$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/ecd939fc-f274-37a2-ad65-81e7707af52f.roa File: ecd939fc-f274-37a2-ad65-81e7707af52f.roa (raw, json) Hash identifier: 62zG/R0c4kOovJvmfe9MinkndNEjGIc8SCHs+JWMbcA= Subject key identifier: 69:CD:B9:1F:84:AD:3D:26:23:D5:A7:71:93:93:F3:E0:F2:89:44:32 Certificate issuer: /CN=a278da28-82b3-48fe-bc76-7859a82f5651 Certificate serial: 010D0C9F4328584A0C05788911C88B424E5EDF40 Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/ecd939fc-f274-37a2-ad65-81e7707af52f.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 38082 IP address blocks: 209.209.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:78:89:11:c8:8b:42:4e:5e:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=eed7e984-131e-47ad-9220-16dff87a3097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:36:c1:6a:37:f1:46:f6:77:d0:b9:e7:a6: 7e:b2:d7:31:51:3c:b7:02:d2:b0:49:0e:fc:45:04: 48:b9:bb:c7:4f:34:8f:d6:5b:0f:5f:b3:75:d1:05: a5:47:a3:0d:e2:57:5e:29:ae:8f:28:e1:73:24:9c: e3:63:03:8b:77:b9:29:ae:65:4e:4c:bd:b9:76:5d: 84:5d:32:a1:77:a8:39:b0:32:8c:55:bb:35:55:36: e8:e7:a2:f5:e9:8f:90:4a:f1:5b:ef:cc:e7:c0:71: 1a:4c:df:5b:f6:d8:7d:72:51:1e:33:86:53:42:72: 55:d0:a2:50:fb:db:50:e8:90:73:28:53:b8:b9:39: 46:e6:19:9f:88:3f:b4:d4:63:98:b8:d9:3b:03:c7: 1f:31:1a:e1:73:6b:a4:81:47:27:11:36:6b:48:56: 07:c5:6a:7e:3e:48:49:de:bd:2d:d2:4b:b3:61:1c: 54:21:23:38:33:d9:02:9f:4c:5d:68:f5:8e:b2:4c: b1:e1:f9:a5:db:39:4e:e2:3a:ad:6e:fa:ff:66:91: d8:8c:7a:52:2c:e2:22:cd:ea:56:7f:2f:7b:2a:1f: c7:5c:4a:b3:71:ba:2b:19:15:2b:14:e5:2b:a2:0a: b5:ab:41:61:ab:ae:db:ac:18:16:69:69:7e:de:6b: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CD:B9:1F:84:AD:3D:26:23:D5:A7:71:93:93:F3:E0:F2:89:44:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/ecd939fc-f274-37a2-ad65-81e7707af52f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl X509v3 Authority Key Identifier: keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer sbgp-ipAddrBlock: critical IPv4: 209.209.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:fb:52:f8:9e:09:5f:b2:88:81:d1:c9:23:3a:de:3f:49:4b: 31:6b:df:98:c0:ff:0b:9e:6d:43:c3:6e:a2:4e:58:05:4d:d2: 57:33:86:2e:40:1e:ea:c4:df:2e:1f:3b:51:10:fa:58:83:39: fe:32:ca:9b:d5:ae:90:0b:95:1a:c5:55:23:b9:30:dd:43:32: 68:cb:6e:ae:6d:0d:2d:70:ee:6c:0a:ac:75:8f:7e:47:28:3e: 60:44:73:5f:ea:39:7c:db:79:14:e3:a2:a9:50:95:a0:0f:81: 25:72:a4:a5:df:50:12:61:79:25:b4:da:ad:9a:13:27:b4:5d: 95:bf:86:32:bb:88:5c:bd:81:03:78:d2:db:2d:f7:8c:e9:cf: af:cc:73:c8:41:1f:ca:f8:b6:70:c9:b3:65:bd:11:a1:70:fc: 90:7c:fc:33:bc:1b:1b:b2:f5:64:7b:53:c1:e2:77:56:71:9e: 94:48:01:d3:c3:5b:00:c8:cd:47:32:85:8c:f2:93:af:1b:54: 68:b4:6e:10:5d:59:13:39:fa:1e:2b:ef:29:34:69:ea:73:a4: 3c:fd:77:13:7d:61:ed:e8:e2:2f:af:6e:ec:50:e0:d0:e8:a6: 20:3d:61:0b:3a:7f:e5:8f:06:de:35:1c:db:d4:d9:44:c5:24: 8c:2b:f5:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBXiJEciLQk5e30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI3OGRhMjgtODJiMy00OGZlLWJjNzYtNzg1OWE4MmY1 NjUxMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZWVkN2U5ODQtMTMxZS00N2FkLTkyMjAtMTZkZmY4N2EzMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO82wWo38Ub2d9C556Z+stcxUTy3AtKwSQ78 RQRIubvHTzSP1lsPX7N10QWlR6MN4ldeKa6PKOFzJJzjYwOLd7kprmVOTL25dl2E XTKhd6g5sDKMVbs1VTbo56L16Y+QSvFb78znwHEaTN9b9th9clEeM4ZTQnJV0KJQ +9tQ6JBzKFO4uTlG5hmfiD+01GOYuNk7A8cfMRrhc2ukgUcnETZrSFYHxWp+PkhJ 3r0t0kuzYRxUISM4M9kCn0xdaPWOskyx4fml2zlO4jqtbvr/ZpHYjHpSLOIizepW fy97Kh/HXEqzcborGRUrFOUrogq1q0Fhq67brBgWaWl+3mvEbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnNuR+ErT0mI9WncZOT8+DyiUQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4 ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5YTgyZjU2NTEvZWNkOTM5ZmMtZjI3NC0z N2EyLWFkNjUtODFlNzcwN2FmNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTI3OGRhMjgtODJiMy00OGZlLWJj NzYtNzg1OWE4MmY1NjUxL2EyNzhkYTI4LTgyYjMtNDhmZS1iYzc2LTc4NTlhODJm NTY1MS5jcmwwHwYDVR0jBBgwFoAU9ipjPl1+gQsD5F/PfySWru+jWRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5 YTgyZjU2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn7UvieCV+yiIHRySM63j9JSzFr35jA/wuebUPDbqJOWAVN0lczhi5A HurE3y4fO1EQ+liDOf4yypvVrpALlRrFVSO5MN1DMmjLbq5tDS1w7mwKrHWPfkco PmBEc1/qOXzbeRTjoqlQlaAPgSVypKXfUBJheSW02q2aEye0XZW/hjK7iFy9gQN4 0tst94zpz6/Mc8hBH8r4tnDJs2W9EaFw/JB8/DO8Gxuy9WR7U8Hid1ZxnpRIAdPD WwDIzUcyhYzyk68bVGi0bhBdWRM5+h4r7yk0aepzpDz9dxN9Ye3o4i+vbuxQ4NDo piA9YQs6f+WPBt41HNvU2UTFJIwr9Xc= -----END CERTIFICATE-----Generated at Mon Jun 16 11:55:36 2025 by rpki-client