$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/ffdaae2c-6641-3649-a249-97918224c1cd.roa File: ffdaae2c-6641-3649-a249-97918224c1cd.roa (raw, json) Hash identifier: O4D7DWG9FUK7GVXKhWV2qxic2+yT6C0FaVVumoE3Ox8= Subject key identifier: 65:3F:CA:09:80:6A:8B:BF:67:2D:FA:FD:90:A8:70:55:79:CB:1D:9C Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584A10353A7ADD050CAC7187E280 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/ffdaae2c-6641-3649-a249-97918224c1cd.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 13213 IP address blocks: 209.236.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:3a:7a:dd:05:0c:ac:71:87:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=f27ca660-2c49-46b0-9b0b-224e337df2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8b:b8:1d:26:85:45:79:01:14:9f:d9:d4:d7: 40:fe:d4:7d:ac:4a:f4:3b:30:3c:33:26:e0:30:55: 50:cf:c9:c7:a4:a8:85:df:2f:ed:05:b0:82:d4:fc: a7:79:20:54:16:66:71:e0:b4:31:ea:72:b9:5b:39: c8:40:47:53:78:5a:83:6d:c4:77:cf:a6:87:bd:6d: cb:b5:9b:62:a0:78:b0:a4:ef:f3:68:36:d4:c3:75: 1f:fb:b4:1a:8c:23:f0:87:cc:25:b2:42:91:a7:c9: 95:96:65:46:12:a4:39:09:4a:70:90:81:51:d4:0e: 4b:a0:cd:07:a6:50:e6:19:a8:d8:e6:82:41:a9:13: ec:fa:c1:67:94:df:a7:21:98:87:08:2b:88:2c:f9: 74:2c:76:c6:91:b8:ad:a2:1a:d6:f4:14:c4:bc:49: 70:8f:35:0b:10:ab:88:99:39:ff:cc:e8:c2:d6:dd: 39:ba:e6:d9:6d:4c:59:17:0e:70:25:56:5f:91:11: e5:ad:0b:68:bf:0c:2c:96:24:74:d9:8f:2a:c5:55: 95:a2:b1:e0:e4:ca:d3:2e:e1:1b:80:9a:97:d8:99: 55:7f:3f:b4:a4:6a:cd:86:51:31:95:05:be:ed:22: 6f:c0:76:54:86:a5:f7:f4:4f:63:26:46:4d:d3:97: 4a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3F:CA:09:80:6A:8B:BF:67:2D:FA:FD:90:A8:70:55:79:CB:1D:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/ffdaae2c-6641-3649-a249-97918224c1cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:72:19:03:de:85:2e:9b:42:d1:a4:1a:e5:2b:c9:73:cb:74: e7:46:ac:2e:19:f3:6d:ef:31:e1:0b:40:7b:64:a9:c1:fa:19: 9f:b6:4d:71:74:4f:cb:42:96:ef:6b:19:dc:32:54:d4:1b:a1: f1:0d:0c:b7:78:c8:40:33:13:0a:ef:16:c6:42:99:ae:e7:e4: e2:e6:37:30:86:4d:ce:4d:86:5e:37:6f:3d:24:6b:a8:de:0d: 8f:d6:be:06:3a:ff:6a:7d:54:7f:47:3f:a8:cd:a3:12:23:3c: a6:b0:a1:9b:37:94:c0:d9:78:99:fb:81:79:98:dd:a5:57:47: 04:30:74:46:17:cc:cd:4b:71:8a:ef:ff:ab:de:3e:87:65:08: f0:34:ac:3e:4e:1a:e1:4f:9a:9d:17:79:38:5a:8b:e9:1c:8c: d3:66:c7:71:be:82:b2:d2:ab:db:9f:40:72:de:b3:4b:7b:54: 0c:4e:64:ca:6a:51:b2:1e:b9:24:6f:4c:7b:ea:fb:fc:f8:09: d0:29:20:7e:d9:ef:fa:4d:0d:15:ca:cb:c8:dd:15:7d:2d:c7: 7f:7b:fe:d4:a2:6d:e3:23:ea:0b:10:86:ce:cf:57:32:19:b7: ad:59:30:f7:ba:6c:70:03:51:5d:d9:90:22:7c:4c:d2:a6:b2: 5e:53:b9:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTp63QUMrHGH4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ZjI3Y2E2NjAtMmM0OS00NmIwLTliMGItMjI0ZTMzN2RmMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYu4HSaFRXkBFJ/Z1NdA/tR9rEr0OzA8Mybg MFVQz8nHpKiF3y/tBbCC1PyneSBUFmZx4LQx6nK5WznIQEdTeFqDbcR3z6aHvW3L tZtioHiwpO/zaDbUw3Uf+7QajCPwh8wlskKRp8mVlmVGEqQ5CUpwkIFR1A5LoM0H plDmGajY5oJBqRPs+sFnlN+nIZiHCCuILPl0LHbGkbitohrW9BTEvElwjzULEKuI mTn/zOjC1t05uubZbUxZFw5wJVZfkRHlrQtovwwsliR02Y8qxVWVorHg5MrTLuEb gJqX2JlVfz+0pGrNhlExlQW+7SJvwHZUhqX39E9jJkZN05dKRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU/ygmAaou/Zy36/ZCocFV5yx2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZmZkYWFlMmMtNjY0MS0z NjQ5LWEyNDktOTc5MTgyMjRjMWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0exEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZyGQPehS6bQtGkGuUryXPLdOdGrC4Z823vMeELQHtkqcH6GZ+2TXF0 T8tClu9rGdwyVNQbofENDLd4yEAzEwrvFsZCma7n5OLmNzCGTc5Nhl43bz0ka6je DY/WvgY6/2p9VH9HP6jNoxIjPKawoZs3lMDZeJn7gXmY3aVXRwQwdEYXzM1LcYrv /6vePodlCPA0rD5OGuFPmp0XeThai+kcjNNmx3G+grLSq9ufQHLes0t7VAxOZMpq UbIeuSRvTHvq+/z4CdApIH7Z7/pNDRXKy8jdFX0tx397/tSibeMj6gsQhs7PVzIZ t61ZMPe6bHADUV3ZkCJ8TNKmsl5TucU= -----END CERTIFICATE-----Generated at Sun Jun 15 13:19:11 2025 by rpki-client