$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa File: 2d941046-d327-388c-9f7a-ab2771f7f1a4.roa (raw, json) Hash identifier: ZJEymrmEZokM/XC17nkjj2gHNVLZwhOpui+mFTQZ7s4= Subject key identifier: 63:AC:92:2F:E1:10:C5:F0:6B:BD:1D:CD:14:F5:53:67:57:2B:F9:E6 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584AB650E42D6260F00878D57080 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 12129 IP address blocks: 209.124.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:e4:2d:62:60:f0:08:78:d5:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=f9a5bdf2-6d60-4ba6-b80b-d7a7b54c4b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:06:93:35:1c:26:6a:dd:b7:f4:4d:fe:f7: 1f:9f:27:2b:9e:30:fe:7e:a5:9f:6b:af:ef:de:5d: 61:69:96:08:b0:ee:72:39:29:9a:1c:84:64:43:f2: bc:bd:e6:04:a1:79:3a:70:9a:32:5d:a2:92:b0:40: ad:1d:4c:3d:ed:3d:e8:b3:a0:d2:39:2a:6a:60:bc: f8:73:46:86:06:58:35:b7:9d:15:46:ab:7f:cb:75: 68:84:58:61:eb:7d:04:03:1a:c2:b8:24:42:8c:9d: c7:76:5e:62:17:57:59:f1:70:98:c9:fa:c8:8e:db: 6c:96:1f:7a:06:10:2c:da:46:03:49:51:77:f4:79: 1a:98:0b:de:d8:d0:bb:47:f7:a3:a0:b8:f3:e6:1a: f5:3e:07:b8:73:ae:42:70:85:f0:f8:19:6f:74:95: 02:5f:52:2f:18:fe:a1:83:48:12:52:fa:ac:36:26: 6e:3e:18:30:80:ad:2b:cf:41:25:c9:b2:f4:fb:3a: d4:48:69:8e:ef:5a:28:f7:b5:fb:7c:a6:83:de:d3: 7f:b1:10:4b:51:fe:80:bd:4c:20:3a:56:99:e2:14: 47:2c:59:62:ac:d1:db:fa:ee:66:7a:0b:04:4c:9c: be:bc:75:fb:0d:21:31:4d:c9:54:5f:7f:32:dd:a6: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AC:92:2F:E1:10:C5:F0:6B:BD:1D:CD:14:F5:53:67:57:2B:F9:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:91:44:a8:22:98:09:29:17:f7:f4:97:31:7c:8e:2c:29:55: 29:30:98:f7:6f:1c:17:75:9b:99:63:4f:40:81:57:a9:17:8a: e2:39:f9:9d:4b:7f:3f:93:d7:d1:8b:18:74:c7:21:98:17:7d: af:72:1e:ac:66:b5:f1:0b:31:ec:db:f1:3e:3f:7b:06:32:2e: da:54:f4:e2:da:4c:fe:90:10:7a:12:24:cd:10:52:d2:1f:94: 32:80:1e:31:9b:1c:5e:f0:7f:16:39:1c:fd:78:54:94:ae:ce: a2:c7:a1:a1:c1:46:6b:7c:15:9e:ba:0d:e4:c2:e9:cc:d8:75: 75:df:a0:76:e0:6a:1e:c1:b7:6f:84:23:07:5e:5d:49:5c:13: 72:56:af:e7:c9:43:bd:b6:95:79:36:41:8a:53:5a:80:a5:9e: cc:d7:cf:4f:ad:e0:6a:ae:58:ae:63:86:83:0a:02:7c:80:8e: 03:c0:77:0c:b1:b7:a7:b8:d1:6a:d6:47:7e:c2:59:b4:eb:1f: 73:08:8f:82:20:c0:60:a2:b8:e2:32:cd:7c:69:d8:1f:75:4b: 6b:8d:1a:ef:36:2e:e7:4c:2f:21:04:d2:18:e3:90:1e:fc:20: 60:f2:2d:a5:c0:60:6b:08:ec:11:c0:8c:21:68:40:4f:b2:78: 94:c3:39:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UOQtYmDwCHjVcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZjlhNWJkZjItNmQ2MC00YmE2LWI4MGItZDdhN2I1NGM0Yjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEoGkzUcJmrdt/RN/vcfnycrnjD+fqWfa6/v 3l1haZYIsO5yOSmaHIRkQ/K8veYEoXk6cJoyXaKSsECtHUw97T3os6DSOSpqYLz4 c0aGBlg1t50VRqt/y3VohFhh630EAxrCuCRCjJ3Hdl5iF1dZ8XCYyfrIjttslh96 BhAs2kYDSVF39HkamAve2NC7R/ejoLjz5hr1Pge4c65CcIXw+BlvdJUCX1IvGP6h g0gSUvqsNiZuPhgwgK0rz0ElybL0+zrUSGmO71oo97X7fKaD3tN/sRBLUf6AvUwg OlaZ4hRHLFlirNHb+u5megsETJy+vHX7DSExTclUX38y3abC7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOski/hEMXwa70dzRT1U2dXK/nmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvMmQ5NDEwNDYtZDMyNy0z ODhjLTlmN2EtYWIyNzcxZjdmMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Xw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqRRKgimAkpF/f0lzF8jiwpVSkwmPdvHBd1m5ljT0CBV6kXiuI5+Z1L fz+T19GLGHTHIZgXfa9yHqxmtfELMezb8T4/ewYyLtpU9OLaTP6QEHoSJM0QUtIf lDKAHjGbHF7wfxY5HP14VJSuzqLHoaHBRmt8FZ66DeTC6czYdXXfoHbgah7Bt2+E IwdeXUlcE3JWr+fJQ722lXk2QYpTWoClnszXz0+t4GquWK5jhoMKAnyAjgPAdwyx t6e40WrWR37CWbTrH3MIj4IgwGCiuOIyzXxp2B91S2uNGu82LudMLyEE0hjjkB78 IGDyLaXAYGsI7BHAjCFoQE+yeJTDOaU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:46:09 2025 by rpki-client