$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa File: f8375e10-8d1d-3484-aaeb-e58fd215889e.roa (raw, json) Hash identifier: C2RlL1PFtDtqYAkkZsMnkJv4fakOwdZkzMLqhX+V5pg= Subject key identifier: 34:87:CF:84:BB:36:09:7F:7D:F9:CD:C2:32:EE:22:9F:53:22:C5:22 Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Certificate serial: 010D0C9F4328584AC01628B0395D1A2DDE298830 Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 30698 IP address blocks: 209.221.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:28:b0:39:5d:1a:2d:de:29:88:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=8dc1f811-a484-46c0-95d7-3a4456ba690a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:46:23:b9:26:04:37:a0:9b:73:d5:16:94:30: ed:ff:e0:58:d6:bd:7d:2e:46:8c:60:21:3e:63:35: 1e:12:18:0d:53:1a:1a:87:73:bf:bc:de:08:c8:4d: 33:73:a5:9c:c4:6e:d1:17:42:00:8d:db:6c:bc:c2: f8:3a:93:c1:30:88:29:56:38:b4:30:db:01:4d:26: 15:13:73:99:18:bd:72:78:a8:a9:d0:74:42:23:86: 41:03:47:1f:c1:27:35:59:ea:32:b2:42:72:ec:27: 03:a2:1f:02:ba:eb:5e:f8:f6:0d:4b:ff:a8:dc:26: 54:6f:98:52:16:b6:e9:47:26:eb:d5:bb:6a:f6:8e: d3:05:f5:18:9d:42:ef:02:b5:93:5c:3c:ac:f4:47: 7c:4c:da:8e:55:88:5f:df:0b:2b:bd:8a:d2:5d:7e: fb:c9:d5:6c:cc:2e:12:6f:15:a7:84:af:86:fd:e6: ec:16:a0:ad:6b:87:97:01:05:cd:40:80:12:eb:c5: 79:01:70:90:6a:d9:7f:74:bd:d1:d8:90:55:a3:ac: b6:9e:07:0a:f5:a1:db:28:ab:65:a2:f9:93:78:b3: a9:24:36:e4:66:90:78:7f:53:84:30:4b:ea:31:ef: 0e:55:8a:b7:be:69:f9:2c:19:51:85:27:b9:f1:13: 3f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:87:CF:84:BB:36:09:7F:7D:F9:CD:C2:32:EE:22:9F:53:22:C5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl X509v3 Authority Key Identifier: keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer sbgp-ipAddrBlock: critical IPv4: 209.221.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:97:5f:34:32:2d:08:92:68:8c:1f:7f:48:e1:e2:8f:5b:9d: c2:67:68:a6:10:75:70:ed:6f:5b:70:99:5d:f5:22:3e:b9:ec: bf:fd:65:25:19:64:2d:bf:a2:ef:3b:64:28:6d:f2:28:71:0a: 71:a6:17:5a:39:8d:38:7c:d6:45:38:e9:15:1f:5f:e3:cf:e4: 2b:17:4e:75:cf:43:b5:2f:d2:d8:04:dd:8e:90:cf:05:c4:5f: de:48:02:5a:c7:f4:f5:1b:f1:32:46:50:41:05:00:58:67:d8: 74:e1:95:9a:d4:09:19:49:fd:2d:c0:14:a9:aa:c6:ff:cf:65: bc:73:f0:7d:af:7a:10:3c:d4:e0:bd:09:ba:86:a6:37:ad:f9: d6:73:eb:81:4a:25:3a:21:8e:20:17:9f:0d:1d:58:7d:0d:37: 2b:ef:78:93:6c:94:d1:f6:8f:8e:e0:35:7f:9a:23:f2:8b:96: 76:3a:76:6e:c7:dd:6f:0e:f6:6c:61:6b:86:88:19:8c:a8:e3: 06:31:46:d7:33:9c:86:38:51:99:85:0e:1c:d7:e1:7a:b3:1d: 99:b6:00:1b:ac:6b:25:47:44:7c:45:da:68:d3:99:f7:4e:3a: 0d:2c:aa:99:a9:3f:55:a9:02:29:93:85:63:ec:ee:a7:ef:44: 6f:d4:95:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFiiwOV0aLd4piDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl YjQ5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk OGRjMWY4MTEtYTQ4NC00NmMwLTk1ZDctM2E0NDU2YmE2OTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0YjuSYEN6Cbc9UWlDDt/+BY1r19LkaMYCE+ YzUeEhgNUxoah3O/vN4IyE0zc6WcxG7RF0IAjdtsvML4OpPBMIgpVji0MNsBTSYV E3OZGL1yeKip0HRCI4ZBA0cfwSc1WeoyskJy7CcDoh8Cuute+PYNS/+o3CZUb5hS FrbpRybr1btq9o7TBfUYnULvArWTXDys9Ed8TNqOVYhf3wsrvYrSXX77ydVszC4S bxWnhK+G/ebsFqCta4eXAQXNQIAS68V5AXCQatl/dL3R2JBVo6y2ngcK9aHbKKtl ovmTeLOpJDbkZpB4f1OEMEvqMe8OVYq3vmn5LBlRhSe58RM/nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSHz4S7Ngl/ffnNwjLuIp9TIsUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0 OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvZjgzNzVlMTAtOGQxZC0z NDg0LWFhZWItZTU4ZmQyMTU4ODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw M2E2ZWViNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0d3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKXXzQyLQiSaIwff0jh4o9bncJnaKYQdXDtb1twmV31Ij657L/9ZSUZ ZC2/ou87ZCht8ihxCnGmF1o5jTh81kU46RUfX+PP5CsXTnXPQ7Uv0tgE3Y6QzwXE X95IAlrH9PUb8TJGUEEFAFhn2HThlZrUCRlJ/S3AFKmqxv/PZbxz8H2vehA81OC9 CbqGpjet+dZz64FKJTohjiAXnw0dWH0NNyvveJNslNH2j47gNX+aI/KLlnY6dm7H 3W8O9mxha4aIGYyo4wYxRtcznIY4UZmFDhzX4XqzHZm2ABusayVHRHxF2mjTmfdO Og0sqpmpP1WpAimThWPs7qfvRG/UlXM= -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:16 2025 by rpki-client