$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa File: e409102b-1574-3eb9-9d70-f7404931cfa6.roa (raw, json) Hash identifier: I2ZFVclXO55v76156xYlLeI8vcph0nbqHIvvKgyekcw= Subject key identifier: 44:3D:99:22:6C:98:10:D5:9B:91:1D:57:2A:6B:8C:63:9B:82:FA:CA Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584AF0F1388A195E6B6D98FB1100 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 13213 IP address blocks: 209.236.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:38:8a:19:5e:6b:6d:98:fb:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=085af7a7-e163-4850-b155-47f21b88dd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:da:81:7c:f9:0d:ea:dd:85:0a:99:1e:62:1a: aa:70:6b:fd:af:a5:ff:48:d0:00:3f:c6:80:bd:57: 2a:23:16:a2:5e:76:01:45:60:e8:2b:7b:22:89:3d: 95:87:33:6d:ae:ad:d9:9f:3a:c9:87:d7:89:7c:12: d4:15:5e:66:b6:72:a6:36:d6:7b:f9:a9:b8:c5:2e: cf:b7:c8:a4:55:55:c3:9a:62:ca:ee:ae:c4:94:32: 50:73:93:02:e0:c3:0c:e9:7c:06:f7:93:e1:15:99: 99:85:17:6a:3b:f3:c5:88:de:26:5d:95:4d:b5:2e: 1b:c3:03:52:e6:1b:99:9d:8a:ec:93:de:00:07:77: 9c:8c:ac:e0:6e:a8:b8:2d:c9:ed:32:88:96:10:04: 98:7d:41:a2:13:70:31:4f:61:c8:f4:e7:ea:08:a8: 96:dc:fc:b4:c6:4d:e6:11:e7:43:4e:c3:db:48:a6: 80:80:51:74:c3:20:51:18:e5:3d:ca:6e:fb:30:d7: af:ef:00:57:bb:d6:b9:69:4c:60:6c:47:84:9f:55: e4:5e:4a:5c:70:e1:7d:f9:24:c7:5f:a5:6c:26:c3: ed:9c:ff:47:ee:bd:e3:24:d0:ba:9d:1a:33:0a:41: c5:96:7f:f6:94:72:69:cd:86:d3:95:20:fd:f4:e2: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3D:99:22:6C:98:10:D5:9B:91:1D:57:2A:6B:8C:63:9B:82:FA:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:8b:dd:04:18:0e:f3:e4:7b:8a:35:ee:45:42:c4:d7:c7:13: 65:37:8d:06:53:bb:56:76:0c:cf:72:19:12:ca:30:b2:f8:6e: 50:b3:74:eb:9e:36:2a:64:a0:28:07:3a:11:7f:3c:38:c9:56: de:5b:fe:6e:c9:64:ae:e0:41:d2:40:61:4f:3f:eb:44:cb:93: 66:b5:04:1a:73:ae:58:0e:89:97:01:90:13:25:de:8d:65:d1: df:89:43:ae:7a:21:29:96:40:07:86:55:b6:a2:02:3b:04:17: ad:ed:76:3e:5d:35:c6:b6:91:fa:74:c9:bb:3c:e8:6f:d6:72: 7e:d8:9d:a4:d8:45:fb:ce:15:75:3b:91:36:f1:fa:c5:59:d1: 2f:b3:d1:47:11:4c:d9:8a:93:3f:ae:25:27:aa:e5:a0:bd:68: 73:00:56:cc:16:a9:88:43:e7:4d:8a:77:98:23:06:13:81:dd: 65:b0:fa:39:e9:35:3a:d6:e9:f1:61:39:bb:c4:b6:53:44:60: 8e:9d:a4:6a:78:84:94:2b:d4:0d:1f:40:42:4d:d1:54:0a:68: 61:35:ec:40:c2:d6:a6:30:2a:f6:57:07:78:89:00:ba:8f:96: ba:be:81:85:78:70:9e:3e:10:bf:4e:5a:e2:98:a4:a9:2c:b6: eb:ba:1e:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TiKGV5rbZj7EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MDg1YWY3YTctZTE2My00ODUwLWIxNTUtNDdmMjFiODhkZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNqBfPkN6t2FCpkeYhqqcGv9r6X/SNAAP8aA vVcqIxaiXnYBRWDoK3siiT2VhzNtrq3ZnzrJh9eJfBLUFV5mtnKmNtZ7+am4xS7P t8ikVVXDmmLK7q7ElDJQc5MC4MMM6XwG95PhFZmZhRdqO/PFiN4mXZVNtS4bwwNS 5huZnYrsk94AB3ecjKzgbqi4LcntMoiWEASYfUGiE3AxT2HI9OfqCKiW3Py0xk3m EedDTsPbSKaAgFF0wyBRGOU9ym77MNev7wBXu9a5aUxgbEeEn1XkXkpccOF9+STH X6VsJsPtnP9H7r3jJNC6nRozCkHFln/2lHJpzYbTlSD99OIs1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ9mSJsmBDVm5EdVyprjGObgvrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZTQwOTEwMmItMTU3NC0z ZWI5LTlkNzAtZjc0MDQ5MzFjZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0exGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGL3QQYDvPke4o17kVCxNfHE2U3jQZTu1Z2DM9yGRLKMLL4blCzdOue NipkoCgHOhF/PDjJVt5b/m7JZK7gQdJAYU8/60TLk2a1BBpzrlgOiZcBkBMl3o1l 0d+JQ656ISmWQAeGVbaiAjsEF63tdj5dNca2kfp0ybs86G/Wcn7YnaTYRfvOFXU7 kTbx+sVZ0S+z0UcRTNmKkz+uJSeq5aC9aHMAVswWqYhD502Kd5gjBhOB3WWw+jnp NTrW6fFhObvEtlNEYI6dpGp4hJQr1A0fQEJN0VQKaGE17EDC1qYwKvZXB3iJALqP lrq+gYV4cJ4+EL9OWuKYpKkstuu6Hpo= -----END CERTIFICATE-----Generated at Sat Aug 23 20:02:32 2025 by rpki-client