$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/969522f3-14b8-326a-8fee-278f9c0de14f.roa File: 969522f3-14b8-326a-8fee-278f9c0de14f.roa (raw, json) Hash identifier: kGeENTPvcAcheOsAZaA2JgGK++qyoB7X4kxmeXFYt3w= Subject key identifier: 32:3C:FF:AC:1C:14:8F:49:CC:EB:D0:E8:71:6F:E0:9D:35:93:3B:B5 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584AEE2688D4781ECD2B5091F500 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/969522f3-14b8-326a-8fee-278f9c0de14f.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 54702 IP address blocks: 209.51.128.0/24 maxlen: 24 209.51.134.0/24 maxlen: 24 209.51.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:88:d4:78:1e:cd:2b:50:91:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=8a51b424-01cc-424a-8478-f6d906d3ea99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:27:63:a5:6d:79:8c:9e:41:11:e3:07:ee:e4: 2a:86:1a:f2:29:1c:f7:d7:63:8a:4c:b8:88:8f:30: 59:6a:80:61:91:fb:0b:d6:85:95:7a:40:6e:7f:da: 21:ba:d5:da:76:44:7b:8b:8c:d2:7f:c6:cd:55:c8: 69:58:e7:07:17:b9:a0:6c:06:2c:0e:65:70:6b:ea: 7b:07:3c:67:43:02:73:23:bd:90:8e:cc:7d:58:9f: 43:7d:91:c5:d3:92:63:c9:f9:90:5a:6a:c5:34:48: 18:47:9a:c7:53:19:74:bf:13:ac:fb:b1:4e:b5:b3: 99:b9:71:5d:fe:64:e9:36:10:87:e5:21:c3:bd:76: 26:b4:bb:43:63:73:71:f4:6a:d3:58:c4:7f:3c:2f: 2b:59:c6:f1:91:59:97:c0:ca:99:7c:ab:98:2a:81: 0a:94:cd:7f:99:7d:ff:5f:15:c8:9a:e6:75:51:2f: 33:07:f9:77:14:c9:fa:58:91:af:0d:37:8f:ed:ed: a0:45:e3:ef:29:ad:e2:b0:b8:92:10:c8:fd:6f:79: 4e:17:be:53:cd:b4:30:20:9b:d4:51:70:e0:be:7e: 39:9a:83:d8:c1:db:99:3f:d4:c7:65:1a:9c:ed:31: 9c:5b:87:af:be:da:56:e6:64:40:32:af:a9:90:32: 2c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3C:FF:AC:1C:14:8F:49:CC:EB:D0:E8:71:6F:E0:9D:35:93:3B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/969522f3-14b8-326a-8fee-278f9c0de14f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 209.51.128.0/24 209.51.134.0/24 209.51.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8d:64:dd:b7:96:3d:e6:f1:e9:61:17:00:17:ca:60:b3:81: e1:1c:00:d4:bb:56:3c:55:47:98:b8:9b:d8:75:eb:64:59:4d: b9:51:00:ce:47:d8:9e:0f:24:29:2b:87:b9:08:9e:5e:f3:55: 17:61:95:11:7b:57:9a:d9:5f:05:94:ea:f8:48:14:bd:78:cb: 57:be:09:dc:4b:2d:9c:26:16:be:0a:60:32:c7:f9:21:58:97: 7b:6f:98:6c:02:bf:6d:7d:ce:5c:ac:c4:83:55:67:d4:e5:f6: 78:82:88:f4:6f:85:41:47:86:2e:ab:6b:f9:1a:bb:91:da:f3: cc:da:78:11:2e:04:ba:70:6c:d5:ae:5e:20:a0:77:8b:94:cb: 50:7a:42:18:90:5f:30:92:02:78:10:73:f8:f4:a1:5e:50:c6: 33:a4:db:f7:ff:84:54:47:88:1a:25:8f:7f:04:06:e5:be:82: 8a:b2:64:23:32:12:00:73:4c:3a:04:d3:a2:99:d9:02:e1:cd: ae:6b:7a:ef:cd:d6:e9:f3:7b:92:20:86:20:20:61:cf:34:63: a7:80:41:dd:77:58:df:cf:3b:ab:de:ef:9f:02:3c:00:31:4f: 6c:b7:6c:2b:2a:59:4b:d6:8c:fa:62:41:15:55:7f:2e:66:b4: 78:c5:dc:3f -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEruJojUeB7NK1CR9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk OGE1MWI0MjQtMDFjYy00MjRhLTg0NzgtZjZkOTA2ZDNlYTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzydjpW15jJ5BEeMH7uQqhhryKRz312OKTLiI jzBZaoBhkfsL1oWVekBuf9ohutXadkR7i4zSf8bNVchpWOcHF7mgbAYsDmVwa+p7 BzxnQwJzI72Qjsx9WJ9DfZHF05JjyfmQWmrFNEgYR5rHUxl0vxOs+7FOtbOZuXFd /mTpNhCH5SHDvXYmtLtDY3Nx9GrTWMR/PC8rWcbxkVmXwMqZfKuYKoEKlM1/mX3/ XxXImuZ1US8zB/l3FMn6WJGvDTeP7e2gRePvKa3isLiSEMj9b3lOF75TzbQwIJvU UXDgvn45moPYwduZP9THZRqc7TGcW4evvtpW5mRAMq+pkDIsvwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDI8/6wcFI9JzOvQ6HFv4J01kzu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvOTY5NTIyZjMtMTRiOC0z MjZhLThmZWUtMjc4ZjljMGRlMTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA0TOAAwQA 0TOGAwQA0TOYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHqNZN23lj3m8elhFwAXymCzgeEcANS7VjxVR5i4 m9h162RZTblRAM5H2J4PJCkrh7kInl7zVRdhlRF7V5rZXwWU6vhIFL14y1e+CdxL LZwmFr4KYDLH+SFYl3tvmGwCv219zlysxINVZ9Tl9niCiPRvhUFHhi6ra/kau5Ha 88zaeBEuBLpwbNWuXiCgd4uUy1B6QhiQXzCSAngQc/j0oV5QxjOk2/f/hFRHiBol j38EBuW+goqyZCMyEgBzTDoE06KZ2QLhza5reu/N1unze5IghiAgYc80Y6eAQd13 WN/PO6ve758CPAAxT2y3bCsqWUvWjPpiQRVVfy5mtHjF3D8= -----END CERTIFICATE-----Generated at Sat Aug 23 21:55:36 2025 by rpki-client