$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/949b4d0e-326e-3bba-8a22-f9d6056bf712.roa File: 949b4d0e-326e-3bba-8a22-f9d6056bf712.roa (raw, json) Hash identifier: Bc5sEdreSbWAvgU3gOSinculcEv2OoShnu2MZY2IdQ4= Subject key identifier: 80:42:06:49:29:ED:94:CC:59:04:B0:84:EF:BC:3D:7B:72:32:39:A9 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584A1B5FF7DEAAA53337575E8E00 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/949b4d0e-326e-3bba-8a22-f9d6056bf712.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 62856 IP address blocks: 209.112.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f7:de:aa:a5:33:37:57:5e:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=5b86d197-22c3-485f-ab39-0e8f427e4828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e9:60:91:77:fa:07:f2:0f:a4:c8:d1:e2:40: 08:18:9b:c7:86:75:6a:8e:27:3b:50:c1:5e:2a:7d: bf:0f:86:c7:cc:cc:50:3c:30:9b:77:fa:d9:d0:a5: 31:fd:29:1a:66:1e:1f:08:41:89:48:b6:de:13:4b: 66:04:eb:f2:03:8c:f6:ab:04:48:bc:c3:3e:87:a5: c9:e0:bf:97:af:d9:de:a3:c3:3b:f9:e5:da:92:75: fa:6f:23:c0:77:98:21:5e:fd:b8:03:62:4d:8d:87: 38:b6:46:19:14:05:5d:4b:a4:cb:47:96:f1:c6:15: ae:11:ee:16:bd:c3:76:c9:83:43:2e:3d:d8:c4:1a: 58:90:d0:38:ec:11:86:55:f9:58:6e:6b:99:f7:bf: 44:69:f0:85:c9:fe:cb:b3:17:10:b4:76:de:44:ee: 2d:64:09:dc:57:a5:aa:2d:99:b9:96:9b:67:d2:dd: e4:e8:2e:54:ab:90:cf:7e:d9:e6:10:0a:d5:e8:96: 50:2b:bb:c5:26:9a:c4:70:8d:3b:99:1f:6a:01:62: 6e:f8:40:51:86:1a:41:dd:40:19:46:9f:d7:b8:c3: 7c:36:d2:aa:ad:51:79:de:ca:58:02:df:a5:d2:c4: 2c:be:76:03:8f:3f:07:da:a0:9b:c0:30:b0:35:72: 1a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:42:06:49:29:ED:94:CC:59:04:B0:84:EF:BC:3D:7B:72:32:39:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/949b4d0e-326e-3bba-8a22-f9d6056bf712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 209.112.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:23:ac:5f:db:92:1b:44:dd:97:6f:b7:a7:ca:24:10:92:9f: ad:d9:11:bf:6e:bb:f1:bf:cc:37:25:e2:2a:b5:7b:eb:df:3f: be:44:30:95:6a:ce:00:bc:47:e6:b8:f7:20:91:69:ed:4e:86: da:d1:9f:41:9e:a2:42:c8:ae:ab:32:2d:8d:6f:e8:b4:a7:4e: 3f:5c:72:bb:8e:57:b8:76:00:e2:c1:4a:2e:2e:11:3c:16:f4: f1:82:8b:81:1a:e4:72:9f:62:4f:9e:c8:1c:01:bc:3a:6e:54: 38:7e:2a:d4:d7:c5:72:f9:fb:ff:e8:90:44:98:3d:ba:b9:b6: a6:64:8d:32:77:3c:46:65:c4:25:49:6f:d4:4f:c1:71:2b:2f: c5:25:c1:4c:32:a0:2b:98:d6:24:3b:35:fe:67:7e:5e:f7:a4: e7:73:1c:f9:99:b5:56:67:13:91:d5:6e:8a:ca:86:0d:46:09: e0:d4:30:ba:b9:5d:4d:ba:d1:87:d7:88:4f:39:58:72:b4:63: f9:cc:3a:96:7b:ca:c3:d6:32:a5:01:cd:83:29:0d:0f:f5:6b: 8a:d1:81:f9:b9:3b:70:c9:7c:a6:61:63:9e:85:cc:d6:46:72: 92:c5:48:b8:23:7a:e3:ee:ce:a4:41:84:ce:3d:e1:7e:5b:72: 13:63:aa:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/feqqUzN1dejgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NWI4NmQxOTctMjJjMy00ODVmLWFiMzktMGU4ZjQyN2U0ODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+lgkXf6B/IPpMjR4kAIGJvHhnVqjic7UMFe Kn2/D4bHzMxQPDCbd/rZ0KUx/SkaZh4fCEGJSLbeE0tmBOvyA4z2qwRIvMM+h6XJ 4L+Xr9neo8M7+eXaknX6byPAd5ghXv24A2JNjYc4tkYZFAVdS6TLR5bxxhWuEe4W vcN2yYNDLj3YxBpYkNA47BGGVflYbmuZ979EafCFyf7LsxcQtHbeRO4tZAncV6Wq LZm5lptn0t3k6C5Uq5DPftnmEArV6JZQK7vFJprEcI07mR9qAWJu+EBRhhpB3UAZ Rp/XuMN8NtKqrVF53spYAt+l0sQsvnYDjz8H2qCbwDCwNXIaiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBCBkkp7ZTMWQSwhO+8PXtyMjmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvOTQ5YjRkMGUtMzI2ZS0z YmJhLThhMjItZjlkNjA1NmJmNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsjrF/bkhtE3Zdvt6fKJBCSn63ZEb9uu/G/zDcl4iq1e+vfP75EMJVq zgC8R+a49yCRae1OhtrRn0GeokLIrqsyLY1v6LSnTj9ccruOV7h2AOLBSi4uETwW 9PGCi4Ea5HKfYk+eyBwBvDpuVDh+KtTXxXL5+//okESYPbq5tqZkjTJ3PEZlxCVJ b9RPwXErL8UlwUwyoCuY1iQ7Nf5nfl73pOdzHPmZtVZnE5HVborKhg1GCeDUMLq5 XU260YfXiE85WHK0Y/nMOpZ7ysPWMqUBzYMpDQ/1a4rRgfm5O3DJfKZhY56FzNZG cpLFSLgjeuPuzqRBhM494X5bchNjqng= -----END CERTIFICATE-----Generated at Mon Jun 16 02:37:03 2025 by rpki-client