$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/cf0d02ea-7c97-3203-a72d-003b0556e0c1.roa File: cf0d02ea-7c97-3203-a72d-003b0556e0c1.roa (raw, json) Hash identifier: zQLzeUnkw2nlf23Tpfg0WuhdKKGz6PCEx9Hh1ylFYzw= Subject key identifier: A0:E4:68:A6:2A:B8:91:F3:89:C9:92:AE:DF:11:A0:89:37:82:7F:1B Certificate issuer: /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Certificate serial: 010D0C9F4328584B01D779C169401739AA21B200 Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/cf0d02ea-7c97-3203-a72d-003b0556e0c1.roa Signing time: Thu 28 Aug 2025 14:17:40 +0000 ROA not before: Thu 28 Aug 2025 14:17:40 +0000 ROA not after: Wed 26 Nov 2025 15:17:40 +0000 asID: 46606 IP address blocks: 209.59.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:d7:79:c1:69:40:17:39:aa:21:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Validity Not Before: Aug 28 14:17:40 2025 GMT Not After : Nov 26 15:17:40 2025 GMT Subject: CN=eaf4a4a0-b5fe-420f-a002-28e16bc64e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:60:be:6e:83:f0:1b:e9:8a:10:46:8a:e1:d2: 79:d9:e6:83:73:cd:fb:78:36:f3:6c:89:be:f4:3a: b4:73:1d:a1:a9:13:10:c9:5d:43:33:f4:d0:77:3e: 09:95:34:26:d0:c8:03:1f:7b:56:76:7f:0e:72:96: 10:02:ed:d3:83:45:ef:9a:24:0d:2e:54:35:ec:22: af:bb:ea:e8:cd:ca:ba:98:0c:18:71:88:a1:4b:ef: f3:05:d0:5a:22:0b:20:22:b0:33:de:99:f6:86:d2: 1a:97:d3:e3:a1:9d:4d:b8:c8:16:18:aa:af:ae:fb: 2e:a4:1e:4b:73:05:96:d9:5d:9b:2b:a6:a0:21:89: e1:36:33:1b:60:bd:74:1f:6e:09:5d:4e:18:ba:d0: 05:13:6c:c7:80:d0:56:cf:0e:a8:14:d0:22:5d:ff: fd:b1:3b:d1:02:99:c4:61:c5:44:d1:05:ca:94:32: af:bd:5e:71:11:d0:48:b1:f3:ca:a6:e8:07:e0:8d: 4e:ea:85:a9:b6:69:c7:97:42:c2:5c:30:46:ed:99: b9:ba:d4:bd:f6:43:75:a1:56:dd:ff:8e:05:f8:e8: 12:0b:35:b9:99:d2:50:76:72:e4:91:4a:8a:ec:75: 22:aa:c2:3e:45:f2:82:1d:83:3a:a0:b5:d8:e9:e2: 36:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E4:68:A6:2A:B8:91:F3:89:C9:92:AE:DF:11:A0:89:37:82:7F:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/cf0d02ea-7c97-3203-a72d-003b0556e0c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl X509v3 Authority Key Identifier: keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer sbgp-ipAddrBlock: critical IPv4: 209.59.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a7:25:e7:c7:48:f5:ca:66:14:30:fa:49:16:d4:c0:6b:60: eb:07:48:6b:90:01:52:c4:7f:8b:44:fd:68:7c:5f:0b:47:66: e9:f5:27:d8:ba:19:2a:ac:7d:f3:da:db:cd:c9:5c:2a:43:99: 27:5d:71:4b:7b:8a:b7:33:2f:02:5b:63:eb:e4:e2:00:d2:81: 4a:d8:c7:a1:4f:2a:67:4d:c0:e6:e2:1a:03:9e:27:6f:ee:c0: 59:2f:80:f7:19:ea:d7:37:c4:fd:94:b8:a1:a8:96:5c:31:86: e7:7f:c6:c1:cf:3f:3b:8a:fe:c0:f5:cb:9f:4f:49:1f:b1:32: d8:b8:c5:9a:2b:9f:60:13:02:1b:1d:9a:b0:d6:91:f2:c3:ce: 34:f3:17:8c:f5:57:6a:42:5a:d6:c5:fc:93:2f:4d:6a:2a:6a: 7c:85:80:6d:0a:a2:95:5d:b8:08:ab:ba:2a:79:fb:7b:5a:64: 41:49:82:0e:b3:5d:72:56:d1:10:6e:08:20:9f:f0:34:3d:e6: d1:9d:14:e6:69:7f:c6:5b:a8:42:94:52:34:db:85:21:1d:9d: fc:80:90:6b:b2:23:61:72:ce:49:03:00:b3:6a:13:65:05:9e: 82:4e:84:6c:97:8c:bb:0b:a9:c1:5b:9f:4c:aa:a2:d5:8e:61: 11:e3:48:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsB13nBaUAXOaohsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi MDhlMB4XDTI1MDgyODE0MTc0MFoXDTI1MTEyNjE1MTc0MFowLzEtMCsGA1UEAxMk ZWFmNGE0YTAtYjVmZS00MjBmLWEwMDItMjhlMTZiYzY0ZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2C+boPwG+mKEEaK4dJ52eaDc837eDbzbIm+ 9Dq0cx2hqRMQyV1DM/TQdz4JlTQm0MgDH3tWdn8OcpYQAu3Tg0XvmiQNLlQ17CKv u+rozcq6mAwYcYihS+/zBdBaIgsgIrAz3pn2htIal9PjoZ1NuMgWGKqvrvsupB5L cwWW2V2bK6agIYnhNjMbYL10H24JXU4YutAFE2zHgNBWzw6oFNAiXf/9sTvRApnE YcVE0QXKlDKvvV5xEdBIsfPKpugH4I1O6oWptmnHl0LCXDBG7Zm5utS99kN1oVbd /44F+OgSCzW5mdJQdnLkkUqK7HUiqsI+RfKCHYM6oLXY6eI2dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDkaKYquJHzicmSrt8RoIk3gn8bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvY2YwZDAyZWEtN2M5Ny0z MjAzLWE3MmQtMDAzYjA1NTZlMGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1 ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4 MTU2MmIwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0TvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFenJefHSPXKZhQw+kkW1MBrYOsHSGuQAVLEf4tE/Wh8XwtHZun1J9i6 GSqsffPa283JXCpDmSddcUt7irczLwJbY+vk4gDSgUrYx6FPKmdNwObiGgOeJ2/u wFkvgPcZ6tc3xP2UuKGollwxhud/xsHPPzuK/sD1y59PSR+xMti4xZorn2ATAhsd mrDWkfLDzjTzF4z1V2pCWtbF/JMvTWoqanyFgG0KopVduAiruip5+3taZEFJgg6z XXJW0RBuCCCf8DQ95tGdFOZpf8ZbqEKUUjTbhSEdnfyAkGuyI2FyzkkDALNqE2UF noJOhGyXjLsLqcFbn0yqotWOYRHjSEs= -----END CERTIFICATE-----Generated at Tue Sep 9 03:05:52 2025 by rpki-client