$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c98833cc-b227-3b98-b57f-b42541067cd5.roa File: c98833cc-b227-3b98-b57f-b42541067cd5.roa (raw, json) Hash identifier: 9hPTf0p3SZaSBbDwFBOVaB2OcDgctZYmMNR9aJmkAfw= Subject key identifier: 02:D9:E5:9A:E0:80:B9:6E:13:5B:6A:A2:61:8E:20:F9:6B:06:E2:61 Certificate issuer: /CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Certificate serial: 010D0C9F4328584A7A4B31FFD313D7339329A180 Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c98833cc-b227-3b98-b57f-b42541067cd5.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 5650 IP address blocks: 209.166.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:31:ff:d3:13:d7:33:93:29:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=eab70134-1dbf-47e2-82a1-aa4290f2fe9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c2:c5:1f:fa:c7:91:1a:05:58:61:1e:e5:b5: b4:87:af:a1:79:40:e5:d1:c8:3a:43:cc:d4:d3:5f: f4:09:12:06:af:a0:d7:48:0a:c8:28:e4:fb:1d:e5: 70:37:08:73:1f:27:ca:94:61:91:81:5f:93:4c:7d: 3a:a0:61:7e:0b:a6:4c:45:d1:58:de:f9:9a:e5:ba: b9:06:86:de:8e:62:bc:ce:81:40:b1:7b:94:f3:0d: 2c:00:08:cf:f7:36:2f:12:b6:60:1e:69:bc:56:41: c3:81:8d:f5:c2:ec:0b:cb:40:98:4e:dc:04:26:9c: 87:c5:ee:e6:6d:3f:d8:8b:fb:83:90:71:21:61:e4: ec:c6:df:dc:4d:15:d8:f9:52:91:ff:7a:e4:62:c2: ec:3c:a1:38:fb:fd:ad:1c:11:df:41:fc:c0:48:e2: 71:0c:4a:37:43:71:46:05:00:39:d9:c3:8f:f8:29: 63:81:68:93:0b:aa:14:e1:1a:56:b8:35:99:ee:52: 45:ba:e7:0b:99:46:6e:60:b4:ec:92:00:6a:ea:64: 12:5f:c9:50:d0:41:b6:f8:e3:85:4f:7f:e8:12:2a: ef:52:83:49:e1:4d:dc:65:54:01:2c:0f:40:95:8d: b1:da:8c:f5:2a:12:53:44:7b:4a:89:0f:ac:64:de: d2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D9:E5:9A:E0:80:B9:6E:13:5B:6A:A2:61:8E:20:F9:6B:06:E2:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c98833cc-b227-3b98-b57f-b42541067cd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl X509v3 Authority Key Identifier: keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer sbgp-ipAddrBlock: critical IPv4: 209.166.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:43:5d:62:fe:87:66:7d:be:7c:46:27:bb:f0:e8:c7:1b:fd: 94:fc:28:19:c2:dd:f9:b1:3a:7f:76:d2:22:c2:1e:6d:d9:4f: 77:df:37:a2:c9:18:aa:78:ac:30:30:5b:ec:77:a6:8e:e6:b8: 74:2e:3d:1d:eb:56:77:6e:85:7e:6a:6d:b6:0d:81:eb:c0:98: a9:64:c1:6e:7c:18:0c:34:71:42:10:75:f5:4b:49:c5:ce:2c: 62:34:39:e9:30:01:b3:79:9e:a0:42:e7:0c:32:01:63:04:5c: b1:2f:f0:ff:ec:aa:fe:8c:83:a9:92:b6:2c:29:60:53:2b:d4: 2d:7f:ee:73:5e:38:16:50:8d:f2:f1:ce:57:bb:ec:9d:72:ac: b6:f3:9b:f2:4a:f0:e0:c1:eb:9e:10:ff:e7:39:58:b6:74:07: e9:d8:30:e6:61:ac:a5:2b:d7:82:7f:dc:8b:85:05:9d:6b:3a: bc:7d:7d:94:59:d8:3a:30:16:f6:1f:e9:c7:a1:a8:23:e5:f3: 3d:04:c1:4c:b5:aa:ac:8f:9b:1d:79:85:54:a4:8e:a2:4f:dd: a1:2b:db:c7:82:b7:0d:c5:d2:b2:c2:89:48:5b:a2:cc:33:ca: 7b:f6:e7:20:68:fa:74:45:5c:9d:d4:0d:6a:f7:13:56:13:9a: 11:41:4e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SzH/0xPXM5MpoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGExYmRhMzAtNTA0NS00ZGVkLWJmNDctN2ZkMDNhNTk0 MDkyMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ZWFiNzAxMzQtMWRiZi00N2UyLTgyYTEtYWE0MjkwZjJmZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MLFH/rHkRoFWGEe5bW0h6+heUDl0cg6Q8zU 01/0CRIGr6DXSArIKOT7HeVwNwhzHyfKlGGRgV+TTH06oGF+C6ZMRdFY3vma5bq5 BobejmK8zoFAsXuU8w0sAAjP9zYvErZgHmm8VkHDgY31wuwLy0CYTtwEJpyHxe7m bT/Yi/uDkHEhYeTsxt/cTRXY+VKR/3rkYsLsPKE4+/2tHBHfQfzASOJxDEo3Q3FG BQA52cOP+CljgWiTC6oU4RpWuDWZ7lJFuucLmUZuYLTskgBq6mQSX8lQ0EG2+OOF T3/oEirvUoNJ4U3cZVQBLA9AlY2x2oz1KhJTRHtKiQ+sZN7SEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALZ5ZrggLluE1tqomGOIPlrBuJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YTFi ZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQwM2E1OTQwOTIvYzk4ODMzY2MtYjIyNy0z Yjk4LWI1N2YtYjQyNTQxMDY3Y2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGExYmRhMzAtNTA0NS00ZGVkLWJm NDctN2ZkMDNhNTk0MDkyLzRhMWJkYTMwLTUwNDUtNGRlZC1iZjQ3LTdmZDAzYTU5 NDA5Mi5jcmwwHwYDVR0jBBgwFoAUg9WJsYZCUYnHW+3xTeETLIiJodYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YTFiZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQw M2E1OTQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0abAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANNDXWL+h2Z9vnxGJ7vw6Mcb/ZT8KBnC3fmxOn920iLCHm3ZT3ffN6LJ GKp4rDAwW+x3po7muHQuPR3rVnduhX5qbbYNgevAmKlkwW58GAw0cUIQdfVLScXO LGI0OekwAbN5nqBC5wwyAWMEXLEv8P/sqv6Mg6mStiwpYFMr1C1/7nNeOBZQjfLx zle77J1yrLbzm/JK8ODB654Q/+c5WLZ0B+nYMOZhrKUr14J/3IuFBZ1rOrx9fZRZ 2DowFvYf6cehqCPl8z0EwUy1qqyPmx15hVSkjqJP3aEr28eCtw3F0rLCiUhboswz ynv25yBo+nRFXJ3UDWr3E1YTmhFBTkA= -----END CERTIFICATE-----Generated at Tue Aug 5 17:18:57 2025 by rpki-client