$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa File: 757c630c-1704-3fb8-b8aa-a6f536633ed2.roa (raw, json) Hash identifier: ZORzuwO/UowfYpx83hoSSTI+UPJpD2RbzkGld96iWYs= Subject key identifier: 1D:F2:72:F2:63:0B:3B:E7:EF:83:F2:5D:6E:D6:FB:9A:07:B7:32:69 Certificate issuer: /CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Certificate serial: 010D0C9F4328584AF5215013A4AFBF6A0D1FE980 Authority key identifier: 0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 8075 IP address blocks: 209.51.100.0/24 maxlen: 24 209.51.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:50:13:a4:af:bf:6a:0d:1f:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=f62eeb7a-70a0-4a29-be51-043f23c7b05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b8:87:7c:de:b8:ec:32:4a:6c:73:ec:04:13: 1d:55:d4:4f:55:42:64:b9:00:f1:6e:c4:10:55:6c: d9:70:77:ba:06:ab:21:2f:f8:71:62:71:1c:05:dc: b6:29:87:ff:e9:2c:79:ce:c3:92:4d:7b:a7:e9:3f: 03:42:ab:eb:55:cb:e5:2c:30:81:c9:95:3d:7b:79: 42:94:a3:8f:60:1f:93:bb:c8:88:24:7f:50:41:94: 01:90:5a:99:5c:fe:15:fa:a2:b1:29:d3:fc:6a:d2: 86:79:f8:51:7c:eb:71:88:39:ae:fa:e2:68:f8:54: 68:cc:5b:c6:47:77:76:30:62:be:7e:15:c2:a1:76: ad:d5:1b:ac:ce:d6:1c:d6:a9:7e:54:21:2e:21:1c: 1a:08:ef:80:60:1a:1d:a8:7b:df:40:2b:e1:e5:61: 6a:7a:b3:61:41:12:3e:3e:9f:02:38:16:92:1b:a4: c1:9b:03:4a:27:f1:2c:e8:05:83:67:21:75:c7:85: 14:a8:1f:26:00:a4:2e:3f:ce:f5:73:3b:a4:d8:ae: 47:bf:20:42:84:5d:8d:5d:6d:06:16:fe:15:01:9b: 2b:81:e2:51:e0:dc:50:6b:f4:34:03:1a:80:b4:d0: 81:06:cb:d3:07:19:41:67:e9:ef:c3:12:0f:22:2e: ab:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F2:72:F2:63:0B:3B:E7:EF:83:F2:5D:6E:D6:FB:9A:07:B7:32:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl X509v3 Authority Key Identifier: keyid:0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer sbgp-ipAddrBlock: critical IPv4: 209.51.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:3a:09:74:e9:60:bb:44:f3:6d:64:a0:84:15:d1:d5:e0:d1: 03:d4:32:38:9e:b8:7a:a5:af:9b:7d:0d:86:20:f5:17:e9:62: 5c:96:c2:a4:d1:d4:bf:dc:2a:08:22:36:bc:1e:63:ad:cd:d7: fe:1b:7c:4d:2b:b9:a4:16:de:d9:1d:f7:60:0e:12:fd:f5:d4: 55:91:d6:dc:31:4c:04:65:25:b9:49:f0:34:21:4f:ce:c3:23: fb:4f:2c:ed:e6:60:2f:95:56:b0:cb:fa:32:d4:72:36:d0:d0: 4a:38:61:85:b5:90:9b:24:6a:c1:7f:9d:b5:36:23:cc:19:2c: 43:5c:02:64:96:c9:c3:54:b0:fb:77:9d:2e:c7:f9:6f:20:d5: 70:c6:01:aa:9b:3a:fe:66:64:39:e9:27:20:c1:89:3b:95:52: 87:97:50:08:68:51:24:e1:2f:48:13:20:ce:71:7d:c6:e5:27: 36:b3:c4:91:07:23:8a:5b:4a:42:d4:03:88:68:76:72:3b:47: 39:3e:6a:88:07:fc:f5:40:a9:10:e0:4b:41:4a:28:27:7b:ad: 14:d8:42:ee:ab:b4:d7:df:c6:96:23:82:fd:0c:f3:31:d7:fc: be:4a:36:09:be:b1:e0:9f:b2:82:77:c0:4d:6a:3a:e4:c7:23: a4:a8:24:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVATpK+/ag0f6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlMDczMGQtNjVkMC00YTdjLTk3MTctYWRmNDAxZDNl NWQ2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjYyZWViN2EtNzBhMC00YTI5LWJlNTEtMDQzZjIzYzdiMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlriHfN647DJKbHPsBBMdVdRPVUJkuQDxbsQQ VWzZcHe6BqshL/hxYnEcBdy2KYf/6Sx5zsOSTXun6T8DQqvrVcvlLDCByZU9e3lC lKOPYB+Tu8iIJH9QQZQBkFqZXP4V+qKxKdP8atKGefhRfOtxiDmu+uJo+FRozFvG R3d2MGK+fhXCoXat1RusztYc1ql+VCEuIRwaCO+AYBodqHvfQCvh5WFqerNhQRI+ Pp8COBaSG6TBmwNKJ/Es6AWDZyF1x4UUqB8mAKQuP871czuk2K5HvyBChF2NXW0G Fv4VAZsrgeJR4NxQa/Q0AxqAtNCBBsvTBxlBZ+nvwxIPIi6r5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3ycvJjCzvn74PyXW7W+5oHtzJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUw NzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0MDFkM2U1ZDYvNzU3YzYzMGMtMTcwNC0z ZmI4LWI4YWEtYTZmNTM2NjMzZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFlMDczMGQtNjVkMC00YTdjLTk3 MTctYWRmNDAxZDNlNWQ2LzIxZTA3MzBkLTY1ZDAtNGE3Yy05NzE3LWFkZjQwMWQz ZTVkNi5jcmwwHwYDVR0jBBgwFoAUCjfATPa/Hk/8i61XWhb+l13AIPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUwNzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0 MDFkM2U1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI6CXTpYLtE821koIQV0dXg0QPUMjieuHqlr5t9DYYg9RfpYlyWwqTR 1L/cKggiNrweY63N1/4bfE0ruaQW3tkd92AOEv311FWR1twxTARlJblJ8DQhT87D I/tPLO3mYC+VVrDL+jLUcjbQ0Eo4YYW1kJskasF/nbU2I8wZLENcAmSWycNUsPt3 nS7H+W8g1XDGAaqbOv5mZDnpJyDBiTuVUoeXUAhoUSThL0gTIM5xfcblJzazxJEH I4pbSkLUA4hodnI7Rzk+aogH/PVAqRDgS0FKKCd7rRTYQu6rtNffxpYjgv0M8zHX /L5KNgm+seCfsoJ3wE1qOuTHI6SoJB8= -----END CERTIFICATE-----Generated at Mon Sep 1 03:17:57 2025 by rpki-client