$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa File: de5b00f2-cadd-3f54-97b7-032b7ca57259.roa (raw, json) Hash identifier: 6xflNfSWtTiA9adIAB62yA9stMjq0ocnbLL4rIegjms= Subject key identifier: DE:6D:A8:C4:02:69:DC:01:AE:6E:46:9B:C7:51:0D:00:E9:E3:78:1C Certificate issuer: /CN=237e8029-86f4-41b0-ab75-535531b02fb3 Certificate serial: 010D0C9F4328584A77808F465C403A6FED0E7780 Authority key identifier: F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 30713 IP address blocks: 209.221.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8f:46:5c:40:3a:6f:ed:0e:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237e8029-86f4-41b0-ab75-535531b02fb3 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=8d8e5eb9-ccf9-4446-b797-7918bb99a55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c4:94:f5:83:cc:9c:37:a3:88:90:35:e9:e5: 26:49:c0:46:a0:20:b0:d4:3a:bc:82:94:02:57:f7: 13:91:25:ba:37:e8:23:f5:80:32:88:ef:44:c0:02: 25:cd:99:94:7c:98:c0:f9:65:81:a6:0d:d9:06:54: ec:07:55:47:43:78:a8:df:9a:41:87:b4:ca:70:f8: 0b:03:d7:79:86:88:23:3d:c3:02:a9:91:82:4a:2c: 35:5b:ac:6f:be:39:2f:30:81:81:9b:31:e0:31:54: 3c:5a:25:03:2f:d6:7a:0e:00:c7:37:67:5a:08:76: 70:72:e5:6b:9c:77:ba:ce:1b:7c:06:3a:97:9f:13: 4a:a6:17:5b:e0:1d:e0:ee:d2:11:c6:3b:77:98:8e: e1:8d:3a:46:dc:66:14:be:a3:f2:4b:69:d2:2d:d0: 13:ac:cb:0e:3b:7f:ab:2d:a9:d8:86:e8:06:e1:7e: d1:15:b0:d9:46:92:9b:5a:2d:d6:f9:9b:02:4a:2d: 3c:94:ef:c0:5b:45:75:c0:e4:b7:9c:d4:af:6f:42: f7:4d:86:75:db:53:09:38:6e:99:48:6f:ff:a6:cd: dc:ef:e4:4f:e7:d9:9c:8d:21:c6:fa:ee:2c:b5:47: 3d:a6:18:aa:02:49:2f:9e:2b:24:a4:38:35:58:50: ee:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6D:A8:C4:02:69:DC:01:AE:6E:46:9B:C7:51:0D:00:E9:E3:78:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.crl X509v3 Authority Key Identifier: keyid:F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer sbgp-ipAddrBlock: critical IPv4: 209.221.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f6:64:31:92:c0:a7:ce:f7:42:aa:ea:6c:4a:d8:25:7b:c9: db:db:e1:9f:ce:dc:c1:48:fd:f0:06:c4:26:ab:d0:18:db:f3: 48:16:0b:6e:4d:44:d4:1e:17:b8:f1:89:c4:32:63:a2:e4:84: 94:e2:47:0e:0f:44:59:58:8a:70:91:1a:a5:ca:8d:01:c1:4d: 84:68:99:ad:38:d3:ec:10:a9:37:c1:a4:85:b4:2d:46:8c:73: 48:4d:b9:f3:ac:28:5a:ef:57:5f:40:6f:cd:4e:04:6c:01:bf: 57:e4:94:c4:03:03:e9:74:d5:65:61:09:0e:e4:c8:09:f4:73: 75:be:19:60:79:6e:bf:be:cc:a0:7e:79:b7:28:65:e4:37:70: 4a:7f:1d:29:a4:a0:0f:af:6e:80:54:ee:b4:c8:5e:0b:31:22: 5f:b9:86:14:16:ce:21:3a:cb:f8:93:67:da:fc:f7:87:5b:78: 4f:6c:a9:93:8a:cc:f4:09:00:11:68:03:82:cf:5a:05:59:ae: fa:55:0e:73:4c:63:6b:fe:55:6b:ad:88:6d:f9:87:2c:35:a4: 84:a8:ec:0d:c9:84:80:50:9b:64:4d:9e:ae:15:1c:b4:b3:f2: 73:4f:d7:c8:22:19:cd:10:d4:1c:fb:a3:68:a5:80:1d:b3:36: 27:ab:64:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gI9GXEA6b+0Od4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM3ZTgwMjktODZmNC00MWIwLWFiNzUtNTM1NTMxYjAy ZmIzMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk OGQ4ZTVlYjktY2NmOS00NDQ2LWI3OTctNzkxOGJiOTlhNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98SU9YPMnDejiJA16eUmScBGoCCw1Dq8gpQC V/cTkSW6N+gj9YAyiO9EwAIlzZmUfJjA+WWBpg3ZBlTsB1VHQ3io35pBh7TKcPgL A9d5hogjPcMCqZGCSiw1W6xvvjkvMIGBmzHgMVQ8WiUDL9Z6DgDHN2daCHZwcuVr nHe6zht8BjqXnxNKphdb4B3g7tIRxjt3mI7hjTpG3GYUvqPyS2nSLdATrMsOO3+r LanYhugG4X7RFbDZRpKbWi3W+ZsCSi08lO/AW0V1wOS3nNSvb0L3TYZ121MJOG6Z SG//ps3c7+RP59mcjSHG+u4stUc9phiqAkkvniskpDg1WFDuGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5tqMQCadwBrm5Gm8dRDQDp43gcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMzdl ODAyOS04NmY0LTQxYjAtYWI3NS01MzU1MzFiMDJmYjMvZGU1YjAwZjItY2FkZC0z ZjU0LTk3YjctMDMyYjdjYTU3MjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjM3ZTgwMjktODZmNC00MWIwLWFi NzUtNTM1NTMxYjAyZmIzLzIzN2U4MDI5LTg2ZjQtNDFiMC1hYjc1LTUzNTUzMWIw MmZiMy5jcmwwHwYDVR0jBBgwFoAU+DIqtLA1wtaj1Oyjs3YcFK6ra3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMzdlODAyOS04NmY0LTQxYjAtYWI3NS01MzU1 MzFiMDJmYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0d1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD32ZDGSwKfO90Kq6mxK2CV7ydvb4Z/O3MFI/fAGxCar0Bjb80gWC25N RNQeF7jxicQyY6LkhJTiRw4PRFlYinCRGqXKjQHBTYRoma040+wQqTfBpIW0LUaM c0hNufOsKFrvV19Ab81OBGwBv1fklMQDA+l01WVhCQ7kyAn0c3W+GWB5br++zKB+ ebcoZeQ3cEp/HSmkoA+vboBU7rTIXgsxIl+5hhQWziE6y/iTZ9r894dbeE9sqZOK zPQJABFoA4LPWgVZrvpVDnNMY2v+VWutiG35hyw1pISo7A3JhIBQm2RNnq4VHLSz 8nNP18giGc0Q1Bz7o2ilgB2zNierZMU= -----END CERTIFICATE-----Generated at Sat Aug 9 20:41:27 2025 by rpki-client