$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b669b545-6455-356d-9552-6f650359ccf1.roa File: b669b545-6455-356d-9552-6f650359ccf1.roa (raw, json) Hash identifier: X4wQoqyUgrAo+if0DAEKk/wvhpqQwyUw4PYJL5tTyy8= Subject key identifier: 25:89:6D:9A:F8:F5:FC:88:A6:C8:1D:09:62:92:1A:9A:EF:B2:05:68 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584AEE267F36C234ADDA18CECE40 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b669b545-6455-356d-9552-6f650359ccf1.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 12189 IP address blocks: 209.51.128.0/24 maxlen: 24 209.51.134.0/24 maxlen: 24 209.51.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:7f:36:c2:34:ad:da:18:ce:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=3a3fc404-6e7d-44d1-9347-3195976e81f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:46:ac:f0:ac:e0:6f:24:87:e9:ae:fe:91: 9b:35:5b:4f:24:5d:c7:59:b9:3f:17:46:6d:e5:9e: 00:6b:bf:33:81:81:b1:c7:95:5e:ae:5c:01:2a:20: da:62:04:82:7b:a3:97:a5:f0:b5:69:79:46:6e:26: 5b:c7:ac:fd:d0:ac:ea:00:ed:aa:61:f6:fa:9d:93: 8a:72:0d:67:f8:83:55:94:9e:fe:5f:ea:ce:25:94: c9:f6:96:46:74:00:59:59:22:91:71:95:33:ca:4a: 83:4b:6a:a5:8b:ff:46:bd:4f:f6:68:ed:b8:1d:bc: 83:c3:b5:0c:11:1e:a9:98:69:0f:9a:21:6a:bc:18: ee:ee:f4:0f:48:1e:7d:b0:9d:f6:e5:d6:c4:23:2c: 03:7e:4e:be:4e:21:81:31:5e:44:38:dd:52:39:7e: 89:55:b6:7f:89:5f:d6:7e:cb:5f:11:2e:c8:ea:34: 5d:c7:71:9b:71:07:11:d1:d2:78:0d:4b:eb:e3:40: 0e:3e:16:11:f8:61:f8:76:49:94:83:31:2e:ba:10: 70:df:63:2b:fd:d6:03:49:ea:87:13:e5:5d:4e:7e: 66:95:a9:30:2e:5d:11:07:2b:b3:0a:18:14:7a:a9: 44:bd:04:7c:ce:0e:9e:76:50:14:d6:16:ab:9a:76: 04:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:89:6D:9A:F8:F5:FC:88:A6:C8:1D:09:62:92:1A:9A:EF:B2:05:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b669b545-6455-356d-9552-6f650359ccf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 209.51.128.0/24 209.51.134.0/24 209.51.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:30:9e:98:53:52:45:ee:ba:e7:59:6a:d1:b5:7e:92:a4:be: 77:1f:70:cf:b5:b7:c5:b2:9e:7b:a7:71:89:51:fd:49:8e:ea: 32:f6:87:fa:89:c8:36:fe:b2:52:c9:9b:e0:be:d0:55:e1:56: 33:01:34:d9:90:a7:e1:0e:66:39:b7:e5:f9:ed:b9:54:83:d4: 9c:d1:ef:f5:2c:32:fa:1e:06:34:9c:03:72:73:aa:e5:42:dc: da:b7:56:72:62:7b:02:6c:13:9d:af:79:1d:a1:2d:56:b3:1e: 2d:e4:7f:75:07:a2:c8:bb:69:bd:97:fd:f1:5b:6a:a8:cc:ae: 1d:d6:f3:cd:d4:89:29:8e:9c:a5:93:f3:a2:c9:18:3e:89:76: 8f:ff:7f:eb:ab:fd:b8:18:88:59:ee:ed:01:fa:61:ab:42:d7: c5:f6:a0:bf:dd:f8:79:e4:08:05:f4:de:7c:fe:38:11:19:68: dd:12:c8:80:ea:47:ba:93:fe:5b:6f:97:28:2b:18:b5:48:e9: 7e:51:20:c2:22:92:cb:d6:ec:5c:1d:20:ba:4a:49:a1:af:b1: 23:2e:c8:e9:79:f2:46:72:f4:e0:b6:e6:c1:43:c8:ff:b1:3d: 6b:fe:54:1f:ba:d0:43:55:fe:f1:4c:5a:97:f8:0b:92:ac:5f: d6:c2:a5:c5 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEruJn82wjSt2hjOzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk M2EzZmM0MDQtNmU3ZC00NGQxLTkzNDctMzE5NTk3NmU4MWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYNGrPCs4G8kh+mu/pGbNVtPJF3HWbk/F0Zt 5Z4Aa78zgYGxx5VerlwBKiDaYgSCe6OXpfC1aXlGbiZbx6z90KzqAO2qYfb6nZOK cg1n+INVlJ7+X+rOJZTJ9pZGdABZWSKRcZUzykqDS2qli/9GvU/2aO24HbyDw7UM ER6pmGkPmiFqvBju7vQPSB59sJ325dbEIywDfk6+TiGBMV5EON1SOX6JVbZ/iV/W fstfES7I6jRdx3GbcQcR0dJ4DUvr40AOPhYR+GH4dkmUgzEuuhBw32Mr/dYDSeqH E+VdTn5mlakwLl0RByuzChgUeqlEvQR8zg6edlAU1harmnYEPwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCWJbZr49fyIpsgdCWKSGprvsgVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYjY2OWI1NDUtNjQ1NS0z NTZkLTk1NTItNmY2NTAzNTljY2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA0TOAAwQA 0TOGAwQA0TOYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAH4wnphTUkXuuudZatG1fpKkvncfcM+1t8Wynnun cYlR/UmO6jL2h/qJyDb+slLJm+C+0FXhVjMBNNmQp+EOZjm35fntuVSD1JzR7/Us MvoeBjScA3JzquVC3Nq3VnJiewJsE52veR2hLVazHi3kf3UHosi7ab2X/fFbaqjM rh3W883UiSmOnKWT86LJGD6Jdo//f+ur/bgYiFnu7QH6YatC18X2oL/d+HnkCAX0 3nz+OBEZaN0SyIDqR7qT/ltvlygrGLVI6X5RIMIiksvW7FwdILpKSaGvsSMuyOl5 8kZy9OC25sFDyP+xPWv+VB+60ENV/vFMWpf4C5KsX9bCpcU= -----END CERTIFICATE-----Generated at Sat Aug 23 21:58:45 2025 by rpki-client