$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa File: 757c630c-1704-3fb8-b8aa-a6f536633ed2.roa (raw, json) Hash identifier: xtp/0nMRXzrmdX9RsKpRsh/p9H9wi1RQs9Ejm4yNq4o= Subject key identifier: 42:D8:B9:BA:62:48:6C:79:F2:A1:66:04:43:1E:8F:5A:D9:B4:65:D6 Certificate issuer: /CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Certificate serial: 010D0C9F4328584A146577A3ED97424D1C754580 Authority key identifier: 0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 8075 IP address blocks: 209.51.100.0/24 maxlen: 24 209.51.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:77:a3:ed:97:42:4d:1c:75:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=9c07da95-1865-4083-b471-3a45753fee28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:06:5e:ec:b0:0a:1d:74:43:41:2d:b2:24: f7:65:52:99:85:eb:95:9f:d4:48:59:71:bb:34:fe: c6:71:61:8d:d9:75:7d:5b:ad:e7:9e:da:bc:2c:c0: 4b:9b:8e:d2:c2:a3:8b:41:11:98:c3:b6:98:2c:d3: 68:d9:ee:ac:4f:af:56:f3:8a:45:fe:67:7e:ac:09: 7f:12:07:5b:45:6e:9a:77:c3:c5:95:e9:1b:23:8c: 68:9e:70:77:2b:69:3a:3b:64:91:e3:ae:f8:c2:1e: 9a:44:1d:00:a6:f9:bf:5b:cc:de:71:7d:8b:44:3d: 34:37:7f:c3:90:ca:4d:12:76:83:27:8c:4b:84:bd: 02:03:57:f2:71:a0:26:1e:15:a8:5e:36:7c:2c:f7: 91:93:72:25:e0:6b:d1:77:0f:d2:84:f2:41:31:fb: 9a:f5:f7:e1:e7:e4:95:eb:21:1b:aa:58:5d:fe:91: d0:45:15:e4:b8:5d:04:89:7e:9f:ff:42:fd:70:31: 94:64:f0:49:67:39:fe:0e:30:c0:b1:8f:11:fd:39: f0:5f:f6:22:e1:7e:ab:ee:fc:c4:25:90:d0:e5:24: 4a:02:9a:0a:dc:98:05:ec:b1:96:14:10:8e:40:97: eb:c0:43:4c:be:68:25:9a:2b:29:02:d2:1a:88:ff: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D8:B9:BA:62:48:6C:79:F2:A1:66:04:43:1E:8F:5A:D9:B4:65:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl X509v3 Authority Key Identifier: keyid:0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer sbgp-ipAddrBlock: critical IPv4: 209.51.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:83:85:02:1d:d5:7f:14:6a:ec:ae:a7:c4:b2:c1:a7:9f:d7: bd:00:aa:ba:33:68:a6:03:43:22:cf:5c:ec:24:41:bd:90:1a: 10:1d:67:c0:67:32:bf:5d:80:33:4f:1c:fc:71:69:bb:55:c0: ec:b3:f2:fd:ad:60:7f:1a:fb:f8:7b:ff:31:e5:b0:fc:7f:ed: 4e:07:17:57:b2:cd:b4:fb:01:7d:a6:bc:45:99:74:f4:a1:33: 28:12:a2:8c:d0:f6:7a:07:5d:14:c4:e0:ee:17:42:00:5b:54: 06:6a:ce:e4:7d:51:07:89:da:9a:33:54:8d:f3:58:94:e8:10: 2c:9b:a6:d2:94:d5:fe:92:57:59:ec:0e:1e:8f:d0:be:96:1e: f5:d3:d7:d8:12:19:cd:31:91:00:66:74:22:23:18:94:c8:e7: 82:5c:2b:e3:24:30:9e:fa:74:36:ea:a9:4c:7d:6c:0b:b7:a8: 44:cd:4d:bd:9c:95:8d:9d:c3:92:3c:1e:7c:71:2d:04:85:08: 7a:99:63:ae:db:ee:4a:be:ee:9f:0b:6d:32:84:39:3f:14:8d: 72:65:a1:61:60:ea:54:d4:a6:2a:50:b2:0e:50:a5:1c:36:b1: e6:7c:25:9d:0d:77:bd:07:b7:3c:ad:0a:21:e7:85:2b:7a:4f: 00:d5:f4:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXej7ZdCTRx1RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlMDczMGQtNjVkMC00YTdjLTk3MTctYWRmNDAxZDNl NWQ2MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk OWMwN2RhOTUtMTg2NS00MDgzLWI0NzEtM2E0NTc1M2ZlZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAproGXuywCh10Q0EtsiT3ZVKZheuVn9RIWXG7 NP7GcWGN2XV9W63nntq8LMBLm47SwqOLQRGYw7aYLNNo2e6sT69W84pF/md+rAl/ EgdbRW6ad8PFlekbI4xonnB3K2k6O2SR4674wh6aRB0Apvm/W8zecX2LRD00N3/D kMpNEnaDJ4xLhL0CA1fycaAmHhWoXjZ8LPeRk3Il4GvRdw/ShPJBMfua9ffh5+SV 6yEbqlhd/pHQRRXkuF0EiX6f/0L9cDGUZPBJZzn+DjDAsY8R/TnwX/Yi4X6r7vzE JZDQ5SRKApoK3JgF7LGWFBCOQJfrwENMvmglmispAtIaiP+4gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELYubpiSGx58qFmBEMej1rZtGXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUw NzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0MDFkM2U1ZDYvNzU3YzYzMGMtMTcwNC0z ZmI4LWI4YWEtYTZmNTM2NjMzZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFlMDczMGQtNjVkMC00YTdjLTk3 MTctYWRmNDAxZDNlNWQ2LzIxZTA3MzBkLTY1ZDAtNGE3Yy05NzE3LWFkZjQwMWQz ZTVkNi5jcmwwHwYDVR0jBBgwFoAUCjfATPa/Hk/8i61XWhb+l13AIPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUwNzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0 MDFkM2U1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCDhQId1X8Uauyup8Sywaef170AqrozaKYDQyLPXOwkQb2QGhAdZ8Bn Mr9dgDNPHPxxabtVwOyz8v2tYH8a+/h7/zHlsPx/7U4HF1eyzbT7AX2mvEWZdPSh MygSoozQ9noHXRTE4O4XQgBbVAZqzuR9UQeJ2pozVI3zWJToECybptKU1f6SV1ns Dh6P0L6WHvXT19gSGc0xkQBmdCIjGJTI54JcK+MkMJ76dDbqqUx9bAu3qETNTb2c lY2dw5I8HnxxLQSFCHqZY67b7kq+7p8LbTKEOT8UjXJloWFg6lTUpipQsg5QpRw2 seZ8JZ0Nd70HtzytCiHnhSt6TwDV9AU= -----END CERTIFICATE-----Generated at Mon Jun 16 00:26:34 2025 by rpki-client