$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa File: ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa (raw, json) Hash identifier: BayKvgF5bYmxpOvnP+8ul+F0lVp9ZdRw8Mpin4WSkLw= Subject key identifier: A6:15:15:BB:A2:98:5C:37:26:9E:4E:0C:51:E6:4A:19:88:38:5A:80 Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Certificate serial: 010D0C9F4328584A2ABAD3A9F9EB83733D5E2680 Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 394893 IP address blocks: 209.112.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:d3:a9:f9:eb:83:73:3d:5e:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=1baf5728-e22a-47ae-968b-2b45d1c2e852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3d:af:cd:9e:86:fa:58:71:89:6d:1e:0e:3a: 96:9b:77:cf:e1:79:ac:0c:df:70:5d:e4:e5:58:89: a3:2d:ca:a3:9b:e3:79:94:bc:4a:2f:be:5d:3b:8a: c8:9b:ce:ee:b9:f4:d2:46:62:6d:86:0f:7b:56:b0: d8:94:34:79:ae:de:9b:3e:4b:4c:53:f2:7d:69:89: ce:05:0b:70:3e:0d:00:db:4d:a5:92:1c:ce:86:7f: 61:41:15:0c:73:81:90:2c:83:74:43:46:3a:7a:7b: 53:e1:1d:f2:1b:72:1c:fa:83:5e:16:c3:fa:7a:fb: f1:c4:99:aa:ed:56:ce:24:fb:cb:85:1c:f9:78:e7: 59:65:71:14:19:10:b6:86:51:cd:28:91:10:bc:a3: 9b:b8:f8:bc:09:56:41:6e:81:b5:fe:92:93:43:38: 39:82:fe:e6:07:64:1e:76:5c:cb:84:e5:80:39:ff: c3:e9:67:8f:f0:ec:44:33:36:d5:83:ac:77:ae:bf: 31:b4:9e:9f:56:bd:b0:4c:2a:ca:e1:96:a6:eb:de: 8f:13:61:2c:10:0c:3f:4f:65:14:1d:e9:88:b3:95: b8:c4:a4:fc:ba:07:cf:45:7f:b5:ae:8b:66:42:4b: e5:3b:08:86:69:f2:15:05:03:52:ff:2f:52:11:f8: 4d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:15:15:BB:A2:98:5C:37:26:9E:4E:0C:51:E6:4A:19:88:38:5A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl X509v3 Authority Key Identifier: keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer sbgp-ipAddrBlock: critical IPv4: 209.112.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:79:c4:cd:88:e5:7d:f1:b7:d4:66:d3:47:8d:70:0b:3a:43: c6:04:42:31:ec:d1:ff:2e:d3:33:6b:a2:99:83:5e:a0:e5:0e: 8a:ed:ff:be:46:6c:c9:c8:21:96:2f:6d:ef:69:06:e1:6e:45: a7:ae:72:b4:6e:83:24:38:70:71:a9:0c:43:bc:7e:28:2b:ce: 44:e1:94:c1:3f:2d:ed:f2:dc:1d:f2:df:b2:fe:7a:9a:e4:af: d5:9f:4e:51:03:21:be:98:7c:44:ab:f1:dd:2c:87:bc:f9:6a: c2:e9:bc:63:c4:58:1c:ef:6a:ae:ae:d8:2d:13:9d:c8:f4:2e: 5a:9c:4e:a3:c5:9b:90:1d:e9:4f:be:6d:da:f7:d3:f5:32:22: cf:af:84:a8:4a:75:6d:7a:47:3d:78:26:56:5b:80:be:3b:ff: c4:a9:05:a2:c0:b5:8e:ba:e0:2f:24:a3:b3:23:03:db:8d:68: 37:a7:f9:cf:23:4d:d8:b4:4e:d2:28:d8:33:07:e8:1e:fd:88: 11:b1:67:ed:86:cc:75:41:70:98:29:c1:86:7f:b3:c6:3c:5a: a0:28:ee:f9:7f:75:11:0b:58:51:fa:51:34:61:94:4f:a4:53: 71:66:53:52:9c:62:a8:aa:f9:9c:fe:4a:ff:bc:71:0e:35:70: 86:0a:d6:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutOp+euDcz1eJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl ZGI0MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MWJhZjU3MjgtZTIyYS00N2FlLTk2OGItMmI0NWQxYzJlODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j2vzZ6G+lhxiW0eDjqWm3fP4XmsDN9wXeTl WImjLcqjm+N5lLxKL75dO4rIm87uufTSRmJthg97VrDYlDR5rt6bPktMU/J9aYnO BQtwPg0A202lkhzOhn9hQRUMc4GQLIN0Q0Y6entT4R3yG3Ic+oNeFsP6evvxxJmq 7VbOJPvLhRz5eOdZZXEUGRC2hlHNKJEQvKObuPi8CVZBboG1/pKTQzg5gv7mB2Qe dlzLhOWAOf/D6WeP8OxEMzbVg6x3rr8xtJ6fVr2wTCrK4Zam696PE2EsEAw/T2UU HemIs5W4xKT8ugfPRX+1rotmQkvlOwiGafIVBQNS/y9SEfhNHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYVFbuimFw3Jp5ODFHmShmIOFqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvZmYzYmFiYzMtYTFmNi0z MDRhLThkYzctZDdiMjljYWE3YWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ15xM2I5X3xt9Rm00eNcAs6Q8YEQjHs0f8u0zNropmDXqDlDort/75G bMnIIZYvbe9pBuFuRaeucrRugyQ4cHGpDEO8figrzkThlME/Le3y3B3y37L+eprk r9WfTlEDIb6YfESr8d0sh7z5asLpvGPEWBzvaq6u2C0Tncj0LlqcTqPFm5Ad6U++ bdr30/UyIs+vhKhKdW16Rz14JlZbgL47/8SpBaLAtY664C8ko7MjA9uNaDen+c8j Tdi0TtIo2DMH6B79iBGxZ+2GzHVBcJgpwYZ/s8Y8WqAo7vl/dRELWFH6UTRhlE+k U3FmU1KcYqiq+Zz+Sv+8cQ41cIYK1tI= -----END CERTIFICATE-----Generated at Fri Jul 4 21:14:43 2025 by rpki-client