$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28c8bf7c-1786-38ae-94f5-d24e52a792da.roa File: 28c8bf7c-1786-38ae-94f5-d24e52a792da.roa (raw, json) Hash identifier: LEvZGfjhkXH+DSUFRYfKVUs/c2VTkNw9I5P6Vwur/gs= Subject key identifier: F9:57:AE:E6:8D:98:9B:7D:5E:C3:DA:BF:A3:E5:F9:87:2E:2A:4D:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7350BF0D28CE1463BCA72900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28c8bf7c-1786-38ae-94f5-d24e52a792da.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 7342 IP address blocks: 209.131.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:bf:0d:28:ce:14:63:bc:a7:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=401c5e22-caef-47ef-964f-3384882f7f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:da:a8:6f:b8:b1:60:21:18:a6:b3:03:1b:4c: 78:8e:96:96:7f:c8:64:2b:bf:b0:59:67:14:ed:10: 5c:29:d8:b2:6a:83:11:39:43:0a:51:49:a4:f5:aa: 91:22:2c:6d:64:58:ef:e8:ba:51:e8:34:d3:fd:aa: 50:fd:30:53:2c:80:d6:a3:e9:41:d3:49:31:2f:07: 93:7f:b2:4b:87:bf:c8:73:98:ba:21:cc:86:05:5a: ce:e1:24:f8:90:34:04:78:b3:b0:7f:f8:04:3d:20: 73:68:0a:5f:47:3e:55:62:1b:81:be:cc:5d:be:62: b3:0e:a2:8a:01:1b:24:ec:ab:6e:c3:5d:20:99:23: e1:d9:ca:ba:f6:a4:f8:d2:95:fe:09:ce:bb:65:3a: b5:41:2d:08:bf:fb:b2:03:46:53:b4:af:2f:59:6d: 2c:48:28:ed:c3:52:2d:d5:c6:22:38:d9:ce:3e:76: 71:9b:19:56:56:ef:7d:00:4b:d6:4b:35:e6:44:04: 98:ff:12:10:9c:98:3c:61:a1:bc:27:49:da:3d:1c: 64:9e:3a:be:d1:2d:eb:47:16:6f:8c:b5:7d:3f:07: f4:bd:00:31:f3:c4:37:b7:b5:64:15:02:0b:e9:b0: f9:c1:7e:1f:4e:a4:c7:4e:4c:38:8e:58:51:4f:87: 3c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:57:AE:E6:8D:98:9B:7D:5E:C3:DA:BF:A3:E5:F9:87:2E:2A:4D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28c8bf7c-1786-38ae-94f5-d24e52a792da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:0d:45:9e:ca:2e:6d:94:d3:87:59:1f:fc:04:f0:82:83:ab: a4:7f:83:fe:5b:0f:93:15:01:e8:dc:d2:cf:5f:84:cb:fc:6d: aa:b3:3f:21:89:11:6b:d3:f8:bb:61:eb:fa:36:70:1f:0d:db: b7:d5:04:0a:14:fd:72:9c:c0:87:89:f9:5b:c1:cc:ca:35:f3: 51:c6:94:23:60:f1:40:50:83:19:6d:9c:5b:1f:b0:de:5c:73: f9:7c:78:b5:0e:91:be:ba:1d:17:7a:ff:64:b4:2c:7c:f2:aa: 7f:b2:6f:15:85:e3:3a:44:54:4c:cd:c4:c3:6f:a9:ff:2e:f0: 92:b9:64:32:ba:84:b0:1a:83:94:a2:0c:1a:33:3f:9d:2b:40: 9f:c8:14:8f:6e:73:c1:68:c0:28:9b:91:78:4b:76:c9:4d:ed: ea:ce:2c:40:e1:29:bd:d2:56:d9:04:f0:cb:0f:e0:96:ab:ae: a6:ef:be:19:cd:18:f2:99:f7:df:91:48:fe:d9:6a:04:d8:f5: 18:57:fd:5f:39:e4:eb:2f:cf:e5:a7:54:66:0a:21:d5:2e:33: 76:bb:63:89:be:81:e3:9d:b5:55:18:11:f5:94:1d:17:91:e7: 4b:02:51:fa:8a:49:26:29:e4:e4:24:96:37:35:75:44:2a:0e: 0d:26:86:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUL8NKM4UY7ynKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk NDAxYzVlMjItY2FlZi00N2VmLTk2NGYtMzM4NDg4MmY3ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNqob7ixYCEYprMDG0x4jpaWf8hkK7+wWWcU 7RBcKdiyaoMROUMKUUmk9aqRIixtZFjv6LpR6DTT/apQ/TBTLIDWo+lB00kxLweT f7JLh7/Ic5i6IcyGBVrO4ST4kDQEeLOwf/gEPSBzaApfRz5VYhuBvsxdvmKzDqKK ARsk7Ktuw10gmSPh2cq69qT40pX+Cc67ZTq1QS0Iv/uyA0ZTtK8vWW0sSCjtw1It 1cYiONnOPnZxmxlWVu99AEvWSzXmRASY/xIQnJg8YaG8J0naPRxknjq+0S3rRxZv jLV9Pwf0vQAx88Q3t7VkFQIL6bD5wX4fTqTHTkw4jlhRT4c8UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlXruaNmJt9XsPav6Pl+YcuKk07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjhjOGJmN2MtMTc4Ni0z OGFlLTk0ZjUtZDI0ZTUyYTc5MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJINRZ7KLm2U04dZH/wE8IKDq6R/g/5bD5MVAejc0s9fhMv8baqzPyGJ EWvT+Lth6/o2cB8N27fVBAoU/XKcwIeJ+VvBzMo181HGlCNg8UBQgxltnFsfsN5c c/l8eLUOkb66HRd6/2S0LHzyqn+ybxWF4zpEVEzNxMNvqf8u8JK5ZDK6hLAag5Si DBozP50rQJ/IFI9uc8FowCibkXhLdslN7erOLEDhKb3SVtkE8MsP4JarrqbvvhnN GPKZ99+RSP7ZagTY9RhX/V855Osvz+WnVGYKIdUuM3a7Y4m+geOdtVUYEfWUHReR 50sCUfqKSSYp5OQkljc1dUQqDg0mhqo= -----END CERTIFICATE-----Generated at Thu Jul 10 04:34:20 2025 by rpki-client