$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa File: 7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa (raw, json) Hash identifier: d2MKL6MnNOGHY/CXb1q+CoKmyPV/h0kuNN03xAlD7Eg= Subject key identifier: 08:A4:85:70:37:E5:C3:E8:DB:79:E1:45:BA:F4:C8:09:2B:16:F4:08 Certificate issuer: /CN=700690a7-1957-45e2-8744-ee9735b07319 Certificate serial: 010D0C9F4328584B0A115B5773B6850C0BE9AA00 Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 1025 IP address blocks: 209.209.24.0/24 maxlen: 24 2602:fcb8::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:5b:57:73:b6:85:0c:0b:e9:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=28b8aace-2323-47ff-b342-6ab23ca77657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:2b:ba:82:7f:78:ac:76:c8:ed:a8:c6:4c: b7:c6:fe:5a:e0:3c:d0:d0:15:d9:3f:3f:9e:1a:86: a2:83:34:85:9d:18:58:03:0a:d2:fb:6e:0c:b5:60: 80:3c:9b:65:4d:ad:19:83:b7:ab:11:df:f7:97:f6: 7b:e5:97:fe:1d:66:71:6a:7e:d9:eb:c2:8a:47:87: 6f:31:b9:6c:2a:a3:c4:a3:19:42:1f:36:05:bf:7c: 80:3d:d6:f7:a4:a4:03:89:96:96:34:f1:5a:6b:49: 13:ad:cc:ce:01:50:e5:ee:3d:69:ac:35:2e:0d:2c: 90:14:bc:33:ba:c7:50:0e:b4:05:ed:f7:6b:bb:b1: 4b:53:2b:a3:75:ff:f8:b5:f8:3d:f4:26:f4:e9:ad: 0f:3a:a7:01:50:70:fc:ee:33:f8:7a:64:39:b6:9a: c1:b8:b5:f0:d0:2c:e9:bc:f3:d9:08:6d:c1:3c:dd: 5b:a6:c7:44:49:3e:42:d6:89:90:74:d5:c2:26:90: 80:1e:66:77:05:22:31:07:94:b5:7f:2b:6c:f5:4a: 90:9c:57:71:31:04:77:a3:05:a8:34:2a:a2:bf:ea: 66:a9:c7:c2:19:08:9b:3f:1e:35:b3:ce:e8:91:88: 30:f4:9b:53:96:5c:ec:a8:c7:88:05:5e:d8:24:08: f2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A4:85:70:37:E5:C3:E8:DB:79:E1:45:BA:F4:C8:09:2B:16:F4:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl X509v3 Authority Key Identifier: keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer sbgp-ipAddrBlock: critical IPv4: 209.209.24.0/24 IPv6: 2602:fcb8::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:28:40:d9:da:c3:e0:88:1b:7e:bc:6b:ae:f3:ae:57:eb:2f: 36:e8:c8:a0:9c:2c:23:e7:ae:0b:c8:24:1e:f8:56:09:f1:3d: 62:0f:53:26:43:65:7a:e1:12:77:47:b2:59:44:01:a9:73:f9: 67:9e:af:ca:ca:28:91:c1:cb:66:2c:0d:10:93:50:e3:c0:bc: e6:c8:15:86:dd:2f:dd:f5:f3:89:b9:a5:a1:bb:a3:87:4a:a5: 06:f1:de:48:98:92:ee:b3:3d:e4:15:2e:44:cb:a6:69:0c:8c: fc:17:03:b3:ac:07:28:96:80:e9:c2:23:39:d6:14:9e:e9:cf: e6:17:9e:85:68:54:36:6d:db:3c:17:5e:c4:fe:d7:47:b9:90: fc:7d:2a:89:d3:fc:86:90:f4:b2:8f:fb:7a:db:a8:ce:fa:a6: 8c:0d:c6:55:71:51:c2:92:63:0e:fe:03:4c:c3:15:f4:42:2f: 1c:7a:e8:52:22:f4:a3:e5:03:04:7d:d7:b5:81:d0:bc:5c:f7: 30:44:0c:31:1b:63:ed:41:5d:bb:12:e5:ea:29:0a:b0:b2:0c: bb:0c:38:51:d8:7e:25:d2:e5:f2:bd:27:e2:9a:8b:98:7c:60: e4:d2:90:0f:52:f6:17:e1:36:7f:34:9d:78:f9:3d:ac:db:e1: 16:16:8d:2a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsKEVtXc7aFDAvpqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNjkwYTctMTk1Ny00NWUyLTg3NDQtZWU5NzM1YjA3 MzE5MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MjhiOGFhY2UtMjMyMy00N2ZmLWIzNDItNmFiMjNjYTc3NjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHMruoJ/eKx2yO2oxky3xv5a4DzQ0BXZPz+e GoaigzSFnRhYAwrS+24MtWCAPJtlTa0Zg7erEd/3l/Z75Zf+HWZxan7Z68KKR4dv MblsKqPEoxlCHzYFv3yAPdb3pKQDiZaWNPFaa0kTrczOAVDl7j1prDUuDSyQFLwz usdQDrQF7fdru7FLUyujdf/4tfg99Cb06a0POqcBUHD87jP4emQ5tprBuLXw0Czp vPPZCG3BPN1bpsdEST5C1omQdNXCJpCAHmZ3BSIxB5S1fyts9UqQnFdxMQR3owWo NCqiv+pmqcfCGQibPx41s87okYgw9JtTllzsqMeIBV7YJAjy8wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAikhXA35cPo23nhRbr0yAkrFvQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDA2 OTBhNy0xOTU3LTQ1ZTItODc0NC1lZTk3MzViMDczMTkvN2Q4Y2U3ZTEtZGE1Yy0z OTYzLTk1MTEtMTJhZTNhNWE4NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAwNjkwYTctMTk1Ny00NWUyLTg3 NDQtZWU5NzM1YjA3MzE5LzcwMDY5MGE3LTE5NTctNDVlMi04NzQ0LWVlOTczNWIw NzMxOS5jcmwwHwYDVR0jBBgwFoAUIamavUUq0vNcIiwf8NmYuXDa2n0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDA2OTBhNy0xOTU3LTQ1ZTItODc0NC1lZTk3 MzViMDczMTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA0dEYMA4E AgACMAgDBgQmAvy4ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVKEDZ2sPgiBt+vGuu865X6y826MignCwj 564LyCQe+FYJ8T1iD1MmQ2V64RJ3R7JZRAGpc/lnnq/KyiiRwctmLA0Qk1DjwLzm yBWG3S/d9fOJuaWhu6OHSqUG8d5ImJLusz3kFS5Ey6ZpDIz8FwOzrAcoloDpwiM5 1hSe6c/mF56FaFQ2bds8F17E/tdHuZD8fSqJ0/yGkPSyj/t626jO+qaMDcZVcVHC kmMO/gNMwxX0Qi8ceuhSIvSj5QMEfde1gdC8XPcwRAwxG2PtQV27EuXqKQqwsgy7 DDhR2H4l0uXyvSfimouYfGDk0pAPUvYX4TZ/NJ14+T2s2+EWFo0q -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:34 2025 by rpki-client