$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa File: a84baf16-04c5-3be6-b2ff-91936a207335.roa (raw, json) Hash identifier: 4kRZtn0NGI4pob7/9Y8dvfabUaPuROhJyuFPtwEoJ/o= Subject key identifier: E8:C4:85:0A:7A:7F:67:92:D1:72:FF:D3:76:AB:59:4A:A6:98:7F:6E Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584A7A4B4A9F63BC7F75B37BCB80 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 6079 IP address blocks: 209.250.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:4a:9f:63:bc:7f:75:b3:7b:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=6aaa6792-73f2-437b-ad4b-173bb012a0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:f1:ae:8e:fb:ff:a4:44:1f:e3:7a:f0:64: 9c:8f:81:7e:38:59:ed:5e:08:a5:fb:73:6c:89:6c: 71:ce:93:b8:8d:94:02:33:b7:e4:85:5b:e0:40:14: ca:78:a3:40:84:10:9d:84:7c:d4:d6:02:5f:16:c1: d4:7d:f8:bd:a7:de:68:91:24:a3:45:7a:89:e3:93: 0b:10:25:80:6d:ea:84:77:5b:b4:f1:9b:06:45:ac: 7b:07:56:81:b2:58:10:b1:aa:91:25:8d:a9:1f:ff: 39:91:d7:38:86:39:d3:11:76:ca:f2:08:9b:dd:b0: 2f:4a:14:22:78:d8:b9:9c:67:78:56:c0:b4:3c:4f: 50:ea:d9:08:47:54:4c:8d:30:14:e4:80:d8:e0:e2: bf:24:84:30:c3:d6:a7:c0:3d:3e:ce:07:71:09:11: a3:2a:c0:da:26:cc:4c:e4:f6:b2:ae:e7:35:c6:48: 19:a0:00:5f:14:24:23:a4:fe:3d:ca:74:1a:b5:df: 96:32:91:46:8a:47:dc:36:ee:2d:2c:06:3a:09:22: b3:77:3d:0a:a0:47:0a:9c:e0:57:95:76:d5:3b:82: be:53:a2:2a:3e:f1:24:a4:6d:cb:81:01:65:3e:22: bb:88:db:e0:a7:12:bf:20:fd:8e:c0:1a:1d:20:24: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C4:85:0A:7A:7F:67:92:D1:72:FF:D3:76:AB:59:4A:A6:98:7F:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e3:d1:41:df:43:1c:46:cb:b8:66:09:ee:1d:4e:18:a5:7a: dd:15:67:bf:36:09:ac:88:be:3b:76:44:b8:62:51:a6:10:af: f2:d7:de:9b:99:0a:c6:76:13:26:3e:4d:0f:61:a6:0f:e0:48: fc:7d:b5:1f:d1:be:db:63:ac:03:7a:70:d4:5e:af:54:36:39: 1a:de:59:37:db:92:03:33:58:18:ea:bd:55:fa:bd:dd:64:f8: 5e:76:f4:d4:92:41:17:ab:97:e5:8a:da:30:77:4b:c9:70:6d: b1:e4:d5:80:5b:38:72:15:6f:f3:dc:dd:72:14:27:f7:23:38: 9d:10:31:ac:ef:80:52:78:d9:da:2c:af:15:87:9a:f8:f3:07: bd:34:b7:67:e7:c0:59:2c:84:01:d8:99:87:54:02:6d:2c:20: f0:71:f9:ad:8d:06:e7:47:4c:3a:59:c3:27:a6:b9:61:83:6a: 90:53:dc:21:b3:4b:5d:30:83:f4:d1:63:1e:b0:a2:04:2e:3b: f4:bf:b6:bb:c4:83:d4:ee:cc:eb:2b:8f:1f:03:c2:c3:dd:f6: 5d:f7:d0:58:05:69:72:0c:0c:71:86:4b:d9:d2:84:e1:44:0f: b7:a4:7e:67:c1:8c:c1:a6:36:5c:49:80:df:79:01:0d:bc:e8: 67:0b:ec:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0qfY7x/dbN7y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NmFhYTY3OTItNzNmMi00MzdiLWFkNGItMTczYmIwMTJhMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxnxro77/6REH+N68GScj4F+OFntXgil+3Ns iWxxzpO4jZQCM7fkhVvgQBTKeKNAhBCdhHzU1gJfFsHUffi9p95okSSjRXqJ45ML ECWAbeqEd1u08ZsGRax7B1aBslgQsaqRJY2pH/85kdc4hjnTEXbK8gib3bAvShQi eNi5nGd4VsC0PE9Q6tkIR1RMjTAU5IDY4OK/JIQww9anwD0+zgdxCRGjKsDaJsxM 5Payruc1xkgZoABfFCQjpP49ynQatd+WMpFGikfcNu4tLAY6CSKzdz0KoEcKnOBX lXbVO4K+U6IqPvEkpG3LgQFlPiK7iNvgpxK/IP2OwBodICRZiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjEhQp6f2eS0XL/03arWUqmmH9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvYTg0YmFmMTYtMDRjNS0z YmU2LWIyZmYtOTE5MzZhMjA3MzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0foLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/j0UHfQxxGy7hmCe4dThilet0VZ782CayIvjt2RLhiUaYQr/LX3puZ CsZ2EyY+TQ9hpg/gSPx9tR/RvttjrAN6cNRer1Q2ORreWTfbkgMzWBjqvVX6vd1k +F529NSSQRerl+WK2jB3S8lwbbHk1YBbOHIVb/Pc3XIUJ/cjOJ0QMazvgFJ42dos rxWHmvjzB700t2fnwFkshAHYmYdUAm0sIPBx+a2NBudHTDpZwyemuWGDapBT3CGz S10wg/TRYx6wogQuO/S/trvEg9TuzOsrjx8DwsPd9l330FgFaXIMDHGGS9nShOFE D7ekfmfBjMGmNlxJgN95AQ286GcL7Ck= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:10 2025 by rpki-client