$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa File: e84cb9af-b706-3cf4-8dd9-7e233014e201.roa (raw, json) Hash identifier: 8UmRjcXOdsQEMlMcMYuShROljoe/e2KkqziO6Jswl78= Subject key identifier: 26:AB:6A:53:A3:E4:C5:9F:C6:3A:E2:5A:00:5F:FC:7F:C7:5F:C1:81 Certificate issuer: /CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Certificate serial: 010D0C9F4328584AECC148F1A68A914191D0ABC4 Authority key identifier: 5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3653 IP address blocks: 209.71.32.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:48:f1:a6:8a:91:41:91:d0:ab:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ca077377-11b3-4286-8dc0-e5be6b71c27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:19:2e:af:75:b7:68:2e:19:08:92:df:5e: 56:20:70:b5:6e:c0:c8:7c:5a:8e:48:63:fc:a8:f3: 86:87:2e:89:b0:85:2f:db:da:c1:da:44:76:66:dc: 3e:f1:2b:d7:a0:e4:60:18:a5:cd:38:89:f0:8d:58: 7a:02:1e:d6:20:8d:45:dd:90:81:5b:e4:b0:a7:dc: 47:e0:bd:8f:18:a2:e0:62:44:d2:27:11:64:a0:42: f1:2f:1b:81:56:42:e4:e8:bc:41:f7:c3:74:9a:4b: db:71:82:02:0d:a8:87:50:c0:8d:9f:a5:ed:b3:e0: 85:dd:17:f2:43:46:cd:c6:22:44:71:cc:7e:ee:46: e3:23:06:09:27:6a:95:e0:45:eb:ce:47:56:55:07: bb:41:fd:20:fb:e0:da:13:df:f3:8e:84:93:ad:1d: 44:f9:27:0b:d7:51:32:0b:01:81:3b:32:45:89:ca: 1a:d6:e9:54:3e:fc:c0:f5:65:13:c5:0b:7b:f6:25: 88:3b:45:46:52:c2:96:4d:23:35:71:ff:c1:ea:a6: 0d:99:7b:a3:50:31:3e:40:8c:b1:2d:4b:ba:00:79: b9:76:c2:4c:f3:45:cb:ae:a7:8c:97:be:c0:e4:13: f8:78:c9:de:cd:18:1f:87:09:32:b4:35:e8:58:00: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AB:6A:53:A3:E4:C5:9F:C6:3A:E2:5A:00:5F:FC:7F:C7:5F:C1:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl X509v3 Authority Key Identifier: keyid:5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer sbgp-ipAddrBlock: critical IPv4: 209.71.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ee:a3:e7:26:f5:ac:8f:0a:41:df:e2:e8:d1:b9:de:82:38: 19:1b:e6:64:b2:5f:ba:f1:91:f2:8a:13:61:81:1f:9b:87:f4: 29:d7:a5:4b:43:3c:42:1a:16:4b:14:0d:67:0b:bc:af:3c:93: 49:8f:85:de:04:08:76:4e:64:b2:db:b9:98:44:aa:40:c4:dd: b0:ea:ce:b1:eb:28:93:6b:ed:7e:00:24:92:bf:67:b1:53:67: 94:dc:8c:86:ff:4b:95:77:bf:70:52:59:d9:c1:0c:d0:b1:6f: 34:ad:8e:b4:b7:36:55:86:d4:42:03:77:23:45:51:59:98:a0: be:a9:35:14:52:e1:f9:a3:41:76:fe:5e:76:2c:f7:60:3e:78: 19:05:76:0a:68:02:8e:45:48:f8:04:9f:6c:5a:10:99:b6:1c: 1d:e3:6b:bd:aa:00:7e:50:45:d6:e1:6a:9a:d2:9f:8c:34:70: ec:aa:92:0c:91:c4:a0:a8:28:11:98:67:0f:88:f6:d1:c9:0a: 75:94:49:26:a6:55:c8:38:02:68:c8:43:65:1a:b3:e7:c7:86: 34:35:23:aa:6f:9d:66:7c:af:65:0e:ff:1b:b1:fc:f8:0b:e8: 11:6a:71:28:f4:95:d3:d7:e7:aa:89:aa:56:01:61:e2:c0:4e: 77:e1:f7:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUjxpoqRQZHQq8QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA1N2Q5YTctOGYzZi00Yzk3LTk1MDMtZTJhOTM2YzI3 YzdiMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Y2EwNzczNzctMTFiMy00Mjg2LThkYzAtZTViZTZiNzFjMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUEZLq91t2guGQiS315WIHC1bsDIfFqOSGP8 qPOGhy6JsIUv29rB2kR2Ztw+8SvXoORgGKXNOInwjVh6Ah7WII1F3ZCBW+Swp9xH 4L2PGKLgYkTSJxFkoELxLxuBVkLk6LxB98N0mkvbcYICDaiHUMCNn6Xts+CF3Rfy Q0bNxiJEccx+7kbjIwYJJ2qV4EXrzkdWVQe7Qf0g++DaE9/zjoSTrR1E+ScL11Ey CwGBOzJFicoa1ulUPvzA9WUTxQt79iWIO0VGUsKWTSM1cf/B6qYNmXujUDE+QIyx LUu6AHm5dsJM80XLrqeMl77A5BP4eMnezRgfhwkytDXoWAAkZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaralOj5MWfxjriWgBf/H/HX8GBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3 ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5MzZjMjdjN2IvZTg0Y2I5YWYtYjcwNi0z Y2Y0LThkZDktN2UyMzMwMTRlMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA1N2Q5YTctOGYzZi00Yzk3LTk1 MDMtZTJhOTM2YzI3YzdiL2MwNTdkOWE3LThmM2YtNGM5Ny05NTAzLWUyYTkzNmMy N2M3Yi5jcmwwHwYDVR0jBBgwFoAUX/xvFi+TCO3K8h1i5jxZPYVYE2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5 MzZjMjdjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0UcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXuo+cm9ayPCkHf4ujRud6COBkb5mSyX7rxkfKKE2GBH5uH9CnXpUtD PEIaFksUDWcLvK88k0mPhd4ECHZOZLLbuZhEqkDE3bDqzrHrKJNr7X4AJJK/Z7FT Z5TcjIb/S5V3v3BSWdnBDNCxbzStjrS3NlWG1EIDdyNFUVmYoL6pNRRS4fmjQXb+ XnYs92A+eBkFdgpoAo5FSPgEn2xaEJm2HB3ja72qAH5QRdbhaprSn4w0cOyqkgyR xKCoKBGYZw+I9tHJCnWUSSamVcg4AmjIQ2Uas+fHhjQ1I6pvnWZ8r2UO/xux/PgL 6BFqcSj0ldPX56qJqlYBYeLATnfh94Q= -----END CERTIFICATE-----Generated at Sun Aug 24 05:41:19 2025 by rpki-client