$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f6d7603a-e610-3284-b984-ead8840e61a0.roa File: f6d7603a-e610-3284-b984-ead8840e61a0.roa (raw, json) Hash identifier: ZwwmJ6PI3ala3Z5kGPCYo8I7FExleG0psY+BI2uyJUY= Subject key identifier: BB:33:4D:BA:DF:5A:A2:42:96:A2:D9:C2:98:AC:5D:0A:04:19:BF:CD Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285849DF5A774D71E6754D5CB59700 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f6d7603a-e610-3284-b984-ead8840e61a0.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 1351 IP address blocks: 209.198.99.64/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:77:4d:71:e6:75:4d:5c:b5:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=48f6ae34-b0a6-40b4-9f5c-3c9bf672e5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:00:0d:db:e2:a5:30:c2:ca:26:df:b3:71: 2c:df:1c:2a:33:f1:fd:65:3c:6d:3c:28:0a:06:a9: 9e:50:90:46:a4:5d:cf:ee:63:fa:96:51:f9:47:e9: 2f:2e:72:79:b9:05:5c:33:63:c3:87:40:ae:26:19: cc:21:13:14:a6:61:2b:81:3e:c8:c9:a6:1b:00:0f: d9:ee:b9:b1:92:6b:6b:24:85:4d:a6:6d:46:2a:f6: 49:c6:cd:c4:d9:96:42:47:80:81:c9:fa:26:5d:d9: 09:ed:2e:12:4e:0b:43:35:7d:ef:93:c7:77:c1:55: 7c:8a:3a:54:6d:2d:cc:2d:13:f9:b1:cb:48:01:09: 02:5f:18:c6:e0:4f:45:ed:79:b5:ed:48:74:fe:0a: 8c:a4:6e:d2:8b:09:b7:ad:ca:0c:61:e0:a1:3c:e6: 09:06:73:97:8c:48:32:51:98:2a:21:33:4d:39:7c: 1a:56:51:d4:2f:e1:89:ba:4a:68:92:69:9f:65:87: 30:cf:27:30:07:f6:dc:d2:50:dd:bf:4c:eb:06:22: df:d6:93:96:43:f0:99:2c:d5:ce:9a:e0:89:35:7c: 8b:24:21:8d:07:2b:91:52:0c:06:17:9f:d7:0b:29: 0e:49:d9:e4:a9:46:47:de:c8:c7:4a:9a:53:03:5c: 71:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:33:4D:BA:DF:5A:A2:42:96:A2:D9:C2:98:AC:5D:0A:04:19:BF:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f6d7603a-e610-3284-b984-ead8840e61a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 209.198.99.64/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:81:6d:c8:cd:e7:8f:45:aa:52:50:b7:1e:f1:58:0b:f0:81: c5:46:7e:26:25:a5:eb:5d:cd:a9:38:3c:5f:88:c5:bc:80:4e: 17:2b:6e:f1:99:93:07:ba:51:81:17:ab:aa:89:c1:f3:f6:9f: 5a:97:9f:a2:a7:f2:57:44:3b:8b:74:02:0c:43:ae:bb:2d:89: 8f:ad:5a:1b:e0:c8:22:b5:20:c0:a6:ff:29:2f:4e:04:74:af: e7:62:f9:32:c2:ee:5f:c3:7a:d1:d5:2d:8c:e8:7b:91:02:f6: d8:60:13:2d:65:ed:34:89:b6:ae:5e:2a:17:5a:5b:68:90:cd: 6b:4e:99:fc:3d:3a:53:9f:44:ab:c6:fb:7e:ca:ea:da:02:f3: f9:5e:05:c2:a7:f4:18:62:35:b4:1d:bc:9f:b4:88:43:cf:df: a7:00:24:78:31:b4:97:95:2a:ec:4a:53:1c:a4:e7:b5:72:1c: 3c:65:70:a7:18:50:ce:8b:fa:2d:ec:ff:f3:e0:b0:1d:e4:a7: 6b:cf:bd:47:c5:3d:dc:5e:19:79:88:24:f0:ff:da:70:65:10: d6:27:16:74:52:73:70:e0:c0:e5:73:a4:e5:79:6a:06:7e:36: 24:d5:b7:d3:b5:a7:da:fa:4e:d1:34:ed:b7:7a:53:fe:dc:8e: 67:08:a9:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnfWndNceZ1TVy1lwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NDhmNmFlMzQtYjBhNi00MGI0LTlmNWMtM2M5YmY2NzJlNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2AADdvipTDCyibfs3Es3xwqM/H9ZTxtPCgK BqmeUJBGpF3P7mP6llH5R+kvLnJ5uQVcM2PDh0CuJhnMIRMUpmErgT7IyaYbAA/Z 7rmxkmtrJIVNpm1GKvZJxs3E2ZZCR4CByfomXdkJ7S4STgtDNX3vk8d3wVV8ijpU bS3MLRP5sctIAQkCXxjG4E9F7Xm17Uh0/gqMpG7Siwm3rcoMYeChPOYJBnOXjEgy UZgqITNNOXwaVlHUL+GJukpokmmfZYcwzycwB/bc0lDdv0zrBiLf1pOWQ/CZLNXO muCJNXyLJCGNByuRUgwGF5/XCykOSdnkqUZH3sjHSppTA1xxhwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLszTbrfWqJClqLZwpisXQoEGb/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZjZkNzYwM2EtZTYxMC0z Mjg0LWI5ODQtZWFkODg0MGU2MWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0cZjQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDKgW3IzeePRapSULce8VgL8IHFRn4mJaXrXc2pODxfiMW8gE4XK27x mZMHulGBF6uqicHz9p9al5+ip/JXRDuLdAIMQ667LYmPrVob4MgitSDApv8pL04E dK/nYvkywu5fw3rR1S2M6HuRAvbYYBMtZe00ibauXioXWltokM1rTpn8PTpTn0Sr xvt+yuraAvP5XgXCp/QYYjW0HbyftIhDz9+nACR4MbSXlSrsSlMcpOe1chw8ZXCn GFDOi/ot7P/z4LAd5Kdrz71HxT3cXhl5iCTw/9pwZRDWJxZ0UnNw4MDlc6TleWoG fjYk1bfTtafa+k7RNO23elP+3I5nCKmE -----END CERTIFICATE-----Generated at Mon Jun 16 02:30:35 2025 by rpki-client