$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2672bc6c-4b78-3083-b2c7-8b00cb19a4df.roa File: 2672bc6c-4b78-3083-b2c7-8b00cb19a4df.roa (raw, json) Hash identifier: iHP1YujC4ED8orw63bODddukJ4iHpGy6owVWE7zCenA= Subject key identifier: 1B:25:2E:A4:56:6D:9E:A0:0F:CF:A2:9F:49:87:18:B4:98:44:62:C7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A480AE059274344D2056E7D80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2672bc6c-4b78-3083-b2c7-8b00cb19a4df.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 62044 IP address blocks: 209.55.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e0:59:27:43:44:d2:05:6e:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=708244e5-830c-44c6-87f6-588bffbc0b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d7:de:e6:24:be:82:0d:f2:bb:1f:98:fd:cd: e0:65:9e:aa:fc:d3:fe:59:7d:70:d4:25:91:ba:18: 17:9f:81:fa:a6:83:fd:b2:e7:58:9a:0b:86:7e:bc: dd:51:74:f8:ec:e4:46:ef:9a:a1:be:71:c1:e2:81: 35:55:37:ce:c9:ff:c5:ba:47:76:68:64:cc:77:ef: 88:55:22:c3:16:a4:71:a1:d1:df:5d:13:57:d8:3f: 28:b1:24:9b:4a:3b:2b:65:f8:e7:02:bb:2f:b1:d0: f0:8a:a9:db:17:d2:15:65:67:89:94:44:69:9d:71: 0a:5d:4d:4a:b4:fc:5c:4b:47:f9:a7:1d:ba:db:da: df:e7:40:f8:45:5e:e4:9a:68:1f:1e:55:c6:47:62: dc:54:1e:cd:e5:06:f4:c5:31:87:1b:23:d2:97:c7: da:37:c3:70:80:a0:13:36:1d:97:a5:79:41:9f:2f: 64:b8:d5:e3:81:a4:02:a8:50:14:d6:f4:d3:e8:da: b4:1b:88:6f:74:fc:9b:e1:4b:26:0a:8a:51:8e:cf: e4:76:c8:f8:ec:a8:e5:d0:7f:4f:fb:48:24:e6:02: 41:19:2d:6f:36:3e:ee:92:cf:3f:f8:3a:05:ca:79: 7d:71:8c:05:ce:d5:25:16:29:0a:48:df:f9:73:42: 5f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:25:2E:A4:56:6D:9E:A0:0F:CF:A2:9F:49:87:18:B4:98:44:62:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2672bc6c-4b78-3083-b2c7-8b00cb19a4df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c1:61:6f:76:f9:2f:91:6d:48:88:e1:4b:f3:53:0e:2f:19: bb:06:58:49:40:30:28:7f:fa:ee:3d:d9:61:8b:5e:ce:47:e2: c8:60:9c:6d:40:cc:f3:d2:0d:e8:70:20:ec:e8:d8:ec:da:56: 35:c6:81:af:d2:4f:8e:81:95:68:28:ea:59:92:b8:27:73:32: 0e:be:bb:a9:a6:52:92:b4:39:bb:7d:fd:5f:eb:cf:df:61:04: b2:4b:36:d2:74:e3:cb:f8:f5:bf:33:ae:75:d4:7a:34:4b:07: 4d:31:88:8b:26:54:b9:d3:a1:bd:53:75:92:af:59:4e:47:c3: 34:f7:e9:88:c4:7e:80:7f:d2:09:fe:44:2e:62:63:de:35:cc: 63:78:6d:72:41:bb:78:7a:8e:1b:26:57:cb:75:8d:31:a5:e2: cb:e4:b4:1a:c1:b3:82:53:30:f1:5c:c6:33:f5:b8:59:e0:94: da:6b:3c:18:99:20:5a:38:d3:d8:80:10:a9:a1:01:be:43:b5: c0:dd:02:d0:d3:e3:76:e7:5e:f1:fe:cc:39:9e:bb:54:38:61: 24:d9:45:e1:71:be:31:ff:ca:69:43:b8:5b:98:3d:12:f0:db: 3a:98:3b:d5:a9:c4:18:09:91:2f:96:71:06:55:96:6a:2a:29: 34:66:bc:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICuBZJ0NE0gVufYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk NzA4MjQ0ZTUtODMwYy00NGM2LTg3ZjYtNTg4YmZmYmMwYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdfe5iS+gg3yux+Y/c3gZZ6q/NP+WX1w1CWR uhgXn4H6poP9sudYmguGfrzdUXT47ORG75qhvnHB4oE1VTfOyf/Fukd2aGTMd++I VSLDFqRxodHfXRNX2D8osSSbSjsrZfjnArsvsdDwiqnbF9IVZWeJlERpnXEKXU1K tPxcS0f5px2629rf50D4RV7kmmgfHlXGR2LcVB7N5Qb0xTGHGyPSl8faN8NwgKAT Nh2XpXlBny9kuNXjgaQCqFAU1vTT6Nq0G4hvdPyb4UsmCopRjs/kdsj47Kjl0H9P +0gk5gJBGS1vNj7uks8/+DoFynl9cYwFztUlFikKSN/5c0JfHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBslLqRWbZ6gD8+in0mHGLSYRGLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjY3MmJjNmMtNGI3OC0z MDgzLWIyYzctOGIwMGNiMTlhNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Te6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDBYW92+S+RbUiI4UvzUw4vGbsGWElAMCh/+u492WGLXs5H4shgnG1A zPPSDehwIOzo2OzaVjXGga/ST46BlWgo6lmSuCdzMg6+u6mmUpK0Obt9/V/rz99h BLJLNtJ048v49b8zrnXUejRLB00xiIsmVLnTob1TdZKvWU5HwzT36YjEfoB/0gn+ RC5iY941zGN4bXJBu3h6jhsmV8t1jTGl4svktBrBs4JTMPFcxjP1uFnglNprPBiZ IFo409iAEKmhAb5DtcDdAtDT43bnXvH+zDmeu1Q4YSTZReFxvjH/ymlDuFuYPRLw 2zqYO9WpxBgJkS+WcQZVlmoqKTRmvJk= -----END CERTIFICATE-----Generated at Sun Jun 29 13:29:07 2025 by rpki-client