$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa File: 509e4ddf-df6f-34cc-83d4-959041c0d418.roa (raw, json) Hash identifier: 77qWCmaFw/qRRPVdEJ8+XwCH1CrQoDpUgsb4LwGHHUM= Subject key identifier: F8:AD:50:69:A0:2E:26:76:A9:EB:41:FB:F7:29:10:E2:75:68:C9:9B Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F4328584B0B76AB5D072384620AA3B080 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 16575 IP address blocks: 192.200.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ab:5d:07:23:84:62:0a:a3:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=1f90ae3f-e464-4c16-ab74-3618653fed4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:5e:7a:ab:75:57:03:c6:1a:4a:93:40:c3: c9:da:e1:82:72:02:09:ac:38:55:cf:6b:02:eb:e5: e8:b6:0b:aa:16:80:61:61:3c:46:0a:ca:45:89:10: 95:72:99:55:72:53:a9:1c:f0:03:85:e8:b3:29:48: 34:b9:fb:9b:3a:4b:45:bd:06:36:d7:a4:d3:b2:b6: 49:c1:d1:ff:09:6f:bf:29:36:b3:9e:4a:e2:be:22: d9:6e:a4:fc:c7:50:6e:bc:8d:54:dc:eb:4d:48:69: b5:28:ae:d2:c6:2d:b3:83:94:b6:ba:f7:6b:aa:98: e1:1d:bd:82:bd:95:23:6d:e0:50:8b:f4:ef:1b:53: e0:d2:22:59:00:56:d6:eb:3d:2f:ba:98:22:64:90: d8:74:07:80:b6:7a:29:cd:6e:c0:b8:7b:88:b7:fb: 8e:19:cd:03:88:47:7d:67:42:46:df:dd:39:71:cb: 6c:94:67:23:42:58:1a:07:c4:3c:ef:a6:03:22:90: d1:63:e5:13:37:8b:6b:64:a5:88:c7:47:ca:93:b0: b1:08:75:7d:73:93:68:60:30:d3:da:a4:64:e5:c2: 41:31:00:9b:7a:38:1a:91:38:ae:d9:5b:fc:5b:a2: 98:24:c0:b1:df:18:2d:91:15:db:cc:8d:a8:ba:51: 2b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AD:50:69:A0:2E:26:76:A9:EB:41:FB:F7:29:10:E2:75:68:C9:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:88:b3:8b:e5:14:5c:43:17:09:5f:ce:10:1d:2a:ac:d6:f7: d9:89:6d:5d:08:f2:99:84:65:54:67:ac:0c:08:df:84:8d:e2: 27:eb:34:ad:41:19:17:62:ec:04:1d:b5:dc:fe:af:2a:7c:86: 9f:cf:3d:1e:aa:d6:21:b2:0d:a8:a1:28:fc:93:ea:76:e5:4f: aa:74:30:21:87:25:52:30:09:bc:df:5a:1e:34:2e:b5:49:31: b3:5e:03:e4:d5:35:25:f2:e6:3c:d4:7d:78:74:cf:86:01:db: 59:d3:4d:9e:2f:0b:16:31:ec:a2:33:20:7a:fc:f6:90:8c:68: fd:3e:1a:e2:6a:63:a3:3e:dd:d0:75:1b:ae:6f:ba:12:0d:7f: 4f:1a:e7:b4:54:51:29:fe:f6:36:92:5e:59:1a:6e:ba:33:2b: b7:1d:78:ca:d8:9c:35:60:f6:6e:59:14:ec:b8:f2:2a:cf:7c: 73:76:85:01:29:3b:0c:ee:0e:a7:11:6f:3e:1e:f8:f1:5c:45: 04:b2:96:f1:00:f6:7e:55:26:0d:bc:a4:dd:da:7d:df:e1:e5: 76:5e:f7:25:65:7d:cb:21:5e:19:9c:fc:e7:eb:08:ff:98:a2: 11:7f:85:78:33:80:84:a2:07:84:8f:5e:b3:9f:09:e3:bc:16: a8:bf:da:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqtdByOEYgqjsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MWY5MGFlM2YtZTQ2NC00YzE2LWFiNzQtMzYxODY1M2ZlZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYxeeqt1VwPGGkqTQMPJ2uGCcgIJrDhVz2sC 6+XotguqFoBhYTxGCspFiRCVcplVclOpHPADheizKUg0ufubOktFvQY216TTsrZJ wdH/CW+/KTaznkriviLZbqT8x1BuvI1U3OtNSGm1KK7Sxi2zg5S2uvdrqpjhHb2C vZUjbeBQi/TvG1Pg0iJZAFbW6z0vupgiZJDYdAeAtnopzW7AuHuIt/uOGc0DiEd9 Z0JG3905cctslGcjQlgaB8Q876YDIpDRY+UTN4trZKWIx0fKk7CxCHV9c5NoYDDT 2qRk5cJBMQCbejgakTiu2Vv8W6KYJMCx3xgtkRXbzI2oulErzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPitUGmgLiZ2qetB+/cpEOJ1aMmbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvNTA5ZTRkZGYtZGY2Zi0z NGNjLTgzZDQtOTU5MDQxYzBkNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCIs4vlFFxDFwlfzhAdKqzW99mJbV0I8pmEZVRnrAwI34SN4ifrNK1B GRdi7AQdtdz+ryp8hp/PPR6q1iGyDaihKPyT6nblT6p0MCGHJVIwCbzfWh40LrVJ MbNeA+TVNSXy5jzUfXh0z4YB21nTTZ4vCxYx7KIzIHr89pCMaP0+GuJqY6M+3dB1 G65vuhINf08a57RUUSn+9jaSXlkabrozK7cdeMrYnDVg9m5ZFOy48irPfHN2hQEp OwzuDqcRbz4e+PFcRQSylvEA9n5VJg28pN3afd/h5XZe9yVlfcshXhmc/OfrCP+Y ohF/hXgzgISiB4SPXrOfCeO8Fqi/2oo= -----END CERTIFICATE-----Generated at Wed Sep 17 05:20:46 2025 by rpki-client