$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa File: 5c80a08c-e49d-33f4-b617-5ada5f2af850.roa (raw, json) Hash identifier: TC5B+hQd0aLqQ5Ck8wLYYkVIOqDXUr1tI0/wLxj6jMQ= Subject key identifier: B0:81:98:26:7E:15:0C:15:19:BB:96:A7:B3:07:EA:99:CF:8D:C6:89 Certificate issuer: /CN=e3370a8c-7e39-490d-985a-a478ce54459f Certificate serial: 010D0C9F4328584B03169138A1334ADB6D5E1500 Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 4393 IP address blocks: 209.251.198.0/23 maxlen: 23 209.251.200.0/21 maxlen: 21 209.251.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:91:38:a1:33:4a:db:6d:5e:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=906ca86f-f833-4a1c-8eae-12ce0f03effa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:90:e6:e6:b6:5f:b4:b6:f5:2d:fa:2c:72: ec:61:51:fa:db:4e:2d:e1:69:79:16:e2:ae:cf:f6: 4e:a4:c4:2a:fe:3f:61:c4:45:69:a9:97:03:b5:fd: fb:cf:36:df:22:39:46:39:17:37:fa:19:39:dc:b7: b9:51:0c:93:ed:ee:13:ef:c8:02:df:06:f2:2c:4e: 07:d3:23:f4:a6:3b:6f:16:10:9c:a6:8e:ac:49:5c: 55:f2:f3:ad:d7:31:cf:12:c2:ff:6e:35:38:06:8e: 64:9c:63:6c:3a:09:21:b4:09:45:10:f7:a1:40:45: b5:33:51:b1:1b:20:12:24:dd:dc:b0:81:d5:b7:c9: 00:bf:4c:52:81:2d:e2:78:5c:57:ad:ca:a5:bb:bd: 8f:b1:6e:6b:e6:05:46:10:d1:11:52:0f:04:07:0d: f9:d1:ab:42:c2:3c:03:8f:7f:37:91:61:ff:df:3f: f6:3b:d5:42:0c:1e:30:f9:ba:99:80:b6:5c:22:ae: 4a:de:f0:3a:0f:c1:81:be:68:94:60:ee:a5:c7:8b: 06:6f:31:f9:80:00:7a:0f:ea:d5:1c:0c:cd:59:ce: de:4b:1d:9f:4c:b9:42:d3:a5:77:b7:b1:56:dd:77: 29:6c:54:c1:2d:cd:2f:e9:75:16:a2:5b:3b:64:c7: 3b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:81:98:26:7E:15:0C:15:19:BB:96:A7:B3:07:EA:99:CF:8D:C6:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl X509v3 Authority Key Identifier: keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer sbgp-ipAddrBlock: critical IPv4: 209.251.198.0-209.251.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d0:24:09:f1:06:43:a7:7f:2f:01:f3:7e:71:87:18:54:c5: b9:dd:99:e8:0b:30:94:48:67:71:1f:65:1e:a7:8b:1c:c4:4f: d7:fd:bd:1e:75:51:7b:d9:8b:35:43:33:71:b2:e9:f8:e6:64: a2:80:89:43:a3:29:27:1a:7f:9a:04:36:af:08:5e:ce:93:47: 27:45:4c:96:42:5e:8d:19:0e:37:7a:61:3f:ef:8a:15:6e:c4: 37:cc:fb:8f:33:42:59:09:40:55:9f:80:b4:d6:53:30:83:dd: 12:ad:00:12:08:53:04:e8:1e:a0:0a:46:98:5d:4a:71:e4:11: 7d:fe:59:ed:9c:0a:a8:66:c2:1f:35:01:b3:e3:31:be:7e:d5: e3:a4:00:9a:35:e6:71:f9:2a:4d:9e:9c:7a:57:87:95:6b:c6: e9:7c:d4:59:cd:2d:30:84:36:32:69:01:2b:0f:26:fa:9d:2a: 42:fe:08:d2:ce:45:91:ee:33:b3:58:b3:51:da:63:a3:50:82: 99:93:6e:1c:3f:b6:91:55:05:3c:61:a6:25:3f:f2:cb:2a:d8: 17:28:0b:7d:0d:72:f4:81:3a:a9:cf:de:e2:fd:81:ff:50:08: bf:b0:aa:ea:bd:1a:ff:34:0f:45:ab:34:4b:28:03:b9:1e:91: b8:cb:ab:a0 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsDFpE4oTNK221eFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMzNzBhOGMtN2UzOS00OTBkLTk4NWEtYTQ3OGNlNTQ0 NTlmMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk OTA2Y2E4NmYtZjgzMy00YTFjLThlYWUtMTJjZTBmMDNlZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRSQ5ua2X7S29S36LHLsYVH6204t4Wl5FuKu z/ZOpMQq/j9hxEVpqZcDtf37zzbfIjlGORc3+hk53Le5UQyT7e4T78gC3wbyLE4H 0yP0pjtvFhCcpo6sSVxV8vOt1zHPEsL/bjU4Bo5knGNsOgkhtAlFEPehQEW1M1Gx GyASJN3csIHVt8kAv0xSgS3ieFxXrcqlu72PsW5r5gVGENERUg8EBw350atCwjwD j383kWH/3z/2O9VCDB4w+bqZgLZcIq5K3vA6D8GBvmiUYO6lx4sGbzH5gAB6D+rV HAzNWc7eSx2fTLlC06V3t7FW3XcpbFTBLc0v6XUWols7ZMc74QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLCBmCZ+FQwVGbuWp7MH6pnPjcaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3 MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4Y2U1NDQ1OWYvNWM4MGEwOGMtZTQ5ZC0z M2Y0LWI2MTctNWFkYTVmMmFmODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTMzNzBhOGMtN2UzOS00OTBkLTk4 NWEtYTQ3OGNlNTQ0NTlmL2UzMzcwYThjLTdlMzktNDkwZC05ODVhLWE0NzhjZTU0 NDU5Zi5jcmwwHwYDVR0jBBgwFoAU4uoLRS/p/vRebN8XfsgDYlxFUiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4 Y2U1NDQ1OWYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHR+8YD BAXR+8AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAF9AkCfEGQ6d/LwHzfnGHGFTFud2Z6AswlEhncR9lHqeL HMRP1/29HnVRe9mLNUMzcbLp+OZkooCJQ6MpJxp/mgQ2rwhezpNHJ0VMlkJejRkO N3phP++KFW7EN8z7jzNCWQlAVZ+AtNZTMIPdEq0AEghTBOgeoApGmF1KceQRff5Z 7ZwKqGbCHzUBs+Mxvn7V46QAmjXmcfkqTZ6celeHlWvG6XzUWc0tMIQ2MmkBKw8m +p0qQv4I0s5Fke4zs1izUdpjo1CCmZNuHD+2kVUFPGGmJT/yyyrYFygLfQ1y9IE6 qc/e4v2B/1AIv7Cq6r0a/zQPRas0SygDuR6RuMuroA== -----END CERTIFICATE-----Generated at Fri Oct 10 22:02:00 2025 by rpki-client