$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa File: 5fab7624-7ba0-38cc-939d-47dd362b1a68.roa (raw, json) Hash identifier: vnw9rMSz8CuHPPG+zzlFxqu8UzIoJoS3Yp7pLvk2vwQ= Subject key identifier: EE:FF:9A:B9:23:D6:19:79:35:2E:1E:40:CA:C2:EA:9B:EF:86:EC:96 Certificate issuer: /CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f Certificate serial: 010D0C9F4328584A90A0C66D423410CA76E9B000 Authority key identifier: 1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 376 IP address blocks: 132.209.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c6:6d:42:34:10:ca:76:e9:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f6e28866-0461-44f3-8ba2-7a686f293113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0e:d2:15:6a:40:e3:77:8a:ab:47:33:04:a3: 1b:ac:73:21:64:1d:a5:7b:ef:58:df:34:c4:d5:fb: 51:4b:59:02:7c:57:cc:12:5b:31:b5:bd:95:cf:e4: 7c:03:67:6a:b7:8d:0b:e9:31:14:f6:2e:0d:7a:84: 28:5f:9c:6a:44:9f:e5:fa:50:a5:7a:00:d6:72:a8: 42:9e:e8:c3:f6:0a:a1:28:fd:23:64:25:3a:ab:1f: 9d:2b:1b:a4:22:7d:a4:25:09:ae:b7:b9:b7:98:e3: 32:ab:e6:47:7f:b8:2b:4f:85:41:84:7d:e5:25:a3: aa:4b:2b:3d:62:78:62:98:cc:cc:8d:33:e1:f8:97: a2:7d:1a:c7:c2:95:00:95:d4:c1:d0:f4:55:84:27: bc:95:4e:c4:2d:67:36:c8:fc:cc:d9:46:e3:3e:60: db:41:2d:b9:89:bf:18:dd:75:97:06:5d:e2:de:4b: 13:9a:34:10:93:18:60:9b:0b:8f:6e:2e:a8:17:5f: 5b:a7:e8:92:be:de:4f:c5:b5:85:04:64:a9:a4:64: 51:fb:01:4e:28:e7:26:3c:7c:d7:9a:5e:cf:a3:fd: 60:52:7b:a6:24:98:45:d9:e1:7f:2c:43:8f:5d:91: 72:b2:65:74:cb:79:87:de:6d:1c:b9:ce:00:3c:4b: 8a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FF:9A:B9:23:D6:19:79:35:2E:1E:40:CA:C2:EA:9B:EF:86:EC:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl X509v3 Authority Key Identifier: keyid:1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer sbgp-ipAddrBlock: critical IPv4: 132.209.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e8:90:e5:df:ae:ed:a1:9e:8a:6d:02:f7:ae:3d:00:f7:2c: b6:13:85:70:65:a3:12:23:3b:dd:d1:25:46:66:0b:f7:03:78: 95:4e:76:c3:f0:c6:cf:20:90:bd:1a:67:ae:4b:10:27:96:df: b8:0b:c1:ad:11:e1:dd:25:b5:be:1d:4b:f9:ab:b7:9f:35:5b: 94:00:05:2a:93:d7:55:bc:42:71:fb:63:07:29:73:5f:c5:15: 6d:26:4d:8b:7d:25:48:15:3f:50:76:72:aa:28:98:29:12:26: c6:7c:ac:fb:d0:fc:1f:b1:0f:46:2b:75:9e:f0:bd:1e:eb:e5: 5c:77:ac:00:56:15:62:f0:ec:c8:f3:44:2e:d8:3f:83:cd:55: 22:5d:0e:38:3a:43:2b:1b:20:b0:97:a8:c1:ee:81:1c:75:29: 1a:17:24:2e:4a:a2:5f:73:bf:88:f6:ff:54:80:77:6e:04:70: 1a:55:ed:7c:f9:82:5e:f9:68:ee:35:d7:8f:35:00:4a:31:5d: 80:aa:01:04:f5:1a:3d:90:8a:38:1a:89:a9:b8:69:44:85:59: 5e:13:63:2e:c9:0f:45:e0:b2:ca:a4:59:24:39:b3:61:6e:78: 9f:76:47:c3:c4:0a:c3:1d:19:43:c0:a5:a3:fe:f9:74:5a:dd: 47:1e:a4:e6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoMZtQjQQynbpsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZmZTdmNGUtZTFiZC00MjdhLTgxOTQtNGVhNDM5NmU1 NDhmMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjZlMjg4NjYtMDQ2MS00NGYzLThiYTItN2E2ODZmMjkzMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ7SFWpA43eKq0czBKMbrHMhZB2le+9Y3zTE 1ftRS1kCfFfMElsxtb2Vz+R8A2dqt40L6TEU9i4NeoQoX5xqRJ/l+lClegDWcqhC nujD9gqhKP0jZCU6qx+dKxukIn2kJQmut7m3mOMyq+ZHf7grT4VBhH3lJaOqSys9 YnhimMzMjTPh+JeifRrHwpUAldTB0PRVhCe8lU7ELWc2yPzM2UbjPmDbQS25ib8Y 3XWXBl3i3ksTmjQQkxhgmwuPbi6oF19bp+iSvt5PxbWFBGSppGRR+wFOKOcmPHzX ml7Po/1gUnumJJhF2eF/LEOPXZFysmV0y3mH3m0cuc4APEuKVwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFO7/mrkj1hl5NS4eQMrC6pvvhuyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmZl N2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0Mzk2ZTU0OGYvNWZhYjc2MjQtN2JhMC0z OGNjLTkzOWQtNDdkZDM2MmIxYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZmZTdmNGUtZTFiZC00MjdhLTgx OTQtNGVhNDM5NmU1NDhmLzhmZmU3ZjRlLWUxYmQtNDI3YS04MTk0LTRlYTQzOTZl NTQ4Zi5jcmwwHwYDVR0jBBgwFoAUGuaMACjfi7qQxWRbYBA/ICySr5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmZlN2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0 Mzk2ZTU0OGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhNEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAmeiQ5d+u7aGeim0C9649APcsthOFcGWjEiM73dElRmYL9wN4lU52w/DG zyCQvRpnrksQJ5bfuAvBrRHh3SW1vh1L+au3nzVblAAFKpPXVbxCcftjBylzX8UV bSZNi30lSBU/UHZyqiiYKRImxnys+9D8H7EPRit1nvC9HuvlXHesAFYVYvDsyPNE Ltg/g81VIl0OODpDKxsgsJeowe6BHHUpGhckLkqiX3O/iPb/VIB3bgRwGlXtfPmC Xvlo7jXXjzUASjFdgKoBBPUaPZCKOBqJqbhpRIVZXhNjLskPReCyyqRZJDmzYW54 n3ZHw8QKwx0ZQ8Clo/75dFrdRx6k5g== -----END CERTIFICATE-----Generated at Sat Jul 26 19:20:23 2025 by rpki-client