$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa File: d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa (raw, json) Hash identifier: GLoZe4Waxlmftc0sSeKfkM4+12tt3J9z6QNx1Jc3zVU= Subject key identifier: 32:32:DE:8D:6E:44:2C:AE:6B:BE:10:44:A5:0B:FC:E5:57:E5:8F:5A Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584A2ABAEBB3550CB696ED742990 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 23470 IP address blocks: 209.222.100.0/24 maxlen: 24 209.222.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:eb:b3:55:0c:b6:96:ed:74:29:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=5821f258-8a42-4f94-bbbb-89bcf0a7bea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1c:30:8d:6f:5a:28:4d:a2:b5:62:af:e5:5b: ac:45:40:62:08:d7:c1:c6:8d:d7:d3:61:30:9d:e6: 85:91:5a:ef:86:e0:3f:a0:88:5a:df:c6:42:00:ea: 1e:e7:66:4b:03:b4:9c:d3:5a:7f:6a:61:b9:4e:01: c1:0c:a6:32:22:80:2b:77:9b:ef:34:05:df:17:d6: 04:02:94:6f:cd:0a:f8:62:51:2c:b7:e6:40:da:6e: 69:46:82:77:70:58:f9:8b:d4:54:71:70:a4:d6:fa: 6f:5e:ce:50:31:d9:a7:41:fc:04:5c:1a:96:87:11: 06:74:e3:69:6f:fd:85:34:72:5f:a5:82:a9:94:5c: 7a:ad:6a:10:0c:fa:e8:f3:a7:3d:69:6b:67:10:3c: 59:e1:de:54:f3:63:33:70:9b:51:03:40:ce:fb:79: c5:66:21:7c:b3:e9:9a:53:5e:49:0b:44:08:8c:e6: 07:6b:61:98:9e:91:54:ec:47:89:9f:2f:cb:cc:36: 5a:6f:c6:23:bf:08:23:8e:90:82:49:8c:c3:8a:ce: de:64:55:7e:cf:27:00:37:19:c0:ed:fd:1c:3d:ec: 11:6f:08:dd:17:2c:84:39:a4:e7:c0:af:3c:63:d4: c2:3f:10:94:78:39:6a:fe:a8:42:c3:07:b3:03:25: e9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:32:DE:8D:6E:44:2C:AE:6B:BE:10:44:A5:0B:FC:E5:57:E5:8F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 209.222.100.0/24 209.222.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:84:80:1d:32:74:93:a0:4d:26:1d:28:43:90:10:40:7a:a2: a1:ca:d4:fe:29:62:9a:fb:b4:92:e2:d2:6f:fa:80:1f:66:d8: 43:12:c9:0f:45:99:1f:db:11:67:cd:51:f0:67:d9:69:da:d7: f6:ac:65:25:6e:f8:7a:f8:a9:00:72:c4:92:88:08:c4:4a:17: 9c:bb:fa:8b:6f:63:6e:ff:bf:c3:47:89:41:41:c6:1a:eb:0f: ec:7e:a4:ec:6c:14:be:bf:e0:04:37:b3:0e:8c:eb:b1:09:06: c6:37:8a:0b:d5:5c:7c:d4:11:58:85:d8:72:d6:ae:ee:db:ea: 58:87:0b:f3:55:38:ec:cf:bd:7a:ce:01:99:01:79:e5:08:6b: 45:64:fa:b9:96:dd:50:27:5d:c0:82:40:c7:f8:07:d6:b7:c2: 8a:af:ed:13:95:85:d6:be:0e:d0:76:34:9e:38:af:c0:51:93: 1c:cd:e9:c5:b2:9a:7a:1d:6e:31:63:7b:c6:e7:d2:36:c8:ac: a6:bd:87:34:ed:df:a1:9c:3d:d0:fd:58:93:48:5c:f2:5e:5c: 9b:80:38:42:5d:02:b8:9d:5c:fb:71:78:78:96:5c:2f:a7:cb: 9b:aa:0a:fe:a8:ae:17:9c:59:73:a0:4a:06:21:ba:f5:0e:73: 47:cc:66:1f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoquuuzVQy2lu10KZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NTgyMWYyNTgtOGE0Mi00Zjk0LWJiYmItODliY2YwYTdiZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBwwjW9aKE2itWKv5VusRUBiCNfBxo3X02Ew neaFkVrvhuA/oIha38ZCAOoe52ZLA7Sc01p/amG5TgHBDKYyIoArd5vvNAXfF9YE ApRvzQr4YlEst+ZA2m5pRoJ3cFj5i9RUcXCk1vpvXs5QMdmnQfwEXBqWhxEGdONp b/2FNHJfpYKplFx6rWoQDPro86c9aWtnEDxZ4d5U82MzcJtRA0DO+3nFZiF8s+ma U15JC0QIjOYHa2GYnpFU7EeJny/LzDZab8YjvwgjjpCCSYzDis7eZFV+zycANxnA 7f0cPewRbwjdFyyEOaTnwK88Y9TCPxCUeDlq/qhCwwezAyXpCQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDIy3o1uRCyua74QRKUL/OVX5Y9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvZDFmMTZmMjEtMjEyMy0z NWUwLTllODctOTkxNGYwYjRkNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0d5kAwQA 0d5mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABOEgB0ydJOgTSYdKEOQEEB6oqHK1P4pYpr7tJLi0m/6gB9m 2EMSyQ9FmR/bEWfNUfBn2Wna1/asZSVu+Hr4qQByxJKICMRKF5y7+otvY27/v8NH iUFBxhrrD+x+pOxsFL6/4AQ3sw6M67EJBsY3igvVXHzUEViF2HLWru7b6liHC/NV OOzPvXrOAZkBeeUIa0Vk+rmW3VAnXcCCQMf4B9a3woqv7ROVhda+DtB2NJ44r8BR kxzN6cWymnodbjFje8bn0jbIrKa9hzTt36GcPdD9WJNIXPJeXJuAOEJdAridXPtx eHiWXC+ny5uqCv6orhecWXOgSgYhuvUOc0fMZh8= -----END CERTIFICATE-----Generated at Wed Jul 2 04:42:41 2025 by rpki-client