$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa File: 476c714e-2cf9-3b0d-a179-f838724e41da.roa (raw, json) Hash identifier: bZa29YYnarHIEL/myd4T21qwMQ5GFYXiIkXlmk+8nOY= Subject key identifier: C7:46:AB:C1:9E:7E:5F:34:4E:C2:7D:56:AC:83:97:84:4E:F5:45:90 Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Certificate serial: 010D0C9F4328584A5600540904D0579FAE3D6E00 Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 13627 IP address blocks: 209.112.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:54:09:04:d0:57:9f:ae:3d:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=93cb9aa8-61a9-45f3-a5d6-52a60a206b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d1:9e:07:93:63:a4:08:07:f0:e3:02:58:e8: 7d:0f:14:58:30:d2:0b:a9:e9:74:3d:ae:90:88:a7: 68:ab:56:a1:d9:d7:78:66:41:b6:cf:e1:8e:0c:0d: 06:53:b5:2a:07:27:47:7f:96:ca:8f:f6:5c:c8:83: 58:ef:c9:ad:32:a1:78:57:e8:91:cd:da:f1:6f:21: 57:a9:e6:6c:9c:9c:71:88:fb:e9:1f:df:bc:9a:8c: db:cc:ae:13:41:3d:ed:cc:b6:dc:98:90:f4:1b:0b: f3:f9:9c:01:f2:8d:7b:f2:e6:66:23:0a:cc:b3:a8: 45:8a:56:15:1c:15:29:6a:2e:f6:2b:9d:f5:d8:b7: 87:4f:cf:35:64:28:14:fb:54:e7:f3:ef:98:1e:93: c8:13:c4:d5:63:9d:f2:5c:f1:9c:ec:9f:a2:7c:a4: 5e:cc:4b:5b:80:4b:eb:d6:40:94:d3:3e:78:97:e8: d0:ca:a3:f0:af:0a:bf:b9:90:5a:f6:e7:ef:c6:72: 2a:1d:86:63:aa:14:02:7b:60:09:a9:35:f7:aa:75: 47:28:ef:b3:06:f7:e5:ac:0d:b7:21:7d:4e:22:91: 2f:06:bc:af:0f:fa:c6:fc:0e:90:c5:c5:3d:80:89: 5d:40:04:2d:1a:82:20:74:2b:d5:32:71:bc:11:64: f9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:46:AB:C1:9E:7E:5F:34:4E:C2:7D:56:AC:83:97:84:4E:F5:45:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl X509v3 Authority Key Identifier: keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer sbgp-ipAddrBlock: critical IPv4: 209.112.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:33:21:f7:bc:95:9a:00:fd:e2:7b:3d:c1:78:d1:cd:e3:1c: 17:dd:e1:47:ec:de:b6:3a:45:93:9a:f9:48:02:02:2f:72:f9: 81:12:ba:96:78:0f:b1:d0:28:24:36:dc:85:04:e5:bd:bd:d1: 89:a7:39:fe:fc:0b:2b:fe:7f:24:1f:48:87:0f:1c:1b:b5:76: af:22:58:0a:24:da:53:1b:3c:b2:07:e0:81:88:63:b8:c1:72: 11:39:59:e3:3f:e0:02:f6:2a:b2:b7:86:9f:fd:aa:52:94:cf: 78:57:f7:fb:2f:cc:e6:fc:0e:68:54:9f:23:71:bf:7c:c0:9c: 24:cd:4f:4d:e1:f7:24:34:19:d8:4f:e8:30:ea:1a:0d:08:bf: 3b:a1:dd:19:79:cd:f0:1b:54:81:f7:6a:ad:de:71:a6:6d:b8: 92:59:02:b8:0b:6d:d8:0d:a6:e1:41:d3:db:46:e4:44:4b:1f: 0f:31:cb:86:3a:13:97:66:bf:f1:2b:41:1a:18:b9:04:90:4d: 85:d2:2c:3a:a4:08:7a:4b:49:06:b9:d6:d8:27:0c:43:82:e2: f1:55:98:ef:b1:55:eb:c8:9a:06:93:2a:24:fc:36:8e:4e:fb: 27:b1:3b:15:8b:72:d8:29:0e:3a:6c:f7:c1:b2:e1:be:b1:93: ac:95:47:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAFQJBNBXn649bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz ZTM3MB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk OTNjYjlhYTgtNjFhOS00NWYzLWE1ZDYtNTJhNjBhMjA2YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitGeB5NjpAgH8OMCWOh9DxRYMNILqel0Pa6Q iKdoq1ah2dd4ZkG2z+GODA0GU7UqBydHf5bKj/ZcyINY78mtMqF4V+iRzdrxbyFX qeZsnJxxiPvpH9+8mozbzK4TQT3tzLbcmJD0Gwvz+ZwB8o178uZmIwrMs6hFilYV HBUpai72K5312LeHT881ZCgU+1Tn8++YHpPIE8TVY53yXPGc7J+ifKRezEtbgEvr 1kCU0z54l+jQyqPwrwq/uZBa9ufvxnIqHYZjqhQCe2AJqTX3qnVHKO+zBvflrA23 IX1OIpEvBryvD/rG/A6QxcU9gIldQAQtGoIgdCvVMnG8EWT5eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdGq8Gefl80TsJ9VqyDl4RO9UWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5 Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvNDc2YzcxNGUtMmNmOS0z YjBkLWExNzktZjgzODcyNGU0MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2 MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8zIfe8lZoA/eJ7PcF40c3jHBfd4Ufs3rY6RZOa+UgCAi9y+YESupZ4 D7HQKCQ23IUE5b290YmnOf78Cyv+fyQfSIcPHBu1dq8iWAok2lMbPLIH4IGIY7jB chE5WeM/4AL2KrK3hp/9qlKUz3hX9/svzOb8DmhUnyNxv3zAnCTNT03h9yQ0GdhP 6DDqGg0Ivzuh3Rl5zfAbVIH3aq3ecaZtuJJZArgLbdgNpuFB09tG5ERLHw8xy4Y6 E5dmv/ErQRoYuQSQTYXSLDqkCHpLSQa51tgnDEOC4vFVmO+xVevImgaTKiT8No5O +yexOxWLctgpDjps98Gy4b6xk6yVR0c= -----END CERTIFICATE-----Generated at Sun Jun 29 09:17:50 2025 by rpki-client