$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/6700284b-4b85-318a-8bb1-21ca06ce50e1.roa File: 6700284b-4b85-318a-8bb1-21ca06ce50e1.roa (raw, json) Hash identifier: HBC46oyNlCAYFzWtQXKow/kZgCZdX0YYD1XYEWeY8dk= Subject key identifier: 43:C7:E7:E1:4F:35:5C:70:60:85:2E:BC:DA:3C:26:F1:74:09:1A:88 Certificate issuer: /CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa Certificate serial: 010D0C9F4328584A331AEB45733F33F8A45B6D00 Authority key identifier: 31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/6700284b-4b85-318a-8bb1-21ca06ce50e1.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 396298 IP address blocks: 209.237.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:eb:45:73:3f:33:f8:a4:5b:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=60214b99-8dd6-440d-9a3d-afabb4eea9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:d3:25:87:ba:a9:a5:4f:02:74:8b:80:3b: 7c:dd:db:dd:56:4f:02:35:88:e6:b5:a7:20:68:bc: a8:78:b9:2c:57:9a:18:6e:4f:9c:6c:fb:b4:73:7a: 32:f4:91:4b:02:8c:db:5e:d9:bb:19:88:03:ad:6a: 1a:9d:92:5d:fe:b7:c1:80:77:62:ef:13:1c:95:83: 1a:10:a1:ad:da:c3:a9:51:ce:08:d7:d4:f5:be:a5: 00:f3:d6:43:35:b9:33:f3:d2:db:cb:f4:be:6e:c7: 25:0e:be:f9:3d:49:85:ec:77:0d:a0:56:aa:c6:31: 1c:94:2f:d2:33:2a:5a:07:88:ee:cd:ed:b5:af:1f: f2:b4:9b:8a:67:c4:ce:24:59:53:30:c2:12:ea:39: ea:61:d2:20:d1:d1:de:96:b1:8c:55:03:29:0d:77: 75:3a:0d:8e:b6:c3:27:fe:e3:83:78:c4:33:df:72: e5:4b:77:40:a4:50:a9:10:f3:1b:97:b4:76:b3:a1: ce:59:77:02:86:83:76:a7:a0:58:ec:2c:1b:72:9d: e5:30:ac:71:6c:39:15:c4:5e:aa:05:45:8d:c3:cc: a8:ae:33:a6:32:fc:31:eb:bb:23:bd:ea:bd:c6:00: 79:6f:44:4a:b4:21:af:72:e9:b1:1e:b7:86:95:59: e9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C7:E7:E1:4F:35:5C:70:60:85:2E:BC:DA:3C:26:F1:74:09:1A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/6700284b-4b85-318a-8bb1-21ca06ce50e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl X509v3 Authority Key Identifier: keyid:31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer sbgp-ipAddrBlock: critical IPv4: 209.237.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f9:1c:c2:6f:a1:7e:ad:bc:88:a6:61:61:a7:92:87:2d:d9: 77:87:e5:51:3b:ac:36:6f:7d:ad:d5:ae:e8:51:49:41:95:0a: 1b:f7:2c:d7:d6:cf:79:03:18:f8:c0:84:22:2e:30:52:cc:f4: e8:fb:e9:a4:03:54:89:6b:b5:bd:13:58:95:c7:14:0b:43:aa: 1b:cf:8f:c2:0c:ae:d3:04:d4:35:ae:57:60:e1:bf:6f:8f:09: 89:14:e0:e8:13:04:14:2c:e2:bd:f3:1e:d4:d6:c2:b3:c7:92: 1c:ec:33:0a:8b:6c:b3:3f:50:87:d7:e6:b9:6a:05:9e:27:ed: c3:22:af:64:f3:f2:0e:53:f4:67:8e:14:1e:52:91:5e:32:65: e1:09:e0:44:11:75:b2:aa:f7:86:e4:e8:93:0c:62:3a:70:4c: 60:27:b9:44:65:41:81:83:4c:31:dc:39:1a:88:cb:47:73:59: 62:45:18:dc:d7:91:9f:9e:87:34:4c:53:60:86:57:61:98:d1: ae:39:cb:c2:8c:84:de:0d:87:f1:5c:e4:57:da:0c:00:73:ea: 94:ac:22:ef:84:84:10:8f:c5:99:7c:04:17:bf:8f:df:29:b4: a7:58:89:0e:ae:f5:08:98:4e:4d:43:1f:10:8b:e4:27:31:da: e4:28:43:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGutFcz8z+KRbbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjNDNlZmUtZTlkOS00MmQ3LTliNTEtZDA4NjAwZTQx M2ZhMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk NjAyMTRiOTktOGRkNi00NDBkLTlhM2QtYWZhYmI0ZWVhOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsHTJYe6qaVPAnSLgDt83dvdVk8CNYjmtacg aLyoeLksV5oYbk+cbPu0c3oy9JFLAozbXtm7GYgDrWoanZJd/rfBgHdi7xMclYMa EKGt2sOpUc4I19T1vqUA89ZDNbkz89Lby/S+bsclDr75PUmF7HcNoFaqxjEclC/S MypaB4juze21rx/ytJuKZ8TOJFlTMMIS6jnqYdIg0dHelrGMVQMpDXd1Og2OtsMn /uODeMQz33LlS3dApFCpEPMbl7R2s6HOWXcChoN2p6BY7Cwbcp3lMKxxbDkVxF6q BUWNw8yorjOmMvwx67sjveq9xgB5b0RKtCGvcumxHreGlVnpSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPH5+FPNVxwYIUuvNo8JvF0CRqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZGM0 M2VmZS1lOWQ5LTQyZDctOWI1MS1kMDg2MDBlNDEzZmEvNjcwMDI4NGItNGI4NS0z MThhLThiYjEtMjFjYTA2Y2U1MGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGRjNDNlZmUtZTlkOS00MmQ3LTli NTEtZDA4NjAwZTQxM2ZhLzBkYzQzZWZlLWU5ZDktNDJkNy05YjUxLWQwODYwMGU0 MTNmYS5jcmwwHwYDVR0jBBgwFoAUMbNEuzpeHgdJoKxgGNVS34HT9r4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZGM0M2VmZS1lOWQ5LTQyZDctOWI1MS1kMDg2 MDBlNDEzZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0e2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz5HMJvoX6tvIimYWGnkoct2XeH5VE7rDZvfa3VruhRSUGVChv3LNfW z3kDGPjAhCIuMFLM9Oj76aQDVIlrtb0TWJXHFAtDqhvPj8IMrtME1DWuV2Dhv2+P CYkU4OgTBBQs4r3zHtTWwrPHkhzsMwqLbLM/UIfX5rlqBZ4n7cMir2Tz8g5T9GeO FB5SkV4yZeEJ4EQRdbKq94bk6JMMYjpwTGAnuURlQYGDTDHcORqIy0dzWWJFGNzX kZ+ehzRMU2CGV2GY0a45y8KMhN4Nh/Fc5FfaDABz6pSsIu+EhBCPxZl8BBe/j98p tKdYiQ6u9QiYTk1DHxCL5Ccx2uQoQ/4= -----END CERTIFICATE-----Generated at Tue Jul 1 09:55:22 2025 by rpki-client