$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa File: a76e2a99-afef-387e-82e9-daf0c2b55c50.roa (raw, json) Hash identifier: UurnKWF8Af/9Qa5bsRqjfrY6S3ckU+S8y19a5PuuTKw= Subject key identifier: 03:22:96:D4:ED:F0:D9:24:38:EA:C8:CB:65:39:14:5F:57:78:C1:F0 Certificate issuer: /CN=83978879-0e89-498f-901b-884a1988c27f Certificate serial: 010D0C9F4328584A00DABCA379664C7E94E1BEB0 Authority key identifier: F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 21615 IP address blocks: 209.33.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:bc:a3:79:66:4c:7e:94:e1:be:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83978879-0e89-498f-901b-884a1988c27f Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=e56d9abe-8e78-4980-a5fd-77ce20506632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:71:d3:6d:b6:ea:69:92:ad:c8:38:3a:d5: f0:b4:81:76:11:bb:5c:87:c3:46:7b:55:c0:9f:e4: d5:f4:ca:39:fe:73:08:e1:80:af:5d:04:20:e1:ac: e7:88:79:75:9d:aa:72:f3:20:a5:b2:fb:b0:72:db: 4b:dd:58:73:74:0b:79:4b:3e:09:b7:f6:20:32:33: 84:7d:e8:aa:c1:6e:1d:c0:64:88:10:1a:1e:8a:2c: 24:cd:f1:4d:23:4b:3f:c3:3a:34:b1:2b:9d:bc:d4: 51:bf:4e:10:c9:db:7a:8a:cb:f4:8f:86:78:cb:da: 1a:58:8a:ea:50:3a:fe:d2:3e:17:a1:c8:88:fd:0d: 6f:ac:12:c5:b1:e8:86:85:7b:2e:2b:ef:8d:0c:ed: dc:bc:ac:e6:ed:6c:12:06:54:04:44:01:6b:ea:ae: ae:9f:07:b2:04:69:5e:d6:bb:cb:de:9c:7c:43:c5: 18:c5:e6:9a:54:af:ce:c8:d6:13:ec:a7:ac:71:ef: c1:ee:18:40:b3:d6:79:4f:ac:11:81:d5:4f:5a:5a: 42:f6:6a:63:b8:7d:7b:ca:44:f2:8d:21:24:2c:79: d7:29:e6:8f:3e:5d:24:13:a9:aa:58:c8:e2:f1:4b: e9:41:e7:8c:08:74:f7:6d:87:0f:62:84:40:91:16: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:22:96:D4:ED:F0:D9:24:38:EA:C8:CB:65:39:14:5F:57:78:C1:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl X509v3 Authority Key Identifier: keyid:F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer sbgp-ipAddrBlock: critical IPv4: 209.33.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:97:94:9e:a7:57:e4:0f:c2:ec:f0:59:b2:8f:5e:e1:19:c2: 75:14:34:65:b6:c4:f2:3e:f4:5b:a8:ec:4e:69:24:c2:50:84: b8:d9:89:8e:3b:57:62:4c:11:78:aa:b3:61:67:c5:0c:18:fd: c3:d5:7b:c7:79:19:b7:d8:60:96:11:94:a9:96:1a:30:d9:cf: 2d:8d:d4:52:c9:3d:44:7d:dd:b4:94:3d:68:4c:cb:a7:78:ae: 2e:4b:6a:92:3e:23:d8:b5:c2:65:d3:da:de:ec:f6:83:69:58: 3c:a6:67:2d:9c:e4:56:58:9a:a3:78:e4:5b:91:cc:7f:fd:b5: c8:e3:b3:2e:2a:f4:7a:8a:45:9a:c1:5e:63:dc:8c:5e:ae:09: 56:ad:dc:09:e8:c9:fc:71:c1:d4:0f:0f:56:b8:d0:58:eb:df: 2c:5c:bf:1a:fc:f6:61:c8:49:5e:18:82:13:be:32:e1:bf:ab: 0e:bd:db:d4:d2:de:ea:a8:21:19:9f:b6:d2:93:b2:94:ee:9e: d7:97:87:60:36:0d:26:c8:b9:27:d8:a1:68:b1:4e:c7:ea:4c: 07:a9:c6:33:98:d0:6d:08:68:06:8b:3c:ca:de:65:1a:05:f8: d9:0e:75:44:16:ee:5d:18:76:27:be:f7:42:6f:7f:b3:0a:c3: 37:a5:cf:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2ryjeWZMfpThvrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM5Nzg4NzktMGU4OS00OThmLTkwMWItODg0YTE5ODhj MjdmMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZTU2ZDlhYmUtOGU3OC00OTgwLWE1ZmQtNzdjZTIwNTA2NjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArONx02226mmSrcg4OtXwtIF2Ebtch8NGe1XA n+TV9Mo5/nMI4YCvXQQg4azniHl1napy8yClsvuwcttL3VhzdAt5Sz4Jt/YgMjOE feiqwW4dwGSIEBoeiiwkzfFNI0s/wzo0sSudvNRRv04Qydt6isv0j4Z4y9oaWIrq UDr+0j4XociI/Q1vrBLFseiGhXsuK++NDO3cvKzm7WwSBlQERAFr6q6unweyBGle 1rvL3px8Q8UYxeaaVK/OyNYT7Kesce/B7hhAs9Z5T6wRgdVPWlpC9mpjuH17ykTy jSEkLHnXKeaPPl0kE6mqWMji8UvpQeeMCHT3bYcPYoRAkRZ4swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMiltTt8NkkOOrIy2U5FF9XeMHwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Mzk3 ODg3OS0wZTg5LTQ5OGYtOTAxYi04ODRhMTk4OGMyN2YvYTc2ZTJhOTktYWZlZi0z ODdlLTgyZTktZGFmMGMyYjU1YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODM5Nzg4NzktMGU4OS00OThmLTkw MWItODg0YTE5ODhjMjdmLzgzOTc4ODc5LTBlODktNDk4Zi05MDFiLTg4NGExOTg4 YzI3Zi5jcmwwHwYDVR0jBBgwFoAU8hNJvB6lb5TpnmMzzFMcxfcAueIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84Mzk3ODg3OS0wZTg5LTQ5OGYtOTAxYi04ODRh MTk4OGMyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCXlJ6nV+QPwuzwWbKPXuEZwnUUNGW2xPI+9Fuo7E5pJMJQhLjZiY47 V2JMEXiqs2FnxQwY/cPVe8d5GbfYYJYRlKmWGjDZzy2N1FLJPUR93bSUPWhMy6d4 ri5LapI+I9i1wmXT2t7s9oNpWDymZy2c5FZYmqN45FuRzH/9tcjjsy4q9HqKRZrB XmPcjF6uCVat3AnoyfxxwdQPD1a40Fjr3yxcvxr89mHISV4YghO+MuG/qw6929TS 3uqoIRmfttKTspTunteXh2A2DSbIuSfYoWixTsfqTAepxjOY0G0IaAaLPMreZRoF +NkOdUQW7l0Ydie+90Jvf7MKwzelz98= -----END CERTIFICATE-----Generated at Tue Jul 1 15:38:28 2025 by rpki-client