$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ecb79349-c2c5-3e1a-b870-5737e013da06.roa File: ecb79349-c2c5-3e1a-b870-5737e013da06.roa (raw, json) Hash identifier: nn7bd4R1oah3qE5e8YFduGp5G7BTvQqE1OYSOWRyDDk= Subject key identifier: 84:A6:01:B0:68:8B:26:55:3F:6A:16:76:7E:3F:C6:8F:98:F4:16:D0 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A58CB021EDA0758C43B5643C0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ecb79349-c2c5-3e1a-b870-5737e013da06.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 54989 IP address blocks: 209.198.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:02:1e:da:07:58:c4:3b:56:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=9a0cb97f-d93a-4714-8629-4f03ab2b3fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:80:60:59:e6:93:b6:f6:66:b3:b3:34:7a: 0b:42:f8:b7:62:27:cc:3a:ea:2e:c5:3a:51:e0:37: 39:50:11:e8:7f:7f:ff:41:9c:20:f8:0c:bd:a1:db: 77:43:5b:fc:81:56:78:dc:7c:f8:b3:fa:19:29:d8: 30:e3:4b:87:97:b5:8c:2d:3a:d8:e6:52:30:3c:87: f3:f1:af:d3:bf:d7:75:ac:ef:7a:62:6d:2c:ca:da: e3:91:40:92:29:be:c1:9d:00:83:a3:05:71:dc:9b: fe:87:4d:cb:23:12:87:99:78:37:9e:b9:73:28:6b: c5:f7:8d:3f:d5:7d:3d:39:e9:ee:11:38:2b:3a:28: 57:d4:f3:af:93:07:81:75:d4:de:0e:fc:44:49:99: 65:fe:64:4f:5d:d9:37:87:58:77:4f:2f:8b:3d:4f: 28:53:de:1a:82:11:16:dd:8a:fd:8d:e4:7b:22:8f: 2d:55:d0:f0:bc:8c:b9:41:4f:fd:fd:41:e3:96:22: eb:78:e0:fe:d8:3a:0f:63:2b:cd:e1:7b:ba:47:1c: 66:8a:13:1e:1d:5d:59:b9:11:44:ca:aa:9f:34:eb: 10:b2:f8:9d:11:26:af:6c:e5:84:76:fd:05:e7:3d: 79:dc:65:42:8e:4b:1d:89:75:74:68:13:1f:cf:10: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A6:01:B0:68:8B:26:55:3F:6A:16:76:7E:3F:C6:8F:98:F4:16:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ecb79349-c2c5-3e1a-b870-5737e013da06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 209.198.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b9:79:9f:d8:9e:63:d7:1a:6f:2d:3a:92:d3:65:7d:c3:10: 4b:df:05:1e:50:89:87:81:44:7b:f2:ee:26:d4:f3:bf:78:ba: 5e:97:19:ae:3a:98:f9:e5:c8:2b:8e:1c:33:bc:f8:ce:35:94: 2f:59:70:1d:92:6d:d7:17:e6:ee:29:a2:14:b3:06:d9:8b:fd: 75:08:35:90:cc:16:55:d9:20:d0:d1:02:51:4e:19:1d:4f:a0: 80:69:7a:f6:13:4c:58:cf:e1:16:ad:86:02:93:f4:d4:1b:2a: 3c:11:80:5d:71:5d:1a:c0:e5:90:10:c9:33:ae:32:66:6c:c9: 52:c9:43:98:0c:dc:e5:1c:57:dc:8e:bd:f4:99:a4:bb:92:4f: 98:bc:bb:93:bf:5b:05:de:86:62:64:45:a0:4e:c3:9f:77:7f: e5:e0:14:17:7a:4f:bd:de:0b:44:dd:ea:e0:5e:51:03:25:75: cf:98:f5:8a:30:c9:94:22:8e:77:53:9a:e1:f4:96:cc:c0:93: 38:7c:04:64:e3:05:70:bd:bc:87:8a:02:ed:d8:66:44:69:68: b6:1f:6f:ef:25:48:6d:33:75:93:1e:30:30:f3:89:af:12:54: 23:70:57:8a:36:40:3d:5d:42:b8:7c:b0:c6:d4:cf:c3:10:fb: c7:99:85:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywIe2gdYxDtWQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk OWEwY2I5N2YtZDkzYS00NzE0LTg2MjktNGYwM2FiMmIzZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGeAYFnmk7b2ZrOzNHoLQvi3YifMOuouxTpR 4Dc5UBHof3//QZwg+Ay9odt3Q1v8gVZ43Hz4s/oZKdgw40uHl7WMLTrY5lIwPIfz 8a/Tv9d1rO96Ym0sytrjkUCSKb7BnQCDowVx3Jv+h03LIxKHmXg3nrlzKGvF940/ 1X09OenuETgrOihX1POvkweBddTeDvxESZll/mRPXdk3h1h3Ty+LPU8oU94aghEW 3Yr9jeR7Io8tVdDwvIy5QU/9/UHjliLreOD+2DoPYyvN4Xu6RxxmihMeHV1ZuRFE yqqfNOsQsvidESavbOWEdv0F5z153GVCjksdiXV0aBMfzxBAYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISmAbBoiyZVP2oWdn4/xo+Y9BbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZWNiNzkzNDktYzJjNS0z ZTFhLWI4NzAtNTczN2UwMTNkYTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cZRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJS5eZ/YnmPXGm8tOpLTZX3DEEvfBR5QiYeBRHvy7ibU8794ul6XGa46 mPnlyCuOHDO8+M41lC9ZcB2SbdcX5u4pohSzBtmL/XUINZDMFlXZINDRAlFOGR1P oIBpevYTTFjP4RathgKT9NQbKjwRgF1xXRrA5ZAQyTOuMmZsyVLJQ5gM3OUcV9yO vfSZpLuST5i8u5O/WwXehmJkRaBOw593f+XgFBd6T73eC0Td6uBeUQMldc+Y9Yow yZQijndTmuH0lszAkzh8BGTjBXC9vIeKAu3YZkRpaLYfb+8lSG0zdZMeMDDzia8S VCNwV4o2QD1dQrh8sMbUz8MQ+8eZhZY= -----END CERTIFICATE-----Generated at Mon Jun 30 13:35:36 2025 by rpki-client