$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa File: 89fdbba5-c305-3bf1-be38-0d9990f5f655.roa (raw, json) Hash identifier: k8BybM08ZlTXJpwfPRZBVP3UKGsnhrYpmGl1mPBH384= Subject key identifier: 9E:C1:CE:1D:56:39:34:05:94:1F:8D:09:4E:D5:29:E7:DF:1D:AA:5F Certificate issuer: /CN=0067e111-9d19-4c1e-a1ef-86f133669a8e Certificate serial: 010D0C9F4328584A225ABC9095BFB00773C77280 Authority key identifier: 96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 393966 IP address blocks: 204.239.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:bc:90:95:bf:b0:07:73:c7:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0067e111-9d19-4c1e-a1ef-86f133669a8e Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=a0cf1963-5913-4196-8682-036035cf3d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:76:70:ea:33:e8:7e:0e:b0:d4:2c:ee:64: 0c:3f:3b:9e:5d:f4:59:12:c5:5d:3c:86:13:a9:92: 23:1f:0c:13:4b:89:a6:89:f4:c0:e4:fd:67:63:da: aa:74:2a:c7:b8:1d:df:37:a2:7a:7b:a0:97:1c:8b: 76:c9:bc:b8:44:ff:c7:e5:c3:02:7e:a9:f7:eb:2d: 1c:4a:c7:a9:40:a6:28:5a:f8:df:6a:fa:58:0f:3e: 89:e7:38:9c:f8:08:98:e8:91:0c:1f:af:40:b8:6f: 05:c2:c7:64:2c:e8:48:98:32:cd:80:fc:bb:08:f4: d8:0b:e2:e8:4a:65:e9:3c:25:7a:d9:b1:95:fc:1a: 9e:88:d4:67:4a:10:85:d9:88:f3:dc:82:75:59:6b: 40:07:e8:d1:7b:a6:63:d5:b3:a8:17:36:07:5a:3a: fd:61:57:53:04:2d:75:ca:9a:96:a2:8d:59:46:cb: cb:a8:70:98:46:eb:d0:31:05:9e:25:50:4a:21:e4: 39:6d:52:33:c0:05:38:ab:42:da:68:0b:4b:93:89: c5:3f:e7:4d:14:67:b1:a5:ec:1a:e2:63:86:41:43: 9d:b5:2c:37:bc:34:dc:51:fe:a4:22:8b:19:02:b1: 48:7b:1c:49:58:3d:33:06:ba:4d:16:70:44:a3:42: cd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C1:CE:1D:56:39:34:05:94:1F:8D:09:4E:D5:29:E7:DF:1D:AA:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl X509v3 Authority Key Identifier: keyid:96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer sbgp-ipAddrBlock: critical IPv4: 204.239.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f6:9f:dd:47:e4:22:a6:d2:09:6a:bc:0d:00:ec:ac:d7:5e: c4:0b:ef:5a:f4:5e:5a:f5:eb:1f:03:18:7c:d5:b3:da:6b:a6: 94:96:73:15:e2:3a:a0:4a:b4:73:0d:b1:fe:b5:8c:b9:c0:a8: 6b:63:6e:9d:81:0e:b3:03:9d:a7:64:18:d8:54:94:6d:e7:58: 59:04:ef:2b:0d:42:88:60:7f:9b:48:98:b9:b2:92:90:b9:f0: af:2e:cf:72:5b:1b:cc:ba:f4:c2:ef:f4:cb:ec:8d:55:c5:15: 7f:b8:24:63:cb:d3:25:17:33:d4:ad:4a:95:d9:1d:61:8d:a4: a0:96:71:16:4e:a5:e2:72:21:5c:40:61:a6:98:6e:bd:3c:58: ed:ff:63:39:6b:8b:e2:f5:17:15:4f:26:af:b4:60:77:25:09: 32:c9:e1:5f:bf:e4:d7:c4:87:37:d7:19:14:d9:ae:98:21:56: 48:23:0c:45:37:9f:9c:6d:5d:71:d2:1e:ee:0f:6f:ca:ac:2b: df:ba:05:74:c8:84:22:5a:52:9b:ec:f2:07:75:26:e3:12:42: 81:d9:8f:97:ce:26:61:97:1b:41:3d:8c:ab:7b:dd:40:38:ee: 2f:59:7a:9a:70:7c:ec:3f:c3:d3:6f:59:f1:5b:98:3b:2a:d1: 29:15:89:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoiWryQlb+wB3PHcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA2N2UxMTEtOWQxOS00YzFlLWExZWYtODZmMTMzNjY5 YThlMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk YTBjZjE5NjMtNTkxMy00MTk2LTg2ODItMDM2MDM1Y2YzZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbp2cOoz6H4OsNQs7mQMPzueXfRZEsVdPIYT qZIjHwwTS4mmifTA5P1nY9qqdCrHuB3fN6J6e6CXHIt2yby4RP/H5cMCfqn36y0c SsepQKYoWvjfavpYDz6J5zic+AiY6JEMH69AuG8FwsdkLOhImDLNgPy7CPTYC+Lo SmXpPCV62bGV/BqeiNRnShCF2Yjz3IJ1WWtAB+jRe6Zj1bOoFzYHWjr9YVdTBC11 ypqWoo1ZRsvLqHCYRuvQMQWeJVBKIeQ5bVIzwAU4q0LaaAtLk4nFP+dNFGexpewa 4mOGQUOdtSw3vDTcUf6kIosZArFIexxJWD0zBrpNFnBEo0LNQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7Bzh1WOTQFlB+NCU7VKeffHapfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMDY3 ZTExMS05ZDE5LTRjMWUtYTFlZi04NmYxMzM2NjlhOGUvODlmZGJiYTUtYzMwNS0z YmYxLWJlMzgtMGQ5OTkwZjVmNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDA2N2UxMTEtOWQxOS00YzFlLWEx ZWYtODZmMTMzNjY5YThlLzAwNjdlMTExLTlkMTktNGMxZS1hMWVmLTg2ZjEzMzY2 OWE4ZS5jcmwwHwYDVR0jBBgwFoAUlskWWwf6rfza/VMJjgMSFtSDko4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wMDY3ZTExMS05ZDE5LTRjMWUtYTFlZi04NmYx MzM2NjlhOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzO+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/2n91H5CKm0glqvA0A7KzXXsQL71r0Xlr16x8DGHzVs9prppSWcxXi OqBKtHMNsf61jLnAqGtjbp2BDrMDnadkGNhUlG3nWFkE7ysNQohgf5tImLmykpC5 8K8uz3JbG8y69MLv9MvsjVXFFX+4JGPL0yUXM9StSpXZHWGNpKCWcRZOpeJyIVxA YaaYbr08WO3/Yzlri+L1FxVPJq+0YHclCTLJ4V+/5NfEhzfXGRTZrpghVkgjDEU3 n5xtXXHSHu4Pb8qsK9+6BXTIhCJaUpvs8gd1JuMSQoHZj5fOJmGXG0E9jKt73UA4 7i9ZeppwfOw/w9NvWfFbmDsq0SkVicw= -----END CERTIFICATE-----Generated at Mon Jun 30 01:16:45 2025 by rpki-client