$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa File: d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa (raw, json) Hash identifier: oRu3IIHlKRt3nP6DeJmpbTVC9o/CtLz3EqRJzpDrYV4= Subject key identifier: 95:09:92:F7:24:43:DC:2C:F9:46:B9:CD:C5:37:4F:0F:1E:B2:46:36 Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584AF256809DB5F31112B7FA2700 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 13213 IP address blocks: 209.236.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:80:9d:b5:f3:11:12:b7:fa:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=5f097405-b805-475e-aa9d-9a04c2cf4bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:06:ca:2d:67:5f:85:73:54:66:f3:73:a0: c9:77:1a:45:63:8a:19:41:c2:3e:2c:46:cb:7f:ae: 46:cb:c8:1d:10:bb:0a:74:c5:5c:71:26:4f:5c:cd: c1:34:95:5d:04:fc:7e:f8:c1:e7:56:1d:28:71:d2: 85:39:2d:18:6f:53:ff:bc:30:ee:81:a1:5e:a3:97: 9c:77:4a:ed:3f:6c:11:d1:a4:9d:93:6c:83:75:c7: 45:0e:44:01:8d:f3:6c:83:84:4d:4d:81:f2:9e:ca: 7c:b0:1e:ef:5b:47:e8:0c:b1:50:e8:90:87:6b:f9: 83:50:8a:a6:4e:a6:59:30:97:96:3c:52:84:91:a0: 96:e2:dc:cf:5d:0a:2f:31:31:d8:85:76:8d:de:38: 7e:f0:2e:7d:ed:2a:e1:3a:d5:63:33:07:4b:35:bd: 32:df:01:fc:10:6a:8d:c9:2b:c9:0d:99:9b:46:16: 3f:4a:4f:89:df:4f:7c:ed:5c:11:b4:e3:15:2e:cc: 2b:61:3e:d1:0e:d4:0c:62:5b:0a:ac:88:46:7d:bd: 9e:93:de:3f:a8:c3:e6:55:dd:59:5e:7c:b6:17:f8: 20:ac:b3:74:1b:81:04:3c:88:ca:9a:da:20:01:35: 6b:c3:09:bd:e2:00:e8:3e:6d:d6:c7:fc:de:60:48: 94:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:09:92:F7:24:43:DC:2C:F9:46:B9:CD:C5:37:4F:0F:1E:B2:46:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:4c:64:69:3f:ae:bb:57:6a:df:8e:33:ef:84:83:1c:fe:7e: aa:50:e0:b1:e6:e5:eb:a2:a2:0c:ec:42:a9:1b:41:d8:09:39: ff:76:4b:af:35:35:f9:8d:12:08:aa:ea:e8:52:aa:40:60:0c: e0:dd:41:7d:e1:ed:0d:04:33:98:43:b9:63:4a:c2:f1:e4:fb: b5:70:a9:1a:c4:b5:26:39:00:1e:7e:a8:d5:c2:34:6a:24:a5: 27:9c:ca:fd:c5:1c:31:9c:b6:d8:c9:60:d5:08:b5:3e:e8:7a: c0:06:08:8c:8e:54:2d:c3:5e:6f:4b:00:14:1e:fa:e8:8a:dd: a8:34:77:41:3b:95:ef:c9:65:9c:9b:4b:b5:0c:a5:f5:26:7b: 35:23:5c:30:18:a1:25:0f:59:aa:4f:4f:73:b5:59:ef:9a:1d: 54:3e:29:9d:70:8e:08:e8:97:cd:ea:de:43:ae:84:88:cd:bb: d4:65:3f:17:68:40:a6:48:ad:cb:17:50:4c:8c:b5:57:21:48: f3:dc:7b:6c:2a:14:5f:fb:41:eb:c1:34:2c:4f:52:4e:9d:86: b0:1a:00:f1:05:ea:15:57:9a:f0:c0:b6:eb:c4:ee:95:f0:4d: dd:65:6c:ed:43:c9:34:4c:14:bd:6c:f5:8d:2d:be:13:3b:1e: b8:14:c3:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVoCdtfMRErf6JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NWYwOTc0MDUtYjgwNS00NzVlLWFhOWQtOWEwNGMyY2Y0YmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz0Gyi1nX4VzVGbzc6DJdxpFY4oZQcI+LEbL f65Gy8gdELsKdMVccSZPXM3BNJVdBPx++MHnVh0ocdKFOS0Yb1P/vDDugaFeo5ec d0rtP2wR0aSdk2yDdcdFDkQBjfNsg4RNTYHynsp8sB7vW0foDLFQ6JCHa/mDUIqm TqZZMJeWPFKEkaCW4tzPXQovMTHYhXaN3jh+8C597SrhOtVjMwdLNb0y3wH8EGqN ySvJDZmbRhY/Sk+J30987VwRtOMVLswrYT7RDtQMYlsKrIhGfb2ek94/qMPmVd1Z Xny2F/ggrLN0G4EEPIjKmtogATVrwwm94gDoPm3Wx/zeYEiUkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUJkvckQ9ws+Ua5zcU3Tw8eskY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZDBkNzZjMWItYTNmMS0z NDI0LTlhZDgtMWFkZmYyY2Q5Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0exIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJMZGk/rrtXat+OM++Egxz+fqpQ4LHm5euiogzsQqkbQdgJOf92S681 NfmNEgiq6uhSqkBgDODdQX3h7Q0EM5hDuWNKwvHk+7VwqRrEtSY5AB5+qNXCNGok pSecyv3FHDGcttjJYNUItT7oesAGCIyOVC3DXm9LABQe+uiK3ag0d0E7le/JZZyb S7UMpfUmezUjXDAYoSUPWapPT3O1We+aHVQ+KZ1wjgjol83q3kOuhIjNu9RlPxdo QKZIrcsXUEyMtVchSPPce2wqFF/7QevBNCxPUk6dhrAaAPEF6hVXmvDAtuvE7pXw Td1lbO1DyTRMFL1s9Y0tvhM7HrgUw+Y= -----END CERTIFICATE-----Generated at Sat Aug 23 21:53:22 2025 by rpki-client