw9qS4ijaxaa 5rEkDkc7h9i8JJR453EP1GizJerr0BRJNiquo8OpqBivpEF0n5+pLxWrMGBNjmEC BOdQssnR7KlOflZ3xJI4MwnuNM7Ja+a4g9bMxfVKkL6Y1rUI5P7VnhQQPbIP0kEW WRo7zJgeO+c/M1KLo5Uh5CULA45pUASUNa4uBGKLgahofn5rVqDvvdhPv4p6BQpE BUA5zR0+QqZUCjUDQv4HF3j6NVAtHLZ03Jauvx0qE2l281w3gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvONnrntL6/cNlQGH1OHWg2o5YOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvNDcxNTM0YTQtOGU1NC0z ZDU2LWE4ZDgtY2ZjZTNmZmVkNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr5TfCNfGXIp3udiGNan4Wq6378xkQih/3LsJ+JZQVCIXHMTAe+/YaP qbL9Y1DU7ERGUv7XVIzYKikQShSscWtyNoz+oTK8K5+enunRcsLV7ZnXFBbb6PXJ +zwvFJkRQzy8vmSuBPHBlMWeziFmkBrN0lK6kQh0WC++pHUhqaaXZRMbYlGdGp/H b4x7xFl4xXw/JBARXRDMWO0nC5hCAXPhTJQ130fCT/zrUWup1YXMnx9/10HKoB7y DFNWZtcow9hvbqkSM+8kBMW3uxyUY3BTJX95qPPQYxy+nGdBpr8weOtPzG7hCIxB 0YOY7drZeUzBYcBBQQQarPOOens5ea8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:36 2025 by rpki-client