$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8dd7cecd-59f2-33b7-91b3-fb97f457f6d2.roa File: 8dd7cecd-59f2-33b7-91b3-fb97f457f6d2.roa (raw, json) Hash identifier: D3I2B+d4Kbotpcekl3W4uDDNWsuJf8zp1YgbDPp6AP8= Subject key identifier: 81:DC:FE:64:C0:06:BC:5C:18:A4:8C:A1:AC:5C:C3:31:75:CF:62:47 Certificate issuer: /CN=55640631-1b52-4455-ab16-7633a452f342 Certificate serial: 010D0C9F4328584AB91BB2EE2F620AAE1944F735 Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8dd7cecd-59f2-33b7-91b3-fb97f457f6d2.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 13760 IP address blocks: 209.209.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:b2:ee:2f:62:0a:ae:19:44:f7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55640631-1b52-4455-ab16-7633a452f342 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=2a549070-cf04-4e8f-a815-9f9deca39a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:60:3a:08:d9:b2:21:8f:57:0a:98:58:b4: a1:ef:bd:f3:b9:c7:7b:7c:93:5a:cf:ae:67:67:a3: e7:60:1d:44:76:66:41:7f:96:d8:e5:c1:be:ff:d4: 8d:69:7b:5c:90:d5:fd:90:1c:e8:05:03:f8:3e:54: 8d:bf:e1:c6:e3:62:d2:b7:d6:08:f0:13:1f:8e:56: 63:23:fd:f0:90:70:3d:fa:89:cb:e9:44:dd:30:d4: 5c:bd:b7:6e:a7:c3:e3:f7:06:c0:b5:7b:6f:82:42: 22:7b:2f:38:38:05:cb:ac:16:24:94:79:e7:a6:e4: eb:7f:f3:66:bc:f5:0c:20:bd:b4:fa:16:2c:73:10: a8:d8:e2:19:84:4c:98:ce:be:c8:49:7f:74:ba:a0: a6:ff:b2:7f:6e:2e:60:2b:1b:bd:22:4f:f9:17:09: 25:c7:ee:f9:bd:45:cb:d9:68:1c:1b:7f:44:5c:f0: cf:12:00:31:74:40:34:81:19:28:83:1d:fa:ee:75: 52:a3:29:1e:8d:87:1c:b8:cf:51:d5:6d:f4:30:3a: 72:88:35:9b:d5:5f:51:c8:5f:13:c0:c9:64:69:f9: 34:8c:c7:4f:91:47:45:e0:09:76:81:91:61:a9:41: 1b:5e:f7:e2:3f:0a:ed:6b:d1:21:a7:2e:0c:07:7d: 6e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DC:FE:64:C0:06:BC:5C:18:A4:8C:A1:AC:5C:C3:31:75:CF:62:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8dd7cecd-59f2-33b7-91b3-fb97f457f6d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl X509v3 Authority Key Identifier: keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer sbgp-ipAddrBlock: critical IPv4: 209.209.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:96:a1:fb:7a:a4:5a:34:6b:e5:b7:06:cd:50:b5:95:d6:b5: 10:19:d9:b5:d3:fa:48:b1:d4:2d:5c:41:3c:6c:1c:05:9b:5d: f1:25:b6:6e:84:73:1c:d1:f1:e0:06:74:38:9f:b2:b2:0e:c4: 93:85:ae:1f:63:81:09:db:6f:19:30:e1:b9:4c:0b:33:a1:3c: 59:0f:d6:e4:f9:c1:8c:67:2c:97:ab:eb:11:26:4e:09:f4:9b: e1:b1:21:e1:ce:dc:9d:51:ce:89:fd:3e:4a:50:a7:26:a2:2f: b0:6b:d6:28:e3:db:f5:0f:86:03:4e:a9:39:34:a4:31:3e:36: 57:05:68:ae:c9:f6:17:89:c3:b6:84:8b:24:82:86:2d:ee:91: 94:f0:91:a0:6c:05:a4:73:72:aa:65:89:dc:28:86:05:78:87: 17:44:6f:eb:9a:4c:61:64:e1:94:21:71:96:9d:53:17:90:83: 0a:41:16:63:8f:b4:4e:1e:cc:e3:bd:fa:6b:ba:8e:03:cc:d9: a7:ca:ba:e0:73:dc:9b:33:89:eb:7f:85:a3:85:bc:3d:f4:72: 62:e3:d7:f5:52:23:88:94:7b:a1:eb:3d:28:54:88:3a:f1:ed: 12:8b:57:59:24:a0:2a:c1:82:60:02:b2:93:89:bd:52:b2:5c: a7:a4:a5:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G7LuL2IKrhlE9zUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm MzQyMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MmE1NDkwNzAtY2YwNC00ZThmLWE4MTUtOWY5ZGVjYTM5YTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnBgOgjZsiGPVwqYWLSh773zucd7fJNaz65n Z6PnYB1EdmZBf5bY5cG+/9SNaXtckNX9kBzoBQP4PlSNv+HG42LSt9YI8BMfjlZj I/3wkHA9+onL6UTdMNRcvbdup8Pj9wbAtXtvgkIiey84OAXLrBYklHnnpuTrf/Nm vPUMIL20+hYscxCo2OIZhEyYzr7ISX90uqCm/7J/bi5gKxu9Ik/5Fwklx+75vUXL 2WgcG39EXPDPEgAxdEA0gRkogx367nVSoykejYccuM9R1W30MDpyiDWb1V9RyF8T wMlkafk0jMdPkUdF4Al2gZFhqUEbXvfiPwrta9Ehpy4MB31u2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHc/mTABrxcGKSMoaxcwzF1z2JHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0 MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvOGRkN2NlY2QtNTlmMi0z M2I3LTkxYjMtZmI5N2Y0NTdmNmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0dHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyWoft6pFo0a+W3Bs1QtZXWtRAZ2bXT+kix1C1cQTxsHAWbXfEltm6E cxzR8eAGdDifsrIOxJOFrh9jgQnbbxkw4blMCzOhPFkP1uT5wYxnLJer6xEmTgn0 m+GxIeHO3J1Rzon9PkpQpyaiL7Br1ijj2/UPhgNOqTk0pDE+NlcFaK7J9heJw7aE iySChi3ukZTwkaBsBaRzcqplidwohgV4hxdEb+uaTGFk4ZQhcZadUxeQgwpBFmOP tE4ezOO9+mu6jgPM2afKuuBz3Jsziet/haOFvD30cmLj1/VSI4iUe6HrPShUiDrx 7RKLV1kkoCrBgmACspOJvVKyXKekpZM= -----END CERTIFICATE-----Generated at Fri Aug 8 00:13:44 2025 by rpki-client