$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa File: b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa (raw, json) Hash identifier: VPtZRr3bFVfxIYLa4ZhDwcOwdzgtKQbwZj7Ts8gzQZ4= Subject key identifier: 11:31:BB:52:54:93:87:83:D5:7E:4D:34:4D:83:A1:3C:AC:9F:EC:FF Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584B1806D9A088774306F245FD00 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 198.174.212.0/23 maxlen: 24 198.174.214.0/23 maxlen: 24 204.221.17.0/24 maxlen: 24 204.221.18.0/23 maxlen: 24 204.221.144.0/22 maxlen: 24 206.9.80.0/24 maxlen: 24 206.145.178.0/23 maxlen: 24 206.145.224.0/23 maxlen: 24 206.146.48.0/22 maxlen: 24 209.32.64.0/21 maxlen: 24 209.32.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d9:a0:88:77:43:06:f2:45:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=e436a323-d7ba-4c1f-9d76-5ddf5a57c689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:e5:85:57:eb:a6:28:ff:08:3c:5a:d2:e2: dc:95:0f:d5:70:84:16:46:16:4d:91:9a:fe:a7:94: fe:78:ed:30:af:48:fb:7c:d3:ee:56:67:7f:6b:29: 38:d2:c2:6f:d6:49:60:f1:f4:21:5f:a9:8e:2f:87: 04:e6:22:81:56:94:05:61:aa:f9:22:5d:e9:e9:1f: 33:52:07:3f:d0:ae:13:7d:06:54:d4:0f:93:63:03: 91:1f:7b:d6:fa:4e:dc:3b:51:52:33:e8:bd:9f:c2: 59:09:17:89:be:7f:24:7e:4f:34:a9:cf:80:64:f6: aa:e0:b5:c1:03:c5:df:07:f4:3e:28:98:7c:91:63: cf:1d:a9:ac:a7:48:b5:74:4a:23:fc:1d:53:05:7c: b5:81:af:df:6f:18:f6:c0:40:5c:5a:bb:9a:b3:ea: f2:75:32:90:3e:5c:92:1e:51:11:48:ed:0e:11:ca: 42:a1:db:76:f0:c3:e8:d1:d5:49:33:7d:95:0d:49: 98:0e:d4:ac:27:29:86:af:9c:bb:b7:79:54:e1:37: 6b:02:64:31:a4:81:e1:e1:51:01:0f:17:31:06:67: ba:63:13:6e:ae:4b:cf:2b:8d:91:23:0d:0b:99:7e: 1a:68:b1:c8:c1:46:c3:34:b2:bb:8f:e2:c3:b5:ee: e8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:31:BB:52:54:93:87:83:D5:7E:4D:34:4D:83:A1:3C:AC:9F:EC:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv4: 198.174.212.0/22 204.221.17.0-204.221.19.255 204.221.144.0/22 206.9.80.0/24 206.145.178.0/23 206.145.224.0/23 206.146.48.0/22 209.32.64.0/21 209.32.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d9:a3:47:11:3a:ec:00:e7:e9:45:78:95:28:ea:89:fa:15: b2:db:53:0a:2e:be:35:a8:36:27:fb:72:8a:bb:4a:ec:ee:da: e2:d6:90:ad:ac:75:15:42:c9:ef:ec:50:7f:cf:41:03:af:8e: 8e:1e:e9:aa:7a:d0:42:a7:ef:eb:74:57:bc:07:07:6d:99:e6: 9d:c9:6d:c8:d7:e3:fc:cc:13:68:94:08:12:72:42:ab:1c:7d: fd:1c:53:f9:6a:b8:0e:6b:b1:26:89:42:e7:9c:23:55:b1:57: 72:8e:21:cc:57:89:7a:13:c9:26:0c:de:32:f3:54:b0:1c:04: 83:e1:e6:42:af:3c:b2:7a:d2:a8:58:f2:38:98:72:5c:3a:34: 1a:eb:cf:3a:d4:cd:32:00:d6:f3:4d:f4:f0:a6:dc:f0:6f:92: 69:e9:5a:72:a1:a0:90:41:67:d5:7b:6a:02:0f:ac:94:81:1f: 89:73:86:73:ac:27:f5:b4:4a:44:dd:60:2d:d2:db:ef:31:91: 69:a8:ba:da:55:c9:c1:c5:c1:5a:ba:94:14:f2:d2:ec:49:9c: 9b:97:f1:60:82:3f:64:8c:04:a3:af:60:f6:73:1f:c7:88:08: 06:e4:eb:a1:9b:29:ff:58:a5:32:16:14:00:44:e3:ee:92:91: c7:14:89:b9 -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWEsYBtmgiHdDBvJF/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTQzNmEzMjMtZDdiYS00YzFmLTlkNzYtNWRkZjVhNTdjNjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUTlhVfrpij/CDxa0uLclQ/VcIQWRhZNkZr+ p5T+eO0wr0j7fNPuVmd/ayk40sJv1klg8fQhX6mOL4cE5iKBVpQFYar5Il3p6R8z Ugc/0K4TfQZU1A+TYwORH3vW+k7cO1FSM+i9n8JZCReJvn8kfk80qc+AZPaq4LXB A8XfB/Q+KJh8kWPPHamsp0i1dEoj/B1TBXy1ga/fbxj2wEBcWruas+rydTKQPlyS HlERSO0OEcpCodt28MPo0dVJM32VDUmYDtSsJymGr5y7t3lU4TdrAmQxpIHh4VEB DxcxBme6YxNurkvPK42RIw0LmX4aaLHIwUbDNLK7j+LDte7oxQIDAQABo4IDjTCC A4kwHQYDVR0OBBYEFBExu1JUk4eD1X5NNE2DoTysn+z/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvYjAwOTU4OWQtYzJhZS0z ZTdjLWFlNjItMGRiNTA0MGY5M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCxq7UMAwD BADM3REDBALM3RADBALM3ZADBADOCVADBAHOkbIDBAHOkeADBALOkjADBAPRIEAD BAPRIHAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAVNmjRxE67ADn6UV4lSjqifoVsttTCi6+Nag2J/tyirtK 7O7a4taQrax1FULJ7+xQf89BA6+Ojh7pqnrQQqfv63RXvAcHbZnmncltyNfj/MwT aJQIEnJCqxx9/RxT+Wq4DmuxJolC55wjVbFXco4hzFeJehPJJgzeMvNUsBwEg+Hm Qq88snrSqFjyOJhyXDo0GuvPOtTNMgDW80308Kbc8G+SaelacqGgkEFn1XtqAg+s lIEfiXOGc6wn9bRKRN1gLdLb7zGRaai62lXJwcXBWrqUFPLS7Emcm5fxYII/ZIwE o69g9nMfx4gIBuTroZsp/1ilMhYUAETj7pKRxxSJuQ== -----END CERTIFICATE-----Generated at Sat Sep 6 07:58:03 2025 by rpki-client