$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6e95040f-b5f2-30ca-91f9-e90d3398f4e3.roa File: 6e95040f-b5f2-30ca-91f9-e90d3398f4e3.roa (raw, json) Hash identifier: fSoNi0NR3w9g9zHYmTfBttg9q8V/tn9SUkdbOQ8HUHE= Subject key identifier: B8:9C:E2:C2:73:C0:AF:34:83:F6:0E:FE:00:BF:1C:02:29:C1:8A:B6 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849E7BA797FBD7B6EDFF4770D00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6e95040f-b5f2-30ca-91f9-e90d3398f4e3.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 22612 IP address blocks: 209.188.2.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:79:7f:bd:7b:6e:df:f4:77:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=0b8e2bf6-92f9-4183-9f03-265bcaf1806a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:68:ca:a4:83:58:d5:a9:1a:1f:5c:a7:7c: c8:0b:02:1a:42:cb:64:61:30:b0:df:ae:af:ff:24: e6:e4:71:23:01:d8:45:69:de:11:76:78:9f:d2:b7: bf:9e:1d:84:7a:c6:a2:b7:00:90:43:01:86:a2:3a: 65:34:9d:25:7c:d3:0e:92:a4:f4:ae:ce:69:f3:cf: 11:88:c1:eb:0c:dd:ac:3a:fc:2a:c6:79:27:2c:96: 4e:e5:08:08:31:d5:c8:87:72:35:82:61:91:20:73: 63:49:ae:50:7a:f5:3c:4d:2d:75:70:33:40:4d:8c: 85:bd:f2:ba:ba:37:e7:72:8d:7a:56:90:87:ef:82: 1a:0a:7b:77:dc:de:7c:84:8c:d9:b9:31:f1:78:b6: 01:50:c7:13:8b:77:f6:2b:09:fc:ca:8f:c9:4b:24: a8:f2:37:36:12:26:b0:4f:4e:d4:23:7f:76:19:5f: 48:0b:69:fb:69:e4:99:60:1b:27:10:dd:dc:4b:ce: 52:26:79:44:aa:db:85:62:a3:44:e6:62:f1:91:eb: f2:e4:e9:fa:20:cb:8a:7a:49:42:a6:36:16:4b:da: 7a:9e:53:b8:84:c5:d9:81:80:40:c9:01:5f:9e:35: cf:4f:e8:49:18:96:b7:91:a0:f8:54:81:69:4f:3d: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9C:E2:C2:73:C0:AF:34:83:F6:0E:FE:00:BF:1C:02:29:C1:8A:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6e95040f-b5f2-30ca-91f9-e90d3398f4e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.2.192/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:0e:f0:ce:45:b8:d2:61:97:c6:a2:cc:f5:6b:03:26:d7:d9: 64:b9:ba:5a:54:0c:bb:cf:9e:49:a8:01:be:93:cb:fa:01:fd: 55:b9:f0:28:fe:2b:c1:bc:eb:35:8e:d6:43:de:88:78:f9:7e: cc:fa:be:5e:48:9e:5e:81:0d:59:8a:28:59:18:69:74:fd:e3: bc:29:13:cf:3b:f6:5c:70:7c:99:92:ab:f4:10:30:fb:d7:d4: de:45:85:2d:dc:d0:a0:b3:e3:91:bb:f6:9d:0b:fb:80:99:f8: 51:78:56:e3:cd:c4:ce:bd:9a:95:ae:cf:90:09:bf:78:96:e3: c7:ed:97:1d:bf:0d:d9:a3:1f:67:a0:20:7d:50:0a:9b:00:e5: 13:f5:65:b5:e4:97:0b:8a:93:ae:6d:b1:d2:40:cd:96:8f:8c: f1:a7:6f:74:f7:a1:d0:fb:37:ee:93:c7:68:3e:c5:9b:e6:12: 5f:74:ed:19:b2:0a:d3:03:3e:41:d4:9f:f6:87:6f:7f:70:1a: 5d:9b:dc:ab:e5:2a:5e:02:2b:c9:67:25:ff:82:8a:e8:fd:9c: 02:3c:92:d3:6b:03:a1:d4:91:24:ca:8a:68:c2:3e:34:55:27: b3:13:8f:00:77:54:a9:eb:56:a1:6e:f2:d3:8b:c6:43:4f:eb: 6b:85:31:ad -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnnunl/vXtu3/R3DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MGI4ZTJiZjYtOTJmOS00MTgzLTlmMDMtMjY1YmNhZjE4MDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8loyqSDWNWpGh9cp3zICwIaQstkYTCw366v /yTm5HEjAdhFad4Rdnif0re/nh2EesaitwCQQwGGojplNJ0lfNMOkqT0rs5p888R iMHrDN2sOvwqxnknLJZO5QgIMdXIh3I1gmGRIHNjSa5QevU8TS11cDNATYyFvfK6 ujfnco16VpCH74IaCnt33N58hIzZuTHxeLYBUMcTi3f2Kwn8yo/JSySo8jc2Eiaw T07UI392GV9IC2n7aeSZYBsnEN3cS85SJnlEqtuFYqNE5mLxkevy5On6IMuKeklC pjYWS9p6nlO4hMXZgYBAyQFfnjXPT+hJGJa3kaD4VIFpTz1GKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLic4sJzwK80g/YO/gC/HAIpwYq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNmU5NTA0MGYtYjVmMi0z MGNhLTkxZjktZTkwZDMzOThmNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUG0bwCwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQChDvDORbjSYZfGosz1awMm19lkubpaVAy7z55JqAG+k8v6Af1VufAo /ivBvOs1jtZD3oh4+X7M+r5eSJ5egQ1ZiihZGGl0/eO8KRPPO/ZccHyZkqv0EDD7 19TeRYUt3NCgs+ORu/adC/uAmfhReFbjzcTOvZqVrs+QCb94luPH7Zcdvw3Zox9n oCB9UAqbAOUT9WW15JcLipOubbHSQM2Wj4zxp29096HQ+zfuk8doPsWb5hJfdO0Z sgrTAz5B1J/2h29/cBpdm9yr5SpeAivJZyX/goro/ZwCPJLTawOh1JEkyopowj40 VSezE48Ad1Sp61ahbvLTi8ZDT+trhTGt -----END CERTIFICATE-----Generated at Sun Jun 15 16:01:56 2025 by rpki-client