$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa File: 42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa (raw, json) Hash identifier: xlGTsAlX8TSrDzXXcAVWzq7eHLhLBpzfUrqfQ5XZH1A= Subject key identifier: BF:81:ED:4E:D7:05:01:11:78:E5:17:56:68:52:94:72:03:9D:C5:9B Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A5765CED2DF767B5AB0B03780 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 13536 IP address blocks: 207.136.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:ce:d2:df:76:7b:5a:b0:b0:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=3d9c4f2d-17f1-4c45-abe0-6a1095995305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6f:14:5f:bc:d1:0f:38:92:b5:4f:87:03:cc: c9:35:c0:49:63:1f:4d:43:54:a8:13:07:2b:64:f2: 45:c0:4b:10:1f:ce:22:be:1a:0f:3f:84:1f:a0:b6: 63:df:a6:b5:54:7a:45:07:ff:6d:9e:31:b1:de:60: 22:17:cd:77:f5:42:e0:84:9c:7a:5c:8f:39:3a:e1: 41:38:8b:aa:62:3e:8c:c6:b5:93:c4:02:cb:11:f1: 15:8b:5a:eb:ad:5a:12:1f:1b:75:87:7f:b0:89:13: cb:5b:28:39:42:d0:de:fe:82:6f:e5:8e:04:6e:19: d5:74:55:7b:d9:22:72:b4:dc:1b:a8:1b:86:30:8e: 16:0b:b5:dc:43:1e:00:30:af:8e:86:03:f5:ea:dd: 5c:3e:0b:1c:18:b0:c4:97:26:c6:cf:50:0d:e3:9a: f4:e8:aa:0d:bf:f8:fa:46:3b:01:9d:8d:b8:12:a9: 8d:12:ca:94:84:fc:2e:ad:6b:42:db:6c:60:47:f7: 02:b4:82:2b:02:4d:71:bb:58:a4:e6:52:af:73:29: 7f:8a:20:f3:8d:01:d0:12:a1:76:5b:fb:5d:aa:18: 40:bf:ec:fb:3b:be:9a:b9:96:d6:51:d8:e4:f1:97: 34:60:9f:16:89:f8:48:05:71:c7:13:e1:f5:af:da: 00:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:81:ED:4E:D7:05:01:11:78:E5:17:56:68:52:94:72:03:9D:C5:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 207.136.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:45:9b:2b:e6:48:d9:27:ab:0f:e1:d7:97:4f:ae:4b:fb:15: 4a:c7:6b:3b:c1:1a:fb:5f:93:6b:f4:cf:01:df:2d:8a:01:6c: be:09:c6:04:5b:5d:91:ad:8e:e1:65:a2:0e:77:73:53:2d:e8: d7:78:1b:22:fa:ba:bb:78:3d:35:e0:b2:24:78:30:ed:24:92: ed:5a:3a:96:46:ec:de:f7:28:32:7b:a3:ce:aa:a0:09:62:6f: 62:3e:51:85:4a:c0:31:3f:70:d7:be:41:14:07:b3:07:49:3c: 1f:09:0c:b5:55:2b:30:a2:68:18:8f:c2:60:39:54:ff:71:0c: 67:19:bb:bf:41:ef:23:f0:ca:44:f1:2a:09:c5:cc:91:20:23: 4f:c5:e3:14:fe:db:c0:d4:26:cc:fe:75:62:9e:54:99:e0:72: 1f:2e:8f:46:eb:63:12:d0:1d:be:ce:90:11:fa:31:85:cf:0a: a6:e6:e0:10:50:e0:c0:82:6c:b3:e6:ac:f9:1e:43:32:18:49: d8:cf:6c:65:2c:a6:51:a9:d2:42:15:4b:5c:86:e2:dc:9f:bc: ee:91:07:5a:f3:c8:23:5c:a1:58:8b:80:7d:b0:66:e2:2d:91: 5d:4c:df:f0:9b:f9:dd:8b:90:80:f9:73:c0:a4:64:91:5c:1b: c1:94:a3:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZc7S33Z7WrCwN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk M2Q5YzRmMmQtMTdmMS00YzQ1LWFiZTAtNmExMDk1OTk1MzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG8UX7zRDziStU+HA8zJNcBJYx9NQ1SoEwcr ZPJFwEsQH84ivhoPP4QfoLZj36a1VHpFB/9tnjGx3mAiF8139ULghJx6XI85OuFB OIuqYj6MxrWTxALLEfEVi1rrrVoSHxt1h3+wiRPLWyg5QtDe/oJv5Y4EbhnVdFV7 2SJytNwbqBuGMI4WC7XcQx4AMK+OhgP16t1cPgscGLDElybGz1AN45r06KoNv/j6 RjsBnY24EqmNEsqUhPwurWtC22xgR/cCtIIrAk1xu1ik5lKvcyl/iiDzjQHQEqF2 W/tdqhhAv+z7O76auZbWUdjk8Zc0YJ8WifhIBXHHE+H1r9oA/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+B7U7XBQEReOUXVmhSlHIDncWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNDJhYmI4ZmUtNmI0Zi0z MGU5LWE3M2EtODhkNjI0NzQyMmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz4j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxFmyvmSNknqw/h15dPrkv7FUrHazvBGvtfk2v0zwHfLYoBbL4JxgRb XZGtjuFlog53c1Mt6Nd4GyL6urt4PTXgsiR4MO0kku1aOpZG7N73KDJ7o86qoAli b2I+UYVKwDE/cNe+QRQHswdJPB8JDLVVKzCiaBiPwmA5VP9xDGcZu79B7yPwykTx KgnFzJEgI0/F4xT+28DUJsz+dWKeVJngch8uj0brYxLQHb7OkBH6MYXPCqbm4BBQ 4MCCbLPmrPkeQzIYSdjPbGUsplGp0kIVS1yG4tyfvO6RB1rzyCNcoViLgH2wZuIt kV1M3/Cb+d2LkID5c8CkZJFcG8GUo2g= -----END CERTIFICATE-----Generated at Mon Jun 30 17:16:06 2025 by rpki-client