$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/9d6b663f-e6ef-3144-b550-31e5f6344a68.roa File: 9d6b663f-e6ef-3144-b550-31e5f6344a68.roa (raw, json) Hash identifier: wrbLEznsxLAjaGTIdhhUFj1r3+u9Zo59Wr+7wjjMy0M= Subject key identifier: D6:F7:79:51:70:DF:C8:EE:01:2D:7E:3A:A9:C0:BA:5E:74:95:53:88 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A5765CE702F797750091398D0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/9d6b663f-e6ef-3144-b550-31e5f6344a68.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 54989 IP address blocks: 207.136.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:ce:70:2f:79:77:50:09:13:98:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=bdaef5d1-709d-4d01-b1b1-4e2e2f95b39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ed:41:27:90:41:53:e3:d5:47:37:9d:4b:47: 78:61:ee:29:ac:d0:6b:81:ac:3e:96:93:3e:a1:17: 54:12:31:b7:5e:65:0c:65:e1:92:49:ca:17:0e:84: 98:1f:d3:03:7c:0e:f7:aa:51:cf:ec:8e:de:da:cf: d2:1b:f3:97:9b:59:37:35:ae:56:ff:f3:34:64:7f: cd:b4:09:9f:a2:da:0d:ce:07:93:4b:b6:ed:2b:0c: 38:37:51:96:70:4b:e6:56:da:66:1a:8a:6a:52:39: 6b:8b:9a:42:25:24:a6:3f:4d:42:1e:ab:2f:2e:85: 36:2d:30:7b:f9:1e:be:b4:bf:49:79:e1:5b:fc:d1: ac:51:64:2d:99:cb:dc:17:3d:30:1f:8b:06:d0:7a: ce:64:63:ac:12:50:47:ae:14:af:db:53:86:7e:65: c1:51:89:ee:ca:7e:15:0a:7e:ae:41:dc:5c:b7:4f: 4a:ee:31:ea:4e:55:d5:f8:32:9e:54:ad:6b:de:29: 0e:9d:15:b9:91:bb:b7:4b:cd:e3:3c:66:4d:9e:7c: 14:de:99:c5:5a:e9:2f:a1:ba:53:ee:69:20:a8:a2: 27:44:da:a1:14:ef:2d:3a:35:81:17:5b:fe:58:0f: e1:d1:d0:0c:58:70:66:71:cc:aa:02:68:9e:b7:41: 55:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F7:79:51:70:DF:C8:EE:01:2D:7E:3A:A9:C0:BA:5E:74:95:53:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/9d6b663f-e6ef-3144-b550-31e5f6344a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 207.136.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:5e:4f:30:a1:fe:65:6e:6f:31:08:5e:21:5d:5f:89:30:e0: 4e:fe:72:9e:16:ed:be:33:63:a4:69:f8:31:bf:78:fb:45:46: ee:0f:9a:3b:11:f6:1c:e7:34:20:de:98:20:a3:bb:22:19:f6: cc:03:0d:51:2a:e0:eb:0a:c4:95:be:0b:a0:19:08:ac:dd:d4: fe:8b:1f:76:c2:a0:2b:70:69:11:61:9a:e7:80:5e:b3:95:b2: 99:76:89:68:0d:9d:21:06:e0:09:42:2a:0e:ef:9d:41:cf:1c: 13:00:9f:f0:28:0a:b7:d0:3d:01:33:64:63:0a:8f:3d:c0:76: d1:d7:1d:b7:ff:5a:ee:0d:6f:73:e3:e8:1e:6b:41:8e:9a:1d: 6f:3b:66:85:c3:6e:49:1e:ab:08:75:35:b3:1a:71:c0:32:f1: 96:c1:00:16:18:fa:a9:b9:e5:5d:34:3d:7e:4a:47:47:9b:46: f7:0b:22:28:a0:fa:f8:cc:45:34:e1:b0:29:68:be:a6:6b:1e: d7:95:c1:76:43:e3:26:08:8e:72:fa:5c:ef:a9:55:5a:45:17: 54:df:dd:da:0b:61:94:0e:3c:33:0b:38:3b:10:9a:29:9d:a0: 93:1b:80:0e:c1:31:df:7c:6a:3f:56:39:c5:b4:2c:00:67:df: a9:bd:0a:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZc5wL3l3UAkTmNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk YmRhZWY1ZDEtNzA5ZC00ZDAxLWIxYjEtNGUyZTJmOTViMzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge1BJ5BBU+PVRzedS0d4Ye4prNBrgaw+lpM+ oRdUEjG3XmUMZeGSScoXDoSYH9MDfA73qlHP7I7e2s/SG/OXm1k3Na5W//M0ZH/N tAmfotoNzgeTS7btKww4N1GWcEvmVtpmGopqUjlri5pCJSSmP01CHqsvLoU2LTB7 +R6+tL9JeeFb/NGsUWQtmcvcFz0wH4sG0HrOZGOsElBHrhSv21OGfmXBUYnuyn4V Cn6uQdxct09K7jHqTlXV+DKeVK1r3ikOnRW5kbu3S83jPGZNnnwU3pnFWukvobpT 7mkgqKInRNqhFO8tOjWBF1v+WA/h0dAMWHBmccyqAmiet0FVwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNb3eVFw38juAS1+OqnAul50lVOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvOWQ2YjY2M2YtZTZlZi0z MTQ0LWI1NTAtMzFlNWY2MzQ0YTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz4jMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNeTzCh/mVubzEIXiFdX4kw4E7+cp4W7b4zY6Rp+DG/ePtFRu4PmjsR 9hznNCDemCCjuyIZ9swDDVEq4OsKxJW+C6AZCKzd1P6LH3bCoCtwaRFhmueAXrOV spl2iWgNnSEG4AlCKg7vnUHPHBMAn/AoCrfQPQEzZGMKjz3AdtHXHbf/Wu4Nb3Pj 6B5rQY6aHW87ZoXDbkkeqwh1NbMaccAy8ZbBABYY+qm55V00PX5KR0ebRvcLIiig +vjMRTThsClovqZrHteVwXZD4yYIjnL6XO+pVVpFF1Tf3doLYZQOPDMLODsQmimd oJMbgA7BMd98aj9WOcW0LABn36m9Cug= -----END CERTIFICATE-----Generated at Tue Jul 1 11:06:46 2025 by rpki-client