$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa File: 83a687bd-8f33-38a0-b954-7a7150c2e666.roa (raw, json) Hash identifier: W/craWWIWK4pulvurdEBc0qmEFjX1xpoyRr4gt/tJAQ= Subject key identifier: 29:78:6C:38:3F:7A:08:A1:07:0B:36:56:00:71:2E:12:91:2B:82:36 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584ADE90B7935E7BC7807E129380 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 394437 IP address blocks: 209.173.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:90:b7:93:5e:7b:c7:80:7e:12:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=8a3f7fbe-0ada-40d8-8a1a-b5cec4b4c848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:80:c6:6c:05:b5:31:51:14:17:7a:83:de: 5c:d6:19:14:6f:38:9a:51:f2:3a:2a:d9:45:8e:b7: 43:ff:87:fd:5c:98:20:41:2c:6a:32:13:58:34:f5: 8b:34:4e:61:03:86:96:6a:0e:48:30:5c:84:02:fe: 79:6e:6c:9e:94:96:22:86:aa:2c:1f:84:0d:08:58: 4f:7b:20:6c:54:c6:ae:7d:d0:6d:db:98:a8:6a:4e: 36:ea:78:4d:df:f1:8e:4b:9e:9c:a1:1b:a0:37:c7: 1a:a0:84:4b:43:9e:8e:6a:4a:76:8d:d1:af:b0:ac: 6d:d6:17:21:4e:62:15:a7:8b:40:05:53:eb:07:d4: cd:0e:9e:4c:b1:05:ac:79:43:c5:9d:b7:0d:7a:8f: 6d:c9:85:9c:5a:08:e8:d2:b2:2e:7a:09:4a:72:99: 21:bb:63:55:ea:26:00:a5:e2:43:11:2f:3c:30:13: 94:de:5d:85:be:80:be:cc:06:77:77:58:e2:b4:bb: 11:b6:86:16:6c:19:2b:1f:3e:7a:d0:22:48:f4:e1: e0:f8:37:ff:bb:e5:97:3e:bf:fd:05:96:3d:f1:21: 64:65:a7:5b:ee:c4:af:aa:1c:3a:10:bf:06:2a:04: 2b:9c:01:5a:2e:0c:ce:9d:72:28:21:28:bf:1b:d1: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:78:6C:38:3F:7A:08:A1:07:0B:36:56:00:71:2E:12:91:2B:82:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 209.173.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f6:6e:f2:2c:a2:38:4c:90:bb:5b:7e:01:68:8b:8a:07:36: f6:6a:97:f0:8d:42:1b:0a:c2:f5:42:ec:c7:35:0f:44:91:ee: 5a:a3:97:18:6e:4e:49:44:1b:26:f0:36:bb:ef:8f:be:f6:c7: e5:11:a1:a7:e2:b3:53:ab:7b:a7:84:b4:cb:d3:32:e2:ff:63: 3b:eb:48:0b:4c:c5:a7:b3:b5:32:a5:0e:69:9f:14:09:34:a3: dc:c6:7e:4e:e8:59:ee:81:0a:6c:be:c8:f5:83:8b:a3:54:94: 14:96:f2:75:97:93:24:87:98:43:c8:d0:0c:93:25:ab:b0:33: 12:85:c2:bf:36:9e:d7:05:91:c0:7e:2a:9f:69:9c:83:bf:86: 06:e1:23:0e:7d:3e:c9:fa:83:e4:e1:df:b3:19:74:7b:fa:94: 37:f5:59:19:e5:94:55:be:b9:4f:cc:ac:e9:09:eb:25:5d:b0: a2:9e:a3:2a:12:57:0a:b7:9b:fd:40:ab:5d:2c:28:ee:ed:36: 87:66:2f:65:bd:43:0d:f6:c5:fa:ca:d1:f1:22:80:f3:fb:62: 68:bd:cc:6d:fb:3a:81:8e:be:74:1f:d2:e0:b3:6c:ba:b9:8f: a1:da:cb:9b:d4:4f:56:f0:ab:79:57:6f:e3:7a:06:57:ee:4c: 98:9c:65:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErekLeTXnvHgH4Sk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk OGEzZjdmYmUtMGFkYS00MGQ4LThhMWEtYjVjZWM0YjRjODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+OAxmwFtTFRFBd6g95c1hkUbziaUfI6KtlF jrdD/4f9XJggQSxqMhNYNPWLNE5hA4aWag5IMFyEAv55bmyelJYihqosH4QNCFhP eyBsVMaufdBt25ioak426nhN3/GOS56coRugN8caoIRLQ56Oakp2jdGvsKxt1hch TmIVp4tABVPrB9TNDp5MsQWseUPFnbcNeo9tyYWcWgjo0rIueglKcpkhu2NV6iYA peJDES88MBOU3l2FvoC+zAZ3d1jitLsRtoYWbBkrHz560CJI9OHg+Df/u+WXPr/9 BZY98SFkZadb7sSvqhw6EL8GKgQrnAFaLgzOnXIoISi/G9FXLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCl4bDg/egihBws2VgBxLhKRK4I2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvODNhNjg3YmQtOGYzMy0z OGEwLWI5NTQtN2E3MTUwYzJlNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0a38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf2bvIsojhMkLtbfgFoi4oHNvZql/CNQhsKwvVC7Mc1D0SR7lqjlxhu TklEGybwNrvvj772x+URoafis1Ore6eEtMvTMuL/YzvrSAtMxaeztTKlDmmfFAk0 o9zGfk7oWe6BCmy+yPWDi6NUlBSW8nWXkySHmEPI0AyTJauwMxKFwr82ntcFkcB+ Kp9pnIO/hgbhIw59Psn6g+Th37MZdHv6lDf1WRnllFW+uU/MrOkJ6yVdsKKeoyoS Vwq3m/1Aq10sKO7tNodmL2W9Qw32xfrK0fEigPP7Ymi9zG37OoGOvnQf0uCzbLq5 j6Hay5vUT1bwq3lXb+N6BlfuTJicZVk= -----END CERTIFICATE-----Generated at Sun Aug 24 04:08:14 2025 by rpki-client