$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa File: 3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa (raw, json) Hash identifier: rXrnEYSHb1F82UosPo1xBLjNerf83VGKScmVhnb65Jo= Subject key identifier: 01:78:96:95:FB:F8:F6:9E:45:BE:4D:2E:0E:3C:DB:B5:28:01:69:F8 Certificate issuer: /CN=207c40f4-33c4-478b-ae61-d3f51358881b Certificate serial: 010D0C9F4328584AECC126876ECEEEC25F9164A0 Authority key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 40091 IP address blocks: 76.9.224.0/20 maxlen: 24 216.115.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:26:87:6e:ce:ee:c2:5f:91:64:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207c40f4-33c4-478b-ae61-d3f51358881b Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=198f466f-cabd-4e7b-884a-f47d474d6d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:53:60:db:ca:aa:9f:e0:be:4f:05:3b:15:7f: 5b:d0:b0:a4:5d:0b:0a:98:27:43:ed:85:77:a7:35: a5:03:ca:eb:3d:b7:eb:ac:5e:2e:d1:f7:48:02:b9: a2:ca:d6:60:d9:3c:fc:75:c7:a8:83:9d:8e:16:98: d6:b9:b3:bd:89:3e:cf:db:2d:63:28:b6:d5:ac:48: 02:f5:d9:2f:91:89:ec:ca:14:2b:e9:72:b4:4e:ad: 01:48:5d:0c:84:47:97:06:a4:09:b7:d4:5f:be:ac: 06:bc:8f:2c:67:6d:c1:74:98:ca:44:a7:13:2d:41: 97:cb:42:21:f6:8f:33:b7:33:2c:0b:76:9a:a0:ac: b9:6f:b2:41:e0:6d:e2:35:c6:fb:22:f0:15:01:76: 07:45:50:46:d2:bd:e1:63:bf:68:e6:e1:e9:60:51: 30:5c:14:0e:a1:f1:af:f4:b3:40:87:98:99:b3:90: b4:09:b9:d1:d2:45:f7:2f:64:fe:55:ff:e7:21:c0: 79:23:be:d1:08:af:54:80:af:9b:0a:57:68:e6:f9: e6:4f:d2:40:84:c8:d8:9c:8f:3c:db:03:40:9c:ea: eb:9b:88:d6:9d:0c:d5:a4:1b:16:0b:d3:2b:80:08: 0d:d5:6e:6b:04:bd:d6:96:39:23:38:ac:38:23:e7: 15:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:78:96:95:FB:F8:F6:9E:45:BE:4D:2E:0E:3C:DB:B5:28:01:69:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl X509v3 Authority Key Identifier: keyid:52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer sbgp-ipAddrBlock: critical IPv4: 76.9.224.0/20 216.115.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:4b:d9:96:cf:68:8b:2e:24:88:c2:2a:a9:93:57:61:fa:9b: 4f:17:a6:4f:ea:de:ed:e6:d6:91:99:a7:1c:5f:f6:98:5e:ac: a0:ef:79:af:e3:6a:d6:86:0a:98:59:fe:2e:6e:1c:d2:7e:18: fb:c3:aa:ac:60:e2:8e:32:d0:b8:2b:ad:5e:33:b0:47:9d:38: de:a2:37:9f:86:62:68:a8:bb:55:18:62:c6:29:7f:3e:84:48: e9:bb:6a:04:df:74:39:86:f1:47:1e:fa:98:79:fb:fc:1c:b9: af:1b:a1:cb:47:14:e7:e3:cb:30:89:59:1c:10:7d:ad:24:d1: 6b:6d:76:78:41:20:19:22:8c:6d:57:8e:b3:b4:0f:81:97:c4: d3:b9:1b:b4:82:56:a4:17:fb:7c:8a:3f:e6:3b:c3:7c:a2:a9: 4e:d3:12:79:e5:c3:af:cd:e0:29:99:11:2b:92:dc:44:ad:49: 90:86:99:eb:88:c4:f7:50:d4:74:a0:73:1f:39:e7:52:51:5a: b5:c7:a2:ff:a9:bc:39:77:e9:9c:d0:12:c6:ec:e1:a4:86:a6: bc:14:17:43:23:07:9c:d9:d3:a9:03:31:16:e0:04:e2:ec:24: cf:cf:c9:de:da:fe:06:8e:5f:a6:ac:d5:94:aa:ab:14:09:b9: f6:0d:be:2f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErswSaHbs7uwl+RZKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4 ODFiMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTk4ZjQ2NmYtY2FiZC00ZTdiLTg4NGEtZjQ3ZDQ3NGQ2ZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVNg28qqn+C+TwU7FX9b0LCkXQsKmCdD7YV3 pzWlA8rrPbfrrF4u0fdIArmiytZg2Tz8dceog52OFpjWubO9iT7P2y1jKLbVrEgC 9dkvkYnsyhQr6XK0Tq0BSF0MhEeXBqQJt9RfvqwGvI8sZ23BdJjKRKcTLUGXy0Ih 9o8ztzMsC3aaoKy5b7JB4G3iNcb7IvAVAXYHRVBG0r3hY79o5uHpYFEwXBQOofGv 9LNAh5iZs5C0CbnR0kX3L2T+Vf/nIcB5I77RCK9UgK+bCldo5vnmT9JAhMjYnI88 2wNAnOrrm4jWnQzVpBsWC9MrgAgN1W5rBL3WljkjOKw4I+cVEwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAF4lpX7+PaeRb5NLg4827UoAWn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdj NDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvM2M1ZjRlMWEtNGJlNy0z N2Y3LWI4NjEtOTkxZGE1MGY1N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjA3YzQwZjQtMzNjNC00NzhiLWFl NjEtZDNmNTEzNTg4ODFiLzIwN2M0MGY0LTMzYzQtNDc4Yi1hZTYxLWQzZjUxMzU4 ODgxYi5jcmwwHwYDVR0jBBgwFoAUUgLOwO2kMddTSMx22Ig8dhzR7ewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1 MTM1ODg4MWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETAngAwQE 2HPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAApL2ZbPaIsuJIjCKqmTV2H6m08Xpk/q3u3m1pGZpxxf9phe rKDvea/jataGCphZ/i5uHNJ+GPvDqqxg4o4y0LgrrV4zsEedON6iN5+GYmiou1UY YsYpfz6ESOm7agTfdDmG8Uce+ph5+/wcua8boctHFOfjyzCJWRwQfa0k0WttdnhB IBkijG1XjrO0D4GXxNO5G7SCVqQX+3yKP+Y7w3yiqU7TEnnlw6/N4CmZESuS3ESt SZCGmeuIxPdQ1HSgcx8551JRWrXHov+pvDl36ZzQEsbs4aSGprwUF0MjB5zZ06kD MRbgBOLsJM/Pyd7a/gaOX6as1ZSqqxQJufYNvi8= -----END CERTIFICATE-----Generated at Sun Aug 24 01:25:10 2025 by rpki-client