$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/425affcb-76e5-3a31-a4b4-69a7299a8e5b.roa File: 425affcb-76e5-3a31-a4b4-69a7299a8e5b.roa (raw, json) Hash identifier: NqRFuvAN82rKMzgZaehBzOFIiGbub5sPkLlVneiOFkM= Subject key identifier: 3A:78:43:B4:A2:3F:32:E2:84:BD:F0:2D:6B:8F:F4:74:97:9B:EA:BD Certificate issuer: /CN=a278da28-82b3-48fe-bc76-7859a82f5651 Certificate serial: 010D0C9F4328584AECC151A4162AB83293C5C180 Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/425affcb-76e5-3a31-a4b4-69a7299a8e5b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 38082 IP address blocks: 209.209.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:51:a4:16:2a:b8:32:93:c5:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9148ee47-4616-4dec-b545-b04332612704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:00:94:a7:fe:13:9b:eb:06:72:44:31:14: 50:77:92:94:72:14:6e:b1:42:0c:c3:18:8a:b5:16: 7a:c1:3f:56:a6:7f:2a:ad:58:99:a5:8b:52:ec:06: 89:5b:02:45:a6:5d:98:ac:fd:65:59:ee:9e:f8:e8: 6a:ae:72:3e:6c:75:39:31:48:ce:ee:f3:97:f5:4d: 22:84:e8:2b:c0:a5:86:79:36:c9:68:a6:14:0d:47: d8:54:45:9f:57:ce:9b:ea:d5:75:53:b5:c2:8b:a4: c6:7e:64:47:16:f2:8c:ab:dd:09:c2:86:df:54:f2: d2:8f:d6:a1:33:47:06:b2:a0:fe:87:60:b3:12:75: 7a:cd:26:af:ab:b5:81:24:82:fc:a8:9c:c2:aa:b1: 37:f9:89:31:db:ea:7e:78:ee:83:57:59:b3:5c:c6: 3d:56:39:0e:5c:e2:83:a2:fe:9d:6a:ff:a1:6f:41: e9:f3:09:5e:98:92:90:1c:a1:f1:36:55:57:8d:4f: 5c:d9:84:8c:a6:97:9d:2a:01:b0:42:c8:82:71:60: e8:68:2d:d1:8d:f6:f1:cf:33:39:83:ee:04:cc:ac: 0a:fe:55:fe:30:22:9d:bb:e3:c7:15:b1:f3:a5:f3: d1:c8:7a:dc:32:9a:72:02:64:c4:d4:aa:1b:64:e6: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:78:43:B4:A2:3F:32:E2:84:BD:F0:2D:6B:8F:F4:74:97:9B:EA:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/425affcb-76e5-3a31-a4b4-69a7299a8e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl X509v3 Authority Key Identifier: keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer sbgp-ipAddrBlock: critical IPv4: 209.209.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:02:6f:e1:ac:d9:cf:74:33:e6:a9:6b:7a:2d:76:7c:62:35: 83:d3:8c:95:f7:d7:69:f9:27:c7:29:bb:a2:5d:d9:6f:2c:fd: ba:fb:9f:e8:f9:b2:3d:5f:73:70:7c:48:8d:64:1d:1a:7b:71: c3:9a:50:a5:e1:43:be:03:45:97:2a:2b:7f:7e:46:eb:8f:91: 6b:e6:2c:f4:81:f4:07:c2:9b:e9:b8:bb:3f:b2:b3:97:fe:6e: 4c:8f:fd:8c:fb:06:38:04:39:2e:67:8e:0b:a1:40:cb:f2:13: a4:cf:3b:08:19:47:77:9b:8d:be:32:34:95:95:20:31:df:25: 01:f4:c6:3d:a1:8b:b3:60:be:da:76:61:ed:be:c4:50:1c:18: e4:53:70:bb:09:42:80:ec:2b:99:c4:8b:f2:5d:3f:33:4f:1d: 46:be:b8:7c:67:d0:01:75:9e:06:84:fc:d3:57:3b:b7:36:93: 52:33:7b:19:fb:4c:87:b3:93:bf:99:5e:1e:42:9e:0a:cf:ea: c6:e8:c5:bd:35:20:67:6e:03:f1:22:1c:f9:04:8f:c5:ad:74: 76:46:23:bf:08:65:e0:a6:0a:9e:98:cd:9f:51:33:a7:a5:33: a3:c6:0b:c5:3b:8c:99:92:a5:3b:c7:a3:4b:8b:95:21:a3:3a: 89:33:66:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswVGkFiq4MpPFwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI3OGRhMjgtODJiMy00OGZlLWJjNzYtNzg1OWE4MmY1 NjUxMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTE0OGVlNDctNDYxNi00ZGVjLWI1NDUtYjA0MzMyNjEyNzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBcAlKf+E5vrBnJEMRRQd5KUchRusUIMwxiK tRZ6wT9Wpn8qrViZpYtS7AaJWwJFpl2YrP1lWe6e+OhqrnI+bHU5MUjO7vOX9U0i hOgrwKWGeTbJaKYUDUfYVEWfV86b6tV1U7XCi6TGfmRHFvKMq90JwobfVPLSj9ah M0cGsqD+h2CzEnV6zSavq7WBJIL8qJzCqrE3+Ykx2+p+eO6DV1mzXMY9VjkOXOKD ov6dav+hb0Hp8wlemJKQHKHxNlVXjU9c2YSMppedKgGwQsiCcWDoaC3RjfbxzzM5 g+4EzKwK/lX+MCKdu+PHFbHzpfPRyHrcMppyAmTE1KobZOYFUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp4Q7SiPzLihL3wLWuP9HSXm+q9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4 ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5YTgyZjU2NTEvNDI1YWZmY2ItNzZlNS0z YTMxLWE0YjQtNjlhNzI5OWE4ZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTI3OGRhMjgtODJiMy00OGZlLWJj NzYtNzg1OWE4MmY1NjUxL2EyNzhkYTI4LTgyYjMtNDhmZS1iYzc2LTc4NTlhODJm NTY1MS5jcmwwHwYDVR0jBBgwFoAU9ipjPl1+gQsD5F/PfySWru+jWRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5 YTgyZjU2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUCb+Gs2c90M+apa3otdnxiNYPTjJX312n5J8cpu6Jd2W8s/br7n+j5 sj1fc3B8SI1kHRp7ccOaUKXhQ74DRZcqK39+RuuPkWvmLPSB9AfCm+m4uz+ys5f+ bkyP/Yz7BjgEOS5njguhQMvyE6TPOwgZR3ebjb4yNJWVIDHfJQH0xj2hi7Ngvtp2 Ye2+xFAcGORTcLsJQoDsK5nEi/JdPzNPHUa+uHxn0AF1ngaE/NNXO7c2k1Izexn7 TIezk7+ZXh5CngrP6sboxb01IGduA/EiHPkEj8WtdHZGI78IZeCmCp6YzZ9RM6el M6PGC8U7jJmSpTvHo0uLlSGjOokzZqU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:57:34 2025 by rpki-client