$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa File: 0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa (raw, json) Hash identifier: ElgjHW8I2DM1DUZ1oBLjTwTp1hsAebRLv00ThsRqLHs= Subject key identifier: 53:5D:9F:4B:7E:18:43:61:C8:39:79:29:37:0A:90:CD:20:2D:5D:0F Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584A2C2014250C08CF291E089F80 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 13414 IP address blocks: 209.237.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:14:25:0c:08:cf:29:1e:08:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=44037f39-d1ae-428b-b70e-3c2becc6cc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:77:33:62:bc:87:a9:b5:7d:3a:e3:b2:22:b5: bf:15:42:ec:24:bc:40:fb:8c:8f:11:92:98:7a:10: 78:f9:92:43:05:19:0a:61:04:73:b9:f6:5d:7d:e8: 19:13:8b:a7:92:22:b7:fa:2c:cc:87:ce:73:2f:bf: 2e:59:93:f1:ac:df:b4:a5:7e:24:eb:d4:e1:99:f7: 10:99:f6:4a:bb:c0:ed:e7:40:a9:61:54:94:58:8c: df:1b:9b:20:70:b4:ad:53:1a:5a:2e:da:35:20:a4: fa:dd:0b:bf:f0:30:2c:48:04:53:93:a0:42:df:ea: ed:be:02:c1:cc:06:ba:b8:4d:16:ab:ea:be:34:50: cc:a2:5a:a1:db:ba:eb:0c:e5:2e:ac:74:9a:5a:1b: 81:cd:b3:51:e2:0b:43:d2:6c:b7:09:07:de:af:19: 39:ad:a9:10:7b:cb:74:f9:29:b6:3d:c3:b9:3b:02: 9a:ff:9d:4f:aa:68:df:af:39:d0:5e:a1:1e:b5:55: a6:70:50:c4:e4:4f:bf:fa:2b:fe:2e:47:55:09:f0: f3:1d:71:40:e0:37:7f:af:1c:f8:40:43:13:d0:32: 5d:d8:a0:85:2c:b1:3b:16:77:e3:f5:20:d3:eb:c9: 5b:1a:46:98:08:d7:77:15:35:e8:c1:76:44:d1:6c: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5D:9F:4B:7E:18:43:61:C8:39:79:29:37:0A:90:CD:20:2D:5D:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:9e:a7:26:39:f8:c8:cd:11:6b:ef:2b:74:9d:9c:3c:4a:df: d4:ce:8f:94:8e:c0:5c:b4:6e:cd:22:82:76:7f:2d:dc:89:34: 28:68:ed:a4:10:12:dd:37:7b:f9:b0:24:05:da:8b:f2:71:52: 54:55:d7:3f:ff:74:47:99:46:f9:bc:90:e4:0a:39:04:92:13: ca:19:2e:13:cb:c2:c1:65:40:3e:18:5a:af:3d:c9:cf:b7:ea: 1c:b0:4b:16:f5:66:8d:c3:0a:7c:d2:8c:04:8b:0d:c0:01:fe: 08:7a:2b:ab:62:95:bb:6f:65:29:f8:0d:66:29:17:e4:f7:f1: b8:20:a8:25:49:51:98:d9:3c:dd:17:9f:09:ca:a6:99:c0:d7: 2d:7e:b2:71:3a:f4:8a:43:a4:02:7b:29:30:07:fb:66:10:3a: 93:e6:0d:3e:20:df:77:65:77:c8:a0:65:a0:bc:fd:ae:9a:8c: a0:0f:e6:92:47:4a:a1:c6:93:8d:a6:b5:8a:e5:3a:e5:27:5d: 4f:a7:43:93:ef:e3:b4:f2:0c:a0:25:ff:cd:31:dd:d7:ee:6e: 50:f2:62:b4:6f:93:56:2f:c9:df:54:40:ee:d2:ab:df:58:98: f7:4d:b7:07:0f:79:47:ff:b8:fc:5d:ab:3d:7a:b7:d5:0c:43: d0:20:26:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBQlDAjPKR4In4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk NDQwMzdmMzktZDFhZS00MjhiLWI3MGUtM2MyYmVjYzZjYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinczYryHqbV9OuOyIrW/FULsJLxA+4yPEZKY ehB4+ZJDBRkKYQRzufZdfegZE4unkiK3+izMh85zL78uWZPxrN+0pX4k69ThmfcQ mfZKu8Dt50CpYVSUWIzfG5sgcLStUxpaLto1IKT63Qu/8DAsSARTk6BC3+rtvgLB zAa6uE0Wq+q+NFDMolqh27rrDOUurHSaWhuBzbNR4gtD0my3CQferxk5rakQe8t0 +Sm2PcO5OwKa/51PqmjfrznQXqEetVWmcFDE5E+/+iv+LkdVCfDzHXFA4Dd/rxz4 QEMT0DJd2KCFLLE7Fnfj9SDT68lbGkaYCNd3FTXowXZE0WzqkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNdn0t+GENhyDl5KTcKkM0gLV0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMGZhMjU2NDgtZDlhMS0z Yzk0LTllNjYtM2I4MzQ3ZTlmNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmepyY5+MjNEWvvK3SdnDxK39TOj5SOwFy0bs0ignZ/LdyJNCho7aQQ Et03e/mwJAXai/JxUlRV1z//dEeZRvm8kOQKOQSSE8oZLhPLwsFlQD4YWq89yc+3 6hywSxb1Zo3DCnzSjASLDcAB/gh6K6tilbtvZSn4DWYpF+T38bggqCVJUZjZPN0X nwnKppnA1y1+snE69IpDpAJ7KTAH+2YQOpPmDT4g33dld8igZaC8/a6ajKAP5pJH SqHGk42mtYrlOuUnXU+nQ5Pv47TyDKAl/80x3dfublDyYrRvk1Yvyd9UQO7Sq99Y mPdNtwcPeUf/uPxdqz16t9UMQ9AgJr4= -----END CERTIFICATE-----Generated at Tue Jun 17 11:08:22 2025 by rpki-client