$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b88520f3-7878-37ce-a8a8-f7f92f25c1fa.roa File: b88520f3-7878-37ce-a8a8-f7f92f25c1fa.roa (raw, json) Hash identifier: +qIwtcULME3meNbGYsKNzKG52taBy5d7p3F9y64Fy2c= Subject key identifier: FD:42:FA:A3:75:8B:CB:32:76:71:51:03:57:1D:98:D4:92:F9:A1:B3 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584AE1965C0E993D8ED213E09F00 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b88520f3-7878-37ce-a8a8-f7f92f25c1fa.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 3848 IP address blocks: 209.139.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:5c:0e:99:3d:8e:d2:13:e0:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=89a4991d-3518-4e3d-be46-6da391b8d724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:84:a4:0c:2d:35:11:a4:af:63:e3:bb:b3: ff:7b:85:7e:24:b6:cd:70:15:e9:ba:cd:6a:6c:a1: 0c:70:5a:61:06:5e:88:50:8b:22:15:0d:6d:28:1f: f9:9f:9b:8a:0f:2a:5a:70:5b:6c:e8:58:f7:5e:63: 94:2b:fc:7e:96:03:6e:a8:7f:94:8d:de:61:c0:65: 40:33:7c:ae:86:af:5a:b2:d8:43:6f:e9:20:32:4b: 12:aa:f5:c9:c3:b0:9b:b8:19:39:de:83:7e:e1:71: b2:bf:9d:23:ea:54:84:fb:65:fb:05:f6:04:70:9f: 43:75:ff:a1:21:a0:e8:02:09:46:24:b9:86:72:a2: 3e:da:18:55:43:19:78:ab:48:44:a7:55:07:0b:0e: a6:a3:e6:24:0e:70:3e:0b:74:a2:cf:a0:94:72:e3: 55:74:c2:d0:8c:65:8f:36:d1:80:45:b1:ba:32:4c: 5c:42:c8:5d:cb:2d:a7:29:14:d1:a1:d1:a8:fe:01: 7a:22:56:9c:98:39:0a:35:7d:23:09:bd:68:42:3f: 24:59:40:5f:80:0a:21:64:03:70:37:1a:2b:8d:1d: 4f:56:83:23:78:90:2a:cb:72:d4:91:d9:c3:1b:ab: f4:f5:5c:e4:94:90:06:07:12:c2:60:cf:65:48:5f: 93:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:42:FA:A3:75:8B:CB:32:76:71:51:03:57:1D:98:D4:92:F9:A1:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b88520f3-7878-37ce-a8a8-f7f92f25c1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 209.139.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:28:61:ae:a1:c2:07:4e:4a:6b:15:e6:a7:7a:a3:bf:b9:2a: db:f3:b6:ea:aa:25:a2:fc:84:65:b6:b7:0c:35:b7:2a:18:6b: d0:77:d6:6b:98:22:05:cd:07:05:2a:41:d6:04:cd:33:a2:6d: 33:98:3f:23:61:f4:a5:c8:4d:bb:47:4c:61:3b:dc:03:f2:a1: 36:31:b1:a0:2b:a5:92:1c:a2:f4:fb:da:e4:58:71:12:6a:43: 69:b3:c1:d4:1e:a3:0c:ad:11:47:15:1e:09:9a:a0:23:30:77: 53:09:cf:e8:87:cb:3e:45:c4:0e:a3:84:79:86:32:c0:c8:57: b1:22:24:7e:c4:10:8f:67:26:60:92:a3:35:05:d2:e9:65:c3: 80:b3:e3:f0:ec:68:70:01:75:0a:a1:0a:b3:53:01:af:90:f4: 23:dd:5e:f8:29:74:8a:2a:11:96:40:2c:17:92:5d:e2:7f:9f: e0:73:79:68:ea:34:a3:33:d5:bf:5e:4a:66:6f:52:22:a2:ec: a2:87:5a:9d:76:c2:c5:26:a2:b1:7a:95:17:23:4a:ee:53:e5: e6:94:02:f8:83:80:6c:47:94:89:04:ba:f4:9f:d9:16:e8:3f: 7a:d5:63:3b:4c:53:93:fb:ca:09:11:b4:de:20:ec:0f:07:7e: d3:3c:cf:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhllwOmT2O0hPgnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk ODlhNDk5MWQtMzUxOC00ZTNkLWJlNDYtNmRhMzkxYjhkNzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGKEpAwtNRGkr2Pju7P/e4V+JLbNcBXpus1q bKEMcFphBl6IUIsiFQ1tKB/5n5uKDypacFts6Fj3XmOUK/x+lgNuqH+Ujd5hwGVA M3yuhq9asthDb+kgMksSqvXJw7CbuBk53oN+4XGyv50j6lSE+2X7BfYEcJ9Ddf+h IaDoAglGJLmGcqI+2hhVQxl4q0hEp1UHCw6mo+YkDnA+C3Siz6CUcuNVdMLQjGWP NtGARbG6MkxcQshdyy2nKRTRodGo/gF6IlacmDkKNX0jCb1oQj8kWUBfgAohZANw NxorjR1PVoMjeJAqy3LUkdnDG6v09VzklJAGBxLCYM9lSF+TfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1C+qN1i8sydnFRA1cdmNSS+aGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjg4NTIwZjMtNzg3OC0z N2NlLWE4YTgtZjdmOTJmMjVjMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YvTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4oYa6hwgdOSmsV5qd6o7+5KtvztuqqJaL8hGW2tww1tyoYa9B31muY IgXNBwUqQdYEzTOibTOYPyNh9KXITbtHTGE73APyoTYxsaArpZIcovT72uRYcRJq Q2mzwdQeowytEUcVHgmaoCMwd1MJz+iHyz5FxA6jhHmGMsDIV7EiJH7EEI9nJmCS ozUF0ullw4Cz4/DsaHABdQqhCrNTAa+Q9CPdXvgpdIoqEZZALBeSXeJ/n+BzeWjq NKMz1b9eSmZvUiKi7KKHWp12wsUmorF6lRcjSu5T5eaUAviDgGxHlIkEuvSf2Rbo P3rVYztMU5P7ygkRtN4g7A8HftM8z3w= -----END CERTIFICATE-----Generated at Sun Aug 24 09:00:05 2025 by rpki-client