$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa File: ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa (raw, json) Hash identifier: LmkK3AW6HJP2nljcDqzQ7jqJ748OaWQQDSG4VttnarQ= Subject key identifier: F8:3D:3A:01:26:A8:76:A9:AF:AF:73:D7:89:8D:DA:05:CC:41:2C:4A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACE0BA9295026E3E48239E680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 209.131.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a9:29:50:26:e3:e4:82:39:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=81ef8ad2-5115-4d74-9d48-adca28efd8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:92:db:61:49:0d:4d:0a:51:ac:66:af:97:81: 12:26:46:ff:17:2e:66:76:d3:86:f6:00:4d:cb:18: a7:47:87:f2:14:5a:00:7f:77:80:54:8e:45:d7:5b: cc:07:46:e9:a2:97:08:1f:76:c0:02:9a:2f:ea:12: 09:af:85:7b:dd:ea:53:94:db:00:fe:9a:34:99:39: 62:1e:0d:69:ea:11:8c:4b:a7:83:72:4c:a2:7d:6e: 80:89:14:4b:e2:c2:e0:da:88:9b:2e:7f:13:dd:5f: 64:06:48:ec:dd:6b:59:61:b2:ff:b4:59:0b:d3:b2: aa:d1:52:e2:96:ad:90:0b:c2:30:ad:ea:cc:00:79: 15:63:22:dd:3e:62:20:a5:9b:20:25:97:4b:12:47: e8:2e:a9:d2:e8:8e:43:db:28:1a:81:3b:b8:19:9d: 90:49:98:96:44:96:6f:3d:fb:9d:69:e7:ee:f7:be: cd:97:1a:94:cf:45:4e:5b:d9:79:06:24:6f:24:c0: 3e:e0:2b:db:aa:a4:64:6e:b7:9f:8b:69:fd:94:37: dc:38:2e:7c:1f:b8:79:5f:a6:e2:f9:f5:f7:8c:5e: b1:16:df:f2:ec:e1:e1:07:d1:fa:c8:d2:95:be:d1: 1e:28:4a:42:ac:a6:50:51:49:29:53:8f:a7:b4:02: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3D:3A:01:26:A8:76:A9:AF:AF:73:D7:89:8D:DA:05:CC:41:2C:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:97:67:dd:96:11:cb:34:8e:ae:5e:46:4c:92:85:a3:47:cf: b8:0c:9c:af:3f:71:04:57:5c:74:0e:30:15:33:91:e7:28:37: 2e:a2:61:13:62:af:ae:bf:40:ad:7a:0b:a1:69:fd:cd:93:b4: c5:17:73:aa:2e:84:21:bd:13:b4:4c:eb:97:d7:fa:10:49:fe: 54:8a:e6:62:4b:9d:be:df:51:49:fa:52:71:8b:78:d2:75:de: c8:e4:c8:c6:89:3f:3d:bb:1c:cc:98:9e:84:94:9a:a7:a9:6a: c1:7f:43:b9:1e:78:35:71:a4:a5:8a:74:2c:4e:ad:10:28:c0: 26:d0:34:4d:49:72:01:fd:1d:d4:8e:ef:b3:bf:f8:a6:06:b2: 7e:d6:48:6d:eb:47:e8:66:48:1e:4a:16:ad:d7:6d:e5:ef:e1: 25:d7:61:98:b4:08:d5:a4:4e:ac:d2:9a:a6:05:64:3f:13:35: 73:6f:8e:7d:18:b8:4e:f7:7d:1f:71:74:28:8e:42:f6:a5:be: 73:66:d9:ab:e3:f4:6b:7c:87:ef:11:01:24:b1:a3:d7:4c:35: 9e:76:86:39:7f:20:65:8d:e8:90:7f:fc:a6:6f:de:fa:48:22: a0:68:16:73:7a:7c:e2:9a:ae:a8:d3:86:3d:0b:f1:88:9b:fc: 59:63:96:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6kpUCbj5II55oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ODFlZjhhZDItNTExNS00ZDc0LTlkNDgtYWRjYTI4ZWZkOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5LbYUkNTQpRrGavl4ESJkb/Fy5mdtOG9gBN yxinR4fyFFoAf3eAVI5F11vMB0bpopcIH3bAApov6hIJr4V73epTlNsA/po0mTli Hg1p6hGMS6eDckyifW6AiRRL4sLg2oibLn8T3V9kBkjs3WtZYbL/tFkL07Kq0VLi lq2QC8IwrerMAHkVYyLdPmIgpZsgJZdLEkfoLqnS6I5D2ygagTu4GZ2QSZiWRJZv Pfudaefu977NlxqUz0VOW9l5BiRvJMA+4CvbqqRkbrefi2n9lDfcOC58H7h5X6bi +fX3jF6xFt/y7OHhB9H6yNKVvtEeKEpCrKZQUUkpU4+ntAJjfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPg9OgEmqHapr69z14mN2gXMQSxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmZhMmVlYWYtZmUzNS0z ZDRlLWE1MDMtZDEyZDhhMTVlNjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWXZ92WEcs0jq5eRkyShaNHz7gMnK8/cQRXXHQOMBUzkecoNy6iYRNi r66/QK16C6Fp/c2TtMUXc6ouhCG9E7RM65fX+hBJ/lSK5mJLnb7fUUn6UnGLeNJ1 3sjkyMaJPz27HMyYnoSUmqepasF/Q7keeDVxpKWKdCxOrRAowCbQNE1JcgH9HdSO 77O/+KYGsn7WSG3rR+hmSB5KFq3XbeXv4SXXYZi0CNWkTqzSmqYFZD8TNXNvjn0Y uE73fR9xdCiOQvalvnNm2avj9Gt8h+8RASSxo9dMNZ52hjl/IGWN6JB//KZv3vpI IqBoFnN6fOKarqjThj0L8Yib/Fljlm0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:00:42 2025 by rpki-client