$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa File: 84d571f2-66e1-3f12-9230-063e7c81b63a.roa (raw, json) Hash identifier: 4ZgeZ1T2lJsWg0AWYoNol0z+8wfqINIoCNJn4JbRGTY= Subject key identifier: 10:3F:61:0D:6E:37:F2:17:61:91:AC:ED:A5:8D:6E:59:14:B8:A6:42 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584AB650E41A68043E5E27662D80 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 12129 IP address blocks: 209.124.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:e4:1a:68:04:3e:5e:27:66:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=93755a87-ac23-4bb4-9851-c51074d5c4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:36:b0:78:db:bb:3a:6e:25:65:b1:2b:b5: e5:cc:af:02:a4:7e:e2:d8:8b:b0:b3:68:9d:d1:3d: af:f8:8e:ff:8a:ac:b1:eb:e8:3a:04:3f:ec:6b:17: 40:cf:38:41:7e:37:53:5d:58:ff:c6:bd:ab:20:9c: d1:6b:bf:de:11:c5:39:10:ff:2e:58:f7:70:73:eb: 0b:30:7b:94:49:c0:00:3a:1e:89:d7:11:a4:4b:30: 38:35:09:fe:d6:42:76:db:68:8d:36:01:fb:16:5d: 07:c2:80:03:61:bb:4e:69:19:7e:93:58:4f:df:4e: bc:5e:7d:e5:68:eb:56:00:0c:f3:d6:81:78:f1:eb: cc:0e:6d:48:35:24:a8:82:42:c2:52:a6:3f:cf:d3: fa:32:aa:ce:91:5f:8e:37:48:24:10:5e:b9:a3:6e: 11:f3:59:78:88:89:84:27:0e:e9:25:78:cf:bb:8e: cc:2c:2d:af:8e:53:d1:c5:73:75:5e:11:7f:b5:49: cd:9f:bb:d2:39:34:d2:84:96:bf:bd:30:f5:b2:9d: 50:af:a8:fd:e8:66:83:3f:39:07:f9:e0:5c:8d:6f: 63:a1:99:15:91:37:d1:45:bc:78:2b:6e:04:91:65: 7a:1e:cf:1e:5e:1f:43:8a:cb:0a:c8:80:66:4d:f1: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:61:0D:6E:37:F2:17:61:91:AC:ED:A5:8D:6E:59:14:B8:A6:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:9f:e3:d2:17:c4:4f:93:53:4c:22:9b:88:ca:02:8b:bd:c3: 86:69:e6:e8:eb:e7:75:85:1c:7f:43:78:2c:0b:bf:7b:ef:5b: 5a:4e:1f:e6:97:44:ba:db:8a:77:51:fb:22:c8:f3:e5:08:03: 07:4e:12:f5:77:f0:a9:4e:17:b8:2d:d3:85:e6:ac:16:ae:87: 0a:10:a9:a4:53:06:27:de:a5:8f:ea:1e:ae:e4:e6:bf:d9:ab: 8c:e1:f9:0a:d7:6a:95:34:1e:7a:9b:08:b0:14:5e:4b:16:43: a9:de:b0:c9:b3:60:50:bb:a8:ad:58:a2:d6:77:8f:94:01:d6: be:5e:0a:1e:23:d6:d6:80:0e:90:69:dd:7c:3e:c2:27:1e:be: 54:49:13:59:25:73:31:7e:af:38:95:f2:68:3f:0a:fa:ca:a7: 26:96:b6:98:ef:cf:31:4c:d0:63:d9:06:95:fb:98:0b:3c:05: c4:db:b6:55:09:2f:48:a6:ae:58:c5:bb:ba:4c:4d:5c:53:93: 78:1c:f6:fc:6c:de:7c:12:ab:88:01:66:bd:70:3a:4d:8e:21: b8:02:f5:24:88:f3:99:46:1a:fc:48:66:6b:3e:aa:ba:ae:f4: d6:24:59:11:e0:a8:8e:5a:b9:69:7e:7a:b9:76:8a:03:37:80: f0:b4:e3:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UOQaaAQ+XidmLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk OTM3NTVhODctYWMyMy00YmI0LTk4NTEtYzUxMDc0ZDVjNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOk2sHjbuzpuJWWxK7XlzK8CpH7i2Iuws2id 0T2v+I7/iqyx6+g6BD/saxdAzzhBfjdTXVj/xr2rIJzRa7/eEcU5EP8uWPdwc+sL MHuUScAAOh6J1xGkSzA4NQn+1kJ222iNNgH7Fl0HwoADYbtOaRl+k1hP3068Xn3l aOtWAAzz1oF48evMDm1INSSogkLCUqY/z9P6MqrOkV+ON0gkEF65o24R81l4iImE Jw7pJXjPu47MLC2vjlPRxXN1XhF/tUnNn7vSOTTShJa/vTD1sp1Qr6j96GaDPzkH +eBcjW9joZkVkTfRRbx4K24EkWV6Hs8eXh9DissKyIBmTfEwTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA/YQ1uN/IXYZGs7aWNblkUuKZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvODRkNTcxZjItNjZlMS0z ZjEyLTkyMzAtMDYzZTdjODFiNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0XwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaf49IXxE+TU0wim4jKAou9w4Zp5ujr53WFHH9DeCwLv3vvW1pOH+aX RLrbindR+yLI8+UIAwdOEvV38KlOF7gt04XmrBauhwoQqaRTBifepY/qHq7k5r/Z q4zh+QrXapU0HnqbCLAUXksWQ6nesMmzYFC7qK1YotZ3j5QB1r5eCh4j1taADpBp 3Xw+wicevlRJE1klczF+rziV8mg/CvrKpyaWtpjvzzFM0GPZBpX7mAs8BcTbtlUJ L0imrljFu7pMTVxTk3gc9vxs3nwSq4gBZr1wOk2OIbgC9SSI85lGGvxIZms+qrqu 9NYkWRHgqI5auWl+erl2igM3gPC04zQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:11:32 2025 by rpki-client