$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c9602d06-8bc6-3bbe-95ba-a304efa8de8b.roa File: c9602d06-8bc6-3bbe-95ba-a304efa8de8b.roa (raw, json) Hash identifier: c7a7I1Q7PPAE6oKdGVLzyFut4YBQVBP4pZobxbBWm9M= Subject key identifier: FB:83:08:C9:53:C9:26:2B:83:B1:A1:4E:C6:4D:3C:A8:89:36:C3:6F Certificate issuer: /CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Certificate serial: 010D0C9F4328584AB4EB72D6EC878F233106A600 Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c9602d06-8bc6-3bbe-95ba-a304efa8de8b.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7169 IP address blocks: 209.166.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:72:d6:ec:87:8f:23:31:06:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=3680564c-f3c8-45be-9f07-07a7c6c088ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:97:b5:f8:56:1f:ef:ce:5f:91:92:1c:a8:a9: a1:c5:92:eb:88:89:8b:4d:88:3b:a1:96:aa:47:e4: 30:bf:74:91:73:57:4d:46:46:a3:9a:24:9c:66:98: 19:a9:fa:d0:e6:06:d3:4e:fd:75:56:42:b6:01:d3: 5d:fa:41:23:20:ca:5e:a6:ec:b1:b2:f4:61:2d:8b: 9a:aa:92:bd:f0:75:24:2b:47:42:59:de:4f:9c:bf: 8d:65:3f:11:2d:0e:74:19:18:22:6f:75:32:f9:d3: dc:e9:22:87:a8:71:2b:3a:54:73:cc:95:85:bf:09: bc:21:e7:a3:f1:0e:45:fd:54:f6:36:a9:09:8b:4c: 24:f8:bb:0a:57:3f:a7:22:48:19:04:12:8f:67:05: a7:e0:4e:d8:f3:bd:40:7a:13:f6:aa:f5:29:af:4f: 1b:44:cf:90:88:bf:cd:47:69:5d:9a:7c:f1:1f:1c: e3:9e:93:73:bc:06:61:53:16:c5:d8:d1:a2:c3:c4: e6:48:9a:66:16:61:5e:66:59:fe:f4:d3:9e:0d:26: d9:6c:05:50:82:64:a7:10:22:f2:00:28:52:26:2d: f0:54:c9:be:b3:ba:0f:f8:8c:60:00:e9:ff:d0:ae: c3:28:49:2a:0e:d0:01:78:a0:64:29:58:cb:61:d9: fb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:83:08:C9:53:C9:26:2B:83:B1:A1:4E:C6:4D:3C:A8:89:36:C3:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c9602d06-8bc6-3bbe-95ba-a304efa8de8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl X509v3 Authority Key Identifier: keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer sbgp-ipAddrBlock: critical IPv4: 209.166.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:14:eb:9b:48:1b:71:6c:75:09:3f:0b:44:00:a8:f7:1b:57: 60:db:83:88:49:44:34:5f:8b:99:fe:f1:30:84:32:9a:79:12: dd:35:f2:0a:3b:3c:05:95:81:99:77:0a:e8:fa:83:ac:ef:a3: 37:6f:d5:99:85:f6:72:d1:f8:3b:a7:87:1e:68:4d:31:15:15: 43:21:2f:c8:33:74:6e:4c:84:cb:19:b5:d3:a5:06:ee:dd:4a: 8a:67:b9:8c:7b:85:60:f9:4b:0d:67:cc:6f:9f:03:3b:9c:88: 2e:12:8d:a9:bc:a5:e9:4c:0a:0e:60:40:cd:13:ee:df:ae:83: de:53:c5:8c:5e:b2:1b:8e:06:a4:8e:a9:1a:63:40:e1:64:d7: 7d:82:17:1f:47:c4:40:dd:de:db:bc:07:c3:77:3b:fc:34:8c: e6:56:a3:ee:a0:5a:6d:3f:b3:cb:eb:7e:c4:5d:6b:ca:c5:29: b7:9b:55:ea:6b:d2:79:27:e4:03:6f:81:7f:ec:92:6d:a2:cf: 19:1f:9f:db:1b:ed:9c:f2:64:5f:73:00:c3:98:c2:66:4d:0a: eb:10:a9:30:fe:dd:f2:da:0e:c9:ce:c2:ff:48:d0:2f:53:25: 7c:e8:2d:71:ef:4f:15:13:28:9d:c4:39:b2:d0:17:40:32:24: 8e:51:f1:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063LW7IePIzEGpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGExYmRhMzAtNTA0NS00ZGVkLWJmNDctN2ZkMDNhNTk0 MDkyMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MzY4MDU2NGMtZjNjOC00NWJlLTlmMDctMDdhN2M2YzA4OGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZe1+FYf785fkZIcqKmhxZLriImLTYg7oZaq R+Qwv3SRc1dNRkajmiScZpgZqfrQ5gbTTv11VkK2AdNd+kEjIMpepuyxsvRhLYua qpK98HUkK0dCWd5PnL+NZT8RLQ50GRgib3Uy+dPc6SKHqHErOlRzzJWFvwm8Ieej 8Q5F/VT2NqkJi0wk+LsKVz+nIkgZBBKPZwWn4E7Y871AehP2qvUpr08bRM+QiL/N R2ldmnzxHxzjnpNzvAZhUxbF2NGiw8TmSJpmFmFeZln+9NOeDSbZbAVQgmSnECLy AChSJi3wVMm+s7oP+IxgAOn/0K7DKEkqDtABeKBkKVjLYdn7NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuDCMlTySYrg7GhTsZNPKiJNsNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YTFi ZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQwM2E1OTQwOTIvYzk2MDJkMDYtOGJjNi0z YmJlLTk1YmEtYTMwNGVmYThkZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGExYmRhMzAtNTA0NS00ZGVkLWJm NDctN2ZkMDNhNTk0MDkyLzRhMWJkYTMwLTUwNDUtNGRlZC1iZjQ3LTdmZDAzYTU5 NDA5Mi5jcmwwHwYDVR0jBBgwFoAUg9WJsYZCUYnHW+3xTeETLIiJodYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YTFiZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQw M2E1OTQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0abAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgU65tIG3FsdQk/C0QAqPcbV2Dbg4hJRDRfi5n+8TCEMpp5Et018go7 PAWVgZl3Cuj6g6zvozdv1ZmF9nLR+Dunhx5oTTEVFUMhL8gzdG5MhMsZtdOlBu7d SopnuYx7hWD5Sw1nzG+fAzuciC4Sjam8pelMCg5gQM0T7t+ug95TxYxeshuOBqSO qRpjQOFk132CFx9HxEDd3tu8B8N3O/w0jOZWo+6gWm0/s8vrfsRda8rFKbebVepr 0nkn5ANvgX/skm2izxkfn9sb7ZzyZF9zAMOYwmZNCusQqTD+3fLaDsnOwv9I0C9T JXzoLXHvTxUTKJ3EObLQF0AyJI5R8QY= -----END CERTIFICATE-----Generated at Tue Aug 5 16:49:17 2025 by rpki-client