$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c7093601-774e-30f5-ac5e-a18688f8332c.roa File: c7093601-774e-30f5-ac5e-a18688f8332c.roa (raw, json) Hash identifier: 9njy2UxvelPIipoq/eyxd0XaynNgS8M1dRq61SFQ8fg= Subject key identifier: 02:5A:0A:22:E4:C6:89:C2:22:AC:02:FA:D2:D8:42:2A:FA:6C:57:28 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F43285849F9DFD58A07F0B1E13DF6BF60 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c7093601-774e-30f5-ac5e-a18688f8332c.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 394708 IP address blocks: 209.173.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:d5:8a:07:f0:b1:e1:3d:f6:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=aa9e0809-6772-4803-95cf-3b6d94a34902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:34:a1:1e:80:12:88:ef:e3:4b:52:be:8f:dc: 09:17:6c:c9:d0:8c:f7:48:b6:f0:48:65:c0:7c:38: ac:8d:fa:d1:36:f9:59:50:b1:35:ba:5f:42:39:75: 0a:b8:df:b4:f3:56:ef:05:4e:a6:67:75:be:cf:8f: 65:6d:43:f0:f2:a4:d9:49:08:3c:95:96:8b:6b:1d: f4:45:71:1b:63:4c:ca:68:a1:55:9f:3e:d3:52:6c: 08:69:9e:99:1b:5e:ce:87:f9:24:32:5b:25:93:1c: 41:0d:5d:ad:36:db:bf:37:63:b2:a4:7f:be:60:7e: 48:42:d9:da:20:f9:4e:57:2f:50:b7:08:bd:2b:04: ed:73:22:eb:55:b9:c4:a0:cc:c7:99:52:03:13:8f: ac:d1:5f:0b:5f:ee:2b:17:96:eb:f1:1c:59:5b:0a: ad:0c:e1:7a:53:35:76:08:c0:fd:a3:94:6f:dc:35: 44:87:01:fb:8d:cf:f8:cc:05:f4:58:6c:21:30:fa: c0:0e:c6:1b:69:46:48:8b:7c:6d:83:d3:1b:4a:8f: 13:67:13:b7:3b:4a:35:2a:db:b8:af:6d:17:5a:49: 86:7b:e4:7d:2c:9c:7b:cd:ac:bd:e5:42:35:6e:b9: ce:7a:a9:69:11:45:0e:67:f3:f7:a8:ee:bd:dd:95: ed:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5A:0A:22:E4:C6:89:C2:22:AC:02:FA:D2:D8:42:2A:FA:6C:57:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c7093601-774e-30f5-ac5e-a18688f8332c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 209.173.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c9:6c:2d:f5:12:96:4b:76:3b:37:16:e2:d0:44:5a:a5:96: 49:97:d4:3d:f3:97:9c:65:a6:f6:41:55:b9:33:2f:cb:e3:43: 60:cb:e9:1b:69:f7:4b:2a:db:bc:42:a1:e2:6a:75:93:32:65: e2:67:de:8e:18:2f:2a:c6:42:f0:18:ac:44:d1:61:1a:67:44: f1:9a:ce:63:38:f2:ec:ab:f8:d1:37:be:66:b1:8b:33:e5:bd: f9:18:ca:59:9e:4e:36:66:22:5c:fe:ea:53:79:61:a7:d6:56: b8:7f:91:a4:8c:ab:3a:c7:78:a3:0e:e5:44:f1:7a:dc:61:37: ca:62:77:85:08:86:27:c6:90:f6:86:7f:06:ca:cd:fd:83:74: bb:41:2a:ce:57:76:a6:a7:e3:09:2f:0b:ca:8e:ac:aa:d6:9e: 42:1b:0f:52:5c:78:41:cc:87:9d:63:2a:f0:31:4a:85:56:a6: bd:e3:29:74:10:7a:d6:7b:67:3c:d7:e8:f9:3f:ed:a4:d6:d1: 23:96:74:f0:69:86:0c:9c:f1:da:5a:8f:de:1b:aa:91:25:c7: 6b:30:99:29:8b:3c:8f:ad:fb:c1:f8:77:b7:60:d1:37:25:4a: 46:dc:8f:5d:3d:83:94:e7:23:42:58:8b:c8:5c:22:0b:1d:d7: 2b:8a:21:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539WKB/Cx4T32v2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk YWE5ZTA4MDktNjc3Mi00ODAzLTk1Y2YtM2I2ZDk0YTM0OTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTShHoASiO/jS1K+j9wJF2zJ0Iz3SLbwSGXA fDisjfrRNvlZULE1ul9COXUKuN+081bvBU6mZ3W+z49lbUPw8qTZSQg8lZaLax30 RXEbY0zKaKFVnz7TUmwIaZ6ZG17Oh/kkMlslkxxBDV2tNtu/N2OypH++YH5IQtna IPlOVy9Qtwi9KwTtcyLrVbnEoMzHmVIDE4+s0V8LX+4rF5br8RxZWwqtDOF6UzV2 CMD9o5Rv3DVEhwH7jc/4zAX0WGwhMPrADsYbaUZIi3xtg9MbSo8TZxO3O0o1Ktu4 r20XWkmGe+R9LJx7zay95UI1brnOeqlpEUUOZ/P3qO693ZXtiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJaCiLkxonCIqwC+tLYQir6bFcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvYzcwOTM2MDEtNzc0ZS0z MGY1LWFjNWUtYTE4Njg4ZjgzMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0a2iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7JbC31EpZLdjs3FuLQRFqllkmX1D3zl5xlpvZBVbkzL8vjQ2DL6Rtp 90sq27xCoeJqdZMyZeJn3o4YLyrGQvAYrETRYRpnRPGazmM48uyr+NE3vmaxizPl vfkYylmeTjZmIlz+6lN5YafWVrh/kaSMqzrHeKMO5UTxetxhN8pid4UIhifGkPaG fwbKzf2DdLtBKs5Xdqan4wkvC8qOrKrWnkIbD1JceEHMh51jKvAxSoVWpr3jKXQQ etZ7ZzzX6Pk/7aTW0SOWdPBphgyc8dpaj94bqpElx2swmSmLPI+t+8H4d7dg0Tcl Skbcj109g5TnI0JYi8hcIgsd1yuKIfw= -----END CERTIFICATE-----Generated at Sun Jun 15 17:58:07 2025 by rpki-client