$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8098a980-2f0c-3a55-bfb5-293a136de1dc.roa File: 8098a980-2f0c-3a55-bfb5-293a136de1dc.roa (raw, json) Hash identifier: 96F/Q8XLLFwCdbn6LD/FW5YnCfKlVNekswHTg/sDBqM= Subject key identifier: 20:43:1B:15:5C:62:95:5C:DE:9E:F6:6E:81:B3:64:E5:C3:36:2A:E5 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584AF256881EEA2279C9C78AC240 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8098a980-2f0c-3a55-bfb5-293a136de1dc.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 6079 IP address blocks: 209.94.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:88:1e:ea:22:79:c9:c7:8a:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=269ac4bf-fad8-4343-8fdc-65d6901f68eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:89:ce:70:7b:8a:a3:3d:ec:90:c4:55:91: c8:f5:33:b6:ce:85:e5:22:41:3d:ee:36:23:8c:1d: 43:eb:26:c6:b7:e2:65:31:ca:ec:ed:71:de:f5:ed: 93:0f:60:80:b2:a9:76:d9:f6:6c:0d:9e:9b:4d:4a: 11:36:2a:c8:5c:90:04:f1:64:4c:ca:fb:76:4c:3c: e5:5b:7a:62:8a:71:0e:d7:51:dc:ce:20:b7:fc:99: 36:e0:32:59:44:1e:e4:b2:e5:7a:c3:de:0d:a0:5d: 82:00:0b:09:33:e2:9f:e3:29:84:d6:33:dc:0a:b1: a1:ed:d6:60:81:e2:59:01:39:b7:49:e0:d9:35:0a: 3c:7a:ee:42:e4:b8:08:63:0b:32:94:0d:cb:da:f2: 08:40:dd:ed:3c:6e:a3:0b:9b:e0:cc:6b:4d:87:f4: 66:7f:09:31:ae:bc:8b:3e:cf:2b:1c:b6:b7:d7:a3: 35:de:d7:6e:6a:bf:c2:a5:d5:74:2a:0b:ac:4f:9a: 2a:3e:3d:c8:07:60:c3:24:c2:7e:b7:06:16:91:8e: 24:cb:c9:4e:f3:1c:df:41:92:6a:d7:3d:c0:85:7f: fe:45:fe:86:1c:3a:53:cf:88:fa:67:12:2d:88:6d: dc:d4:af:3b:2b:16:f4:22:4f:ff:72:83:5e:f1:95: cc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:43:1B:15:5C:62:95:5C:DE:9E:F6:6E:81:B3:64:E5:C3:36:2A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8098a980-2f0c-3a55-bfb5-293a136de1dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 209.94.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:91:e7:33:5e:c4:dc:6b:12:8d:c8:33:5e:f6:2d:a6:8f:e2: 90:17:51:c3:1c:77:b6:c2:0d:4e:bf:5f:15:9c:fc:fd:ae:35: 2e:c9:4d:bb:30:48:80:76:45:6f:d9:17:b2:2b:5a:ae:b6:af: c4:a3:dc:df:0e:2e:ae:25:01:8d:d0:a6:2a:e1:05:7c:00:b5: 93:cc:3b:ee:8c:1b:35:fb:39:06:a6:b8:a5:3c:ed:ee:54:85: 63:69:56:7a:76:ae:88:d6:01:07:c7:fb:ea:e5:51:2c:5a:9b: 7a:c6:ad:e6:27:77:fe:11:b2:e6:18:31:df:02:e9:7b:a9:89: 50:94:ec:75:3a:25:17:74:5a:11:f4:ba:7f:bb:21:46:54:b3: ae:be:ad:cf:7a:f5:ac:ea:e6:aa:b5:96:44:da:6e:c4:3c:d1: ec:66:bb:f5:86:20:f3:df:88:38:19:fd:8c:f7:c2:99:4b:a1: 75:5a:a9:9d:26:9c:fb:41:e3:2c:22:bb:cb:2e:e1:02:98:ea: 5c:b3:bd:cb:c9:c7:3c:fe:04:df:c8:0a:26:ad:5e:a8:2f:7c: 5c:f1:e9:82:d0:cc:9f:a6:b3:4f:2e:54:a1:6d:95:65:91:70: f3:8e:80:49:74:df:68:83:8a:53:ef:78:55:d0:23:b4:d3:c0: ac:c1:17:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVoge6iJ5yceKwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MjY5YWM0YmYtZmFkOC00MzQzLThmZGMtNjVkNjkwMWY2OGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW+JznB7iqM97JDEVZHI9TO2zoXlIkE97jYj jB1D6ybGt+JlMcrs7XHe9e2TD2CAsql22fZsDZ6bTUoRNirIXJAE8WRMyvt2TDzl W3piinEO11HcziC3/Jk24DJZRB7ksuV6w94NoF2CAAsJM+Kf4ymE1jPcCrGh7dZg geJZATm3SeDZNQo8eu5C5LgIYwsylA3L2vIIQN3tPG6jC5vgzGtNh/RmfwkxrryL Ps8rHLa316M13tduar/CpdV0KgusT5oqPj3IB2DDJMJ+twYWkY4ky8lO8xzfQZJq 1z3AhX/+Rf6GHDpTz4j6ZxItiG3c1K87Kxb0Ik//coNe8ZXMTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBDGxVcYpVc3p72boGzZOXDNirlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvODA5OGE5ODAtMmYwYy0z YTU1LWJmYjUtMjkzYTEzNmRlMWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0V6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeR5zNexNxrEo3IM172LaaP4pAXUcMcd7bCDU6/XxWc/P2uNS7JTbsw SIB2RW/ZF7IrWq62r8Sj3N8OLq4lAY3QpirhBXwAtZPMO+6MGzX7OQamuKU87e5U hWNpVnp2rojWAQfH++rlUSxam3rGreYnd/4RsuYYMd8C6XupiVCU7HU6JRd0WhH0 un+7IUZUs66+rc969azq5qq1lkTabsQ80exmu/WGIPPfiDgZ/Yz3wplLoXVaqZ0m nPtB4ywiu8su4QKY6lyzvcvJxzz+BN/ICiatXqgvfFzx6YLQzJ+ms08uVKFtlWWR cPOOgEl032iDilPveFXQI7TTwKzBF30= -----END CERTIFICATE-----Generated at Sat Aug 23 17:51:01 2025 by rpki-client