$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa File: 2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa (raw, json) Hash identifier: 7R/+f7XTcVhgUC9e0CfYHzlim0AtYNSgBEKmt10iGpU= Subject key identifier: 57:DD:09:B9:D3:15:F2:14:0B:28:C3:0F:91:80:13:92:4A:87:CA:EC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACE0BA91802348FA51A9BB080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 209.131.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a9:18:02:34:8f:a5:1a:9b:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=226fbc32-3f05-4d3a-8239-9adbbcd40792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:c3:31:6f:1c:40:42:6f:e9:a9:5d:09:0c: b8:14:f7:a0:36:96:66:3e:93:b8:e8:85:b3:39:1c: a4:18:dd:40:49:d2:86:2e:f8:da:a3:29:cf:bb:4a: 72:f0:be:09:b0:7a:61:01:db:35:5d:ca:99:b7:d6: 3b:72:26:73:bb:be:43:4b:47:34:01:b3:91:ef:df: ba:e3:f0:41:5c:ec:e9:f0:4d:4e:93:d0:a8:d2:1d: 82:9c:a3:44:b5:55:ee:3d:ee:64:a2:18:f6:48:a6: ed:c0:56:53:11:6e:de:45:32:80:9e:84:e4:26:b6: 9f:3e:c2:a7:0a:71:da:56:58:fe:62:53:7b:d9:67: c2:ae:dc:2a:c0:d5:09:b7:a7:d5:92:75:9c:30:f1: 15:25:88:fa:3d:97:e7:ae:a0:45:b8:54:57:a4:fa: e5:2a:f0:1f:83:db:14:97:ae:82:92:2f:81:56:ba: 9e:c0:df:6e:d3:68:1b:c6:f8:a2:4b:3a:0d:60:07: 82:9b:75:35:5b:4b:54:af:19:71:67:ad:df:23:e3: 26:2c:c9:ef:9b:ac:f6:d5:31:b8:f0:a1:c6:58:87: 29:89:4f:71:ec:7d:4d:3d:eb:a4:50:67:cd:5f:e0: e9:6c:e4:4e:5e:b2:ed:50:9d:34:d4:6e:25:9d:d2: 43:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DD:09:B9:D3:15:F2:14:0B:28:C3:0F:91:80:13:92:4A:87:CA:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8b:32:30:4d:5f:52:21:eb:04:73:7d:c8:08:24:7c:00:d4: 34:f1:2d:d9:33:23:52:41:d4:cb:1e:29:5c:b7:cc:c3:ae:8a: 8d:8d:d5:3e:77:4e:80:18:51:37:c7:6b:1d:84:14:41:36:bd: ec:bd:b1:32:e3:10:28:27:9d:c8:40:2e:01:47:78:d8:e0:be: 47:43:a5:2d:55:37:49:6c:fd:25:bd:07:02:78:b1:23:78:c1: 18:99:36:d0:1b:85:35:ed:d1:13:7d:ad:59:93:29:2f:2a:86: 71:be:fb:14:74:82:4d:52:b2:1a:36:ae:af:e0:df:ca:6c:ef: 24:c3:ff:aa:e4:e6:6d:d1:98:50:c3:f2:12:c2:f4:eb:f5:7a: 4e:c4:a5:49:85:75:e6:a7:a1:31:a7:e7:73:44:34:c5:cf:89: ee:4a:2e:3d:62:72:fa:42:10:15:5a:a2:a9:a9:c5:dd:fc:1b: 5d:42:e8:3a:82:87:9e:f6:38:dd:f5:20:a0:ee:32:d2:df:da: 69:3f:d9:33:cb:42:36:4d:9d:44:63:67:2d:62:78:27:e1:8c: 85:18:80:61:dc:ad:b9:db:6e:94:9d:18:db:8a:3a:1b:6d:09: 9f:bb:cc:7a:cf:94:c7:19:40:97:94:bd:7c:c4:a5:77:a9:ac: e7:4b:6f:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6kYAjSPpRqbsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MjI2ZmJjMzItM2YwNS00ZDNhLTgyMzktOWFkYmJjZDQwNzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7XDMW8cQEJv6aldCQy4FPegNpZmPpO46IWz ORykGN1ASdKGLvjaoynPu0py8L4JsHphAds1XcqZt9Y7ciZzu75DS0c0AbOR79+6 4/BBXOzp8E1Ok9Co0h2CnKNEtVXuPe5kohj2SKbtwFZTEW7eRTKAnoTkJrafPsKn CnHaVlj+YlN72WfCrtwqwNUJt6fVknWcMPEVJYj6PZfnrqBFuFRXpPrlKvAfg9sU l66Cki+BVrqewN9u02gbxviiSzoNYAeCm3U1W0tUrxlxZ63fI+MmLMnvm6z21TG4 8KHGWIcpiU9x7H1NPeukUGfNX+DpbOROXrLtUJ001G4lndJDjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfdCbnTFfIUCyjDD5GAE5JKh8rsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmFiOGUzMDEtOGZmMy0z OGM3LWFjNGYtOWM0OWNkMDJlMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESLMjBNX1Ih6wRzfcgIJHwA1DTxLdkzI1JB1MseKVy3zMOuio2N1T53 ToAYUTfHax2EFEE2vey9sTLjECgnnchALgFHeNjgvkdDpS1VN0ls/SW9BwJ4sSN4 wRiZNtAbhTXt0RN9rVmTKS8qhnG++xR0gk1Ssho2rq/g38ps7yTD/6rk5m3RmFDD 8hLC9Ov1ek7EpUmFdeanoTGn53NENMXPie5KLj1icvpCEBVaoqmpxd38G11C6DqC h572ON31IKDuMtLf2mk/2TPLQjZNnURjZy1ieCfhjIUYgGHcrbnbbpSdGNuKOhtt CZ+7zHrPlMcZQJeUvXzEpXeprOdLbwc= -----END CERTIFICATE-----Generated at Sat Aug 23 20:55:46 2025 by rpki-client