$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c66b80e6-d338-33b9-8280-2772e7bf145d.roa File: c66b80e6-d338-33b9-8280-2772e7bf145d.roa (raw, json) Hash identifier: 3M5OLSnWm47MiMG+nJ9jGYwpYwBTBeQVm7M+SfiMJaY= Subject key identifier: C9:BC:EF:F2:FF:9A:CC:27:59:3A:40:92:19:18:8A:C7:42:A9:57:4C Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584AEBA17470332271604A377540 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c66b80e6-d338-33b9-8280-2772e7bf145d.roa Signing time: Wed 20 Aug 2025 15:21:02 +0000 ROA not before: Wed 20 Aug 2025 15:21:02 +0000 ROA not after: Tue 18 Nov 2025 16:21:02 +0000 asID: 53356 IP address blocks: 209.178.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:a1:74:70:33:22:71:60:4a:37:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Aug 20 15:21:02 2025 GMT Not After : Nov 18 16:21:02 2025 GMT Subject: CN=f191d6b1-6faf-40ee-bdc4-4b2bb1e1165b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:38:24:4e:59:ba:ea:44:ec:96:97:d2:3c:dd: ff:22:f2:0a:49:64:35:91:61:a8:18:f1:a0:b4:a7: 2d:96:5b:43:e9:c9:b0:32:f5:e0:3c:08:c4:50:40: 1a:2d:77:02:bd:f7:89:0c:54:28:7a:80:e1:43:65: b0:cd:c2:78:ee:51:8b:f4:26:3c:5a:7d:ed:e7:47: 18:c1:2d:18:bd:9c:ef:b3:6d:57:ec:30:ef:ae:36: 8c:c5:8a:84:57:c3:f1:5e:15:6f:90:52:99:18:03: 3e:c6:cb:d9:07:96:8f:e3:00:99:8d:90:d8:13:03: 93:ab:35:93:97:8c:22:c2:a0:db:12:1b:c5:27:29: 8e:d5:88:12:45:55:23:dd:18:07:d0:5c:e9:8b:04: 0e:89:44:74:29:a7:7c:f5:7b:ac:3e:00:96:7b:48: 1d:fa:a4:de:d0:f7:53:9d:76:ad:a4:35:98:90:1c: 7d:94:1a:18:17:30:15:fa:17:42:93:f3:e2:ea:3e: c8:59:42:6a:5d:15:6d:15:86:c7:42:47:06:10:b1: 62:70:bf:25:75:b7:db:50:d1:8a:4e:9b:5a:87:e8: 5e:a8:b4:d2:1b:2d:95:52:bd:31:c9:8d:7c:d3:99: 6c:14:fa:c8:c4:01:36:a0:ce:59:15:99:75:21:4e: 03:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BC:EF:F2:FF:9A:CC:27:59:3A:40:92:19:18:8A:C7:42:A9:57:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c66b80e6-d338-33b9-8280-2772e7bf145d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:18:f4:b7:7d:c4:92:58:cd:13:a0:81:ed:fd:d2:76:c6:fc: 2e:24:c4:11:b0:af:91:99:4d:f1:1a:b6:40:5f:c9:17:50:f5: 92:7a:82:4a:41:ed:53:c4:ee:c4:43:bb:cb:4a:15:4f:68:83: 22:bb:de:d5:b8:3a:c1:03:c1:d5:72:00:e6:62:29:6f:51:3a: 0a:3d:3c:e0:e5:7f:bc:d1:0e:ff:9b:f0:6a:dc:9b:0b:10:c5: 2b:a9:04:16:cd:33:fe:17:61:9a:b1:60:9c:05:69:15:c6:e9: c1:ff:0f:5e:4b:34:27:9d:07:c5:c6:3a:68:4c:21:e5:56:7f: 81:03:5a:48:5c:93:d6:53:85:06:1e:02:a5:1a:11:88:4f:28: 90:4a:17:1f:7d:e1:d1:31:93:1a:e3:9b:fa:ce:2a:9c:ac:87: 89:c8:15:91:85:e3:0c:8b:a6:d9:65:db:0f:a7:9a:7f:d3:dd: 86:1f:d4:a8:09:6e:ad:36:34:40:41:79:e5:a3:55:d4:6a:d0: b5:fa:d7:2f:dd:eb:de:b9:81:9c:a4:8e:b0:f9:7d:27:e4:e6: 95:34:d1:e2:79:98:b1:1c:74:54:35:5b:b7:05:c7:90:3a:35: fb:f5:7d:c1:50:4c:fe:7b:89:2e:ec:1e:e3:21:ab:ea:a8:6a: 02:c7:b7:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErroXRwMyJxYEo3dUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDgyMDE1MjEwMloXDTI1MTExODE2MjEwMlowLzEtMCsGA1UEAxMk ZjE5MWQ2YjEtNmZhZi00MGVlLWJkYzQtNGIyYmIxZTExNjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzgkTlm66kTslpfSPN3/IvIKSWQ1kWGoGPGg tKctlltD6cmwMvXgPAjEUEAaLXcCvfeJDFQoeoDhQ2WwzcJ47lGL9CY8Wn3t50cY wS0YvZzvs21X7DDvrjaMxYqEV8PxXhVvkFKZGAM+xsvZB5aP4wCZjZDYEwOTqzWT l4wiwqDbEhvFJymO1YgSRVUj3RgH0FzpiwQOiUR0Kad89XusPgCWe0gd+qTe0PdT nXatpDWYkBx9lBoYFzAV+hdCk/Pi6j7IWUJqXRVtFYbHQkcGELFicL8ldbfbUNGK Tptah+heqLTSGy2VUr0xyY1805lsFPrIxAE2oM5ZFZl1IU4DgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMm87/L/mswnWTpAkhkYisdCqVdMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvYzY2YjgwZTYtZDMzOC0z M2I5LTgyODAtMjc3MmU3YmYxNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0Y9Ld9xJJYzROgge390nbG/C4kxBGwr5GZTfEatkBfyRdQ9ZJ6gkpB 7VPE7sRDu8tKFU9ogyK73tW4OsEDwdVyAOZiKW9ROgo9PODlf7zRDv+b8GrcmwsQ xSupBBbNM/4XYZqxYJwFaRXG6cH/D15LNCedB8XGOmhMIeVWf4EDWkhck9ZThQYe AqUaEYhPKJBKFx994dExkxrjm/rOKpysh4nIFZGF4wyLptll2w+nmn/T3YYf1KgJ bq02NEBBeeWjVdRq0LX61y/d6965gZykjrD5fSfk5pU00eJ5mLEcdFQ1W7cFx5A6 Nfv1fcFQTP57iS7sHuMhq+qoagLHt+g= -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:12 2025 by rpki-client