$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa File: 1fde58cb-1b82-3dee-9119-156933d5f187.roa (raw, json) Hash identifier: LwrrsM92DGMtFzhyw2BNblMmYJSeL9TtSrwY1RsyuwM= Subject key identifier: 98:67:84:62:B7:41:5B:49:A9:40:70:B2:D3:9B:3A:18:83:B0:B7:C0 Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F4328584A5335A0BBFC374BFF73645700 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 208.81.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a0:bb:fc:37:4b:ff:73:64:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=8d686f1a-449c-4fb5-8dd2-b464c3e66adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fc:14:82:ad:f3:ad:ae:b9:76:4e:8e:e7:f0: 8b:17:1f:4a:7d:f0:55:63:43:36:d4:b6:75:af:dc: 5a:3a:9a:29:80:9e:20:bf:97:2d:2a:48:e2:47:a2: 5a:67:00:66:43:25:07:71:e2:d8:62:e5:fb:49:b6: 5b:1b:09:c2:75:7d:10:fc:73:ec:4b:47:31:9e:ad: 95:1c:6f:cd:76:04:68:7f:d3:50:7d:d0:83:29:89: 29:6a:b4:c6:39:af:e9:43:e3:7a:84:87:f3:e4:98: c5:ef:5e:fa:49:0c:d8:f7:0b:8e:73:d2:d8:2b:00: 7e:50:48:37:c8:0d:dc:fa:e3:af:ed:35:10:ad:ea: 8e:90:11:c3:48:91:60:41:0f:41:13:b4:e6:e4:d0: 25:6c:5d:8b:1d:ec:4a:5c:c3:4c:29:1c:49:b2:95: 64:52:4b:33:7a:83:dc:01:6b:3c:fa:ee:cf:4e:43: 2b:6e:fc:8a:08:1b:94:20:1c:f2:79:ef:6e:88:32: 4d:ef:6a:0e:1b:9e:25:36:4b:75:76:98:69:66:ec: 89:fb:a9:47:bf:0c:a5:58:e8:9b:f5:98:72:a8:9f: 9f:0c:06:a6:4b:33:45:f8:4a:c0:55:60:90:e3:5d: 50:7f:dd:71:c2:ef:78:05:14:54:4e:be:32:a4:f5: a2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:67:84:62:B7:41:5B:49:A9:40:70:B2:D3:9B:3A:18:83:B0:B7:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 208.81.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:74:f3:9d:8f:9c:0a:7b:dc:35:5e:29:09:69:70:94:c5:52: 87:e2:c7:99:f0:de:09:16:cc:f4:e6:94:e5:09:95:61:b5:f0: 03:3a:c6:fa:21:6c:51:6e:68:bc:56:1b:b2:15:f3:12:76:40: 81:73:7f:9f:dc:de:f1:d9:12:e4:a8:d2:9b:d4:2d:95:0a:f5: d7:14:89:8f:ed:28:f1:4f:29:07:fc:bb:4a:cb:0b:ad:8c:1d: ea:f8:ae:5f:cb:01:11:49:64:30:71:e0:8a:ce:a8:37:78:8c: e7:ad:b3:e8:a2:6b:73:e6:5b:5b:65:a5:3b:57:ee:42:a6:97: c5:3d:a3:62:69:c5:21:91:4a:29:41:08:c2:c5:d3:0f:24:14: fc:de:13:40:1b:e8:f9:54:60:ff:24:66:54:ac:2c:a8:3a:59: e6:40:3a:2a:20:dc:9b:1b:a6:a6:4d:d1:15:bd:04:86:7e:ab: c9:83:9c:14:1e:41:dd:96:ea:33:7c:28:00:2a:4d:7f:bb:e5: 53:a6:f3:db:0b:26:f5:2b:9d:88:af:da:2b:61:51:a9:70:5b: 17:7b:6c:04:92:59:fa:10:b1:7b:18:d2:08:7d:07:98:6d:2a: c4:5e:e6:a3:e8:de:a4:4d:81:ce:d0:d1:ee:27:d0:b6:09:c4: 16:45:53:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaC7/DdL/3NkVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk OGQ2ODZmMWEtNDQ5Yy00ZmI1LThkZDItYjQ2NGMzZTY2YWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfwUgq3zra65dk6O5/CLFx9KffBVY0M21LZ1 r9xaOpopgJ4gv5ctKkjiR6JaZwBmQyUHceLYYuX7SbZbGwnCdX0Q/HPsS0cxnq2V HG/NdgRof9NQfdCDKYkparTGOa/pQ+N6hIfz5JjF7176SQzY9wuOc9LYKwB+UEg3 yA3c+uOv7TUQreqOkBHDSJFgQQ9BE7Tm5NAlbF2LHexKXMNMKRxJspVkUkszeoPc AWs8+u7PTkMrbvyKCBuUIBzyee9uiDJN72oOG54lNkt1dphpZuyJ+6lHvwylWOib 9ZhyqJ+fDAamSzNF+ErAVWCQ411Qf91xwu94BRRUTr4ypPWiSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhnhGK3QVtJqUBwstObOhiDsLfAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvMWZkZTU4Y2ItMWI4Mi0z ZGVlLTkxMTktMTU2OTMzZDVmMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER0852PnAp73DVeKQlpcJTFUofix5nw3gkWzPTmlOUJlWG18AM6xvoh bFFuaLxWG7IV8xJ2QIFzf5/c3vHZEuSo0pvULZUK9dcUiY/tKPFPKQf8u0rLC62M Her4rl/LARFJZDBx4IrOqDd4jOets+iia3PmW1tlpTtX7kKml8U9o2JpxSGRSilB CMLF0w8kFPzeE0Ab6PlUYP8kZlSsLKg6WeZAOiog3JsbpqZN0RW9BIZ+q8mDnBQe Qd2W6jN8KAAqTX+75VOm89sLJvUrnYiv2ithUalwWxd7bASSWfoQsXsY0gh9B5ht KsRe5qPo3qRNgc7Q0e4n0LYJxBZFU9o= -----END CERTIFICATE-----Generated at Tue Jul 1 09:55:08 2025 by rpki-client