$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa File: 1426a637-13aa-36d7-87c8-2a889dcd7975.roa (raw, json) Hash identifier: DJD1ZJ6m8EVRT5U6QXidM8sz+QEnipmRLhY6GbioWeU= Subject key identifier: 61:5A:D3:69:EF:82:43:2A:B4:4A:BF:6F:28:CB:E8:7D:66:5A:7F:69 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F4328584A612B0DD5EC42425E75DF8680 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 207645 IP address blocks: 209.240.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:0d:d5:ec:42:42:5e:75:df:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=741a433d-9aa0-4b1f-8943-2fdb43f63998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:51:25:d8:01:23:70:f3:0e:43:49:27:f6:86: f0:96:8e:66:eb:8c:43:49:8e:79:e5:94:39:6f:32: ea:2b:83:bd:2b:65:c2:da:64:1a:c3:7b:72:fd:82: f7:c9:ae:23:70:06:85:74:74:29:dc:3e:62:af:65: 57:21:fc:89:d2:fe:db:3a:ca:5c:16:ee:05:08:97: fd:b9:b6:be:34:a4:a1:88:28:04:fe:4d:24:9f:42: 41:b1:cf:40:9d:e8:1a:ce:e7:17:cd:d9:09:69:e5: b2:eb:d7:33:98:7b:43:ec:26:65:30:f5:30:4a:02: dc:ae:ea:ac:6d:8f:fe:30:e8:32:d8:95:83:ae:bb: f2:ec:dc:b3:9d:84:8d:5d:6d:68:d7:b5:18:11:94: 8a:04:34:05:88:c4:82:a2:b7:8e:d9:ab:a2:ce:7c: f7:a6:29:cf:7f:98:56:4d:45:9e:f4:e6:06:b1:c8: d5:67:f4:a0:b5:20:b6:e9:c5:2a:9a:f4:b4:c0:ea: 32:74:b0:d9:c9:3e:ab:92:24:75:fa:f0:a2:95:56: 28:c3:41:d8:ef:02:f4:55:80:44:c7:db:de:47:b3: 9e:6d:30:ae:28:5c:33:09:5d:d0:2c:8d:f5:a9:72: 57:c3:61:08:76:0b:5b:73:b0:2b:51:b4:a1:ba:b4: 32:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5A:D3:69:EF:82:43:2A:B4:4A:BF:6F:28:CB:E8:7D:66:5A:7F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:13:ab:84:6c:a6:28:0d:cb:9e:29:78:61:bb:48:d2:0e:f8: df:98:85:28:fe:d7:2e:83:e1:d5:1d:69:67:04:b5:d7:5d:62: 89:ee:f8:1f:e5:e4:04:f2:f1:c0:dd:fc:6a:b5:23:54:16:33: c6:e8:90:3f:01:1a:04:13:e9:03:83:e4:83:af:50:35:5d:df: 0a:1c:41:28:b3:59:95:d8:a9:06:8b:e7:c6:c9:d4:36:87:c1: bf:58:aa:96:34:5b:40:cc:31:20:e3:92:40:9b:a8:5e:e4:75: ff:e6:20:77:32:40:aa:7f:8e:09:5f:c8:2d:9e:28:3c:49:ff: 08:e5:9a:28:3d:c8:b3:d3:c1:dc:66:00:ef:42:6d:44:70:86: eb:16:fc:ff:fb:43:79:0a:03:ad:e3:49:0e:b8:12:6e:4d:c1: f5:f2:09:4f:f5:39:06:9c:d9:a0:6f:fd:03:c5:bd:09:5e:0f: 20:a7:d3:69:86:42:fd:78:38:cb:a4:46:08:3f:fc:4e:2b:da: fa:39:fb:d2:d8:30:2a:21:03:e1:b6:05:45:6b:28:73:88:d5: 52:99:65:fd:29:30:67:8d:9f:c2:73:dd:ba:4d:6d:14:85:84: 99:3b:a6:6b:56:26:e8:7b:7a:3c:2f:d4:a6:04:c3:1c:90:31: b5:e4:eb:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKw3V7EJCXnXfhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk NzQxYTQzM2QtOWFhMC00YjFmLTg5NDMtMmZkYjQzZjYzOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1El2AEjcPMOQ0kn9obwlo5m64xDSY555ZQ5 bzLqK4O9K2XC2mQaw3ty/YL3ya4jcAaFdHQp3D5ir2VXIfyJ0v7bOspcFu4FCJf9 uba+NKShiCgE/k0kn0JBsc9AnegazucXzdkJaeWy69czmHtD7CZlMPUwSgLcruqs bY/+MOgy2JWDrrvy7NyznYSNXW1o17UYEZSKBDQFiMSCoreO2auiznz3pinPf5hW TUWe9OYGscjVZ/SgtSC26cUqmvS0wOoydLDZyT6rkiR1+vCilVYow0HY7wL0VYBE x9veR7OebTCuKFwzCV3QLI31qXJXw2EIdgtbc7ArUbShurQyBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFa02nvgkMqtEq/byjL6H1mWn9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvMTQyNmE2MzctMTNhYS0z NmQ3LTg3YzgtMmE4ODlkY2Q3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAITq4RspigNy54peGG7SNIO+N+YhSj+1y6D4dUdaWcEtdddYonu+B/l 5ATy8cDd/Gq1I1QWM8bokD8BGgQT6QOD5IOvUDVd3wocQSizWZXYqQaL58bJ1DaH wb9YqpY0W0DMMSDjkkCbqF7kdf/mIHcyQKp/jglfyC2eKDxJ/wjlmig9yLPTwdxm AO9CbURwhusW/P/7Q3kKA63jSQ64Em5NwfXyCU/1OQac2aBv/QPFvQleDyCn02mG Qv14OMukRgg//E4r2vo5+9LYMCohA+G2BUVrKHOI1VKZZf0pMGeNn8Jz3bpNbRSF hJk7pmtWJuh7ejwv1KYEwxyQMbXk67Q= -----END CERTIFICATE-----Generated at Fri Aug 8 19:27:26 2025 by rpki-client