$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8174c6-4d32-332a-872e-1512e0ddb082.roa File: 2a8174c6-4d32-332a-872e-1512e0ddb082.roa (raw, json) Hash identifier: WLAsXvDQLNBOQAg4PJlQvk3rqqQQyUZjdvrJfaqI1LQ= Subject key identifier: 10:90:7A:06:06:1F:3F:E2:F3:59:CE:EF:58:F8:00:55:DD:6A:58:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC8D28695897A2E94D8F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8174c6-4d32-332a-872e-1512e0ddb082.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 62526 IP address blocks: 209.23.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:8d:28:69:58:97:a2:e9:4d:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=dc30b091-fd27-4d29-bc25-5a46f4a3feda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6e:8c:8f:59:54:36:13:c4:36:bb:ff:ad:d0: 3f:89:5b:0e:39:74:52:f4:73:02:e9:f8:0d:61:bb: 2e:d3:8e:99:ec:b8:c8:a2:34:72:94:b3:f6:68:ff: 85:43:43:d4:30:ea:83:59:5c:45:d6:31:f3:5d:ce: 1c:79:d8:05:1e:50:47:20:9d:33:c5:16:26:04:9d: a5:54:ed:3b:bc:d8:cb:17:9c:bc:6f:d9:8c:df:72: 5d:18:c1:57:08:1a:5a:32:67:c5:27:c0:e3:1b:47: 6f:b8:db:ba:d5:e2:b3:f4:d1:1b:4d:ed:cb:14:6d: 27:08:90:fb:e6:52:ff:60:82:28:03:a3:c5:ab:f2: 77:5e:e9:39:88:cd:6e:6d:9f:dd:9d:b8:93:68:ac: db:31:78:85:12:c5:e5:95:2e:e5:2c:c4:e7:e8:e7: a6:82:5a:ec:4a:c4:51:d2:92:c5:52:0f:70:44:66: c9:e9:e4:bb:e2:de:3a:ad:db:69:7a:72:04:3a:40: 7e:09:df:94:4b:e0:b9:27:69:cc:91:64:39:9f:e6: 4d:7b:72:c2:4e:90:68:33:4b:d4:5f:23:55:2b:9b: 58:91:90:67:59:be:8f:7a:4a:3e:6a:92:56:5e:7d: 10:2d:ce:fd:e4:2e:84:c9:22:43:b2:24:53:bf:a3: 09:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:90:7A:06:06:1F:3F:E2:F3:59:CE:EF:58:F8:00:55:DD:6A:58:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8174c6-4d32-332a-872e-1512e0ddb082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 209.23.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:24:51:81:53:6f:15:c7:0c:2b:1e:54:66:58:9f:38:9c:cb: 41:c3:1c:ba:cd:25:24:80:45:50:c0:c4:11:e0:0e:26:cd:f8: 16:21:eb:1b:37:0e:99:5e:73:05:35:58:36:b6:5b:e3:d0:f2: 86:45:b6:f5:1a:af:7d:0c:06:07:0c:9a:f8:73:99:ca:f2:29: 63:d4:2c:f0:a6:86:1f:48:d5:08:fe:7b:27:9e:3d:52:9f:15: 6b:d3:e7:38:19:e8:6b:3f:e1:98:e1:7a:d3:69:c1:e6:d7:39: 6d:e2:bb:ee:ee:db:55:46:58:93:7a:6c:e3:c0:bf:e4:de:ea: 6f:af:0e:0f:98:aa:ca:32:58:f4:a2:b7:b9:8f:5c:33:f4:9e: 6a:1e:2f:3d:5f:90:a1:46:6e:aa:5c:b8:cd:a4:95:81:75:be: 0a:bc:ca:29:f7:03:50:36:6a:6b:56:bd:2b:15:8d:cb:e1:1b: 38:42:c1:30:62:2a:9a:1c:b9:ee:d0:d5:ba:7a:b7:75:b4:b9: 3b:d0:9b:fe:a5:32:cb:88:af:12:10:e7:27:83:30:38:12:3d: 6f:bc:66:e7:7a:69:f3:eb:1a:73:1d:8e:fc:e4:84:db:05:20: d1:2d:45:37:a0:46:7c:3e:f2:c1:56:fc:47:db:d2:30:3d:d5: db:e9:c7:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/I0oaViXoulNj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZGMzMGIwOTEtZmQyNy00ZDI5LWJjMjUtNWE0NmY0YTNmZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG6Mj1lUNhPENrv/rdA/iVsOOXRS9HMC6fgN Ybsu046Z7LjIojRylLP2aP+FQ0PUMOqDWVxF1jHzXc4cedgFHlBHIJ0zxRYmBJ2l VO07vNjLF5y8b9mM33JdGMFXCBpaMmfFJ8DjG0dvuNu61eKz9NEbTe3LFG0nCJD7 5lL/YIIoA6PFq/J3Xuk5iM1ubZ/dnbiTaKzbMXiFEsXllS7lLMTn6OemglrsSsRR 0pLFUg9wRGbJ6eS74t46rdtpenIEOkB+Cd+US+C5J2nMkWQ5n+ZNe3LCTpBoM0vU XyNVK5tYkZBnWb6Peko+apJWXn0QLc795C6EySJDsiRTv6MJ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCQegYGHz/i81nO71j4AFXdalj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmE4MTc0YzYtNGQzMi0z MzJhLTg3MmUtMTUxMmUwZGRiMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADskUYFTbxXHDCseVGZYnzicy0HDHLrNJSSARVDAxBHgDibN+BYh6xs3 DplecwU1WDa2W+PQ8oZFtvUar30MBgcMmvhzmcryKWPULPCmhh9I1Qj+eyeePVKf FWvT5zgZ6Gs/4ZjhetNpwebXOW3iu+7u21VGWJN6bOPAv+Te6m+vDg+YqsoyWPSi t7mPXDP0nmoeLz1fkKFGbqpcuM2klYF1vgq8yin3A1A2amtWvSsVjcvhGzhCwTBi Kpocue7Q1bp6t3W0uTvQm/6lMsuIrxIQ5yeDMDgSPW+8Zud6afPrGnMdjvzkhNsF INEtRTegRnw+8sFW/Efb0jA91dvpx3E= -----END CERTIFICATE-----Generated at Tue Jul 1 01:06:27 2025 by rpki-client