$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa File: d34bfd9d-57a4-3452-aad3-b812c11a1320.roa (raw, json) Hash identifier: Y3K7j2uh/HeUYu0kGhfsnX/DYJLfMfC9zLS+AUTgTUc= Subject key identifier: 93:B0:EB:1B:63:90:87:25:50:C8:A8:06:7D:DE:91:35:42:B2:F3:B7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACE0BABDFC2095E314EAB7400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 209.131.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:ab:df:c2:09:5e:31:4e:ab:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=15500f52-f580-4736-a776-f202d88650a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3e:54:7c:3c:13:14:6b:1d:0b:37:b7:7b:de: 2d:88:a4:f3:21:60:be:14:c0:4a:c7:7f:72:e4:04: b3:e1:de:cc:5b:9f:55:8e:52:52:1f:25:d2:1e:e5: e8:be:94:ea:fe:ec:68:33:02:a6:07:36:5a:b5:ff: f2:d6:85:b0:76:68:6b:ef:ab:df:da:c5:0f:39:61: ac:4a:2a:ec:38:40:66:68:23:46:ee:4c:8f:a6:a7: 94:8b:be:23:c8:32:53:9c:09:ef:a3:6b:90:f8:30: 5d:18:2c:e6:9a:11:ab:b2:85:a6:1c:e2:d0:0b:96: ee:d4:07:eb:42:98:dc:ba:14:77:1e:f1:27:02:e3: 3e:d7:c8:b0:14:bd:c0:a9:4a:9b:42:7f:b7:48:d1: a2:0b:3c:c8:41:29:01:5a:f0:28:84:40:8c:08:21: b6:a5:eb:d5:e4:5a:c7:3d:81:d0:c2:85:43:95:c3: 92:37:48:bf:74:05:0a:89:f6:d4:f9:f0:c3:a1:31: 40:61:eb:53:e8:8b:17:86:9d:98:fe:0f:c6:55:96: a3:95:01:40:c3:72:82:20:0b:5e:0f:8e:b7:1c:ac: 4e:e1:f3:11:06:be:4d:48:8d:9e:15:8c:14:0b:b0: cc:45:ea:4b:e8:88:cb:d4:75:0c:8b:0e:6b:df:54: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B0:EB:1B:63:90:87:25:50:C8:A8:06:7D:DE:91:35:42:B2:F3:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:7b:de:98:13:b5:84:11:79:3d:84:79:12:fd:5d:45:ce:05: 71:72:c6:c7:ae:7f:13:66:75:62:76:f8:96:91:b2:e8:bb:25: 84:a2:c4:b0:d9:b0:87:00:4f:b2:dd:34:7f:33:22:bd:9a:92: ce:5e:9b:2f:fa:5a:47:09:62:ca:f5:fe:cd:11:a2:d8:c7:5a: 8b:ec:4f:99:0f:33:ce:99:0b:df:46:1a:e3:25:9a:0c:00:66: 8a:b5:76:ee:8b:2d:bb:be:88:76:7f:20:b1:d1:62:5c:34:25: 0f:82:1a:02:5e:3f:a8:2e:4a:86:b7:89:c6:50:e6:5e:d7:eb: ad:ed:90:49:41:0b:c2:34:e6:03:32:b5:61:ba:45:01:74:10: 2d:0e:3f:48:d9:8d:e8:d3:a2:e1:34:cc:e3:91:f5:ba:c4:aa: cf:36:cb:36:46:1d:92:bd:15:59:fe:b6:64:65:98:ad:0c:67: 5b:10:70:d6:a1:5f:38:58:20:57:fc:4b:59:1d:ce:25:f0:3c: 3e:8a:ef:d8:f9:65:e7:f9:94:1a:b6:a0:a9:3f:b6:b2:ea:41: a0:42:b0:14:79:c8:36:74:a0:9f:d9:a4:cf:ed:5a:ca:df:e6: 80:0c:72:7a:c9:5b:86:54:37:5d:cf:8f:4f:f9:19:02:10:04: cd:55:99:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6vfwgleMU6rdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MTU1MDBmNTItZjU4MC00NzM2LWE3NzYtZjIwMmQ4ODY1MGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD5UfDwTFGsdCze3e94tiKTzIWC+FMBKx39y 5ASz4d7MW59VjlJSHyXSHuXovpTq/uxoMwKmBzZatf/y1oWwdmhr76vf2sUPOWGs SirsOEBmaCNG7kyPpqeUi74jyDJTnAnvo2uQ+DBdGCzmmhGrsoWmHOLQC5bu1Afr QpjcuhR3HvEnAuM+18iwFL3AqUqbQn+3SNGiCzzIQSkBWvAohECMCCG2pevV5FrH PYHQwoVDlcOSN0i/dAUKifbU+fDDoTFAYetT6IsXhp2Y/g/GVZajlQFAw3KCIAte D463HKxO4fMRBr5NSI2eFYwUC7DMRepL6IjL1HUMiw5r31TfWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOw6xtjkIclUMioBn3ekTVCsvO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDM0YmZkOWQtNTdhNC0z NDUyLWFhZDMtYjgxMmMxMWExMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN73pgTtYQReT2EeRL9XUXOBXFyxseufxNmdWJ2+JaRsui7JYSixLDZ sIcAT7LdNH8zIr2aks5emy/6WkcJYsr1/s0RotjHWovsT5kPM86ZC99GGuMlmgwA Zoq1du6LLbu+iHZ/ILHRYlw0JQ+CGgJeP6guSoa3icZQ5l7X663tkElBC8I05gMy tWG6RQF0EC0OP0jZjejTouE0zOOR9brEqs82yzZGHZK9FVn+tmRlmK0MZ1sQcNah XzhYIFf8S1kdziXwPD6K79j5Zef5lBq2oKk/trLqQaBCsBR5yDZ0oJ/ZpM/tWsrf 5oAMcnrJW4ZUN13Pj0/5GQIQBM1VmRo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:51:41 2025 by rpki-client