$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/ecd939fc-f274-37a2-ad65-81e7707af52f.roa File: ecd939fc-f274-37a2-ad65-81e7707af52f.roa (raw, json) Hash identifier: TBDMZxnW6W2Voqdq4jeoscIpav9qq/I3fgTqqFS1ngw= Subject key identifier: A0:EA:7A:A4:3E:AC:25:3B:A3:CA:0C:77:ED:35:79:57:12:3D:D2:7E Certificate issuer: /CN=a278da28-82b3-48fe-bc76-7859a82f5651 Certificate serial: 010D0C9F4328584AECC151B683EE9899D298D440 Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/ecd939fc-f274-37a2-ad65-81e7707af52f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 38082 IP address blocks: 209.209.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:51:b6:83:ee:98:99:d2:98:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=1fb263d5-584a-4210-bc34-00063e884a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:7e:87:7b:5f:bc:46:d1:49:fb:21:e6:fc: 45:ab:8e:6a:b9:a5:84:11:99:47:77:f8:a2:29:33: 5b:4c:88:8c:6f:38:6a:ad:a4:98:63:46:72:63:fe: ec:0a:2a:77:cf:30:a3:fa:92:86:a8:2a:8c:4d:b5: cf:01:c4:88:a3:39:d3:65:98:61:11:06:f2:21:aa: e8:c5:b7:d3:c2:5d:0f:d4:12:02:61:d7:76:88:f0: 44:ae:00:d7:c9:77:a0:ad:98:78:24:ba:7f:dc:5a: 8c:36:ae:c4:f7:83:c3:36:a8:65:15:3d:dd:2a:89: 50:d1:65:b9:95:b0:a8:a4:f8:ba:be:dc:2d:d7:97: 87:e3:b7:aa:56:6d:ec:57:51:62:60:09:59:e4:85: 70:3e:35:8e:d3:18:2c:e1:23:8f:cb:de:bf:8b:71: e1:4c:47:2f:e8:8a:49:8b:3c:51:1f:9e:e6:a8:f4: 6f:b1:6d:7d:a5:4e:fb:6d:48:7a:8e:a9:86:74:82: 00:a4:67:b5:ed:df:07:98:4c:88:d2:3b:08:ab:36: 7d:b6:fe:ba:ca:e0:f2:d7:9a:fd:84:a8:08:47:99: cc:2a:3c:5a:81:e5:6c:43:20:4e:9d:b8:7a:99:c1: 93:fa:e2:26:d4:96:ed:3e:7d:9d:a9:4a:7a:14:a7: 9c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EA:7A:A4:3E:AC:25:3B:A3:CA:0C:77:ED:35:79:57:12:3D:D2:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/ecd939fc-f274-37a2-ad65-81e7707af52f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl X509v3 Authority Key Identifier: keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer sbgp-ipAddrBlock: critical IPv4: 209.209.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ad:2c:6e:0b:1b:c8:9b:15:c5:d6:e7:80:a6:e0:58:d4:11: d5:07:ea:03:4c:7f:7b:45:03:be:ca:ba:1e:a5:19:ae:44:6a: 7a:3f:4f:f1:69:8a:6b:7f:58:51:32:fb:b3:08:9e:17:77:a1: c8:25:88:74:96:91:3c:eb:8f:27:32:82:ab:40:ee:2d:ab:d3: 58:df:19:69:01:32:32:36:96:5d:03:57:23:2f:3f:24:c2:02: 11:69:ba:f9:37:60:a7:73:2c:c0:16:88:06:fd:ea:0d:3e:41: 00:88:8d:36:58:fb:41:a3:db:38:82:b5:67:e5:26:47:01:2b: 77:95:43:ed:1e:03:27:5a:d8:79:7a:a8:6d:a4:3e:98:6a:85: 73:5f:50:c9:8d:ed:f8:b4:36:39:bc:45:ce:0c:41:1b:1f:c1: 60:c8:44:3e:96:9d:a4:a2:5e:e4:4d:ea:fa:6c:5b:02:16:75: 8d:3f:fa:d6:56:e8:ae:19:39:94:fd:81:ac:47:ec:b1:db:04: 48:45:87:7c:5b:5c:46:14:cc:7a:58:91:a9:fb:58:fd:b5:4a: 8f:e6:10:a3:67:fd:cf:e7:40:6c:76:8b:30:a3:02:2a:54:2e: 2c:54:5b:b3:33:7e:e0:4d:86:6c:01:ef:e0:a9:01:a9:2c:d0: 95:84:d8:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswVG2g+6YmdKY1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI3OGRhMjgtODJiMy00OGZlLWJjNzYtNzg1OWE4MmY1 NjUxMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MWZiMjYzZDUtNTg0YS00MjEwLWJjMzQtMDAwNjNlODg0YTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrh+h3tfvEbRSfsh5vxFq45quaWEEZlHd/ii KTNbTIiMbzhqraSYY0ZyY/7sCip3zzCj+pKGqCqMTbXPAcSIoznTZZhhEQbyIaro xbfTwl0P1BICYdd2iPBErgDXyXegrZh4JLp/3FqMNq7E94PDNqhlFT3dKolQ0WW5 lbCopPi6vtwt15eH47eqVm3sV1FiYAlZ5IVwPjWO0xgs4SOPy96/i3HhTEcv6IpJ izxRH57mqPRvsW19pU77bUh6jqmGdIIApGe17d8HmEyI0jsIqzZ9tv66yuDy15r9 hKgIR5nMKjxageVsQyBOnbh6mcGT+uIm1JbtPn2dqUp6FKecTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDqeqQ+rCU7o8oMd+01eVcSPdJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4 ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5YTgyZjU2NTEvZWNkOTM5ZmMtZjI3NC0z N2EyLWFkNjUtODFlNzcwN2FmNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTI3OGRhMjgtODJiMy00OGZlLWJj NzYtNzg1OWE4MmY1NjUxL2EyNzhkYTI4LTgyYjMtNDhmZS1iYzc2LTc4NTlhODJm NTY1MS5jcmwwHwYDVR0jBBgwFoAU9ipjPl1+gQsD5F/PfySWru+jWRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5 YTgyZjU2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKtLG4LG8ibFcXW54Cm4FjUEdUH6gNMf3tFA77Kuh6lGa5Eano/T/Fp imt/WFEy+7MInhd3ocgliHSWkTzrjycygqtA7i2r01jfGWkBMjI2ll0DVyMvPyTC AhFpuvk3YKdzLMAWiAb96g0+QQCIjTZY+0Gj2ziCtWflJkcBK3eVQ+0eAyda2Hl6 qG2kPphqhXNfUMmN7fi0Njm8Rc4MQRsfwWDIRD6WnaSiXuRN6vpsWwIWdY0/+tZW 6K4ZOZT9gaxH7LHbBEhFh3xbXEYUzHpYkan7WP21So/mEKNn/c/nQGx2izCjAipU LixUW7MzfuBNhmwB7+CpAaks0JWE2DA= -----END CERTIFICATE-----Generated at Sat Aug 23 13:38:19 2025 by rpki-client