$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa File: e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa (raw, json) Hash identifier: aN/LDjINWp1lgV5dZ82IwhpDWn4GSHSxRniNqlfLtiU= Subject key identifier: 0C:3F:BE:3B:08:08:8D:D5:CA:FD:B9:CA:56:69:8A:92:FF:C9:DA:B4 Certificate issuer: /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Certificate serial: 010D0C9F4328584A1E2AA38142B76F77B32582A0 Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 16509 IP address blocks: 209.127.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a3:81:42:b7:6f:77:b3:25:82:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=8447c86a-12f2-4749-9fde-a2f2ac7686e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:18:90:fc:d2:33:9d:2f:b1:15:65:db:89:57: 65:ee:c2:bc:25:ce:55:16:3a:3e:cf:25:2f:ea:c5: 54:95:b2:ec:2b:65:77:fd:c3:25:f5:e9:d7:6c:d5: de:8b:ee:cd:ac:4d:39:2d:8f:3d:67:56:39:61:a4: 65:09:7f:e0:eb:1c:8b:91:78:3d:4a:72:4c:de:de: 47:c3:7e:11:ab:01:8b:75:36:79:ff:96:1b:44:af: f7:72:5c:07:5a:49:11:b4:27:5b:d7:76:f6:8d:f2: 81:7c:09:b1:ea:bf:c9:53:e5:14:4f:f3:44:55:8f: ad:08:69:be:36:71:a3:dd:7d:0f:e4:5d:44:a2:00: b9:ec:85:fb:8b:eb:de:e5:e0:cc:5e:04:0e:09:5b: 9a:e5:c1:78:e1:8c:7a:a5:22:9d:46:ab:a6:47:b2: 4c:01:d6:71:19:1d:c3:49:a7:2c:5c:4f:b1:95:7a: f1:10:62:3c:45:47:ce:38:0a:c4:fc:3c:a5:3c:e0: 39:b0:3b:30:ec:d0:68:f0:19:81:4d:3b:01:dd:fe: 8f:1e:b1:22:72:53:d6:7a:83:44:a5:03:66:c2:c3: 97:00:d9:d5:c0:02:6c:cf:9e:d9:71:86:d4:11:c2: d7:87:4b:07:39:4e:d7:39:d1:ce:c8:ce:23:d2:89: 23:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3F:BE:3B:08:08:8D:D5:CA:FD:B9:CA:56:69:8A:92:FF:C9:DA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl X509v3 Authority Key Identifier: keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer sbgp-ipAddrBlock: critical IPv4: 209.127.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:be:31:c0:cb:d7:0e:c7:ca:1b:24:28:f7:fb:c6:f6:15:28: 9e:66:ac:68:a1:9c:d6:d8:4f:4f:42:ff:90:9d:4e:3c:cd:de: 2d:45:dc:06:49:6f:65:58:03:8a:51:6a:8e:84:da:23:25:26: 77:a4:3f:5e:44:a4:62:08:d2:13:1a:c9:62:bd:3c:66:88:46: 59:b2:d4:1c:0d:4b:73:19:91:62:6d:24:73:e9:7d:47:60:02: 56:6c:a7:11:81:75:ef:4c:ee:c1:64:f7:9a:cb:9b:13:61:03: 78:9b:a4:87:67:6e:2f:11:e0:be:28:7f:06:f8:29:99:e5:63: e5:e5:f1:a8:ef:01:47:92:e9:ab:9e:32:e1:03:80:62:83:81: bb:40:5b:6e:9a:1f:cc:b9:63:85:2f:8a:94:e1:e6:d6:db:7d: e3:6d:9c:0a:81:43:e7:89:f6:22:2c:5e:8a:88:a8:97:71:31: 71:8b:37:7d:36:72:73:56:fe:15:bd:88:36:58:d4:80:8b:de: 90:15:be:61:61:93:c0:42:ce:c1:3f:10:0d:23:b0:f3:39:a2: f2:7b:bf:f1:f2:15:e9:71:90:d8:b2:e6:75:e4:1a:31:6e:06: 11:ea:c1:67:7b:bd:d3:eb:ca:3b:7f:77:cf:0d:4b:e2:b1:70: 03:cd:5c:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqOBQrdvd7MlgqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlmZTQ2YjAtNzAzNC00ZDdiLWE3NDYtN2E3MGY3ODhj M2Y1MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk ODQ0N2M4NmEtMTJmMi00NzQ5LTlmZGUtYTJmMmFjNzY4NmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhiQ/NIznS+xFWXbiVdl7sK8Jc5VFjo+zyUv 6sVUlbLsK2V3/cMl9enXbNXei+7NrE05LY89Z1Y5YaRlCX/g6xyLkXg9SnJM3t5H w34RqwGLdTZ5/5YbRK/3clwHWkkRtCdb13b2jfKBfAmx6r/JU+UUT/NEVY+tCGm+ NnGj3X0P5F1EogC57IX7i+ve5eDMXgQOCVua5cF44Yx6pSKdRqumR7JMAdZxGR3D SacsXE+xlXrxEGI8RUfOOArE/DylPOA5sDsw7NBo8BmBTTsB3f6PHrEiclPWeoNE pQNmwsOXANnVwAJsz57ZcYbUEcLXh0sHOU7XOdHOyM4j0okj4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAw/vjsICI3Vyv25ylZpipL/ydq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZl NDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4OGMzZjUvZTQ4ZjM2N2UtYzVhZC0z NWQ0LTlkY2UtZjIwMTZjNTFlMmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDlmZTQ2YjAtNzAzNC00ZDdiLWE3 NDYtN2E3MGY3ODhjM2Y1LzA5ZmU0NmIwLTcwMzQtNGQ3Yi1hNzQ2LTdhNzBmNzg4 YzNmNS5jcmwwHwYDVR0jBBgwFoAUKlIbdd2p7j6R7Mtvp8LrPeq8OEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcw Zjc4OGMzZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu+McDL1w7HyhskKPf7xvYVKJ5mrGihnNbYT09C/5CdTjzN3i1F3AZJ b2VYA4pRao6E2iMlJnekP15EpGII0hMayWK9PGaIRlmy1BwNS3MZkWJtJHPpfUdg AlZspxGBde9M7sFk95rLmxNhA3ibpIdnbi8R4L4ofwb4KZnlY+Xl8ajvAUeS6aue MuEDgGKDgbtAW26aH8y5Y4UvipTh5tbbfeNtnAqBQ+eJ9iIsXoqIqJdxMXGLN302 cnNW/hW9iDZY1ICL3pAVvmFhk8BCzsE/EA0jsPM5ovJ7v/HyFelxkNiy5nXkGjFu BhHqwWd7vdPryjt/d88NS+KxcAPNXBA= -----END CERTIFICATE-----Generated at Sat Jun 14 06:23:15 2025 by rpki-client