$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa File: 639c1735-1cd0-355a-a116-4129dc8f68b1.roa (raw, json) Hash identifier: zVk00oEpOkAl7rHHyB6r+S1Jdgdw6TD8G86msp9g1Bw= Subject key identifier: E2:4C:27:2A:FB:0F:F1:B5:52:7A:E3:4C:6F:34:B8:32:E9:9B:C5:69 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584AD7D11117EF92FF7497B3E200 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 20471 IP address blocks: 209.124.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:11:17:ef:92:ff:74:97:b3:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=1fdc944a-a520-4827-83a1-1e50931fd74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8d:67:71:9c:cc:b5:e2:96:50:72:96:70:97: e5:74:09:b1:24:72:82:19:c8:27:15:fd:d9:44:12: fb:13:47:83:c1:78:4a:66:12:38:6e:ff:56:27:84: 0e:2a:96:e0:fa:46:fd:33:e0:ad:35:2a:44:3a:61: c8:12:60:19:19:13:9f:0f:36:42:8c:e4:8d:02:da: 6f:df:2a:71:67:d4:52:7c:fd:ea:aa:1a:4b:5e:56: 5c:de:a8:c2:2a:2a:d2:fa:b6:8f:0a:49:8b:76:5d: 2f:c8:e5:a1:8d:b6:ed:60:ef:ad:11:57:4c:e4:5c: 9b:8e:10:5c:79:bb:f9:6b:27:cc:54:14:6f:7e:25: d9:2f:14:60:51:2e:f3:a8:ff:7d:1f:e1:e8:00:2f: 70:c1:e2:0d:7a:09:de:95:5f:8f:09:d3:03:47:8c: 31:0d:f7:31:f4:29:7a:21:8f:f2:44:5d:91:78:6e: aa:78:89:7e:09:c8:bd:b0:d0:17:e8:09:3b:66:b2: 56:76:1b:3a:7a:d4:c3:09:2f:23:85:ed:4f:5c:f1: a0:55:6e:81:ff:86:4b:5f:25:72:89:23:74:d0:5f: 4a:7d:8b:a1:a3:24:8f:07:28:55:35:38:fd:ec:94: 04:98:55:ad:35:7d:61:4f:ca:4b:49:ce:8e:84:d6: e3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4C:27:2A:FB:0F:F1:B5:52:7A:E3:4C:6F:34:B8:32:E9:9B:C5:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ce:9b:30:b4:bd:87:9f:0c:0d:ca:4e:63:80:30:19:50:4e: ba:44:73:f5:b7:3d:f7:97:31:43:9d:97:5a:4e:0b:72:d9:01: d9:77:d1:95:51:e7:51:c5:df:61:7a:e7:08:56:a4:cf:27:4d: 81:fe:46:be:25:51:b5:2d:62:a0:bf:bc:4d:4a:b8:0d:66:e2: 08:1c:34:67:70:fd:4d:10:98:8f:2b:e6:6e:49:8a:87:8c:a9: 11:36:8f:93:94:40:15:76:39:ec:4a:40:4a:d1:28:f0:a5:42: 50:9d:c4:16:55:4e:9e:9d:72:ed:3f:97:b1:f1:68:13:1d:aa: b3:32:3f:56:bb:c7:b7:fc:40:70:dc:6c:2f:2c:92:5e:31:ba: c5:c1:5a:ee:dc:37:35:ab:fe:bb:0f:20:6f:d7:64:66:db:4e: 1b:ce:95:e2:c8:0b:a6:2f:d0:a5:84:1d:fe:0a:82:52:b0:ec: a6:ae:a5:7e:9d:a3:40:74:c3:ff:fa:75:6b:56:39:e7:62:fe: bc:37:bb:03:e1:5c:e9:e2:32:ed:1b:1c:b3:19:5a:16:98:9f: 5b:f7:d7:9b:3c:8d:f5:bb:17:3f:9b:fc:d8:f1:db:a6:6f:31: fd:cb:1d:68:f7:e4:04:56:79:87:b5:db:57:55:8f:e8:ea:ff: fd:02:b5:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0REX75L/dJez4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MWZkYzk0NGEtYTUyMC00ODI3LTgzYTEtMWU1MDkzMWZkNzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr41ncZzMteKWUHKWcJfldAmxJHKCGcgnFf3Z RBL7E0eDwXhKZhI4bv9WJ4QOKpbg+kb9M+CtNSpEOmHIEmAZGROfDzZCjOSNAtpv 3ypxZ9RSfP3qqhpLXlZc3qjCKirS+raPCkmLdl0vyOWhjbbtYO+tEVdM5FybjhBc ebv5ayfMVBRvfiXZLxRgUS7zqP99H+HoAC9wweINegnelV+PCdMDR4wxDfcx9Cl6 IY/yRF2ReG6qeIl+Cci9sNAX6Ak7ZrJWdhs6etTDCS8jhe1PXPGgVW6B/4ZLXyVy iSN00F9KfYuhoySPByhVNTj97JQEmFWtNX1hT8pLSc6OhNbj/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJMJyr7D/G1UnrjTG80uDLpm8VpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNjM5YzE3MzUtMWNkMC0z NTVhLWExMTYtNDEyOWRjOGY2OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrOmzC0vYefDA3KTmOAMBlQTrpEc/W3PfeXMUOdl1pOC3LZAdl30ZVR 51HF32F65whWpM8nTYH+Rr4lUbUtYqC/vE1KuA1m4ggcNGdw/U0QmI8r5m5JioeM qRE2j5OUQBV2OexKQErRKPClQlCdxBZVTp6dcu0/l7HxaBMdqrMyP1a7x7f8QHDc bC8skl4xusXBWu7cNzWr/rsPIG/XZGbbThvOleLIC6Yv0KWEHf4KglKw7KaupX6d o0B0w//6dWtWOedi/rw3uwPhXOniMu0bHLMZWhaYn1v315s8jfW7Fz+b/Njx26Zv Mf3LHWj35ARWeYe121dVj+jq//0CtQY= -----END CERTIFICATE-----Generated at Thu Aug 21 12:41:34 2025 by rpki-client