$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/b200cd9b-0122-35f6-8a2f-e37f12807899.roa File: b200cd9b-0122-35f6-8a2f-e37f12807899.roa (raw, json) Hash identifier: paPWWibX0fGioTZCi9H0M3On2xZTIzP7r868UDt/bKM= Subject key identifier: B2:AE:61:10:94:DB:B1:C1:2B:4D:90:D1:A3:57:15:DB:E5:A4:CD:5C Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F4328584A454035B1762FCE54E6398A50 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/b200cd9b-0122-35f6-8a2f-e37f12807899.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 54098 IP address blocks: 209.222.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:35:b1:76:2f:ce:54:e6:39:8a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=3215aaf2-0954-4b64-ad09-7b9a5b911921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:b6:35:83:70:10:fe:b9:ab:00:68:70:7a: 6a:71:7e:57:c7:0c:31:1a:f6:8f:2d:a8:fd:61:63: 5c:7e:42:15:a5:20:db:7d:6e:a7:88:65:cd:95:69: 7d:db:d1:b2:ff:4a:10:d2:44:15:83:9d:7e:e5:ca: fb:96:17:62:90:64:3d:22:50:81:78:c2:6f:42:4c: 4c:1a:88:b1:14:56:c5:41:88:ae:7a:69:b5:e2:52: 1e:10:81:15:7f:37:d5:c6:5f:c0:89:ff:38:9d:de: 6a:80:ee:a8:92:f2:28:5d:06:a2:e3:83:20:83:25: a4:7f:58:45:27:93:4a:ee:f5:51:c6:ef:c0:37:6a: ec:c1:06:4e:2e:d0:56:17:58:cf:62:da:c1:57:9e: 13:68:bf:c3:e5:ba:bb:e4:d6:09:13:cc:74:5a:65: 52:9e:79:5a:ba:03:a1:cc:1c:a8:2d:c4:8b:71:3f: fc:17:32:ee:52:13:33:b9:2b:44:72:11:a9:fb:a9: c2:32:20:e9:e5:38:4f:15:91:9d:a6:71:0a:a7:18: 43:ff:78:db:c3:2b:fa:e1:17:f0:a2:69:34:71:36: 8d:d8:2f:48:4a:ca:52:20:d5:35:f9:82:01:e3:6f: 90:d0:49:4d:63:69:15:b7:bc:15:36:73:f8:20:a5: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AE:61:10:94:DB:B1:C1:2B:4D:90:D1:A3:57:15:DB:E5:A4:CD:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/b200cd9b-0122-35f6-8a2f-e37f12807899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c1:51:7d:e7:e4:86:3b:83:5a:c1:3d:d0:f6:9a:a3:48:88: c4:4c:8b:fc:a1:2e:80:45:50:d3:79:99:b5:50:f1:32:78:82: 5b:5c:ac:38:30:94:c7:93:ee:cf:2b:e2:93:5e:37:74:f6:88: f0:17:fb:bc:74:fb:ce:b3:8b:74:70:df:45:ac:7a:79:6e:c9: 16:1c:0d:52:73:a9:77:d5:c2:24:4b:34:ee:77:b8:32:69:e8: c8:8c:6a:29:40:51:86:99:8b:82:b0:8b:11:6d:2d:84:e7:75: e5:38:14:c3:33:cc:7a:55:c8:ce:48:ad:ae:64:a8:08:85:b5: 03:1f:aa:1e:7c:a2:3f:73:ca:d5:07:cc:13:ad:f2:a3:bd:d2: 80:8d:3c:b9:84:2b:c3:02:5e:85:41:13:24:34:79:66:cb:c2: 7a:3e:61:62:68:41:a2:97:50:c9:91:9f:28:ca:b5:b4:d8:e3: dc:dc:62:06:9a:20:9f:9f:10:98:a5:f8:6c:04:d4:ed:af:71: 9f:a1:ef:ac:c5:ba:00:45:9c:b0:29:33:03:44:14:b5:ab:e2: a3:16:41:72:de:51:1d:ad:b2:ae:91:33:6f:1a:d5:9f:e6:9d: 4f:9a:78:8c:6c:d1:31:97:53:45:dc:b7:d4:1a:bd:0a:71:32: 07:f6:a7:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDWxdi/OVOY5ilAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk MzIxNWFhZjItMDk1NC00YjY0LWFkMDktN2I5YTViOTExOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvy2NYNwEP65qwBocHpqcX5XxwwxGvaPLaj9 YWNcfkIVpSDbfW6niGXNlWl929Gy/0oQ0kQVg51+5cr7lhdikGQ9IlCBeMJvQkxM GoixFFbFQYiuemm14lIeEIEVfzfVxl/Aif84nd5qgO6okvIoXQai44MggyWkf1hF J5NK7vVRxu/AN2rswQZOLtBWF1jPYtrBV54TaL/D5bq75NYJE8x0WmVSnnlaugOh zByoLcSLcT/8FzLuUhMzuStEchGp+6nCMiDp5ThPFZGdpnEKpxhD/3jbwyv64Rfw omk0cTaN2C9ISspSINU1+YIB42+Q0ElNY2kVt7wVNnP4IKW49wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKuYRCU27HBK02Q0aNXFdvlpM1cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvYjIwMGNkOWItMDEyMi0z NWY2LThhMmYtZTM3ZjEyODA3ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjBUX3n5IY7g1rBPdD2mqNIiMRMi/yhLoBFUNN5mbVQ8TJ4gltcrDgw lMeT7s8r4pNeN3T2iPAX+7x0+86zi3Rw30WsenluyRYcDVJzqXfVwiRLNO53uDJp 6MiMailAUYaZi4KwixFtLYTndeU4FMMzzHpVyM5Ira5kqAiFtQMfqh58oj9zytUH zBOt8qO90oCNPLmEK8MCXoVBEyQ0eWbLwno+YWJoQaKXUMmRnyjKtbTY49zcYgaa IJ+fEJil+GwE1O2vcZ+h76zFugBFnLApMwNEFLWr4qMWQXLeUR2tsq6RM28a1Z/m nU+aeIxs0TGXU0Xct9QavQpxMgf2p5U= -----END CERTIFICATE-----Generated at Sun Jun 29 11:45:24 2025 by rpki-client