$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f361c6a2-2d61-3712-a6b7-f3e0ac4f0e63.roa File: f361c6a2-2d61-3712-a6b7-f3e0ac4f0e63.roa (raw, json) Hash identifier: PD9xXRVoTsLTbFvK2XUrNdOSF64By4W6R27bKKcPySw= Subject key identifier: 73:6A:26:98:4D:1A:43:65:D4:62:DB:49:50:BD:26:2D:31:CD:A2:6F Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584AC74D16AC2123BC0FA3888C80 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f361c6a2-2d61-3712-a6b7-f3e0ac4f0e63.roa Signing time: Thu 07 Aug 2025 15:01:57 +0000 ROA not before: Thu 07 Aug 2025 15:01:57 +0000 ROA not after: Wed 05 Nov 2025 16:01:57 +0000 asID: 25645 IP address blocks: 209.42.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:4d:16:ac:21:23:bc:0f:a3:88:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Aug 7 15:01:57 2025 GMT Not After : Nov 5 16:01:57 2025 GMT Subject: CN=ac1c03c8-16b0-43b4-86b3-c58d40c9bbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:e4:7a:11:ae:54:d3:f1:69:3a:6e:fe:75: 4d:bc:cd:48:80:ab:e7:23:85:b8:7f:b7:0d:e9:4c: b0:23:8b:a7:49:34:9c:c4:66:6e:b7:1f:a7:0a:6b: b7:96:3f:69:67:0d:98:fc:dc:43:a2:2a:ba:7c:e0: cd:76:61:f3:2e:58:6e:7b:b5:5c:52:23:1b:ad:71: 48:3b:a9:ea:a4:74:16:ca:7b:de:b4:9f:15:3d:26: e7:cd:ae:3c:4a:54:ee:81:8d:cf:06:b4:f3:45:5a: c3:17:fb:83:05:11:db:16:d3:2e:84:d1:54:99:80: f3:15:b0:5c:fc:35:4b:b0:86:c5:e6:5f:1a:a6:17: be:cb:74:1e:33:62:f6:38:99:da:aa:53:14:0a:08: 20:3f:e7:8d:de:89:52:4c:1b:2e:6a:bf:26:12:26: 60:c6:34:6b:d2:e0:77:41:48:b8:ce:17:6e:86:c6: b9:36:cd:13:bd:30:dd:91:1f:1e:29:1f:0b:01:37: de:6f:cf:31:e6:45:3c:79:03:ec:ce:a1:9f:c8:38: 5e:b0:76:d2:15:5e:10:3c:c9:1f:1e:25:a4:6f:5f: 4f:af:66:bf:09:6c:bb:a7:a0:d1:cc:c9:56:0f:74: 7a:4e:1d:4c:1f:79:eb:50:7d:fe:58:69:65:a6:ce: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6A:26:98:4D:1A:43:65:D4:62:DB:49:50:BD:26:2D:31:CD:A2:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f361c6a2-2d61-3712-a6b7-f3e0ac4f0e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.42.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f2:40:0b:01:46:c5:a7:10:13:fe:e5:0c:cd:96:11:e8:f4: 27:37:22:d9:03:bf:f4:ff:fa:da:d8:83:81:e4:d6:d3:2c:64: 19:52:01:c9:28:9b:db:f0:af:45:0f:6b:bc:cf:9e:44:b8:b3: 97:ac:3d:d9:9b:c1:c3:ef:53:32:0a:04:e7:0e:81:a4:e9:9b: 84:5e:6b:ef:7f:44:f1:83:bc:41:8d:63:0a:5e:3d:76:72:d3: b8:c6:a2:c9:37:c4:18:68:5a:14:8b:a8:0b:56:0c:44:2f:3a: 04:6d:db:4d:a3:2d:16:90:b3:e3:af:49:d5:53:4d:35:38:d6: dd:c0:11:1d:fa:d1:9f:d1:2f:eb:dc:d8:8d:6a:7b:39:fe:a0: 25:7f:1a:26:63:50:d7:1d:da:51:e4:e5:6e:71:25:77:9b:09: 15:b8:06:cd:18:85:01:ce:0e:a1:ba:e0:2b:65:a7:2e:86:1d: 7a:a0:ff:ff:f4:a5:d9:6b:88:0b:e4:7e:5a:ce:9c:da:67:c8: 6e:cc:f2:26:ff:71:11:28:ff:02:bc:34:58:25:f7:76:66:1b: 4c:fa:2c:77:1c:b4:87:9b:e9:4a:56:e5:6f:9c:b0:0e:bc:96: 5a:31:19:4f:75:94:f9:60:5b:55:37:9d:6f:ac:44:8e:58:a6: 44:4a:a6:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHTRasISO8D6OIjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDgwNzE1MDE1N1oXDTI1MTEwNTE2MDE1N1owLzEtMCsGA1UEAxMk YWMxYzAzYzgtMTZiMC00M2I0LTg2YjMtYzU4ZDQwYzliYmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUrkehGuVNPxaTpu/nVNvM1IgKvnI4W4f7cN 6UywI4unSTScxGZutx+nCmu3lj9pZw2Y/NxDoiq6fODNdmHzLlhue7VcUiMbrXFI O6nqpHQWynvetJ8VPSbnza48SlTugY3PBrTzRVrDF/uDBRHbFtMuhNFUmYDzFbBc /DVLsIbF5l8aphe+y3QeM2L2OJnaqlMUCgggP+eN3olSTBsuar8mEiZgxjRr0uB3 QUi4zhduhsa5Ns0TvTDdkR8eKR8LATfeb88x5kU8eQPszqGfyDhesHbSFV4QPMkf HiWkb19Pr2a/CWy7p6DRzMlWD3R6Th1MH3nrUH3+WGllps6eFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNqJphNGkNl1GLbSVC9Ji0xzaJvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZjM2MWM2YTItMmQ2MS0z NzEyLWE2YjctZjNlMGFjNGYwZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjyQAsBRsWnEBP+5QzNlhHo9Cc3ItkDv/T/+trYg4Hk1tMsZBlSAcko m9vwr0UPa7zPnkS4s5esPdmbwcPvUzIKBOcOgaTpm4Rea+9/RPGDvEGNYwpePXZy 07jGosk3xBhoWhSLqAtWDEQvOgRt202jLRaQs+OvSdVTTTU41t3AER360Z/RL+vc 2I1qezn+oCV/GiZjUNcd2lHk5W5xJXebCRW4Bs0YhQHODqG64Ctlpy6GHXqg///0 pdlriAvkflrOnNpnyG7M8ib/cREo/wK8NFgl93ZmG0z6LHcctIeb6UpW5W+csA68 lloxGU91lPlgW1U3nW+sRI5YpkRKpqM= -----END CERTIFICATE-----Generated at Sun Aug 24 00:29:20 2025 by rpki-client