$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/425affcb-76e5-3a31-a4b4-69a7299a8e5b.roa File: 425affcb-76e5-3a31-a4b4-69a7299a8e5b.roa (raw, json) Hash identifier: JRjBgxYP8k/jkIpDGKhA/P15I/R52CvoFXWVT461eJU= Subject key identifier: 37:E5:97:75:FC:88:95:A0:5E:64:EB:18:AE:98:94:99:AD:C1:F4:EB Certificate issuer: /CN=a278da28-82b3-48fe-bc76-7859a82f5651 Certificate serial: 010D0C9F4328584A0C057878475793D0744F4880 Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/425affcb-76e5-3a31-a4b4-69a7299a8e5b.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 38082 IP address blocks: 209.209.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:78:78:47:57:93:d0:74:4f:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=5075fbd8-79ee-48ac-96fa-360a42717b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:28:23:15:51:f5:bc:93:d7:73:72:36:c9:3d: 87:ff:f2:67:a1:26:c4:24:10:da:5d:88:0c:c8:b6: c1:f8:36:db:e8:ce:6e:9c:de:a0:b8:24:8c:25:ae: d3:90:02:29:4c:83:b0:43:0b:04:68:f5:4f:79:5e: db:c6:fd:f9:0b:01:e8:59:6d:94:19:50:17:f3:d9: c7:bb:cf:7e:3c:d6:84:cb:e7:9e:f9:8f:09:92:8d: 2d:1f:04:03:72:b7:44:f8:de:bc:24:08:fc:38:7b: ab:b4:e9:92:46:b5:fd:c4:54:fc:bb:18:84:6e:29: ae:cc:3d:8e:a0:96:76:b7:98:b9:70:65:c0:c0:33: 47:c0:04:53:56:9c:ff:54:8b:bb:cb:4c:cc:2e:87: fc:35:c6:0a:d0:bb:fc:f8:cb:ed:78:80:22:16:c5: ff:ae:a4:39:cd:79:42:73:e6:50:48:2f:a8:d7:4d: 01:3d:d0:dd:66:9e:25:b9:e5:9c:79:43:0b:f1:c0: 59:5e:70:8e:3c:28:f1:ef:9b:a2:fb:ec:12:97:25: 11:c5:48:59:4d:0a:29:84:b3:7c:0f:e0:32:b6:cc: c6:8e:7e:40:eb:79:b2:b2:c8:be:29:4b:90:88:9d: 99:5b:cf:c9:ec:80:5f:73:8a:55:68:2c:12:ae:0b: ab:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E5:97:75:FC:88:95:A0:5E:64:EB:18:AE:98:94:99:AD:C1:F4:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/425affcb-76e5-3a31-a4b4-69a7299a8e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl X509v3 Authority Key Identifier: keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer sbgp-ipAddrBlock: critical IPv4: 209.209.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:8c:9e:22:c0:2a:9f:a5:1d:55:5b:29:d4:c7:9b:19:29:87: b6:1e:f3:a3:12:3c:48:32:d0:a3:cb:4e:49:58:15:30:ab:48: 15:fc:bd:23:ad:88:a3:57:7d:e7:2c:39:09:e9:3c:6e:36:1a: 06:85:62:e2:27:98:f5:c4:b9:a1:24:1d:2c:84:5e:03:12:73: ad:b1:d0:92:db:e4:37:4f:67:7d:d5:f4:dc:34:4c:99:40:fa: 2e:b7:28:bb:ee:18:e3:83:db:82:00:53:17:13:fd:09:b8:f4: fb:87:e0:22:a2:28:01:33:13:02:c9:be:a9:2b:38:9c:ad:b6: 53:fa:aa:d4:23:cd:5e:d7:b2:81:d5:4e:a5:86:89:10:31:89: 12:42:9c:db:da:b1:c0:93:ee:a2:db:ad:7d:82:9b:be:2c:c3: 71:37:4b:f3:66:df:2b:61:f4:31:c8:69:39:29:8d:ca:22:4d: cf:c7:63:89:b6:5d:a9:14:4a:ab:bc:b1:b4:d0:cf:e6:06:29: e4:53:d1:45:35:26:80:3e:a5:f4:a7:73:57:4e:b1:6a:59:85: 1e:88:84:de:63:0a:c9:d9:82:48:3f:4e:87:fb:93:15:41:82: 4c:96:56:20:e9:7f:10:16:7a:da:5e:65:d3:b5:bc:7d:9e:43: 8a:a6:c7:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBXh4R1eT0HRPSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI3OGRhMjgtODJiMy00OGZlLWJjNzYtNzg1OWE4MmY1 NjUxMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NTA3NWZiZDgtNzllZS00OGFjLTk2ZmEtMzYwYTQyNzE3YjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCgjFVH1vJPXc3I2yT2H//JnoSbEJBDaXYgM yLbB+Dbb6M5unN6guCSMJa7TkAIpTIOwQwsEaPVPeV7bxv35CwHoWW2UGVAX89nH u89+PNaEy+ee+Y8Jko0tHwQDcrdE+N68JAj8OHurtOmSRrX9xFT8uxiEbimuzD2O oJZ2t5i5cGXAwDNHwARTVpz/VIu7y0zMLof8NcYK0Lv8+MvteIAiFsX/rqQ5zXlC c+ZQSC+o100BPdDdZp4lueWceUML8cBZXnCOPCjx75ui++wSlyURxUhZTQophLN8 D+AytszGjn5A63myssi+KUuQiJ2ZW8/J7IBfc4pVaCwSrgurswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfll3X8iJWgXmTrGK6YlJmtwfTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4 ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5YTgyZjU2NTEvNDI1YWZmY2ItNzZlNS0z YTMxLWE0YjQtNjlhNzI5OWE4ZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTI3OGRhMjgtODJiMy00OGZlLWJj NzYtNzg1OWE4MmY1NjUxL2EyNzhkYTI4LTgyYjMtNDhmZS1iYzc2LTc4NTlhODJm NTY1MS5jcmwwHwYDVR0jBBgwFoAU9ipjPl1+gQsD5F/PfySWru+jWRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5 YTgyZjU2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeMniLAKp+lHVVbKdTHmxkph7Ye86MSPEgy0KPLTklYFTCrSBX8vSOt iKNXfecsOQnpPG42GgaFYuInmPXEuaEkHSyEXgMSc62x0JLb5DdPZ33V9Nw0TJlA +i63KLvuGOOD24IAUxcT/Qm49PuH4CKiKAEzEwLJvqkrOJyttlP6qtQjzV7XsoHV TqWGiRAxiRJCnNvascCT7qLbrX2Cm74sw3E3S/Nm3yth9DHIaTkpjcoiTc/HY4m2 XakUSqu8sbTQz+YGKeRT0UU1JoA+pfSnc1dOsWpZhR6IhN5jCsnZgkg/Tof7kxVB gkyWViDpfxAWetpeZdO1vH2eQ4qmx/c= -----END CERTIFICATE-----Generated at Mon Jun 16 12:00:45 2025 by rpki-client