$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa File: 8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa (raw, json) Hash identifier: fh45LZhgKCh80xEo7cOCjJbUp4xXQYabcGexcVDc3X0= Subject key identifier: F5:DC:CC:DE:22:4C:E8:45:B7:D4:C0:6A:FA:03:ED:65:8E:69:F4:CA Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F4328584AD0D642F320878CD8162CB760 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 19198 IP address blocks: 209.178.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:42:f3:20:87:8c:d8:16:2c:b7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=ed2b6151-eb11-4227-a427-145f5e9b11d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:03:22:a0:5c:c9:42:ac:51:e4:5e:c4:d7: 1c:58:d7:fe:b8:48:80:05:45:07:21:d6:c6:1e:1c: c2:be:7b:dc:79:9d:08:90:98:db:27:bc:af:07:f0: 67:55:bc:dc:ea:61:56:a1:3a:c3:72:b0:45:8e:d0: fb:1a:bb:70:47:12:3f:a4:0c:e1:1b:ae:35:37:f3: 4b:bb:38:e5:68:19:20:a2:fb:d7:1a:3e:ce:64:f6: fb:21:d4:a7:a1:b3:8b:82:60:7f:b0:6d:6b:c1:df: 7b:56:a5:dc:26:5a:48:bf:d1:83:14:e9:d4:eb:41: 59:ed:6c:dd:5b:ab:61:1b:fb:a7:e3:7f:ee:60:42: d9:28:43:fa:b5:10:70:32:e9:bd:e5:10:4e:0a:aa: b3:16:89:e2:68:f4:b0:59:76:49:53:c5:bb:95:a8: 1d:87:53:8d:e5:9d:cc:a2:c2:af:1d:1b:b9:e3:cc: be:2f:b3:d4:ae:c1:f4:49:3e:fb:c4:d2:16:c1:3c: cc:58:19:37:dd:aa:c3:cd:bd:87:ec:66:80:fd:14: 54:89:c0:df:b7:94:98:be:a9:39:30:fb:7d:c1:1b: 31:f9:96:e8:f8:ff:9a:08:14:15:9b:7c:91:cf:4a: 6c:71:c1:fc:9f:6f:0c:aa:72:ec:c2:73:aa:eb:44: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DC:CC:DE:22:4C:E8:45:B7:D4:C0:6A:FA:03:ED:65:8E:69:F4:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 209.178.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:c4:00:b0:dc:e5:23:cb:67:eb:a9:7d:4f:0e:7f:11:fe:5e: 23:58:43:3f:83:ed:e2:b4:5c:2c:82:c5:b0:92:54:5a:25:24: b4:16:5a:fe:8b:74:45:c8:c1:a6:bc:db:68:44:c6:80:6c:45: dd:ac:a6:8f:c8:63:03:4f:cb:49:55:3c:6e:f2:ed:88:6d:14: 4f:60:44:27:ba:77:7b:27:26:75:80:ba:2f:5f:11:fe:8b:f9: 8f:e6:a8:a9:4f:7c:8f:e2:21:49:54:11:77:73:df:0f:81:20: 3e:45:0c:9e:0e:f6:9e:8b:31:f9:43:1c:4d:f9:89:90:00:12: d5:88:6c:42:1f:2b:39:df:90:d4:68:55:79:ca:4d:96:62:fa: 23:99:bf:76:32:ac:80:70:e3:ac:31:c0:c5:53:9d:09:72:0b: 0f:56:1e:cf:f3:18:7f:af:b9:77:1a:ba:a7:fd:55:45:34:87: 0e:26:4b:5d:10:1c:33:34:99:a8:2d:f9:cc:e1:8d:80:87:2c: 8c:63:51:20:d4:85:0e:60:8e:47:33:40:0b:1e:01:66:64:31: 68:4a:95:33:7c:6d:44:51:1c:a3:e2:3e:f7:8c:7d:c6:fb:11: 43:a7:32:da:8c:2c:81:8e:40:19:3c:b9:55:d9:f1:d9:53:a0: 87:d9:90:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kLzIIeM2BYst2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ZWQyYjYxNTEtZWIxMS00MjI3LWE0MjctMTQ1ZjVlOWIxMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9oDIqBcyUKsUeRexNccWNf+uEiABUUHIdbG HhzCvnvceZ0IkJjbJ7yvB/BnVbzc6mFWoTrDcrBFjtD7GrtwRxI/pAzhG641N/NL uzjlaBkgovvXGj7OZPb7IdSnobOLgmB/sG1rwd97VqXcJlpIv9GDFOnU60FZ7Wzd W6thG/un43/uYELZKEP6tRBwMum95RBOCqqzFoniaPSwWXZJU8W7lagdh1ON5Z3M osKvHRu548y+L7PUrsH0ST77xNIWwTzMWBk33arDzb2H7GaA/RRUicDft5SYvqk5 MPt9wRsx+Zbo+P+aCBQVm3yRz0psccH8n28MqnLswnOq60STBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXczN4iTOhFt9TAavoD7WWOafTKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvOGVjZDY5NzgtYzFmMS0z YjlmLTkxMmUtZDRmNmMzMDZjMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0bL0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXEALDc5SPLZ+upfU8OfxH+XiNYQz+D7eK0XCyCxbCSVFolJLQWWv6L dEXIwaa822hExoBsRd2spo/IYwNPy0lVPG7y7YhtFE9gRCe6d3snJnWAui9fEf6L +Y/mqKlPfI/iIUlUEXdz3w+BID5FDJ4O9p6LMflDHE35iZAAEtWIbEIfKznfkNRo VXnKTZZi+iOZv3YyrIBw46wxwMVTnQlyCw9WHs/zGH+vuXcauqf9VUU0hw4mS10Q HDM0magt+czhjYCHLIxjUSDUhQ5gjkczQAseAWZkMWhKlTN8bURRHKPiPveMfcb7 EUOnMtqMLIGOQBk8uVXZ8dlToIfZkL0= -----END CERTIFICATE-----Generated at Sat Aug 23 16:00:10 2025 by rpki-client