$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa File: 2c11259a-f9d0-312c-a546-57c810ca6a5b.roa (raw, json) Hash identifier: kvBPvN5hMJ4AGKyzayiXa8BM9Kfqn6w8o/LTs47XgO4= Subject key identifier: 06:F2:70:7A:A2:C9:CA:02:91:68:F0:2E:BE:8A:EB:1A:A3:CE:F8:82 Certificate issuer: /CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Certificate serial: 010D0C9F4328584A6DBB432A673496E64B181E00 Authority key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 27425 IP address blocks: 209.137.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:43:2a:67:34:96:e6:4b:18:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=2bea4d8d-01b9-4dc5-9439-b7c7a442a111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:51:74:f4:e3:27:45:e3:e8:29:e2:9d:0f:8e: 0f:02:e7:c4:0e:7d:25:35:c0:fc:d4:e2:9d:e8:a6: 61:fb:ca:53:73:25:26:55:27:de:2d:18:fd:9f:67: bb:5e:4c:ef:de:11:68:67:6a:24:30:79:22:60:d9: bf:24:74:91:04:e4:8c:5f:86:f5:f7:6a:ce:c6:f8: e8:19:f9:1a:98:65:63:26:42:42:f5:dd:cc:44:da: de:f1:35:40:21:c7:08:ff:9c:7a:aa:ce:7f:78:46: d8:a9:fc:b0:78:5b:9a:6f:91:4e:2e:b8:88:cc:12: fe:f7:0c:2f:d8:b2:00:63:4f:d1:eb:41:59:2e:05: b6:5f:a8:de:6b:42:47:2d:27:8d:02:14:3e:54:38: d6:6d:e8:ca:d8:62:39:58:bd:8b:ca:3d:39:78:15: fb:3f:4c:e3:7f:5b:87:80:d4:ce:db:fd:fa:40:51: c3:72:28:a4:3b:96:28:f5:9e:3f:a4:7a:10:f2:dd: ca:68:f8:8e:9c:8d:03:a1:6d:16:53:c9:15:96:4f: 9e:2d:1f:f3:66:e1:72:c2:23:71:ed:e9:cf:86:43: a1:e1:ec:08:71:c5:ab:5e:e1:d7:68:cb:75:c4:aa: 51:04:c5:d0:b0:1c:b5:71:56:60:64:85:40:b7:13: 3c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F2:70:7A:A2:C9:CA:02:91:68:F0:2E:BE:8A:EB:1A:A3:CE:F8:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl X509v3 Authority Key Identifier: keyid:CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer sbgp-ipAddrBlock: critical IPv4: 209.137.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:91:1a:bf:bc:bf:7d:14:e8:3e:28:67:b5:0e:f3:05:08:c8: 17:c6:b4:78:12:72:9b:66:94:82:69:58:6f:8f:e0:62:7b:57: 74:49:78:37:09:55:85:83:fb:5f:82:ba:3f:d8:4b:07:a5:68: 0e:59:9e:ec:ff:09:9b:3c:18:32:99:2c:8d:9a:6e:ee:5d:f6: 24:82:17:13:c3:2f:58:16:dd:6d:27:f2:fd:0c:c8:f9:a9:f2: 53:ef:00:18:6a:32:38:46:be:fc:ed:70:a6:26:25:0c:14:66: 8b:23:11:0c:a1:17:8a:45:5b:92:7c:a0:11:91:51:53:78:20: a9:ac:86:59:93:02:f1:40:4e:e4:cf:34:44:90:24:e9:45:6f: 02:bc:09:fe:38:26:eb:a4:39:74:f5:fa:f0:34:7d:54:69:fb: 1e:20:e8:90:ef:b3:5e:81:f2:52:09:ba:30:e2:aa:65:45:86: 67:c5:bf:ac:be:36:a8:83:48:1d:a3:9f:3a:af:3d:8c:d2:2b: 07:dd:4e:03:84:4e:76:b7:6b:68:d5:26:ba:e9:32:1d:57:af: 5c:c9:1d:f2:70:c0:66:e0:8d:6f:5e:c1:87:a1:60:6f:bd:8a: fe:46:81:58:87:98:78:9d:04:29:51:12:39:a7:aa:97:81:99: dd:21:95:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0MqZzSW5ksYHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI3OWRkZjgtM2U2Ni00NWNmLTg5NTUtNDUyZmJlNjUy YzBjMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk MmJlYTRkOGQtMDFiOS00ZGM1LTk0MzktYjdjN2E0NDJhMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+1F09OMnRePoKeKdD44PAufEDn0lNcD81OKd 6KZh+8pTcyUmVSfeLRj9n2e7Xkzv3hFoZ2okMHkiYNm/JHSRBOSMX4b192rOxvjo GfkamGVjJkJC9d3MRNre8TVAIccI/5x6qs5/eEbYqfyweFuab5FOLriIzBL+9wwv 2LIAY0/R60FZLgW2X6jea0JHLSeNAhQ+VDjWbejK2GI5WL2Lyj05eBX7P0zjf1uH gNTO2/36QFHDciikO5Yo9Z4/pHoQ8t3KaPiOnI0DoW0WU8kVlk+eLR/zZuFywiNx 7enPhkOh4ewIccWrXuHXaMt1xKpRBMXQsBy1cVZgZIVAtxM8XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbycHqiycoCkWjwLr6K6xqjzviCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Mjc5 ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2NTJjMGMvMmMxMTI1OWEtZjlkMC0z MTJjLWE1NDYtNTdjODEwY2E2YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDI3OWRkZjgtM2U2Ni00NWNmLTg5 NTUtNDUyZmJlNjUyYzBjLzQyNzlkZGY4LTNlNjYtNDVjZi04OTU1LTQ1MmZiZTY1 MmMwYy5jcmwwHwYDVR0jBBgwFoAUyqJkG6e3TH6KYINPDkK7eKRQ8IQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJm YmU2NTJjMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2RGr+8v30U6D4oZ7UO8wUIyBfGtHgScptmlIJpWG+P4GJ7V3RJeDcJ VYWD+1+Cuj/YSwelaA5Znuz/CZs8GDKZLI2abu5d9iSCFxPDL1gW3W0n8v0MyPmp 8lPvABhqMjhGvvztcKYmJQwUZosjEQyhF4pFW5J8oBGRUVN4IKmshlmTAvFATuTP NESQJOlFbwK8Cf44JuukOXT1+vA0fVRp+x4g6JDvs16B8lIJujDiqmVFhmfFv6y+ NqiDSB2jnzqvPYzSKwfdTgOETna3a2jVJrrpMh1Xr1zJHfJwwGbgjW9ewYehYG+9 iv5GgViHmHidBClREjmnqpeBmd0hlbs= -----END CERTIFICATE-----Generated at Wed Aug 6 04:10:36 2025 by rpki-client