$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9440f923-79a8-31d0-92dd-fb6c8d9e8f5f.roa File: 9440f923-79a8-31d0-92dd-fb6c8d9e8f5f.roa (raw, json) Hash identifier: RAs0VOGj88n3G7g+G8mg6pW0Z9PXjpRlbjvRk/Ekmps= Subject key identifier: 0E:35:62:52:40:57:02:AB:22:2F:85:EF:8D:82:FE:E3:6F:32:05:5A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB01021A45C4C72882E9080 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9440f923-79a8-31d0-92dd-fb6c8d9e8f5f.roa Signing time: Sun 03 Aug 2025 02:35:52 +0000 ROA not before: Sun 03 Aug 2025 02:35:52 +0000 ROA not after: Sat 01 Nov 2025 02:35:52 +0000 asID: 53813 IP address blocks: 209.55.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:10:21:a4:5c:4c:72:88:2e:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:52 2025 GMT Not After : Nov 1 02:35:52 2025 GMT Subject: CN=1dad1b46-610a-4e62-8b8e-2d679faed049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e4:9e:9c:04:13:90:3e:2e:0d:4d:0c:8d:bd: 42:36:8a:10:57:5d:af:79:5d:9b:03:c1:6a:3f:c6: df:31:e3:9f:81:0e:2b:b8:91:85:9b:81:31:97:59: 61:17:b7:20:af:e0:1a:13:dc:a1:cb:94:2a:9e:93: 70:c2:6a:0d:5d:8d:93:7b:02:ce:4b:99:90:74:60: 97:b8:9f:70:80:67:b9:63:c8:b6:b1:f5:fa:d2:45: f0:c0:cb:8e:a9:c8:cd:7f:76:05:f9:71:bf:df:86: 92:72:c6:91:44:8b:e4:f4:6f:0a:8f:f6:ff:15:f9: 12:cc:a0:ed:d3:96:23:d9:3d:a7:e9:67:74:9f:31: 25:f3:90:b5:54:66:15:e7:be:68:48:57:f6:79:74: 95:9a:c4:79:16:bc:93:34:47:35:46:91:c7:1c:0e: 99:ab:aa:4b:8d:fe:10:2d:c9:e7:fb:72:db:63:76: 83:ef:f6:f7:6f:6b:fe:61:36:ce:d5:8b:c9:bc:b8: 22:ac:ee:b1:64:cb:66:41:9b:0f:08:e8:32:03:6d: 5c:bb:4e:21:40:74:0d:d4:7a:cb:0e:b5:69:05:a6: 4f:59:7a:e4:f2:be:11:77:18:d7:b1:c6:bc:c4:b5: c8:2d:db:6b:6e:8b:6a:a8:bd:08:8d:b9:66:5a:f6: 4a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:35:62:52:40:57:02:AB:22:2F:85:EF:8D:82:FE:E3:6F:32:05:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9440f923-79a8-31d0-92dd-fb6c8d9e8f5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1e:38:aa:dd:27:c3:30:85:2f:35:08:27:ab:bc:46:1e:e3: 39:7e:d0:b6:6f:a9:6f:1c:dd:9d:cb:96:c2:ca:80:7d:86:c4: 8a:cb:a2:4f:1c:0c:9b:2a:88:01:14:e9:8a:01:ab:39:9a:77: a1:54:bf:ec:f5:e4:6b:51:13:b3:1c:25:4d:82:e7:96:05:3e: b2:87:36:c9:ae:88:b0:80:75:54:9e:f6:c8:b5:50:64:91:30: c0:e7:66:ec:f6:07:2a:93:a7:72:45:5e:d4:75:2d:a0:91:07: 66:d5:67:61:88:8c:74:6b:8c:b7:aa:04:ae:f9:f2:cc:e4:66: 39:0a:1b:e3:61:6c:4c:7b:56:a2:a6:95:c0:90:16:89:3a:c3: 5a:c6:18:f9:ca:74:91:20:ec:57:9e:b4:05:b2:b6:e6:4a:fe: 3f:ad:f0:cf:f1:a8:a5:64:e1:1a:8c:7a:a9:b5:ba:ea:1c:50: 45:66:17:3d:88:3c:b2:30:4c:d9:f2:72:87:c0:8a:42:d5:6a: 31:35:31:62:44:ad:b8:3c:09:d5:70:3a:87:2d:4a:05:9d:71: 92:86:cd:8d:8f:f8:fb:5c:16:47:7e:31:c7:4e:8b:a3:0b:1b: 49:ef:53:c5:91:a6:6c:de:e8:4d:44:82:41:69:fc:ae:b8:fe: d7:0e:74:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sBAhpFxMcogukIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU1MloXDTI1MTEwMTAyMzU1MlowLzEtMCsGA1UEAxMk MWRhZDFiNDYtNjEwYS00ZTYyLThiOGUtMmQ2NzlmYWVkMDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+SenAQTkD4uDU0Mjb1CNooQV12veV2bA8Fq P8bfMeOfgQ4ruJGFm4Exl1lhF7cgr+AaE9yhy5QqnpNwwmoNXY2TewLOS5mQdGCX uJ9wgGe5Y8i2sfX60kXwwMuOqcjNf3YF+XG/34aScsaRRIvk9G8Kj/b/FfkSzKDt 05Yj2T2n6Wd0nzEl85C1VGYV575oSFf2eXSVmsR5FryTNEc1RpHHHA6Zq6pLjf4Q Lcnn+3LbY3aD7/b3b2v+YTbO1YvJvLgirO6xZMtmQZsPCOgyA21cu04hQHQN1HrL DrVpBaZPWXrk8r4RdxjXsca8xLXILdtrbotqqL0IjblmWvZKnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA41YlJAVwKrIi+F742C/uNvMgVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTQ0MGY5MjMtNzlhOC0z MWQwLTkyZGQtZmI2YzhkOWU4ZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgeOKrdJ8MwhS81CCervEYe4zl+0LZvqW8c3Z3LlsLKgH2GxIrLok8c DJsqiAEU6YoBqzmad6FUv+z15GtRE7McJU2C55YFPrKHNsmuiLCAdVSe9si1UGSR MMDnZuz2ByqTp3JFXtR1LaCRB2bVZ2GIjHRrjLeqBK758szkZjkKG+NhbEx7VqKm lcCQFok6w1rGGPnKdJEg7FeetAWytuZK/j+t8M/xqKVk4RqMeqm1uuocUEVmFz2I PLIwTNnycofAikLVajE1MWJErbg8CdVwOoctSgWdcZKGzY2P+PtcFkd+McdOi6ML G0nvU8WRpmze6E1EgkFp/K64/tcOdPQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:06:54 2025 by rpki-client