$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/b063a8ee-75a7-37ee-8f99-fc2f9514b301.roa File: b063a8ee-75a7-37ee-8f99-fc2f9514b301.roa (raw, json) Hash identifier: /AizpT5KbV+4uYd6XqhnQ8QeRBRU6l7dI0m36bvDKhc= Subject key identifier: 14:10:24:E6:92:71:DF:F7:8F:3F:96:02:D7:84:52:3A:DB:26:92:2D Certificate issuer: /CN=883ca040-a898-4e47-b1e1-f2461996a058 Certificate serial: 010D0C9F4328584AF7EBE64B784C466C7B60F980 Authority key identifier: BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/b063a8ee-75a7-37ee-8f99-fc2f9514b301.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 36858 IP address blocks: 209.189.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e6:4b:78:4c:46:6c:7b:60:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883ca040-a898-4e47-b1e1-f2461996a058 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=def8af2d-6958-4e4d-91f1-cfa48d2143a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:ba:c2:1e:32:f5:b2:f7:2d:1f:96:ed:94: 94:20:e2:66:7a:67:e8:9c:ff:10:d2:73:36:c2:a1: b2:69:8d:da:a3:17:a2:ff:c9:04:6e:ea:d3:4e:ab: e1:48:94:22:3f:69:39:5d:ea:e8:e8:a2:83:c5:72: 6e:fe:8e:3c:ba:fa:f9:30:5b:64:fc:e3:d0:f9:54: af:1b:5d:97:4e:ff:1e:65:7c:99:99:09:ab:b2:33: 19:25:0f:4b:0e:a9:ca:dc:09:14:79:49:3d:c2:63: fd:8d:ac:11:09:76:f0:16:0c:2c:b6:24:6c:8f:87: 6d:13:fa:25:d8:45:7c:c6:95:57:a3:d6:4e:19:f0: 9d:0a:51:c3:d8:5f:94:ee:df:00:4a:cf:88:8c:87: 89:dd:a3:8f:49:e2:6f:80:3a:87:3b:44:5d:09:b5: 95:76:b9:8f:c2:c4:69:23:84:a1:30:70:e9:08:b8: f3:30:73:17:8c:e1:d5:2b:f4:18:91:01:b5:18:2e: 5f:5b:dc:13:a5:02:9d:bf:d6:70:f7:16:99:4a:9e: 15:da:2d:ae:76:b2:97:95:9b:2b:39:9d:85:dc:96: ce:bc:d5:a9:b2:66:bb:e1:10:88:4c:f6:38:38:b2: 0d:d1:fa:7a:5e:90:8a:15:f2:6b:08:0c:c7:e1:f2: 67:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:10:24:E6:92:71:DF:F7:8F:3F:96:02:D7:84:52:3A:DB:26:92:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/b063a8ee-75a7-37ee-8f99-fc2f9514b301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl X509v3 Authority Key Identifier: keyid:BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer sbgp-ipAddrBlock: critical IPv4: 209.189.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:4c:8c:42:37:ad:93:83:98:62:d9:93:05:b3:90:a4:f0:95: f8:eb:a2:2b:6a:ec:9f:3e:28:19:44:b5:0a:d1:1c:37:5f:dc: be:0e:87:4b:11:a2:6f:a0:29:de:5b:eb:fc:1a:ad:da:76:52: 50:a8:bc:17:1e:24:ea:d5:d3:77:67:78:44:ef:53:f5:d5:2d: 52:db:8b:a5:36:ad:cb:e5:0a:aa:ff:db:fe:fe:82:d8:60:ec: ea:c3:30:a7:83:46:6a:a4:7f:10:d6:67:c9:7b:29:30:78:c2: 70:7c:1a:8e:02:9d:be:9e:41:e1:12:fd:69:0b:d8:45:e3:ea: 05:77:c1:25:93:10:f8:df:b4:6d:02:26:cf:06:c6:f7:bd:bb: 9a:d7:05:d1:b3:51:83:88:77:cd:f7:74:b7:a7:d6:a7:f2:1f: 11:0b:5a:6e:67:13:2c:41:9b:1f:25:41:fb:67:a8:b4:a3:33: e8:65:b2:03:0f:4b:7f:25:4a:b4:48:6a:2c:f9:2a:16:27:5a: 20:a9:88:22:de:5e:24:55:19:27:2e:36:3d:5e:52:3b:57:fc: bb:8f:8f:e5:77:e9:f0:c4:07:d9:8f:12:9e:d1:b0:e2:ed:b1: 21:66:a1:e8:8b:b9:30:3c:d5:4d:30:96:2d:ef:58:e7:3e:a5: d1:b7:8f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+ZLeExGbHtg+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgzY2EwNDAtYTg5OC00ZTQ3LWIxZTEtZjI0NjE5OTZh MDU4MB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk ZGVmOGFmMmQtNjk1OC00ZTRkLTkxZjEtY2ZhNDhkMjE0M2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE66wh4y9bL3LR+W7ZSUIOJmemfonP8Q0nM2 wqGyaY3aoxei/8kEburTTqvhSJQiP2k5Xero6KKDxXJu/o48uvr5MFtk/OPQ+VSv G12XTv8eZXyZmQmrsjMZJQ9LDqnK3AkUeUk9wmP9jawRCXbwFgwstiRsj4dtE/ol 2EV8xpVXo9ZOGfCdClHD2F+U7t8ASs+IjIeJ3aOPSeJvgDqHO0RdCbWVdrmPwsRp I4ShMHDpCLjzMHMXjOHVK/QYkQG1GC5fW9wTpQKdv9Zw9xaZSp4V2i2udrKXlZsr OZ2F3JbOvNWpsma74RCITPY4OLIN0fp6XpCKFfJrCAzH4fJnRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQQJOaScd/3jz+WAteEUjrbJpItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ODNj YTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2MTk5NmEwNTgvYjA2M2E4ZWUtNzVhNy0z N2VlLThmOTktZmMyZjk1MTRiMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODgzY2EwNDAtYTg5OC00ZTQ3LWIx ZTEtZjI0NjE5OTZhMDU4Lzg4M2NhMDQwLWE4OTgtNGU0Ny1iMWUxLWYyNDYxOTk2 YTA1OC5jcmwwHwYDVR0jBBgwFoAUvQ9TXi7MLYdA9N6h/A4cyUu4cJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ODNjYTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2 MTk5NmEwNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0b2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRMjEI3rZODmGLZkwWzkKTwlfjroitq7J8+KBlEtQrRHDdf3L4Oh0sR om+gKd5b6/wardp2UlCovBceJOrV03dneETvU/XVLVLbi6U2rcvlCqr/2/7+gthg 7OrDMKeDRmqkfxDWZ8l7KTB4wnB8Go4Cnb6eQeES/WkL2EXj6gV3wSWTEPjftG0C Js8Gxve9u5rXBdGzUYOId833dLen1qfyHxELWm5nEyxBmx8lQftnqLSjM+hlsgMP S38lSrRIaiz5KhYnWiCpiCLeXiRVGScuNj1eUjtX/LuPj+V36fDEB9mPEp7RsOLt sSFmoeiLuTA81U0wli3vWOc+pdG3jyc= -----END CERTIFICATE-----Generated at Wed Sep 10 05:32:40 2025 by rpki-client