$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa File: 3495d15c-fa42-330f-b8d8-37281c835c5c.roa (raw, json) Hash identifier: JeIMAKIUbnM8MUGXL7h7IeyYEx0Pko9vzZiE6LCG+9w= Subject key identifier: 91:9B:78:28:BF:2A:36:01:56:44:91:D6:46:EC:54:D7:8D:23:3E:01 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584AC87644E15CB565E9E6E8DA20 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 22612 IP address blocks: 209.188.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:44:e1:5c:b5:65:e9:e6:e8:da:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=6d800361-48e3-4c30-a813-bafa6d81a405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:62:76:16:85:ba:22:36:9a:e3:45:63:3d: 3b:c9:9a:b5:fa:2a:3f:32:24:fb:41:a1:0c:c3:ac: da:92:c2:f9:c9:71:fa:65:bf:a5:28:72:6e:cb:76: 3c:c5:f4:a0:84:a6:ca:4a:e5:5b:fa:62:53:d8:9e: ac:46:36:30:04:60:61:1c:0f:4e:93:b9:bd:1b:3d: 56:73:04:74:42:94:b1:a5:68:cf:09:a6:74:e8:ac: b2:84:3a:a4:36:b2:59:2e:ee:eb:a0:47:c2:ef:83: d9:83:28:62:44:ee:87:c0:4d:e4:ae:e3:fc:37:72: 9c:03:f5:c0:a0:46:52:ec:5b:54:98:46:b1:a3:a5: 52:51:36:59:f3:81:3a:9b:74:23:4d:23:7f:06:94: 53:ae:8f:cd:e1:ee:82:09:d5:1f:8b:32:f7:0f:4b: 1c:cb:ef:cb:e8:48:58:0f:26:aa:59:52:92:c7:0e: 8d:ac:b8:52:2c:f0:da:36:44:7e:16:ec:99:75:a7: d2:df:a6:cd:5b:d3:e1:dd:dc:cb:fc:6e:64:83:3e: 0f:11:67:82:0c:52:ee:01:3a:82:b5:29:72:0f:49: 62:74:9b:f0:5a:5b:76:0e:1b:22:dc:b7:07:7d:50: 72:f0:e6:93:15:a7:cd:13:e5:8f:b7:a9:95:68:d9: 5d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9B:78:28:BF:2A:36:01:56:44:91:D6:46:EC:54:D7:8D:23:3E:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:20:4d:07:32:de:24:c3:b7:2d:25:9c:3d:57:56:42:65:de: 6c:a5:1f:f8:1c:ea:68:41:53:e9:25:d5:43:7c:7b:77:48:3b: d7:06:eb:4d:f1:07:91:b8:09:0b:29:b0:8a:94:20:1c:c5:e6: d9:fb:a9:75:b9:e2:8a:66:52:cb:90:92:06:dd:88:d0:f5:e1: 7d:7d:bf:bb:d8:5a:36:ac:44:c2:4e:4c:f9:d7:0c:ee:ba:c4: 8d:3c:ad:52:3e:21:b2:b6:44:69:91:f5:7b:2b:ef:c6:ce:11: 51:ef:20:35:12:95:c4:41:19:b0:e6:85:d6:57:6d:92:47:b6: 19:26:e5:07:bc:ee:10:51:cc:63:b9:a7:a3:13:ed:e5:b9:41: 5d:7c:fc:1d:fb:ff:40:66:ac:62:6e:83:87:5c:97:95:07:95: 02:a2:c4:24:c0:28:a8:c8:7a:fa:be:84:42:98:89:08:f9:4e: 14:65:c0:01:b5:99:e7:ce:d7:b2:fd:15:8e:30:ec:8c:c7:07: 94:c9:d1:9c:49:6c:e9:66:56:19:77:c5:85:61:f4:01:e1:40: 4c:77:b2:87:08:29:02:47:2b:88:7a:9d:06:50:cb:76:1a:e4: e3:d5:50:3a:05:05:17:58:e1:7c:95:30:dd:90:49:d3:1b:ae: 45:e4:72:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdkThXLVl6ebo2iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NmQ4MDAzNjEtNDhlMy00YzMwLWE4MTMtYmFmYTZkODFhNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJlidhaFuiI2muNFYz07yZq1+io/MiT7QaEM w6zaksL5yXH6Zb+lKHJuy3Y8xfSghKbKSuVb+mJT2J6sRjYwBGBhHA9Ok7m9Gz1W cwR0QpSxpWjPCaZ06KyyhDqkNrJZLu7roEfC74PZgyhiRO6HwE3kruP8N3KcA/XA oEZS7FtUmEaxo6VSUTZZ84E6m3QjTSN/BpRTro/N4e6CCdUfizL3D0scy+/L6EhY DyaqWVKSxw6NrLhSLPDaNkR+FuyZdafS36bNW9Ph3dzL/G5kgz4PEWeCDFLuATqC tSlyD0lidJvwWlt2Dhsi3LcHfVBy8OaTFafNE+WPt6mVaNldewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGbeCi/KjYBVkSR1kbsVNeNIz4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzQ5NWQxNWMtZmE0Mi0z MzBmLWI4ZDgtMzcyODFjODM1YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQgTQcy3iTDty0lnD1XVkJl3mylH/gc6mhBU+kl1UN8e3dIO9cG603x B5G4CQspsIqUIBzF5tn7qXW54opmUsuQkgbdiND14X19v7vYWjasRMJOTPnXDO66 xI08rVI+IbK2RGmR9Xsr78bOEVHvIDUSlcRBGbDmhdZXbZJHthkm5Qe87hBRzGO5 p6MT7eW5QV18/B37/0BmrGJug4dcl5UHlQKixCTAKKjIevq+hEKYiQj5ThRlwAG1 mefO17L9FY4w7IzHB5TJ0ZxJbOlmVhl3xYVh9AHhQEx3socIKQJHK4h6nQZQy3Ya 5OPVUDoFBRdY4XyVMN2QSdMbrkXkcsE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:59:08 2025 by rpki-client