$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ae69ce2-4544-31e7-aafe-abe7adf953e7.roa File: 6ae69ce2-4544-31e7-aafe-abe7adf953e7.roa (raw, json) Hash identifier: r+tObOr9m1DfPz5eOf+k99SViLeAHsykGUh6bsM64AA= Subject key identifier: 13:14:E5:D8:06:A7:13:52:16:7D:28:81:BF:09:57:EC:E4:1C:1D:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A07D53C71C70DB75769A16810 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ae69ce2-4544-31e7-aafe-abe7adf953e7.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 396828 IP address blocks: 209.112.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:3c:71:c7:0d:b7:57:69:a1:68:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=a01e408c-5d05-448d-8fa3-4c79c02c7d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ad:b9:b6:39:f7:d2:f3:ac:62:2e:26:74:25: 77:32:5d:8a:8d:fa:e8:23:90:29:09:79:69:df:51: bc:45:75:8d:6c:94:45:9e:41:83:4f:44:2f:13:e6: 41:c4:30:84:80:b7:7b:94:00:ef:0f:e9:4b:1d:52: 78:87:2d:58:62:fc:d0:5a:e0:f3:1a:9e:57:48:d2: 76:29:9a:de:5a:1c:6d:c4:19:e6:82:58:f4:04:53: 44:b4:d9:20:02:d7:94:de:40:74:b7:45:11:20:13: 85:63:b3:f4:95:28:f2:5d:ac:22:01:8a:5c:60:92: 6a:36:2b:31:69:4f:81:3a:24:bb:81:b2:0e:f5:cd: cf:f1:d6:76:2a:0b:3a:dc:54:42:6e:28:c0:d0:cb: f9:ff:96:1f:b8:1a:89:da:67:04:55:6f:13:3c:5c: 59:32:64:8a:5e:7c:eb:0f:be:82:f5:a1:cc:f0:84: 55:71:d1:d1:58:91:29:9d:be:a6:22:3c:64:af:e8: 66:91:50:42:93:f1:fc:f8:34:2d:70:ac:e2:38:77: 29:e2:a0:0d:11:34:57:67:3d:7a:55:40:46:9b:03: fa:ad:3f:19:b2:ba:f8:64:1b:2d:5e:d6:35:1f:ea: b7:cc:a1:35:1c:52:78:e6:5d:30:4b:d9:bb:3c:96: 5b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:14:E5:D8:06:A7:13:52:16:7D:28:81:BF:09:57:EC:E4:1C:1D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ae69ce2-4544-31e7-aafe-abe7adf953e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:5e:cf:90:62:a4:d8:e6:ef:e2:86:06:c9:5c:a0:cb:f6:98: fd:59:37:89:c9:61:25:2b:88:ff:52:29:b4:66:55:84:20:ef: ef:9d:0d:57:23:ce:a6:f6:c9:f1:e4:d9:20:80:a6:bc:9a:a7: 60:70:58:bd:80:c5:bc:d6:93:ea:32:15:ca:d3:a2:20:1e:f3: f8:39:ac:e0:2a:72:f8:92:f1:49:09:ff:e8:a1:7d:12:cb:b9: 7a:de:6c:b5:1f:a4:8f:3c:1e:01:52:d6:15:c7:c0:9f:d5:35: 25:e4:34:76:51:e0:7f:60:6b:be:1c:84:5b:0a:90:06:5a:26: 1b:87:b5:b3:8b:c5:ef:8d:2a:70:d4:be:a5:69:f3:db:71:b5: 2a:49:f1:72:98:60:6a:37:48:6d:4d:a7:b5:07:8a:12:cf:20: 60:be:f9:6e:b4:52:f3:60:7a:a3:44:d2:22:1e:44:d5:39:9e: a2:56:da:b0:89:9f:6c:c3:5d:d1:ee:a6:3e:ae:e8:79:23:71: ac:7e:e8:50:ea:d7:50:c2:56:ce:cf:32:d2:7e:16:62:e2:e7: 96:08:6d:cd:66:ac:30:37:05:1b:d3:f5:b8:2b:36:94:32:18: 00:85:27:e1:9b:35:95:de:ea:35:e1:df:3f:94:61:f0:d9:f3: 1f:fe:d3:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1Txxxw23V2mhaBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk YTAxZTQwOGMtNWQwNS00NDhkLThmYTMtNGM3OWMwMmM3ZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq25tjn30vOsYi4mdCV3Ml2KjfroI5ApCXlp 31G8RXWNbJRFnkGDT0QvE+ZBxDCEgLd7lADvD+lLHVJ4hy1YYvzQWuDzGp5XSNJ2 KZreWhxtxBnmglj0BFNEtNkgAteU3kB0t0URIBOFY7P0lSjyXawiAYpcYJJqNisx aU+BOiS7gbIO9c3P8dZ2Kgs63FRCbijA0Mv5/5YfuBqJ2mcEVW8TPFxZMmSKXnzr D76C9aHM8IRVcdHRWJEpnb6mIjxkr+hmkVBCk/H8+DQtcKziOHcp4qANETRXZz16 VUBGmwP6rT8Zsrr4ZBstXtY1H+q3zKE1HFJ45l0wS9m7PJZbwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMU5dgGpxNSFn0ogb8JV+zkHB2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmFlNjljZTItNDU0NC0z MWU3LWFhZmUtYWJlN2FkZjk1M2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdez5BipNjm7+KGBslcoMv2mP1ZN4nJYSUriP9SKbRmVYQg7++dDVcj zqb2yfHk2SCApryap2BwWL2AxbzWk+oyFcrToiAe8/g5rOAqcviS8UkJ/+ihfRLL uXrebLUfpI88HgFS1hXHwJ/VNSXkNHZR4H9ga74chFsKkAZaJhuHtbOLxe+NKnDU vqVp89txtSpJ8XKYYGo3SG1Np7UHihLPIGC++W60UvNgeqNE0iIeRNU5nqJW2rCJ n2zDXdHupj6u6Hkjcax+6FDq11DCVs7PMtJ+FmLi55YIbc1mrDA3BRvT9bgrNpQy GACFJ+GbNZXe6jXh3z+UYfDZ8x/+02w= -----END CERTIFICATE-----Generated at Sun Jun 15 23:33:18 2025 by rpki-client