$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa File: ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa (raw, json) Hash identifier: fKYLqPo+em1oqPLelvd3zUxF8KN1sorUFr9RXA0A+c0= Subject key identifier: 4C:45:35:04:D2:AC:E2:94:20:62:66:78:F1:46:6F:6D:7D:D3:9B:59 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584AADF1033CC39CB8464476EA40 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7782 IP address blocks: 162.211.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:03:3c:c3:9c:b8:46:44:76:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=40141e74-2cc5-4e82-8c4a-dd6790d7c3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:da:94:0d:11:70:c6:38:d6:92:c3:1b:b3:99: ac:2d:50:6c:9f:29:ee:cf:8e:38:c3:fa:ee:17:16: f1:2d:32:ff:84:fd:9d:b4:b9:26:9f:2e:ea:ec:79: dd:46:f9:b1:3f:16:5f:b0:8f:33:c6:10:09:6a:47: 5c:9f:13:d3:03:71:53:b1:54:3f:91:f9:02:7d:07: 6b:45:a1:db:fd:d9:a0:ff:02:3a:28:d3:ac:bc:72: a0:af:2e:78:13:4a:37:c3:64:0d:10:0d:bc:cf:09: 6a:6c:28:36:0d:9e:c0:53:f0:f4:43:81:dc:8a:cc: f1:6a:a7:8b:b8:4d:73:9e:4d:71:0d:42:e5:16:af: 10:a4:d0:3b:b1:84:08:e4:92:0e:e1:fb:d8:52:d8: 67:cf:b5:ee:a9:47:83:60:f7:7b:83:ac:da:4f:a2: 67:7f:1a:36:3a:22:0c:7e:a4:f4:f4:35:b7:82:41: c8:20:fa:ed:69:ce:63:59:62:e0:d0:c9:95:42:ee: 0f:c6:61:f4:47:65:35:20:34:4f:07:bc:56:cc:17: 5b:43:68:69:46:2f:04:b9:2c:89:c3:87:1b:9d:61: 60:42:41:18:3a:2f:5f:cf:7e:d1:59:a3:42:1f:4a: 65:5b:15:0b:2a:ad:f0:61:9c:af:32:ea:8b:2d:80: 5e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:45:35:04:D2:AC:E2:94:20:62:66:78:F1:46:6F:6D:7D:D3:9B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 162.211.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d7:37:9a:e5:50:12:98:88:c5:00:32:5a:ff:a3:ff:bc:5c: e4:99:a3:37:37:25:73:af:69:78:4c:d0:66:d5:23:7e:45:39: 52:20:e8:26:8c:aa:b4:31:c0:df:f5:6e:ec:be:53:52:b7:e9: 39:5b:10:b6:76:52:0d:2f:ab:72:ae:e9:08:b8:69:ab:53:53: f3:ff:6c:23:9f:54:7a:25:fe:5e:90:0b:6f:81:0c:21:84:96: fb:3f:a6:4c:69:73:81:45:57:43:a9:a8:9f:7b:69:06:f7:91: cd:2d:4c:a3:99:7a:fb:73:88:c9:05:69:20:3b:cb:80:19:54: 87:20:21:3e:f2:63:4e:78:e5:35:9f:65:b3:3f:f2:08:e0:a5: b4:71:da:f4:88:03:33:26:da:54:f2:eb:a0:0b:80:60:d2:3d: 53:84:15:8f:09:71:09:bc:65:bf:17:f8:1b:e6:a4:a2:9a:f7: eb:8d:ba:fc:65:52:69:15:8a:f4:48:e2:a1:7b:52:94:55:37: 8c:85:d3:7e:ff:b9:64:22:61:68:80:3f:89:41:53:06:14:72: eb:dd:a6:1c:c4:22:f5:d8:d8:74:af:33:c1:a1:4b:b4:fd:bf: 29:da:c4:93:37:71:bf:51:c8:f9:97:a8:3e:ac:a6:c7:7f:93: bd:34:c9:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QM8w5y4RkR26kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NDAxNDFlNzQtMmNjNS00ZTgyLThjNGEtZGQ2NzkwZDdjM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9qUDRFwxjjWksMbs5msLVBsnynuz444w/ru FxbxLTL/hP2dtLkmny7q7HndRvmxPxZfsI8zxhAJakdcnxPTA3FTsVQ/kfkCfQdr RaHb/dmg/wI6KNOsvHKgry54E0o3w2QNEA28zwlqbCg2DZ7AU/D0Q4HciszxaqeL uE1znk1xDULlFq8QpNA7sYQI5JIO4fvYUthnz7XuqUeDYPd7g6zaT6Jnfxo2OiIM fqT09DW3gkHIIPrtac5jWWLg0MmVQu4PxmH0R2U1IDRPB7xWzBdbQ2hpRi8EuSyJ w4cbnWFgQkEYOi9fz37RWaNCH0plWxULKq3wYZyvMuqLLYBeKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExFNQTSrOKUIGJmePFGb21905tZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvYWU1MDhjNjYtMTlmMy0z MjVlLTlhYzktMmZhNzE0ZGM5YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITXN5rlUBKYiMUAMlr/o/+8XOSZozc3JXOvaXhM0GbVI35FOVIg6CaM qrQxwN/1buy+U1K36TlbELZ2Ug0vq3Ku6Qi4aatTU/P/bCOfVHol/l6QC2+BDCGE lvs/pkxpc4FFV0OpqJ97aQb3kc0tTKOZevtziMkFaSA7y4AZVIcgIT7yY0545TWf ZbM/8gjgpbRx2vSIAzMm2lTy66ALgGDSPVOEFY8JcQm8Zb8X+BvmpKKa9+uNuvxl UmkVivRI4qF7UpRVN4yF037/uWQiYWiAP4lBUwYUcuvdphzEIvXY2HSvM8GhS7T9 vynaxJM3cb9RyPmXqD6spsd/k700ydU= -----END CERTIFICATE-----Generated at Mon Aug 4 22:28:17 2025 by rpki-client