$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa File: 0def88de-7904-3498-ae64-f09bd667030d.roa (raw, json) Hash identifier: RFGe+IljHdg0rVLkEYd0fb+yPgbIzgWJKi92aC1BTQo= Subject key identifier: 0B:D3:55:42:E3:5E:5E:C0:E3:D4:1A:8D:74:02:A1:02:68:CF:09:04 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A58CB01F492260DBB715571C0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 13536 IP address blocks: 209.198.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:01:f4:92:26:0d:bb:71:55:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=3ba19905-fad8-4c4f-87ae-9ecb7deb7097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0b:b0:64:97:f2:63:8e:a2:c0:9b:04:e5:23: f2:3b:86:17:a3:87:9b:7e:09:ab:0e:a7:37:97:5b: c1:54:d9:70:6b:71:3e:92:72:73:fe:f0:83:c4:30: 5f:1f:ff:d5:98:66:b5:29:36:b1:c5:f6:25:f4:54: b1:83:67:e5:b0:87:c5:b3:c9:b9:66:cd:40:89:70: bc:b8:cc:13:c3:c3:dd:5c:2f:6a:26:5b:a0:f9:fa: 4f:8e:a3:a2:87:99:e1:8a:6a:aa:ad:c7:c6:93:de: d9:7b:78:ba:46:b6:0f:31:88:e0:14:66:75:b2:e4: c6:be:c8:77:bc:ee:c2:4c:04:2f:5b:33:9f:81:1d: a6:9e:3c:fd:98:fa:c3:41:8f:d5:26:d4:cd:35:c7: 87:e8:25:da:54:fd:76:81:39:db:bb:1a:b1:d7:b0: 66:aa:bf:35:22:cc:1b:61:c8:24:37:67:f0:8b:86: c8:16:11:fe:23:e2:0d:c6:fb:af:2c:db:61:b9:8b: 77:18:76:42:16:cd:59:f6:36:22:5a:0c:78:43:12: 52:c0:cd:d1:23:7b:27:43:ac:66:77:46:79:55:c6: 00:14:9c:b6:3f:c2:47:71:03:75:04:68:38:66:64: 92:49:f3:7f:a9:fe:9a:95:fe:99:6a:0c:46:6f:06: b7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D3:55:42:E3:5E:5E:C0:E3:D4:1A:8D:74:02:A1:02:68:CF:09:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 209.198.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:87:3f:47:20:30:91:a5:ac:b4:ab:c3:32:12:65:2e:de:62: 23:6e:c1:38:e8:40:2b:cc:24:33:a2:16:2b:f7:3d:f1:f2:f4: a8:e7:18:47:e2:f4:4b:69:c8:e5:f5:8d:fc:e1:51:01:6a:55: 8f:97:18:5a:fd:9f:c2:e2:2d:90:34:c8:e8:2c:db:8a:c1:7c: 6d:69:08:1a:b9:52:a8:71:19:7f:48:8a:a0:24:e9:e2:32:0d: 7d:f6:fd:20:00:e2:3c:5d:eb:9f:9e:b1:f6:df:bb:cf:87:0e: d7:29:60:51:37:8b:7b:92:79:35:43:bd:23:66:29:e3:1f:9f: 3d:c6:a4:17:74:43:fb:c0:47:e5:86:1c:7e:e2:d4:b2:d5:72: 0b:0a:15:0f:25:da:fd:bf:d2:91:77:e5:f8:dc:08:f7:18:27: 6e:9a:77:5c:20:6e:04:f0:51:c2:a3:cf:8e:ae:7c:ec:3a:68: b8:95:a1:24:14:ce:f0:37:05:2c:00:ad:c8:ab:25:c3:a5:8c: 61:de:10:96:5f:c5:d3:04:d2:53:96:2f:a0:ed:20:83:60:f9: ea:80:6e:a0:0b:26:59:65:2c:ce:a0:c9:c0:ee:e2:e0:85:61: 68:72:bf:cc:71:c6:b2:49:2f:2e:6b:58:22:0c:92:b7:b6:70: ec:13:be:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywH0kiYNu3FVccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk M2JhMTk5MDUtZmFkOC00YzRmLTg3YWUtOWVjYjdkZWI3MDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwuwZJfyY46iwJsE5SPyO4YXo4ebfgmrDqc3 l1vBVNlwa3E+knJz/vCDxDBfH//VmGa1KTaxxfYl9FSxg2flsIfFs8m5Zs1AiXC8 uMwTw8PdXC9qJlug+fpPjqOih5nhimqqrcfGk97Ze3i6RrYPMYjgFGZ1suTGvsh3 vO7CTAQvWzOfgR2mnjz9mPrDQY/VJtTNNceH6CXaVP12gTnbuxqx17Bmqr81Iswb YcgkN2fwi4bIFhH+I+INxvuvLNthuYt3GHZCFs1Z9jYiWgx4QxJSwM3RI3snQ6xm d0Z5VcYAFJy2P8JHcQN1BGg4ZmSSSfN/qf6alf6ZagxGbwa3rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvTVULjXl7A49QajXQCoQJozwkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMGRlZjg4ZGUtNzkwNC0z NDk4LWFlNjQtZjA5YmQ2NjcwMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cZCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6HP0cgMJGlrLSrwzISZS7eYiNuwTjoQCvMJDOiFiv3PfHy9KjnGEfi 9EtpyOX1jfzhUQFqVY+XGFr9n8LiLZA0yOgs24rBfG1pCBq5UqhxGX9IiqAk6eIy DX32/SAA4jxd65+esfbfu8+HDtcpYFE3i3uSeTVDvSNmKeMfnz3GpBd0Q/vAR+WG HH7i1LLVcgsKFQ8l2v2/0pF35fjcCPcYJ26ad1wgbgTwUcKjz46ufOw6aLiVoSQU zvA3BSwArcirJcOljGHeEJZfxdME0lOWL6DtIINg+eqAbqALJlllLM6gycDu4uCF YWhyv8xxxrJJLy5rWCIMkre2cOwTvtY= -----END CERTIFICATE-----Generated at Tue Jul 1 03:32:03 2025 by rpki-client