$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/615e59cd-021d-336b-9637-d9aa8e6afe32.roa File: 615e59cd-021d-336b-9637-d9aa8e6afe32.roa (raw, json) Hash identifier: AWy+Jt6WN624d4U7StZl0Idj5y5sI4I3RXvq4S4kTZk= Subject key identifier: A8:47:32:5F:AA:70:6E:9F:47:18:7D:2C:8F:CA:5E:D6:88:6C:9F:7A Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584A66C0912996E8FF9C7CC7D280 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/615e59cd-021d-336b-9637-d9aa8e6afe32.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 55044 IP address blocks: 209.211.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:91:29:96:e8:ff:9c:7c:c7:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=899c229a-1425-4d8d-8a90-43aa26a25ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7a:49:11:0d:b0:71:de:75:10:3e:32:4a:eb: fc:c4:e6:54:5c:8f:67:13:f9:43:a1:8e:f2:f4:ff: f2:15:7a:2b:d8:2e:b5:b1:b9:a6:97:1d:0e:85:e8: 9d:6c:03:5c:70:45:69:17:fc:6e:a6:da:48:ff:d4: ac:31:df:99:29:5d:ae:a3:3c:c9:2f:83:e5:92:69: e2:fb:31:4b:89:38:33:d7:fc:bb:db:ba:78:03:e5: 60:9f:01:3a:4b:eb:de:37:cf:df:1a:4d:03:97:45: 69:a1:bf:fd:4c:79:7c:8a:60:1d:d6:5a:c2:8f:c9: 44:c5:af:01:f7:29:f6:f1:c2:0f:77:27:a3:ef:22: b6:ed:76:df:c8:f0:8d:f0:c5:14:82:8e:05:ef:59: 77:21:d9:5f:11:9b:84:83:b6:13:1f:bb:e4:1b:a8: 49:01:e1:14:c9:83:9c:67:b4:df:1d:13:a7:ac:19: 41:7b:4b:ef:0a:21:07:18:ca:b7:30:aa:21:89:63: 9a:35:45:99:44:db:9d:75:fe:b0:9f:28:b1:09:4a: 1b:a5:ff:43:46:47:f1:2b:c6:55:7e:8f:2b:63:5e: d1:6e:d9:a7:a6:5c:ac:71:b5:35:5c:27:a5:4b:d6: c1:de:66:4c:b6:00:8d:a3:5b:91:5e:f6:23:27:47: 50:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:47:32:5F:AA:70:6E:9F:47:18:7D:2C:8F:CA:5E:D6:88:6C:9F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/615e59cd-021d-336b-9637-d9aa8e6afe32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e4:cb:20:1d:4e:b5:0b:92:86:6e:09:98:eb:c5:f1:24:cd: 40:71:b9:d0:54:0b:71:c5:29:34:3b:d3:6a:8e:cf:f9:b2:bc: 17:0b:f6:0f:8f:1d:37:90:f3:78:9b:6f:ef:7e:5a:28:f6:6b: f5:e1:ef:f2:a1:35:f9:31:fe:e0:62:57:b5:fd:d0:aa:90:42: 23:19:48:bd:83:bf:1b:55:91:25:10:84:66:52:8a:b2:58:37: 17:44:d2:24:61:bf:5c:8e:be:32:f2:72:fa:eb:62:20:45:08: 9c:71:14:05:6e:fa:dd:7c:eb:39:5a:3c:a2:f3:da:d2:9b:82: fb:1f:e6:92:66:56:04:37:fc:ab:70:e8:3c:9e:ab:f0:d9:fa: 0c:d5:f6:a6:4f:7c:f3:4f:61:31:5a:2b:28:ef:4e:6c:c8:92: d2:fd:3f:c5:c5:04:29:d0:ec:f1:79:f7:92:cb:85:44:4b:54: 92:91:6e:1b:42:d1:7d:06:a8:1b:70:6e:3e:cd:39:fe:25:4a: 9c:ff:9f:74:dc:2d:f7:3a:59:31:0c:58:0d:a1:1e:4b:7a:c5: 96:ad:b4:48:0e:af:5e:01:ee:17:61:11:55:d0:34:02:bb:b0: 6f:4f:9d:bd:83:f7:3c:1a:32:44:44:27:b1:5e:d4:49:43:d4: 1f:6b:fb:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwJEpluj/nHzH0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk ODk5YzIyOWEtMTQyNS00ZDhkLThhOTAtNDNhYTI2YTI1ZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnpJEQ2wcd51ED4ySuv8xOZUXI9nE/lDoY7y 9P/yFXor2C61sbmmlx0OheidbANccEVpF/xuptpI/9SsMd+ZKV2uozzJL4Plkmni +zFLiTgz1/y727p4A+VgnwE6S+veN8/fGk0Dl0Vpob/9THl8imAd1lrCj8lExa8B 9yn28cIPdyej7yK27XbfyPCN8MUUgo4F71l3IdlfEZuEg7YTH7vkG6hJAeEUyYOc Z7TfHROnrBlBe0vvCiEHGMq3MKohiWOaNUWZRNuddf6wnyixCUobpf9DRkfxK8ZV fo8rY17RbtmnplyscbU1XCelS9bB3mZMtgCNo1uRXvYjJ0dQMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhHMl+qcG6fRxh9LI/KXtaIbJ96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNjE1ZTU5Y2QtMDIxZC0z MzZiLTk2MzctZDlhYThlNmFmZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0dP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvkyyAdTrULkoZuCZjrxfEkzUBxudBUC3HFKTQ702qOz/myvBcL9g+P HTeQ83ibb+9+Wij2a/Xh7/KhNfkx/uBiV7X90KqQQiMZSL2DvxtVkSUQhGZSirJY NxdE0iRhv1yOvjLycvrrYiBFCJxxFAVu+t186zlaPKLz2tKbgvsf5pJmVgQ3/Ktw 6Dyeq/DZ+gzV9qZPfPNPYTFaKyjvTmzIktL9P8XFBCnQ7PF595LLhURLVJKRbhtC 0X0GqBtwbj7NOf4lSpz/n3TcLfc6WTEMWA2hHkt6xZattEgOr14B7hdhEVXQNAK7 sG9Pnb2D9zwaMkREJ7Fe1ElD1B9r+2s= -----END CERTIFICATE-----Generated at Fri Aug 8 19:24:59 2025 by rpki-client