$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/8d29d087-5c19-3a94-a477-3a61141b6a05.roa File: 8d29d087-5c19-3a94-a477-3a61141b6a05.roa (raw, json) Hash identifier: LcBOU0iKX3uLdA3YweF4YJ+XqHNu2AU6We0MPKiw/TM= Subject key identifier: 39:E7:D5:9A:A1:85:92:73:9A:A6:BB:88:15:35:47:2D:F8:7F:46:A7 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584AD7D10DC78DB220D4014F5C00 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/8d29d087-5c19-3a94-a477-3a61141b6a05.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 1239 IP address blocks: 209.20.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:0d:c7:8d:b2:20:d4:01:4f:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=3c0493e0-77f0-4667-b6c4-689be0d71b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:64:86:de:bf:b4:45:8e:a9:fe:0e:c2:ee: eb:31:b3:3e:09:47:a8:e4:be:53:da:e4:56:a9:93: b1:fc:fa:a5:52:d9:57:f9:ad:36:ac:4f:ba:87:ec: f2:75:30:08:0d:1f:02:c4:75:ad:0a:6f:44:f0:d7: e6:38:e6:c2:2e:d4:16:0f:8c:8f:69:f5:77:2d:f4: 22:d3:9e:4d:a5:8f:29:80:a4:83:00:6b:06:0e:ab: e0:ed:96:67:0e:54:ae:b1:4d:58:b7:b6:bd:67:ed: 91:47:3e:8f:b6:9b:f9:f0:e0:4d:a2:87:bc:7f:ec: cc:02:fc:eb:1d:fb:c1:eb:e8:2d:23:77:96:de:3b: 2a:ec:ac:40:8e:e9:9f:73:15:df:ef:6a:e2:8f:71: 51:75:7f:3c:04:58:0b:03:92:0a:e1:9a:89:a8:d1: 53:62:86:59:f4:71:7d:c4:40:18:ca:ec:ee:0f:82: da:99:c2:39:0e:f4:3b:0b:d4:8c:8a:05:47:c6:34: ac:44:1b:56:92:45:03:8d:27:fb:5c:d3:e8:1f:2b: da:8f:7c:65:b3:29:1b:be:b1:3f:ae:43:09:52:9f: d7:45:7b:b3:48:7b:59:96:b3:09:2f:fe:9d:e4:f3: c9:d6:72:74:54:62:ba:e5:a4:03:82:a8:c0:b6:55: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E7:D5:9A:A1:85:92:73:9A:A6:BB:88:15:35:47:2D:F8:7F:46:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/8d29d087-5c19-3a94-a477-3a61141b6a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0b:15:5f:08:c3:13:71:1c:f5:88:aa:6f:d1:4e:88:f7:52: a7:41:37:43:aa:d6:d5:0e:b9:bd:11:60:62:47:de:30:9f:60: 7c:60:13:14:7b:fc:56:cb:c9:e2:48:13:b2:e6:dc:39:f0:28: d4:7d:3d:0f:02:9e:25:25:23:d4:ee:7b:e4:ca:ec:0c:39:55: f5:f1:6a:fe:c6:1b:1e:58:13:12:c5:ff:14:86:c3:75:9f:ed: fe:96:b9:e5:25:1f:1d:1e:58:9f:75:e9:fe:f2:b4:1d:31:3b: bf:57:f5:41:8f:8a:bf:1d:a7:38:d8:9d:6d:d7:f3:94:24:72: 69:86:52:15:a7:95:7d:7a:b9:68:98:ab:6c:e4:34:68:bf:2e: b8:26:bc:a3:92:5c:7c:83:fd:b4:01:7d:ff:01:cc:04:ab:73: 99:ff:21:0e:e3:20:56:a6:fe:d3:e0:72:5e:94:f0:75:84:2c: 14:04:30:9c:56:f1:ab:75:81:05:0c:b5:dd:65:b5:fa:e3:71: 12:af:7e:2c:23:0e:82:c2:d1:43:48:97:32:b3:89:8b:be:a5: 1f:86:98:ed:73:7e:39:5a:c3:ba:a6:86:d8:73:58:fd:41:0a: 86:32:50:41:18:2c:34:1a:86:f3:14:04:d3:98:23:46:6b:c3: 7f:43:02:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Q3HjbIg1AFPXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk M2MwNDkzZTAtNzdmMC00NjY3LWI2YzQtNjg5YmUwZDcxYjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQVkht6/tEWOqf4Owu7rMbM+CUeo5L5T2uRW qZOx/PqlUtlX+a02rE+6h+zydTAIDR8CxHWtCm9E8NfmOObCLtQWD4yPafV3LfQi 055NpY8pgKSDAGsGDqvg7ZZnDlSusU1Yt7a9Z+2RRz6Ptpv58OBNooe8f+zMAvzr HfvB6+gtI3eW3jsq7KxAjumfcxXf72rij3FRdX88BFgLA5IK4ZqJqNFTYoZZ9HF9 xEAYyuzuD4LamcI5DvQ7C9SMigVHxjSsRBtWkkUDjSf7XNPoHyvaj3xlsykbvrE/ rkMJUp/XRXuzSHtZlrMJL/6d5PPJ1nJ0VGK65aQDgqjAtlVMTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnn1ZqhhZJzmqa7iBU1Ry34f0anMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvOGQyOWQwODctNWMxOS0z YTk0LWE0NzctM2E2MTE0MWI2YTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0RTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0LFV8IwxNxHPWIqm/RToj3UqdBN0Oq1tUOub0RYGJH3jCfYHxgExR7 /FbLyeJIE7Lm3DnwKNR9PQ8CniUlI9Tue+TK7Aw5VfXxav7GGx5YExLF/xSGw3Wf 7f6WueUlHx0eWJ916f7ytB0xO79X9UGPir8dpzjYnW3X85QkcmmGUhWnlX16uWiY q2zkNGi/LrgmvKOSXHyD/bQBff8BzASrc5n/IQ7jIFam/tPgcl6U8HWELBQEMJxW 8at1gQUMtd1ltfrjcRKvfiwjDoLC0UNIlzKziYu+pR+GmO1zfjlaw7qmhthzWP1B CoYyUEEYLDQahvMUBNOYI0Zrw39DAjM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:52 2025 by rpki-client