$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa File: f1f615a7-b544-390a-b957-864e92a670f9.roa (raw, json) Hash identifier: 45n8hCL0TuJpMF9SRITL+icIElRZ+7QCePOdx0bMISU= Subject key identifier: 34:D5:45:47:AA:1D:EF:59:4F:31:1E:7A:CA:B9:F4:08:74:D1:E7:AF Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584AD3A0FC3972D014485660FC40 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 32181 IP address blocks: 209.212.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:fc:39:72:d0:14:48:56:60:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=dd12b1c8-b031-4d31-a8d9-a6808f87338b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:a6:1d:c2:b6:88:1d:ba:c8:e6:1d:4a:39: e8:30:bf:ad:2e:22:69:49:51:d2:67:16:73:6e:08: 17:82:5b:3a:d1:c2:44:b2:35:2d:63:a1:b2:7e:08: 4d:75:53:0e:df:fd:fe:05:a6:38:2e:c2:89:ad:c4: a0:dc:81:aa:4d:79:4c:cc:79:bc:92:f8:a8:a7:ea: d8:95:43:b4:ba:be:a6:09:fb:f7:ef:8c:6d:40:5c: 8b:bb:28:04:e8:4e:48:35:e6:1a:e2:1b:4e:25:71: e1:19:38:4d:20:48:c1:61:d0:b0:e8:fe:49:7b:f4: ad:15:23:1e:25:b0:00:36:35:7f:40:71:87:5d:1a: 92:56:1b:c8:67:16:ef:49:3f:35:3d:d6:8b:eb:44: b5:0f:5c:a9:87:43:6c:28:d5:e6:37:aa:70:64:8d: 90:ed:c3:04:01:64:65:86:cc:d8:96:23:0f:88:ae: d6:20:90:8c:3b:7e:d9:fa:b0:f3:c7:43:25:2e:0a: c6:ad:1e:bd:a8:36:62:ad:bc:7b:2b:d5:68:f8:ac: 06:04:f8:5d:e3:2b:f1:61:46:38:a1:86:19:fb:0b: c3:d1:df:43:5e:3a:19:b3:4e:04:d0:cc:cd:fd:fc: a9:84:e1:a0:86:6c:21:55:9e:3b:0e:07:6d:2f:91: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D5:45:47:AA:1D:EF:59:4F:31:1E:7A:CA:B9:F4:08:74:D1:E7:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 209.212.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e0:60:b0:26:18:61:47:9e:aa:71:a3:b8:ce:60:e7:d0:52: c1:54:34:f2:0a:33:e5:28:5c:be:ca:8d:b0:83:e2:df:b2:b3: 88:e2:72:21:3c:76:90:13:8f:83:ad:2b:a9:ab:3e:be:ec:64: 25:18:2e:5d:90:35:03:a9:77:65:cc:3d:45:f0:75:de:c8:7e: f4:4a:2d:8d:25:27:7d:7d:4c:f3:40:ce:72:ec:ae:7e:aa:e8: 96:fb:c4:ff:22:34:22:b8:31:d9:b8:eb:55:ac:f1:68:aa:ef: 15:b2:21:17:a0:77:09:59:a9:57:a9:73:60:bf:fc:10:55:ae: 14:4b:11:46:f2:b2:8d:94:16:53:8d:b8:b6:fa:00:93:7c:53: 13:a7:f6:06:7c:ac:38:13:5d:0b:35:8a:e0:93:4e:bb:ba:d8: d8:27:17:46:b0:06:41:01:84:20:30:26:62:12:d5:a7:39:bd: 4e:e7:d1:1e:7d:6f:c0:ce:63:d6:39:a7:c3:4a:c2:f0:12:d9: cb:82:10:19:70:fe:05:cd:eb:c8:fc:00:66:53:c6:05:46:e2: 14:ba:11:75:06:32:d6:60:d2:cd:74:b3:28:85:9b:80:af:56: 7c:0f:cd:36:14:ac:60:dd:cd:97:06:e5:01:8a:b2:66:9f:bd: fb:76:f1:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPw5ctAUSFZg/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZGQxMmIxYzgtYjAzMS00ZDMxLWE4ZDktYTY4MDhmODczMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2demHcK2iB26yOYdSjnoML+tLiJpSVHSZxZz bggXgls60cJEsjUtY6GyfghNdVMO3/3+BaY4LsKJrcSg3IGqTXlMzHm8kviop+rY lUO0ur6mCfv374xtQFyLuygE6E5INeYa4htOJXHhGThNIEjBYdCw6P5Je/StFSMe JbAANjV/QHGHXRqSVhvIZxbvST81PdaL60S1D1yph0NsKNXmN6pwZI2Q7cMEAWRl hszYliMPiK7WIJCMO37Z+rDzx0MlLgrGrR69qDZirbx7K9Vo+KwGBPhd4yvxYUY4 oYYZ+wvD0d9DXjoZs04E0MzN/fyphOGghmwhVZ47DgdtL5HGVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTVRUeqHe9ZTzEeesq59Ah00eevMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvZjFmNjE1YTctYjU0NC0z OTBhLWI5NTctODY0ZTkyYTY3MGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0dSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETgYLAmGGFHnqpxo7jOYOfQUsFUNPIKM+UoXL7KjbCD4t+ys4jiciE8 dpATj4OtK6mrPr7sZCUYLl2QNQOpd2XMPUXwdd7IfvRKLY0lJ319TPNAznLsrn6q 6Jb7xP8iNCK4Mdm461Ws8Wiq7xWyIRegdwlZqVepc2C//BBVrhRLEUbyso2UFlON uLb6AJN8UxOn9gZ8rDgTXQs1iuCTTru62NgnF0awBkEBhCAwJmIS1ac5vU7n0R59 b8DOY9Y5p8NKwvAS2cuCEBlw/gXN68j8AGZTxgVG4hS6EXUGMtZg0s10syiFm4Cv VnwPzTYUrGDdzZcG5QGKsmafvft28Yo= -----END CERTIFICATE-----Generated at Sun Aug 24 01:04:43 2025 by rpki-client