$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/102a1b54-7a91-37ec-9559-3213bbe645e4.roa File: 102a1b54-7a91-37ec-9559-3213bbe645e4.roa (raw, json) Hash identifier: TLwqNGzmx0FvPF6whzgTEEVcNx9BV5kwPd6vVyvSlO0= Subject key identifier: D3:B7:4F:E8:3A:DA:2F:DE:2A:30:DA:F1:EF:F0:F0:18:8F:9B:4D:43 Certificate issuer: /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Certificate serial: 010D0C9F4328584AECC130AD2F814EADEA5A22E0 Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/102a1b54-7a91-37ec-9559-3213bbe645e4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 10439 IP address blocks: 209.126.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:30:ad:2f:81:4e:ad:ea:5a:22:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=bea1f207-e06c-42e6-8b22-75c593f26bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:97:f2:09:12:74:a8:e6:2a:b2:a3:8f:bd:97: 9a:7c:14:74:43:06:f6:31:58:f8:3f:09:c1:89:f8: 38:de:ee:5e:bc:b6:d8:dd:88:98:18:d6:1c:e4:4c: 4c:ea:2a:7f:04:d0:f3:92:c1:31:0b:95:bb:67:13: 28:8f:0c:4e:61:f8:33:c1:aa:51:33:82:3e:b2:e7: 16:a6:d1:73:cf:c0:cb:4d:98:63:06:b3:3b:65:71: df:ae:d3:ae:5d:3f:fb:c3:36:61:69:12:51:5e:51: 17:76:d2:8a:8d:30:d2:9a:c0:28:84:d4:2b:64:8c: 92:10:8c:27:61:18:06:0b:77:d7:92:6c:38:5f:c4: e4:c7:4a:db:94:56:63:06:11:6d:7b:26:28:d2:42: 26:81:91:44:53:5e:bd:64:82:46:8a:4a:6f:45:02: 81:49:0a:9e:85:a6:6c:fc:08:73:58:01:c5:64:a3: 8f:11:fd:d3:6b:c1:ca:30:f9:87:97:1d:4a:81:81: 14:7e:07:9f:47:a0:c1:a0:02:ba:93:3e:37:ec:97: 60:1d:48:91:76:c0:6b:76:6d:11:97:a2:88:7f:e1: da:ba:0c:14:00:68:21:d7:83:0d:d0:33:ca:6d:99: af:cd:ac:bb:5b:8b:b0:8b:00:c5:27:31:2f:d4:6c: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B7:4F:E8:3A:DA:2F:DE:2A:30:DA:F1:EF:F0:F0:18:8F:9B:4D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/102a1b54-7a91-37ec-9559-3213bbe645e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl X509v3 Authority Key Identifier: keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer sbgp-ipAddrBlock: critical IPv4: 209.126.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:65:78:59:79:31:39:53:2c:8b:61:b0:cb:33:f2:b1:89:ea: 29:bf:a2:b1:91:a0:c0:c6:c9:14:0d:09:cd:51:78:e1:82:32: f3:2b:51:1c:24:d9:eb:02:62:a8:be:97:0b:0f:52:23:f5:d3: 89:c1:16:7e:fc:04:fb:cb:91:e5:f4:0d:77:45:18:13:6b:75: b3:ae:29:4e:bc:22:95:ab:b8:da:3c:4e:4c:7e:6f:25:14:62: a2:c3:5b:58:b0:58:3f:49:f1:44:0f:ba:0a:91:24:6f:b6:be: f3:fe:6f:26:de:25:0a:73:70:e7:b5:b2:f8:6b:6a:fe:02:1d: 1f:3b:70:9c:17:c8:f4:97:47:94:63:96:0d:ef:79:34:84:f6: 71:13:f7:ff:85:56:f7:fd:ad:8b:3b:ff:03:b6:af:29:7d:3a: 8b:4d:d8:ed:3a:1b:f0:85:8e:71:a8:a1:d5:a2:84:6f:87:78: 14:33:c8:4a:00:36:5d:48:e2:d0:63:c9:5d:d3:a0:b3:de:4e: 83:f5:cf:8a:5b:14:eb:29:36:b6:c2:72:fa:0e:d0:66:ae:c3: 26:3c:2f:f8:24:c4:d2:05:c2:ea:49:a4:6f:f9:38:72:47:4b: 61:0a:aa:ba:0f:2d:b3:59:3b:51:a2:bd:01:04:05:60:e8:e5: 23:b3:90:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTCtL4FOrepaIuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYyZWQ4N2UtMjdmOS00MTRjLWE3YWYtMmI1YjVmZmEz ZjY1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YmVhMWYyMDctZTA2Yy00MmU2LThiMjItNzVjNTkzZjI2YmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZfyCRJ0qOYqsqOPvZeafBR0Qwb2MVj4PwnB ifg43u5evLbY3YiYGNYc5ExM6ip/BNDzksExC5W7ZxMojwxOYfgzwapRM4I+sucW ptFzz8DLTZhjBrM7ZXHfrtOuXT/7wzZhaRJRXlEXdtKKjTDSmsAohNQrZIySEIwn YRgGC3fXkmw4X8Tkx0rblFZjBhFteyYo0kImgZFEU169ZIJGikpvRQKBSQqehaZs /AhzWAHFZKOPEf3Ta8HKMPmHlx1KgYEUfgefR6DBoAK6kz437JdgHUiRdsBrdm0R l6KIf+HaugwUAGgh14MN0DPKbZmvzay7W4uwiwDFJzEv1GzhVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNO3T+g62i/eKjDa8e/w8BiPm01DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJl ZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZmYTNmNjUvMTAyYTFiNTQtN2E5MS0z N2VjLTk1NTktMzIxM2JiZTY0NWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmYyZWQ4N2UtMjdmOS00MTRjLWE3 YWYtMmI1YjVmZmEzZjY1LzJmMmVkODdlLTI3ZjktNDE0Yy1hN2FmLTJiNWI1ZmZh M2Y2NS5jcmwwHwYDVR0jBBgwFoAU/vz7pQfj5FlRiYJFDoOE89rVKHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjVi NWZmYTNmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0X6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANhleFl5MTlTLIthsMsz8rGJ6im/orGRoMDGyRQNCc1ReOGCMvMrURwk 2esCYqi+lwsPUiP104nBFn78BPvLkeX0DXdFGBNrdbOuKU68IpWruNo8Tkx+byUU YqLDW1iwWD9J8UQPugqRJG+2vvP+bybeJQpzcOe1svhrav4CHR87cJwXyPSXR5Rj lg3veTSE9nET9/+FVvf9rYs7/wO2ryl9OotN2O06G/CFjnGoodWihG+HeBQzyEoA Nl1I4tBjyV3ToLPeToP1z4pbFOspNrbCcvoO0GauwyY8L/gkxNIFwupJpG/5OHJH S2EKqroPLbNZO1GivQEEBWDo5SOzkDM= -----END CERTIFICATE-----Generated at Sun Aug 24 02:29:40 2025 by rpki-client