$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/88c6dda7-4d88-3a7d-9093-d34d2975cab4.roa File: 88c6dda7-4d88-3a7d-9093-d34d2975cab4.roa (raw, json) Hash identifier: CFg1cWFBEc9SLhNhCmyPNX45kYVUphw9j0566HoVyJQ= Subject key identifier: 52:F2:A0:F7:16:D0:8B:6C:56:DC:EE:B8:A2:F1:41:6C:43:06:BE:1A Certificate issuer: /CN=f37ae11d-629c-4443-bc37-2c3eebd09453 Certificate serial: 010D0C9F4328584ADA9BC7E84EF9798E09AF68C0 Authority key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/88c6dda7-4d88-3a7d-9093-d34d2975cab4.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 394708 IP address blocks: 209.143.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c7:e8:4e:f9:79:8e:09:af:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f37ae11d-629c-4443-bc37-2c3eebd09453 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=2522d2a8-b40b-46a4-9ffb-d90ad2f15e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9c:f3:cb:d3:d3:14:64:37:5c:d3:5e:51:e4: f1:36:4a:91:b4:56:6c:90:11:41:7d:9c:9f:26:83: 43:d4:f8:77:1f:51:e2:23:df:6b:06:0f:67:ec:68: 47:34:77:c0:18:a8:ef:2c:46:ec:24:2d:ce:23:2d: 80:fb:c6:31:8c:c4:dc:37:12:6a:c6:30:ae:71:fa: ae:07:04:6c:c2:26:b6:6e:a3:fa:22:8d:ff:ce:ee: 6d:90:8c:75:08:c1:a7:e7:65:c5:4a:14:56:5c:9f: 47:a1:35:f7:08:98:e3:40:1c:07:01:cc:cb:ac:8c: e1:cf:1c:b7:3a:f5:60:8f:aa:dc:29:bc:fa:b4:e7: 36:8a:70:1e:ee:71:d7:52:83:6d:8f:66:34:b6:a6: 42:53:ce:16:90:eb:c9:79:27:a0:19:d8:60:8c:10: f7:14:ba:e0:d0:86:31:0c:de:74:2f:d1:01:0f:e6: 14:4e:28:23:60:9c:3b:45:c6:70:e5:5a:af:fe:23: ac:d9:73:77:82:a9:67:3c:6c:68:c3:dd:31:17:02: 92:4d:1c:39:07:ef:7d:8c:3d:60:98:8f:16:63:11: 24:90:63:09:74:15:f3:d6:d0:5b:78:2a:90:a3:aa: dd:17:f5:d2:14:45:71:ef:fb:a8:3c:d1:37:ca:85: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F2:A0:F7:16:D0:8B:6C:56:DC:EE:B8:A2:F1:41:6C:43:06:BE:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/88c6dda7-4d88-3a7d-9093-d34d2975cab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl X509v3 Authority Key Identifier: keyid:57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer sbgp-ipAddrBlock: critical IPv4: 209.143.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:39:e3:68:ee:de:b4:94:f4:be:50:d0:58:9f:78:2c:67:6f: 89:ac:be:a3:fa:f6:e6:0b:d9:98:7d:ac:7c:22:f0:aa:38:55: a8:c3:d4:80:fd:e0:49:d3:ae:2f:cb:03:b0:93:10:3e:56:46: ad:d1:f7:a5:82:a3:ed:6c:97:ef:e4:98:59:a1:fc:40:d3:aa: dd:1a:23:af:a4:48:8c:c3:65:45:34:15:95:36:c0:fd:3f:f8: ed:ba:fe:d8:35:e9:9c:d2:50:b1:71:2b:42:2a:66:c4:a2:a8: 6f:b2:77:08:bc:25:65:3a:69:99:c5:df:86:c6:21:51:c9:e5: da:88:3e:0a:15:75:c1:3a:08:8e:90:a4:57:00:c5:43:d8:01: 1f:d0:53:74:e9:bf:81:e2:96:28:e9:79:f8:6c:95:04:11:3c: 67:ad:cf:70:bd:b3:35:e1:c0:ef:b6:78:d1:67:52:e8:88:f5: 59:3f:15:64:2a:5a:5d:fe:63:47:ed:d0:02:b9:82:49:f0:f8: 05:e1:0d:90:8a:6f:47:49:ad:b5:8a:e5:25:95:79:45:83:2a: 60:4e:e3:ee:8e:1a:c4:a9:11:bf:f1:03:e1:09:f4:c1:b6:57: b3:6a:2b:00:4c:1d:a2:4f:4b:35:b4:1b:ac:fe:6e:c0:80:01: c2:86:82:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8foTvl5jgmvaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3YWUxMWQtNjI5Yy00NDQzLWJjMzctMmMzZWViZDA5 NDUzMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MjUyMmQyYTgtYjQwYi00NmE0LTlmZmItZDkwYWQyZjE1ZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJzzy9PTFGQ3XNNeUeTxNkqRtFZskBFBfZyf JoND1Ph3H1HiI99rBg9n7GhHNHfAGKjvLEbsJC3OIy2A+8YxjMTcNxJqxjCucfqu BwRswia2bqP6Io3/zu5tkIx1CMGn52XFShRWXJ9HoTX3CJjjQBwHAczLrIzhzxy3 OvVgj6rcKbz6tOc2inAe7nHXUoNtj2Y0tqZCU84WkOvJeSegGdhgjBD3FLrg0IYx DN50L9EBD+YUTigjYJw7RcZw5Vqv/iOs2XN3gqlnPGxow90xFwKSTRw5B+99jD1g mI8WYxEkkGMJdBXz1tBbeCqQo6rdF/XSFEVx7/uoPNE3yoW1EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLyoPcW0ItsVtzuuKLxQWxDBr4aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mMzdh ZTExZC02MjljLTQ0NDMtYmMzNy0yYzNlZWJkMDk0NTMvODhjNmRkYTctNGQ4OC0z YTdkLTkwOTMtZDM0ZDI5NzVjYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjM3YWUxMWQtNjI5Yy00NDQzLWJj MzctMmMzZWViZDA5NDUzL2YzN2FlMTFkLTYyOWMtNDQ0My1iYzM3LTJjM2VlYmQw OTQ1My5jcmwwHwYDVR0jBBgwFoAUVzrzYfnlwTsn5iE24vcdpWrauOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mMzdhZTExZC02MjljLTQ0NDMtYmMzNy0yYzNl ZWJkMDk0NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y8SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4542ju3rSU9L5Q0FifeCxnb4msvqP69uYL2Zh9rHwi8Ko4VajD1ID9 4EnTri/LA7CTED5WRq3R96WCo+1sl+/kmFmh/EDTqt0aI6+kSIzDZUU0FZU2wP0/ +O26/tg16ZzSULFxK0IqZsSiqG+ydwi8JWU6aZnF34bGIVHJ5dqIPgoVdcE6CI6Q pFcAxUPYAR/QU3Tpv4HilijpefhslQQRPGetz3C9szXhwO+2eNFnUuiI9Vk/FWQq Wl3+Y0ft0AK5gknw+AXhDZCKb0dJrbWK5SWVeUWDKmBO4+6OGsSpEb/xA+EJ9MG2 V7NqKwBMHaJPSzW0G6z+bsCAAcKGgo8= -----END CERTIFICATE-----Generated at Sun Aug 24 07:36:00 2025 by rpki-client