$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/245081f2-effd-35ab-aee8-d10c19f48000.roa File: 245081f2-effd-35ab-aee8-d10c19f48000.roa (raw, json) Hash identifier: 9HLHsEeFFmKeTBxBPqpdguRwqIbO3mW9ydpqHCayJuo= Subject key identifier: 32:7D:3B:C7:A1:6F:39:33:22:62:C7:2F:F4:9A:83:16:69:03:28:44 Certificate issuer: /CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Certificate serial: 010D0C9F4328584AF7EBDFF7A8E4FDD509552500 Authority key identifier: 0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/245081f2-effd-35ab-aee8-d10c19f48000.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 209.51.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:df:f7:a8:e4:fd:d5:09:55:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=7a10aa69-e736-45f7-8b43-c63c346ed975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:58:a6:4a:28:25:b4:30:4a:18:d5:f9:58:75: 9a:6f:86:d6:ec:d5:27:6d:5b:c4:fd:9e:1a:08:50: 56:61:23:6a:20:c9:ce:a2:65:9c:05:7d:1c:0d:b2: d8:ab:e1:e8:49:62:40:01:97:4b:95:4c:3b:f4:02: 4b:38:9c:e5:50:1f:53:86:b6:7e:3b:37:26:6a:1d: 31:38:3a:37:b5:86:a8:c4:3c:b1:db:75:26:2c:1f: 34:b3:cf:1d:b7:ac:f1:69:3c:f4:9e:20:24:b9:7c: 8a:c2:c3:c0:cb:2b:9a:cd:67:6f:1b:00:a6:9c:fb: ad:47:46:c2:75:6a:57:ca:09:f8:f7:9f:48:7f:84: 5a:17:cc:b9:53:95:9c:4d:9d:0a:75:3f:96:c1:e0: 79:51:22:84:8b:d2:b3:7b:1c:03:5f:3c:6d:80:2f: fc:fd:5c:68:32:2d:5f:25:75:54:f7:64:59:cc:e3: c9:f3:1e:b4:6e:4c:9f:4b:f0:d6:ae:db:e0:2f:85: f4:e5:2b:c3:45:14:cf:66:e1:ed:85:09:1b:e7:b9: c3:63:c9:84:b6:bc:16:31:ac:a2:38:75:de:fa:96: 30:d3:0a:92:69:65:f0:c1:16:5f:55:de:8b:e3:04: c1:d6:32:91:8a:2e:fe:f9:bf:2f:64:eb:b8:46:68: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7D:3B:C7:A1:6F:39:33:22:62:C7:2F:F4:9A:83:16:69:03:28:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/245081f2-effd-35ab-aee8-d10c19f48000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl X509v3 Authority Key Identifier: keyid:0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer sbgp-ipAddrBlock: critical IPv4: 209.51.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:3d:7a:a2:d6:16:64:44:fd:88:ad:8d:fc:fb:f9:ca:73:a4: 49:44:a8:a3:40:57:1c:9b:4c:06:4c:87:e0:87:19:46:52:94: 52:71:3b:01:25:a2:bf:c9:48:fb:64:cb:17:74:8f:41:d6:d1: bf:70:33:71:39:b2:4e:b4:f6:3b:ed:04:85:36:56:cf:20:72: ad:3c:6f:79:e2:5c:3f:c3:1e:d4:fb:70:52:d7:30:12:f3:8b: 28:fd:53:38:81:fe:f2:ea:0b:05:af:eb:e1:27:9d:5b:bb:57: 8e:21:70:d0:95:ff:8c:7c:57:42:e8:dc:e4:73:cd:60:b6:6f: 0a:9b:48:e8:f2:a6:fa:2b:37:84:89:73:db:c9:d3:18:fa:10: 79:47:d1:4f:21:f3:f4:3f:60:44:22:b0:1a:b7:a0:3f:7d:d6: ca:e3:3e:63:d5:6b:30:6d:9d:03:53:f2:e9:dc:27:6f:61:06: d0:e7:31:85:21:6d:86:76:b0:c7:20:a7:60:dc:05:13:71:40: fb:1c:4b:6a:70:77:50:33:e2:1a:1b:23:26:d6:91:d8:00:56: af:cf:38:ac:e4:bc:91:6a:fd:af:c9:25:90:a3:42:74:dd:42: 20:b7:e3:8d:b7:6a:7a:67:89:18:8d:90:d7:49:0f:93:df:f8: 25:b0:6b:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369/3qOT91QlVJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlMDczMGQtNjVkMC00YTdjLTk3MTctYWRmNDAxZDNl NWQ2MB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk N2ExMGFhNjktZTczNi00NWY3LThiNDMtYzYzYzM0NmVkOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1imSigltDBKGNX5WHWab4bW7NUnbVvE/Z4a CFBWYSNqIMnOomWcBX0cDbLYq+HoSWJAAZdLlUw79AJLOJzlUB9ThrZ+Ozcmah0x ODo3tYaoxDyx23UmLB80s88dt6zxaTz0niAkuXyKwsPAyyuazWdvGwCmnPutR0bC dWpXygn4959If4RaF8y5U5WcTZ0KdT+WweB5USKEi9KzexwDXzxtgC/8/VxoMi1f JXVU92RZzOPJ8x60bkyfS/DWrtvgL4X05SvDRRTPZuHthQkb57nDY8mEtrwWMayi OHXe+pYw0wqSaWXwwRZfVd6L4wTB1jKRii7++b8vZOu4RmhXxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ9O8ehbzkzImLHL/SagxZpAyhEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUw NzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0MDFkM2U1ZDYvMjQ1MDgxZjItZWZmZC0z NWFiLWFlZTgtZDEwYzE5ZjQ4MDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFlMDczMGQtNjVkMC00YTdjLTk3 MTctYWRmNDAxZDNlNWQ2LzIxZTA3MzBkLTY1ZDAtNGE3Yy05NzE3LWFkZjQwMWQz ZTVkNi5jcmwwHwYDVR0jBBgwFoAUCjfATPa/Hk/8i61XWhb+l13AIPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUwNzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0 MDFkM2U1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk9eqLWFmRE/Yitjfz7+cpzpElEqKNAVxybTAZMh+CHGUZSlFJxOwEl or/JSPtkyxd0j0HW0b9wM3E5sk609jvtBIU2Vs8gcq08b3niXD/DHtT7cFLXMBLz iyj9UziB/vLqCwWv6+EnnVu7V44hcNCV/4x8V0Lo3ORzzWC2bwqbSOjypvorN4SJ c9vJ0xj6EHlH0U8h8/Q/YEQisBq3oD991srjPmPVazBtnQNT8uncJ29hBtDnMYUh bYZ2sMcgp2DcBRNxQPscS2pwd1Az4hobIybWkdgAVq/POKzkvJFq/a/JJZCjQnTd QiC34423anpniRiNkNdJD5Pf+CWwaxg= -----END CERTIFICATE-----Generated at Mon Sep 1 03:17:58 2025 by rpki-client