$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa File: 9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa (raw, json) Hash identifier: qQZhecNQGI/A2iK0FXsIDBQvAoI9z6hnCIsHQL6TwbI= Subject key identifier: 0C:46:92:C4:A7:67:E6:3C:32:E5:D6:0D:59:4A:93:4C:D6:61:82:59 Certificate issuer: /CN=700690a7-1957-45e2-8744-ee9735b07319 Certificate serial: 010D0C9F4328584A0D6A8A4DF5FE431EA7A14660 Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 36289 IP address blocks: 209.209.24.0/24 maxlen: 24 2602:fcb8::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:8a:4d:f5:fe:43:1e:a7:a1:46:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=e9b43d12-62a0-442b-a32f-fab24344f68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:06:a4:aa:14:f0:b5:49:ac:ae:3a:70:a3: 02:20:28:40:20:d0:f5:eb:84:7c:2a:2e:76:4b:88: 75:3e:64:de:9e:c1:e7:86:02:77:74:94:86:a7:2e: 7a:60:2b:b4:04:6a:55:9b:0b:e1:8c:7b:1a:0c:be: ac:21:7a:e9:6a:80:38:de:78:54:1a:9d:c4:0b:f1: 79:6d:b8:22:d4:b1:12:8e:51:f6:03:04:a0:ff:76: 3d:6c:57:47:cb:7b:c8:bc:bd:1f:7a:96:f9:9c:26: 7a:4d:64:1c:2a:8c:b5:07:a1:6e:75:de:bb:89:02: bc:ea:bd:1b:67:06:b1:21:a1:f5:69:7d:07:f8:07: b9:90:2f:6e:77:11:2f:56:c0:06:19:7e:07:d7:e5: 25:70:9d:b0:97:70:04:db:84:66:59:03:a1:b8:6b: 45:5b:75:48:54:f4:92:f3:a1:96:8c:4c:40:82:d4: 69:8a:70:cc:27:23:8c:ce:59:0f:cf:0b:54:13:c8: 22:ab:37:0e:68:bb:0f:8e:f6:5f:c7:92:7d:2e:c7: 66:7c:af:02:78:a0:5a:b9:dc:61:45:8a:92:7a:17: 98:1c:c9:02:ba:4b:79:a8:06:b9:c3:ee:43:73:cb: d1:a7:b9:ab:bb:17:8d:3a:ff:70:d9:f3:50:fe:76: 50:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:46:92:C4:A7:67:E6:3C:32:E5:D6:0D:59:4A:93:4C:D6:61:82:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl X509v3 Authority Key Identifier: keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer sbgp-ipAddrBlock: critical IPv4: 209.209.24.0/24 IPv6: 2602:fcb8::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a5:8e:dc:0b:c1:4c:fe:6d:f1:43:1e:62:63:9e:0d:41:58: 41:1a:4f:aa:a1:71:8a:92:14:cc:91:e8:76:0e:3f:06:6c:ff: 22:4b:ea:d4:3e:55:d9:4e:77:82:58:e0:86:61:1c:96:9b:29: 34:23:fe:23:48:7d:f6:1c:17:a4:75:60:30:9a:95:3e:1c:9b: c9:e0:bb:80:99:cc:bc:c5:b3:28:a8:8f:f4:50:98:da:1f:f0: 54:69:fc:2d:9f:b6:bc:26:b2:41:70:51:31:0c:8f:df:29:09: 8f:08:cc:a2:ea:c1:38:90:05:2d:0c:ba:35:73:6a:84:fa:ab: 25:ae:7c:ad:b4:5f:e1:45:ac:d7:97:c8:ee:a4:56:3d:70:99: 6b:a4:f3:bf:eb:d4:7c:99:9e:58:99:8d:53:e2:39:41:2d:47: 99:a3:71:f8:e7:e1:9d:ec:f0:e5:3b:49:21:34:de:54:06:6e: cc:af:9c:58:f4:83:3d:ab:7c:2c:f4:8b:0f:a2:d9:3d:bd:d6: eb:7a:e8:28:54:2a:cb:40:ef:14:3a:32:dc:72:c0:6c:c2:cd: e9:35:d0:0b:9c:ec:54:fe:7d:04:8b:9a:94:bc:60:8a:61:3b: d8:e6:2a:bd:ae:ab:28:7e:09:06:99:7c:1c:c1:b0:35:62:51: a4:47:ab:61 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoNaopN9f5DHqehRmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNjkwYTctMTk1Ny00NWUyLTg3NDQtZWU5NzM1YjA3 MzE5MB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk ZTliNDNkMTItNjJhMC00NDJiLWEzMmYtZmFiMjQzNDRmNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYoGpKoU8LVJrK46cKMCIChAIND164R8Ki52 S4h1PmTensHnhgJ3dJSGpy56YCu0BGpVmwvhjHsaDL6sIXrpaoA43nhUGp3EC/F5 bbgi1LESjlH2AwSg/3Y9bFdHy3vIvL0fepb5nCZ6TWQcKoy1B6Fudd67iQK86r0b ZwaxIaH1aX0H+Ae5kC9udxEvVsAGGX4H1+UlcJ2wl3AE24RmWQOhuGtFW3VIVPSS 86GWjExAgtRpinDMJyOMzlkPzwtUE8giqzcOaLsPjvZfx5J9LsdmfK8CeKBaudxh RYqSeheYHMkCukt5qAa5w+5Dc8vRp7mruxeNOv9w2fNQ/nZQxwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAxGksSnZ+Y8MuXWDVlKk0zWYYJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDA2 OTBhNy0xOTU3LTQ1ZTItODc0NC1lZTk3MzViMDczMTkvOWE3ZTVkMDUtMTFjMi0z ODUxLWIwMzgtMmJjYzRlNWNkYWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAwNjkwYTctMTk1Ny00NWUyLTg3 NDQtZWU5NzM1YjA3MzE5LzcwMDY5MGE3LTE5NTctNDVlMi04NzQ0LWVlOTczNWIw NzMxOS5jcmwwHwYDVR0jBBgwFoAUIamavUUq0vNcIiwf8NmYuXDa2n0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDA2OTBhNy0xOTU3LTQ1ZTItODc0NC1lZTk3 MzViMDczMTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA0dEYMA4E AgACMAgDBgQmAvy4ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLpY7cC8FM/m3xQx5iY54NQVhBGk+qoXGK khTMkeh2Dj8GbP8iS+rUPlXZTneCWOCGYRyWmyk0I/4jSH32HBekdWAwmpU+HJvJ 4LuAmcy8xbMoqI/0UJjaH/BUafwtn7a8JrJBcFExDI/fKQmPCMyi6sE4kAUtDLo1 c2qE+qslrnyttF/hRazXl8jupFY9cJlrpPO/69R8mZ5YmY1T4jlBLUeZo3H45+Gd 7PDlO0khNN5UBm7Mr5xY9IM9q3ws9IsPotk9vdbreugoVCrLQO8UOjLccsBsws3p NdALnOxU/n0Ei5qUvGCKYTvY5iq9rqsofgkGmXwcwbA1YlGkR6th -----END CERTIFICATE-----Generated at Fri Jul 4 10:16:49 2025 by rpki-client