$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa File: 2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa (raw, json) Hash identifier: sMQiXF60jTVx6puYS1XYX1i6xR0+Ewp7nypxZwuwhFg= Subject key identifier: 9E:FE:6A:6E:BD:35:26:0E:79:00:BE:58:E3:5D:88:15:BF:9F:8C:A2 Certificate issuer: /CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Certificate serial: 010D0C9F4328584ADD6674FED0AB4B6CFCA94430 Authority key identifier: 58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 53423 IP address blocks: 192.171.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:74:fe:d0:ab:4b:6c:fc:a9:44:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=13c4dd6c-6305-468f-9c43-5b499401bc3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:79:b7:6f:fd:86:fd:51:6b:0c:39:5c:df:9d: 1a:a6:16:31:b6:95:89:07:e1:d9:66:11:99:be:91: 1f:4b:64:03:2e:13:e4:00:4f:d6:e0:89:58:1b:6b: 3c:20:5e:56:13:12:ee:d7:44:1e:15:25:c0:71:4f: 36:bd:d6:46:86:5b:ff:fd:48:e9:ee:5e:48:af:af: 4b:80:99:47:83:a0:7b:a4:5f:63:8f:a7:81:74:8a: 12:b4:20:92:73:cd:e9:78:b3:e8:da:75:74:b7:d7: eb:4c:10:af:f6:d3:c3:d6:c3:ac:fa:41:db:85:a5: e2:28:5c:35:5d:3e:ef:50:75:35:c1:ea:81:5a:15: 78:87:17:2b:4f:a0:53:37:6a:7e:31:20:b1:be:b7: f6:36:9a:0b:43:63:08:16:5d:7e:08:08:64:29:73: 89:9f:f1:cd:86:26:15:1a:a8:8b:ca:08:f9:e1:e1: 20:cb:61:3b:45:23:e4:35:e3:31:a0:77:c8:0e:f2: 58:89:6a:22:e0:e4:e7:e5:08:dc:ab:56:06:8c:d3: 3b:3e:3b:68:59:9a:c5:e6:69:c5:25:31:42:4a:8e: 1a:02:2b:b1:9d:ac:b9:74:3b:71:b4:1f:a3:2e:93: f1:5a:bb:fa:fb:6f:0b:ea:c3:ab:f7:3c:07:97:dd: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FE:6A:6E:BD:35:26:0E:79:00:BE:58:E3:5D:88:15:BF:9F:8C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl X509v3 Authority Key Identifier: keyid:58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer sbgp-ipAddrBlock: critical IPv4: 192.171.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a9:79:cb:7a:a0:98:9e:87:9e:43:7a:37:00:04:9d:01:55: 82:25:c1:37:5e:f6:66:ff:5f:60:b3:03:19:ea:60:b0:ab:0e: 19:5e:0f:31:b8:56:89:11:32:44:25:b9:36:1d:7e:fa:93:01: d2:31:cb:e6:8c:ab:d0:a6:f3:34:05:79:28:7f:6f:05:a0:d2: 6b:7f:33:98:12:5e:de:ea:6d:f9:df:0b:7f:14:82:d6:bb:f2: 79:76:99:b6:be:71:45:ca:58:57:bb:80:62:e2:3d:7d:78:9e: 61:cd:ba:48:15:aa:12:0c:02:0d:ac:e6:b0:d3:91:5b:2f:12: 3d:c4:8a:7b:e7:7f:42:db:fb:ae:ca:c9:a1:f9:01:69:4d:b9: 81:e5:2f:9f:4e:02:cc:de:64:60:2c:7b:dd:17:28:f5:34:90: 55:34:0d:c4:ea:ab:a5:1c:2b:19:22:46:09:dc:67:f3:75:36: 54:1e:cb:4d:fc:c6:0b:6d:9a:24:38:3d:3e:58:16:f1:6f:85: 6e:bd:9a:a3:3a:04:1f:b8:e0:59:da:d1:50:12:ba:4c:15:99: 83:f5:32:d4:aa:53:21:e8:fb:dc:ec:b8:18:76:6f:ba:18:cf: d2:26:50:c2:38:c4:a8:e3:81:5a:31:d9:19:51:ac:7d:35:73: c3:19:be:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZnT+0KtLbPypRDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmNjQ1YWMtODRhYS00MmUzLWI4NWEtN2FmOTY4ODg5 OGE2MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MTNjNGRkNmMtNjMwNS00NjhmLTljNDMtNWI0OTk0MDFiYzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3m3b/2G/VFrDDlc350aphYxtpWJB+HZZhGZ vpEfS2QDLhPkAE/W4IlYG2s8IF5WExLu10QeFSXAcU82vdZGhlv//Ujp7l5Ir69L gJlHg6B7pF9jj6eBdIoStCCSc83peLPo2nV0t9frTBCv9tPD1sOs+kHbhaXiKFw1 XT7vUHU1weqBWhV4hxcrT6BTN2p+MSCxvrf2NpoLQ2MIFl1+CAhkKXOJn/HNhiYV GqiLygj54eEgy2E7RSPkNeMxoHfIDvJYiWoi4OTn5Qjcq1YGjNM7PjtoWZrF5mnF JTFCSo4aAiuxnay5dDtxtB+jLpPxWrv6+28L6sOr9zwHl93BpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7+am69NSYOeQC+WONdiBW/n4yiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jOWY2 NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5Njg4ODk4YTYvMjYxMmRjMDItMzAzNi0z Y2VkLWJhMmMtOGUxYzA0YTJiMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzlmNjQ1YWMtODRhYS00MmUzLWI4 NWEtN2FmOTY4ODg5OGE2L2M5ZjY0NWFjLTg0YWEtNDJlMy1iODVhLTdhZjk2ODg4 OThhNi5jcmwwHwYDVR0jBBgwFoAUWDton2ItqVzW8+xVfihjXKiBhBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jOWY2NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5 Njg4ODk4YTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwKvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6pect6oJieh55DejcABJ0BVYIlwTde9mb/X2CzAxnqYLCrDhleDzG4 VokRMkQluTYdfvqTAdIxy+aMq9Cm8zQFeSh/bwWg0mt/M5gSXt7qbfnfC38Ugta7 8nl2mba+cUXKWFe7gGLiPX14nmHNukgVqhIMAg2s5rDTkVsvEj3Einvnf0Lb+67K yaH5AWlNuYHlL59OAszeZGAse90XKPU0kFU0DcTqq6UcKxkiRgncZ/N1NlQey038 xgttmiQ4PT5YFvFvhW69mqM6BB+44Fna0VASukwVmYP1MtSqUyHo+9zsuBh2b7oY z9ImUMI4xKjjgVox2RlRrH01c8MZvvI= -----END CERTIFICATE-----Generated at Sun Aug 24 04:05:04 2025 by rpki-client