$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa File: c4d0d21f-1690-36d6-8c24-202cfa311060.roa (raw, json) Hash identifier: 0ouQA7vJ0ivf+dJcoFxYBYeTr7my0BJldgGQtDOSbnk= Subject key identifier: 00:1B:15:98:AD:B2:AC:24:84:A2:54:3D:39:26:B1:FD:E7:DC:02:FD Certificate issuer: /CN=3a000633-c1ee-492c-b730-12e113ab8bd2 Certificate serial: 010D0C9F4328584A96369870574EC83A9200F100 Authority key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 394710 IP address blocks: 209.216.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:98:70:57:4e:c8:3a:92:00:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a000633-c1ee-492c-b730-12e113ab8bd2 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=c9ffb3d8-1e95-4c9e-bc37-73172ef1a6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:45:ae:00:57:41:38:ca:0c:b5:50:a1:94:96: 53:3b:04:38:64:33:38:ac:3b:b3:cd:7a:cb:66:b2: 5a:3d:32:2d:a1:3b:47:0b:dc:3a:4d:32:35:6a:01: 82:a9:07:9d:93:57:77:36:38:a1:7c:76:fc:81:78: 9d:61:89:09:47:24:8d:e6:6c:45:34:9b:5c:36:f7: bc:02:72:15:54:64:1c:b0:12:b4:92:f2:5a:44:d0: 0d:9e:2c:45:de:9d:8e:9c:18:e6:61:31:6a:b8:a6: d5:0e:76:29:b8:22:18:d2:2a:cd:5f:03:6c:37:90: 72:bc:61:5c:a9:19:ef:ae:f7:4b:fc:36:c0:17:68: 72:84:2b:26:17:68:2e:76:8d:19:06:cc:aa:8a:ce: 3a:1f:7b:45:28:e0:e4:de:5b:44:37:93:4c:26:ca: 8b:54:ee:7d:8b:96:60:6f:6d:52:27:61:dc:a0:7f: ae:18:c8:d3:f5:c3:f4:91:2c:f4:9d:f9:19:fe:85: ea:db:99:13:47:0f:ce:40:e1:bb:ce:3e:33:ab:66: 41:7e:d6:9a:9f:63:7b:19:3c:d4:f2:3e:e0:32:e8: 77:fc:2b:81:bf:6b:3d:60:df:ca:82:8e:e6:35:b4: 03:db:44:2d:1b:61:56:3f:e5:32:37:65:91:a0:e6: d1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1B:15:98:AD:B2:AC:24:84:A2:54:3D:39:26:B1:FD:E7:DC:02:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl X509v3 Authority Key Identifier: keyid:14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer sbgp-ipAddrBlock: critical IPv4: 209.216.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:44:dd:f3:97:f1:d9:ee:c4:b5:3e:02:7a:0a:3d:6e:95:29: 18:fa:fd:8e:7f:a6:4a:9d:59:d8:55:f2:14:4b:2d:4d:a2:c2: c8:64:c6:43:8f:a4:b7:cf:2d:b9:f4:f3:e2:62:7d:8e:8b:78: 0c:74:9a:bf:8f:38:94:ee:7f:59:a2:a9:f1:cc:2f:b9:23:36: a8:75:53:fd:c9:d5:13:fa:2b:16:79:11:59:c0:2d:28:db:1b: 43:3a:c4:c0:02:53:e5:ea:79:e1:4a:72:70:51:34:4e:a6:a1: c9:56:0c:d1:ba:7c:5c:5a:e6:60:f2:db:7f:7e:1f:f0:21:8c: c3:52:5c:f4:7e:92:cf:cf:68:7e:4c:78:cb:7d:6f:72:b8:a8: b4:8f:af:44:23:5a:b8:7f:ac:38:28:e3:78:44:d0:aa:a4:68: 9e:42:25:59:97:27:f7:e4:de:87:ec:bd:4a:a6:ac:7b:a2:4e: c8:0a:62:aa:20:d1:f4:85:cf:22:c7:5e:4a:d2:4a:54:cd:8a: af:31:9a:e3:c2:b2:84:9b:59:60:a6:02:4c:d3:e4:1d:a2:4e: 15:30:db:e8:62:e5:59:ce:5b:25:d8:c9:49:1e:03:c8:40:5b: a2:10:43:f2:3c:b2:e0:1e:64:16:06:ec:e0:de:f2:0d:31:bf: b2:b2:30:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNphwV07IOpIA8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMDA2MzMtYzFlZS00OTJjLWI3MzAtMTJlMTEzYWI4 YmQyMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YzlmZmIzZDgtMWU5NS00YzllLWJjMzctNzMxNzJlZjFhNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikWuAFdBOMoMtVChlJZTOwQ4ZDM4rDuzzXrL ZrJaPTItoTtHC9w6TTI1agGCqQedk1d3NjihfHb8gXidYYkJRySN5mxFNJtcNve8 AnIVVGQcsBK0kvJaRNANnixF3p2OnBjmYTFquKbVDnYpuCIY0irNXwNsN5ByvGFc qRnvrvdL/DbAF2hyhCsmF2gudo0ZBsyqis46H3tFKODk3ltEN5NMJsqLVO59i5Zg b21SJ2HcoH+uGMjT9cP0kSz0nfkZ/oXq25kTRw/OQOG7zj4zq2ZBftaan2N7GTzU 8j7gMuh3/CuBv2s9YN/Kgo7mNbQD20QtG2FWP+UyN2WRoObRXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAbFZitsqwkhKJUPTkmsf3n3AL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAw MDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUxMTNhYjhiZDIvYzRkMGQyMWYtMTY5MC0z NmQ2LThjMjQtMjAyY2ZhMzExMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMDA2MzMtYzFlZS00OTJjLWI3 MzAtMTJlMTEzYWI4YmQyLzNhMDAwNjMzLWMxZWUtNDkyYy1iNzMwLTEyZTExM2Fi OGJkMi5jcmwwHwYDVR0jBBgwFoAUFGVxCMW+NO6jxif09m0EUs/PIyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAwMDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUx MTNhYjhiZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0dhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtE3fOX8dnuxLU+AnoKPW6VKRj6/Y5/pkqdWdhV8hRLLU2iwshkxkOP pLfPLbn08+JifY6LeAx0mr+POJTuf1miqfHML7kjNqh1U/3J1RP6KxZ5EVnALSjb G0M6xMACU+XqeeFKcnBRNE6moclWDNG6fFxa5mDy239+H/AhjMNSXPR+ks/PaH5M eMt9b3K4qLSPr0QjWrh/rDgo43hE0KqkaJ5CJVmXJ/fk3ofsvUqmrHuiTsgKYqog 0fSFzyLHXkrSSlTNiq8xmuPCsoSbWWCmAkzT5B2iThUw2+hi5VnOWyXYyUkeA8hA W6IQQ/I8suAeZBYG7ODe8g0xv7KyMKE= -----END CERTIFICATE-----Generated at Sat Aug 2 05:27:19 2025 by rpki-client