$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa File: 67ef0949-c298-330b-aabd-6a4c950d7ad6.roa (raw, json) Hash identifier: t/AGyd0QfXNkKCyi6pqMQs42JSkcayYUXbUG7w26vvk= Subject key identifier: 0D:A5:89:27:C1:DB:07:94:98:7C:5B:5D:38:0C:68:04:A9:4F:70:1F Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584AC5AB9218979F0B5840D4A100 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 16696 IP address blocks: 209.20.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:92:18:97:9f:0b:58:40:d4:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=d83716d1-6d12-4053-ac2e-83158ddc3e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:49:f4:1c:c1:ea:47:3c:ff:63:67:1e:5f: 00:72:6c:36:56:a2:84:d8:79:6e:50:bc:8b:97:ad: 65:3b:27:3a:09:0a:ad:3d:48:c4:96:af:3f:71:22: 06:5d:a5:51:b4:e4:a0:9a:f5:e2:d4:92:87:4f:f3: b5:42:50:64:76:5b:f1:93:a1:52:35:0b:3f:b2:b9: f2:b6:58:01:7e:f2:a4:d6:99:0d:69:ec:af:04:31: 3a:0b:11:93:a0:aa:db:a9:51:4e:7d:ff:a5:e4:f3: 13:70:87:0b:14:be:2e:74:7d:4e:c2:c9:33:46:3e: db:67:60:b4:dd:23:d5:ce:c9:cb:8b:0c:6d:d5:bc: 3d:33:77:b6:6b:da:cd:ef:42:ab:5f:71:ba:ea:e8: 43:c1:56:4b:ca:f7:cb:93:25:e2:04:61:60:a0:f6: 57:f6:62:02:2d:82:af:8c:c7:7c:00:d2:8b:46:84: 72:fd:1d:cf:8c:34:3f:3b:24:01:a3:58:8d:67:fa: ed:42:e0:3e:de:cd:89:38:fe:d2:30:39:5e:b1:cd: e3:2f:7c:f3:a8:78:19:7c:fb:79:5d:e8:db:a6:02: 06:6f:56:76:c6:43:5c:8b:80:f1:07:1b:f7:b8:c3: bc:07:6d:15:bc:5e:ea:46:df:f4:ba:32:65:a6:4f: 60:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A5:89:27:C1:DB:07:94:98:7C:5B:5D:38:0C:68:04:A9:4F:70:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 209.20.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b5:25:f8:c7:9f:a6:41:da:2f:fd:3c:f7:52:af:54:e3:43: 18:7c:a2:66:b9:0e:f3:51:74:2f:50:3d:87:3d:2a:7d:e2:9d: d1:e2:22:42:ef:41:fc:70:d4:e3:2c:5f:c9:49:da:a7:33:ba: e6:7b:b6:40:75:c7:49:1d:e2:58:9d:2a:c3:ac:93:a2:4f:e3: a6:9c:78:59:e8:77:de:20:62:93:99:f6:43:f9:42:ff:b3:85: 1a:31:d2:2f:29:3c:12:16:fa:6c:ba:9d:7b:ab:4d:26:4f:6c: 53:b0:6b:63:71:f1:e1:85:ba:2a:c2:86:9e:ff:7b:8e:19:d1: f1:ee:eb:f7:a6:4f:33:33:84:2a:d7:59:69:a7:02:92:fe:9e: 4c:56:dd:2f:71:6f:41:9f:93:4d:52:50:6b:9f:fc:dc:9a:f8: 4b:5b:f0:46:3a:83:ab:02:58:17:70:b4:a6:94:07:26:7c:7c: b0:1a:7b:bd:00:ef:c2:4d:1d:47:71:03:4b:43:76:97:9d:39: ea:a0:86:45:e3:ea:74:f3:2e:c3:42:de:b3:bf:39:df:92:69: a8:cf:52:14:16:d9:71:5e:b7:c1:e7:8d:04:ac:e6:6c:dd:4f: 28:11:23:f8:75:a7:41:f0:ce:17:4b:08:9d:5f:a6:b7:73:0b: 04:9f:a6:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5IYl58LWEDUoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZDgzNzE2ZDEtNmQxMi00MDUzLWFjMmUtODMxNThkZGMzZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2JJ9BzB6kc8/2NnHl8Acmw2VqKE2HluULyL l61lOyc6CQqtPUjElq8/cSIGXaVRtOSgmvXi1JKHT/O1QlBkdlvxk6FSNQs/srny tlgBfvKk1pkNaeyvBDE6CxGToKrbqVFOff+l5PMTcIcLFL4udH1OwskzRj7bZ2C0 3SPVzsnLiwxt1bw9M3e2a9rN70KrX3G66uhDwVZLyvfLkyXiBGFgoPZX9mICLYKv jMd8ANKLRoRy/R3PjDQ/OyQBo1iNZ/rtQuA+3s2JOP7SMDlesc3jL3zzqHgZfPt5 XejbpgIGb1Z2xkNci4DxBxv3uMO8B20VvF7qRt/0ujJlpk9gMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2liSfB2weUmHxbXTgMaASpT3AfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjdlZjA5NDktYzI5OC0z MzBiLWFhYmQtNmE0Yzk1MGQ3YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO1JfjHn6ZB2i/9PPdSr1TjQxh8oma5DvNRdC9QPYc9Kn3indHiIkLv Qfxw1OMsX8lJ2qczuuZ7tkB1x0kd4lidKsOsk6JP46aceFnod94gYpOZ9kP5Qv+z hRox0i8pPBIW+my6nXurTSZPbFOwa2Nx8eGFuirChp7/e44Z0fHu6/emTzMzhCrX WWmnApL+nkxW3S9xb0Gfk01SUGuf/Nya+Etb8EY6g6sCWBdwtKaUByZ8fLAae70A 78JNHUdxA0tDdpedOeqghkXj6nTzLsNC3rO/Od+SaajPUhQW2XFet8HnjQSs5mzd TygRI/h1p0HwzhdLCJ1fprdzCwSfpjA= -----END CERTIFICATE-----Generated at Sun Aug 24 07:35:42 2025 by rpki-client