$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/5701188d-f52f-389f-bea6-e977e087639b.roa File: 5701188d-f52f-389f-bea6-e977e087639b.roa (raw, json) Hash identifier: 822ssTs9Uh3HeeERFQIGYJRz9IBYt7CVXl8vGyq7ezk= Subject key identifier: 0F:79:C8:DA:B0:A2:BF:B3:02:D0:92:4D:EE:56:34:3A:F6:76:8F:5F Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584A7D15E372864B8A4C62958200 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/5701188d-f52f-389f-bea6-e977e087639b.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 21859 IP address blocks: 209.178.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:e3:72:86:4b:8a:4c:62:95:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=b8ba1ae9-8423-4386-a2db-531d7abf58cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0b:eb:1c:8f:fd:aa:0d:9b:97:6b:56:78:f5: 3d:40:75:90:a6:39:a1:36:df:ee:b0:4a:48:a7:82: 43:c8:e4:cd:72:cd:59:ec:ff:22:91:83:11:3b:d3: b1:da:a1:47:67:3a:ad:7b:97:2c:a7:4d:97:97:14: 7e:ce:1b:04:88:31:20:0a:52:ad:ab:67:ac:00:20: 88:ab:16:02:a5:71:e7:f2:a4:dc:3a:5e:b8:2f:29: ff:a6:15:16:e1:79:d4:33:30:7c:95:39:b5:36:2b: 40:5b:1c:c6:f4:e2:08:7a:03:89:74:f6:fb:89:cd: 32:db:32:61:81:53:82:26:73:da:c0:bf:2c:48:b6: 52:d4:1c:49:02:86:ca:f8:74:f0:3e:34:ee:48:95: c8:2d:a1:c2:5a:c7:a5:d4:b0:d1:9c:86:3e:bc:b7: 59:04:27:92:d4:48:1d:ad:e2:46:dd:60:15:34:0e: 0c:df:39:ac:97:7f:cb:cb:a6:bd:81:22:bf:5a:a2: 44:df:fc:2e:b2:a2:a4:0e:1e:30:a3:6b:84:0c:3f: c9:d3:54:27:56:42:26:ae:15:b8:4e:b3:d8:cc:d6: d3:a6:c3:2e:66:22:6e:3d:4d:8b:1a:50:b0:03:71: e3:e3:4e:79:bf:4e:1b:53:d9:52:9a:d7:6a:11:73: e8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:79:C8:DA:B0:A2:BF:B3:02:D0:92:4D:EE:56:34:3A:F6:76:8F:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/5701188d-f52f-389f-bea6-e977e087639b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:85:5b:35:1f:04:30:85:1d:36:88:67:ac:7d:2a:12:6a:ec: 57:da:04:22:43:9b:80:5c:26:da:21:02:fc:f0:02:ee:93:52: 4a:4c:75:7e:37:fb:40:1f:99:9e:03:fa:ec:51:66:5a:95:e7: 61:dc:ce:8b:ca:3d:36:3a:4b:ff:c9:9e:95:86:5f:a0:63:2e: c8:0f:3b:87:ca:83:d1:02:22:44:00:4c:87:af:21:ad:2d:9c: be:d5:8e:30:e9:df:eb:63:d1:f9:70:bb:72:5a:9d:c7:c9:d5: 58:88:7b:ae:7b:96:1d:9c:70:8e:a6:b7:49:3d:fc:12:7e:e5: 90:ed:90:02:0d:97:fe:0f:1f:7c:4d:4f:fc:c8:c4:fd:72:4b: 5b:57:85:5a:ad:78:ef:c9:ab:ef:dc:70:c8:1c:f1:87:6c:aa: 7a:61:fb:76:b5:bd:5e:d0:46:3d:78:f4:79:a4:3a:4b:06:8b: 26:5c:54:6b:3f:79:05:c4:9c:00:12:40:65:7d:fd:65:ba:cb: 44:7e:4b:f4:22:7e:62:f5:fe:ec:ce:85:e1:4b:25:b0:76:8c: 92:00:dc:02:4e:9c:88:6b:6b:5c:f2:71:51:93:67:0b:30:83: b4:13:70:24:fe:27:8f:25:70:0c:65:5c:6b:f6:67:9a:e5:06: 74:d9:7c:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FeNyhkuKTGKVggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk YjhiYTFhZTktODQyMy00Mzg2LWEyZGItNTMxZDdhYmY1OGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAvrHI/9qg2bl2tWePU9QHWQpjmhNt/usEpI p4JDyOTNcs1Z7P8ikYMRO9Ox2qFHZzqte5csp02XlxR+zhsEiDEgClKtq2esACCI qxYCpXHn8qTcOl64Lyn/phUW4XnUMzB8lTm1NitAWxzG9OIIegOJdPb7ic0y2zJh gVOCJnPawL8sSLZS1BxJAobK+HTwPjTuSJXILaHCWsel1LDRnIY+vLdZBCeS1Egd reJG3WAVNA4M3zmsl3/Ly6a9gSK/WqJE3/wusqKkDh4wo2uEDD/J01QnVkImrhW4 TrPYzNbTpsMuZiJuPU2LGlCwA3Hj4055v04bU9lSmtdqEXPoRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA95yNqwor+zAtCSTe5WNDr2do9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNTcwMTE4OGQtZjUyZi0z ODlmLWJlYTYtZTk3N2UwODc2MzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuFWzUfBDCFHTaIZ6x9KhJq7FfaBCJDm4BcJtohAvzwAu6TUkpMdX43 +0AfmZ4D+uxRZlqV52HczovKPTY6S//JnpWGX6BjLsgPO4fKg9ECIkQATIevIa0t nL7VjjDp3+tj0flwu3JancfJ1ViIe657lh2ccI6mt0k9/BJ+5ZDtkAINl/4PH3xN T/zIxP1yS1tXhVqteO/Jq+/ccMgc8Ydsqnph+3a1vV7QRj149HmkOksGiyZcVGs/ eQXEnAASQGV9/WW6y0R+S/QifmL1/uzOheFLJbB2jJIA3AJOnIhra1zycVGTZwsw g7QTcCT+J48lcAxlXGv2Z5rlBnTZfNI= -----END CERTIFICATE-----Generated at Mon Aug 4 11:21:38 2025 by rpki-client