$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa File: 3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa (raw, json) Hash identifier: mZ9hYAm7ykL1sjXSRRjHNR9n54ZbnMr+uhQ588ol1AE= Subject key identifier: C9:9E:9E:71:0C:51:66:B9:C7:67:D5:72:29:94:CA:DB:0C:D2:14:32 Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Certificate serial: 010D0C9F4328584AF521261281D5B693D73CE400 Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 30698 IP address blocks: 209.221.240.0/24 maxlen: 24 209.221.241.0/24 maxlen: 24 209.221.242.0/24 maxlen: 24 209.221.243.0/24 maxlen: 24 209.221.244.0/24 maxlen: 24 209.221.245.0/24 maxlen: 24 209.221.246.0/24 maxlen: 24 209.221.247.0/24 maxlen: 24 209.221.248.0/24 maxlen: 24 209.221.249.0/24 maxlen: 24 209.221.250.0/24 maxlen: 24 209.221.251.0/24 maxlen: 24 209.221.252.0/24 maxlen: 24 209.221.253.0/24 maxlen: 24 216.213.48.0/24 maxlen: 24 216.213.49.0/24 maxlen: 24 216.213.50.0/24 maxlen: 24 216.213.51.0/24 maxlen: 24 216.213.56.0/24 maxlen: 24 216.213.57.0/24 maxlen: 24 216.213.58.0/24 maxlen: 24 216.213.59.0/24 maxlen: 24 216.213.60.0/24 maxlen: 24 216.213.61.0/24 maxlen: 24 216.213.62.0/24 maxlen: 24 216.213.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:26:12:81:d5:b6:93:d7:3c:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=dc6161ce-eeca-491e-b15e-e429f2e7e854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:42:f2:c7:27:2c:6d:93:59:43:f6:0a:30: ab:68:56:b1:bf:13:74:34:26:6c:cf:ba:bc:78:1f: 60:a7:db:04:57:dc:42:93:32:41:d5:7f:3b:ce:69: 7d:e4:ea:d6:13:fa:fb:21:16:8f:7a:9a:bd:0b:22: f3:5b:8b:eb:20:b1:6c:cf:48:71:64:7d:b5:0c:f0: 1f:d3:f2:3f:86:1c:a3:ec:a7:dd:90:4b:27:e2:45: ad:da:a5:81:40:ab:57:3a:fd:74:a2:fc:09:a2:ae: 4a:bb:e9:c0:4e:fc:0a:26:06:ee:ca:70:cf:81:ec: d2:1c:33:68:fe:9f:f9:4f:50:72:6e:36:6d:ec:b8: af:a1:84:8c:a5:04:f6:7d:75:4f:85:42:f8:e7:30: aa:43:47:86:5c:06:79:a4:65:f4:3b:7e:96:79:13: 7d:84:4e:19:46:13:9b:e6:b4:c9:16:1f:76:1e:a6: 65:aa:fa:b5:6d:b6:fd:35:96:9f:6c:09:c2:33:4b: 59:5c:c1:b0:cf:7e:33:f6:6d:bc:35:a0:f5:97:a9: c1:57:1d:ad:61:01:ed:4c:70:bc:a7:92:b0:de:3b: 04:8c:75:fc:7b:39:25:07:46:97:f7:08:47:d7:97: 50:8d:31:02:61:e2:1c:a3:33:db:79:f1:9a:e7:5f: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9E:9E:71:0C:51:66:B9:C7:67:D5:72:29:94:CA:DB:0C:D2:14:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl X509v3 Authority Key Identifier: keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer sbgp-ipAddrBlock: critical IPv4: 209.221.240.0-209.221.253.255 216.213.48.0/22 216.213.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:15:2b:ba:ca:2e:c9:b9:f7:de:93:14:89:11:27:24:83:1c: 1a:e2:4e:0a:e9:8a:27:ee:b7:3c:4a:38:17:d5:3a:3f:7a:1e: 79:c4:0b:74:e4:ee:17:24:a0:9b:5e:81:8d:32:eb:76:90:c0: 6f:c5:42:a2:c2:d3:25:3b:bf:80:2c:52:f2:bb:7e:69:e1:ff: 0d:e9:94:20:e6:62:65:ff:5e:1a:17:32:2e:a7:f2:02:99:7e: 8e:82:76:d4:29:64:97:1f:2a:bc:0c:3d:e6:bb:ff:a1:d5:f9: 45:94:71:eb:0e:e1:4e:68:fc:34:04:98:5e:9b:f6:2a:1d:21: 79:5a:f7:f1:4d:fc:1f:b3:4d:4c:be:ae:6b:b7:0d:40:b0:7f: cd:9f:22:d2:ac:84:81:43:b6:66:e0:7e:89:4e:af:52:2b:a7: 04:30:a5:fa:d7:78:f3:15:0d:aa:58:b4:a0:96:f0:05:a1:09: b9:7e:3e:a3:7d:27:03:5f:32:16:8c:84:ab:e7:5a:8a:3d:54: 6b:71:05:86:f4:13:71:96:1a:d0:29:58:d3:61:1e:fd:29:d1: fd:4b:00:a5:a1:52:3c:8f:08:0b:7b:79:58:c1:7f:fa:85:c6: 5c:40:c9:d7:71:12:5c:fb:a4:c2:d9:f5:92:b1:b1:71:ed:56: 1b:81:92:2f -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEr1ISYSgdW2k9c85AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl YjQ5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGM2MTYxY2UtZWVjYS00OTFlLWIxNWUtZTQyOWYyZTdlODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowlC8scnLG2TWUP2CjCraFaxvxN0NCZsz7q8 eB9gp9sEV9xCkzJB1X87zml95OrWE/r7IRaPepq9CyLzW4vrILFsz0hxZH21DPAf 0/I/hhyj7KfdkEsn4kWt2qWBQKtXOv10ovwJoq5Ku+nATvwKJgbuynDPgezSHDNo /p/5T1BybjZt7LivoYSMpQT2fXVPhUL45zCqQ0eGXAZ5pGX0O36WeRN9hE4ZRhOb 5rTJFh92HqZlqvq1bbb9NZafbAnCM0tZXMGwz34z9m28NaD1l6nBVx2tYQHtTHC8 p5Kw3jsEjHX8ezklB0aX9whH15dQjTECYeIcozPbefGa518/jwIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFMmennEMUWa5x2fVcimUytsM0hQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0 OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvM2E1NmY2YzAtZThmOC0z NzVhLThkODYtZTRiNjJjNGY2M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw M2E2ZWViNDkuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBATR3fAD BAHR3fwDBALY1TADBAPY1TgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfhUrusouybn33pMUiREnJIMcGuJO CumKJ+63PEo4F9U6P3oeecQLdOTuFySgm16BjTLrdpDAb8VCosLTJTu/gCxS8rt+ aeH/DemUIOZiZf9eGhcyLqfyApl+joJ21Clklx8qvAw95rv/odX5RZRx6w7hTmj8 NASYXpv2Kh0heVr38U38H7NNTL6ua7cNQLB/zZ8i0qyEgUO2ZuB+iU6vUiunBDCl +td48xUNqli0oJbwBaEJuX4+o30nA18yFoyEq+daij1Ua3EFhvQTcZYa0ClY02Ee /SnR/UsApaFSPI8IC3t5WMF/+oXGXEDJ13ESXPukwtn1krGxce1WG4GSLw== -----END CERTIFICATE-----Generated at Sun Aug 24 03:50:23 2025 by rpki-client