$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c7093601-774e-30f5-ac5e-a18688f8332c.roa File: c7093601-774e-30f5-ac5e-a18688f8332c.roa (raw, json) Hash identifier: tdjDb7w+KVdc1v3xg2uXP/ug2ZfqBZuf0emCxk34G6g= Subject key identifier: 6D:CA:5E:E3:AD:9F:A6:45:5E:CE:F6:22:9B:8D:3C:EC:88:00:9B:93 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BC820288935822E3A0440 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c7093601-774e-30f5-ac5e-a18688f8332c.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 394708 IP address blocks: 209.173.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c8:20:28:89:35:82:2e:3a:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=50f01786-1d3f-4172-b265-aef7904a8e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c4:78:4d:a8:85:ea:9f:ff:e1:e6:c3:58:06: 32:12:a8:6c:cb:bd:bc:68:cd:0e:d8:e8:90:15:4a: 94:d4:30:ae:16:77:2b:0e:57:bb:d1:c7:94:e9:91: 81:e7:0b:42:bc:84:be:de:4b:b1:fa:27:cf:3c:32: 06:4c:9a:d8:92:b6:7c:50:b1:ac:f1:c3:06:d3:ad: 10:31:49:c2:97:d5:0d:b3:f7:7e:38:cb:70:69:9b: 62:ea:6d:9c:47:03:a4:23:a6:bc:04:f4:18:b2:a0: 4c:5a:b9:22:31:29:30:9b:0a:af:ec:45:a0:59:60: f6:15:b6:8a:c8:e6:12:c2:88:5c:bd:b6:3a:98:6d: 93:92:aa:89:89:77:fb:da:43:b4:70:4b:5e:32:67: bd:2c:33:10:bd:da:39:76:3b:34:12:62:f5:1a:fe: af:33:3b:0a:c3:07:af:01:a2:3b:6b:d9:26:1f:fe: 9e:24:46:02:4b:0b:c2:5e:6b:a3:f2:1c:8e:c1:74: 07:a7:be:4a:70:24:97:8a:f3:fc:bc:33:d8:e0:0f: e1:5b:86:83:d3:8c:6f:85:53:b1:d4:11:b4:23:66: 7d:8b:4a:45:6f:6a:2a:aa:88:4d:dd:f7:1a:6e:97: a6:49:31:ff:54:f6:5e:af:b3:b6:53:d4:fd:a7:a1: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CA:5E:E3:AD:9F:A6:45:5E:CE:F6:22:9B:8D:3C:EC:88:00:9B:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c7093601-774e-30f5-ac5e-a18688f8332c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 209.173.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:32:08:4b:0a:3a:ce:c9:88:10:52:4c:94:04:34:b9:bf:1e: 4a:02:1c:ac:b7:bc:69:74:80:12:ab:0c:d8:84:e7:c0:f3:4a: 5e:76:68:2c:7e:63:e1:73:3a:7a:d5:96:47:54:37:00:05:89: 03:b4:cb:81:88:38:38:1c:90:8b:fb:5d:9d:aa:a4:8e:cb:dc: b5:da:fd:1e:06:06:89:7d:98:91:eb:13:e7:b1:d2:c8:dd:f0: 11:36:a7:4e:e1:4e:0b:81:00:b6:80:ff:c4:18:6a:3c:c8:70: 0e:0c:74:50:42:35:ca:27:95:3c:13:be:71:34:0a:48:8d:dc: 32:6f:96:15:84:0a:5e:50:bd:f9:56:6b:bf:38:46:59:ac:cb: 40:af:e7:8d:ab:89:2a:7f:61:16:5c:21:62:0e:d7:55:17:e3: 4b:f8:99:eb:59:cc:7a:07:9d:b2:7f:c8:ee:8f:d0:77:bf:6c: e1:01:98:2b:29:2a:40:0f:d3:17:38:6b:f0:78:5e:41:e3:0a: 20:d1:7c:49:70:a5:08:99:ab:31:09:b4:ff:1f:bc:2a:fc:bf: a4:37:ee:bf:29:71:76:1e:07:86:73:a4:4c:30:a3:e1:cd:bd: f4:7d:62:12:1e:29:1d:c5:18:3a:ca:f5:d8:78:3c:14:d8:8b: 47:c8:ea:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8ggKIk1gi46BEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk NTBmMDE3ODYtMWQzZi00MTcyLWIyNjUtYWVmNzkwNGE4ZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MR4TaiF6p//4ebDWAYyEqhsy728aM0O2OiQ FUqU1DCuFncrDle70ceU6ZGB5wtCvIS+3kux+ifPPDIGTJrYkrZ8ULGs8cMG060Q MUnCl9UNs/d+OMtwaZti6m2cRwOkI6a8BPQYsqBMWrkiMSkwmwqv7EWgWWD2FbaK yOYSwohcvbY6mG2TkqqJiXf72kO0cEteMme9LDMQvdo5djs0EmL1Gv6vMzsKwwev AaI7a9kmH/6eJEYCSwvCXmuj8hyOwXQHp75KcCSXivP8vDPY4A/hW4aD04xvhVOx 1BG0I2Z9i0pFb2oqqohN3fcabpemSTH/VPZer7O2U9T9p6FoMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3KXuOtn6ZFXs72IpuNPOyIAJuTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvYzcwOTM2MDEtNzc0ZS0z MGY1LWFjNWUtYTE4Njg4ZjgzMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0a2iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwyCEsKOs7JiBBSTJQENLm/HkoCHKy3vGl0gBKrDNiE58DzSl52aCx+ Y+FzOnrVlkdUNwAFiQO0y4GIODgckIv7XZ2qpI7L3LXa/R4GBol9mJHrE+ex0sjd 8BE2p07hTguBALaA/8QYajzIcA4MdFBCNconlTwTvnE0CkiN3DJvlhWECl5QvflW a784Rlmsy0Cv542riSp/YRZcIWIO11UX40v4metZzHoHnbJ/yO6P0He/bOEBmCsp KkAP0xc4a/B4XkHjCiDRfElwpQiZqzEJtP8fvCr8v6Q37r8pcXYeB4ZzpEwwo+HN vfR9YhIeKR3FGDrK9dh4PBTYi0fI6r4= -----END CERTIFICATE-----Generated at Sat Aug 23 22:04:12 2025 by rpki-client