$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/dbdaa320-d291-355e-a60d-c02fe99743a2.roa File: dbdaa320-d291-355e-a60d-c02fe99743a2.roa (raw, json) Hash identifier: sB6j0XBJHEqzX5ot0HcRo24Kg+r73TVkbYjrw63TZ3M= Subject key identifier: 92:F4:D8:F5:38:13:7D:13:A3:29:C5:55:15:F7:71:C6:3F:7C:53:6F Certificate issuer: /CN=f37ae11d-629c-4443-bc37-2c3eebd09453 Certificate serial: 010D0C9F4328584ADA9BC86AF11270E1B4042D70 Authority key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/dbdaa320-d291-355e-a60d-c02fe99743a2.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 7106 IP address blocks: 209.143.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c8:6a:f1:12:70:e1:b4:04:2d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f37ae11d-629c-4443-bc37-2c3eebd09453 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=3a5a57e2-3091-48e7-a21d-49f72c88dafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9f:9b:10:cc:62:e3:97:6f:5f:b3:85:64:03: f0:d8:c3:6c:e2:9f:16:73:6d:56:83:59:cd:10:78: f5:f4:a3:43:2f:04:b7:ce:dd:60:a3:19:74:d1:5f: 1d:e3:43:55:e5:4b:08:a2:3d:62:3e:f2:29:ae:b5: 4c:34:10:50:84:b7:e0:cc:b2:d1:e4:34:da:d7:c2: 13:dd:36:88:f6:6c:64:9a:a0:fb:30:3d:c1:46:19: a5:64:ca:f0:c8:3d:85:33:b1:19:dd:0c:03:1c:f3: 8f:29:9b:c7:86:06:0c:03:c9:25:0f:d8:5d:8c:6a: 49:4a:4b:83:29:a9:33:62:a7:14:4c:be:d5:3d:ff: cf:fd:bc:76:19:4d:01:27:7a:2a:1f:9f:d0:e3:85: 37:12:97:2c:38:be:43:02:cf:4b:1d:6d:92:f4:72: aa:39:e2:aa:fb:dc:57:34:38:cc:a1:b5:4b:9d:0b: df:c8:95:43:1f:bd:34:7a:d0:e3:ba:b6:ff:70:07: fe:ae:e3:ad:33:2e:ef:a8:35:62:f8:32:48:07:19: 95:ac:e6:c7:cb:21:a3:97:37:b4:0f:60:c1:ad:a1: e1:7a:ac:7a:fd:2d:1d:fc:e4:39:31:ae:5e:13:31: 57:a4:a0:d5:ef:f4:da:a8:30:b8:ab:73:dc:aa:30: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F4:D8:F5:38:13:7D:13:A3:29:C5:55:15:F7:71:C6:3F:7C:53:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/dbdaa320-d291-355e-a60d-c02fe99743a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl X509v3 Authority Key Identifier: keyid:57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer sbgp-ipAddrBlock: critical IPv4: 209.143.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7f:56:91:14:1c:17:fe:a8:54:0d:a5:9b:43:b9:81:ae:aa: a8:da:e1:05:a6:7f:06:df:59:4b:88:ae:ca:20:e1:89:49:4a: 71:ce:cd:fe:17:04:87:e8:de:0a:4b:63:46:70:e1:98:0c:23: 40:a2:5f:c9:18:14:26:a5:10:4f:7b:58:d0:38:8d:cb:4b:00: e6:6c:bf:04:a0:79:77:c2:70:c2:44:fd:06:dd:fe:97:d2:da: ee:bb:50:ab:d8:24:38:f4:e0:ff:17:2c:21:94:3b:67:1d:63: 67:97:9e:29:11:97:0a:d6:41:62:13:c6:44:97:88:de:67:c2: 89:89:cc:5d:e1:65:8d:2c:12:af:fa:0e:53:5a:32:b9:76:dd: 2d:f6:8d:2a:e9:12:01:27:1f:8c:2e:9e:0a:b9:ff:a7:15:84: 9e:88:6b:cd:99:ec:fa:54:b6:b1:38:9b:37:90:c7:d0:d6:69: 03:ec:24:36:5f:4d:05:85:1c:e1:c1:c2:9f:cb:c3:b4:7a:5f: eb:e1:22:e9:ce:5d:fe:65:0f:43:5d:ad:90:41:cb:ab:ba:d1: 6a:60:d8:65:dc:86:44:fa:ab:35:ea:09:43:a3:41:c3:69:ad: 24:4c:a1:34:ad:88:1c:82:b8:1b:58:65:9d:e5:9f:8c:b9:d3: 1c:9c:27:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8hq8RJw4bQELXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3YWUxMWQtNjI5Yy00NDQzLWJjMzctMmMzZWViZDA5 NDUzMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk M2E1YTU3ZTItMzA5MS00OGU3LWEyMWQtNDlmNzJjODhkYWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5+bEMxi45dvX7OFZAPw2MNs4p8Wc21Wg1nN EHj19KNDLwS3zt1goxl00V8d40NV5UsIoj1iPvIprrVMNBBQhLfgzLLR5DTa18IT 3TaI9mxkmqD7MD3BRhmlZMrwyD2FM7EZ3QwDHPOPKZvHhgYMA8klD9hdjGpJSkuD KakzYqcUTL7VPf/P/bx2GU0BJ3oqH5/Q44U3EpcsOL5DAs9LHW2S9HKqOeKq+9xX NDjMobVLnQvfyJVDH700etDjurb/cAf+ruOtMy7vqDVi+DJIBxmVrObHyyGjlze0 D2DBraHheqx6/S0d/OQ5Ma5eEzFXpKDV7/TaqDC4q3PcqjBjLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJL02PU4E30ToynFVRX3ccY/fFNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mMzdh ZTExZC02MjljLTQ0NDMtYmMzNy0yYzNlZWJkMDk0NTMvZGJkYWEzMjAtZDI5MS0z NTVlLWE2MGQtYzAyZmU5OTc0M2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjM3YWUxMWQtNjI5Yy00NDQzLWJj MzctMmMzZWViZDA5NDUzL2YzN2FlMTFkLTYyOWMtNDQ0My1iYzM3LTJjM2VlYmQw OTQ1My5jcmwwHwYDVR0jBBgwFoAUVzrzYfnlwTsn5iE24vcdpWrauOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mMzdhZTExZC02MjljLTQ0NDMtYmMzNy0yYzNl ZWJkMDk0NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0Y8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR/VpEUHBf+qFQNpZtDuYGuqqja4QWmfwbfWUuIrsog4YlJSnHOzf4X BIfo3gpLY0Zw4ZgMI0CiX8kYFCalEE97WNA4jctLAOZsvwSgeXfCcMJE/Qbd/pfS 2u67UKvYJDj04P8XLCGUO2cdY2eXnikRlwrWQWITxkSXiN5nwomJzF3hZY0sEq/6 DlNaMrl23S32jSrpEgEnH4wungq5/6cVhJ6Ia82Z7PpUtrE4mzeQx9DWaQPsJDZf TQWFHOHBwp/Lw7R6X+vhIunOXf5lD0NdrZBBy6u60Wpg2GXchkT6qzXqCUOjQcNp rSRMoTStiByCuBtYZZ3ln4y50xycJ6s= -----END CERTIFICATE-----Generated at Sat Aug 23 21:13:25 2025 by rpki-client