$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa File: 95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa (raw, json) Hash identifier: pdpW6ZUnW0FsnqSBlXMp/Gt4DdnahVDw16Mc2Eu4Ick= Subject key identifier: 1C:0D:73:D6:DA:C9:83:E8:F2:B3:C6:82:AC:48:28:E3:C5:4E:F7:94 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584A46A5A859AABE7777F28A6900 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 1239 IP address blocks: 198.67.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:a8:59:aa:be:77:77:f2:8a:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=d2801d8c-97b7-49d8-801c-6862e3a4cf7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b1:31:3f:97:eb:d3:c1:0a:71:81:2f:04:14: 0a:1d:2a:ee:cf:4e:18:92:e4:6f:38:eb:c5:cd:5a: 70:b0:8f:49:e3:c6:f9:3d:a8:87:d4:05:2f:36:98: f3:77:94:6b:7e:dc:76:c5:ab:3f:62:46:95:3e:b3: af:b3:77:65:c7:2d:7f:e5:aa:df:5d:24:8e:cd:cd: 17:5e:50:25:56:32:8e:e8:4a:da:11:79:6e:a5:91: c8:93:aa:14:f4:67:0f:69:f0:dd:14:67:8a:5e:c9: 5e:69:8e:d4:79:9c:2a:e7:f4:94:ee:9c:b2:e3:3b: 9a:1e:e7:10:8d:f0:20:73:b0:ac:3f:5d:3d:8c:18: ce:dc:4a:a9:c4:0a:73:4e:a4:5b:a2:8c:67:87:98: 7f:f4:c5:08:66:fd:2c:f8:c3:c2:07:3e:99:59:e2: ea:27:b6:56:46:8c:6d:90:f7:a7:d8:64:05:8b:f2: d5:f3:f4:86:43:c4:e5:d8:cd:18:03:4b:63:71:3a: c3:f1:0e:86:bd:08:f2:7e:d6:a3:36:85:2a:e5:15: 7b:ff:c2:21:84:5a:ec:76:a5:86:f6:fe:a5:f8:ee: 56:1b:24:90:75:d7:7d:51:4e:2a:58:37:5b:32:32: ec:07:b4:95:da:9c:df:20:25:63:55:0c:7a:a4:3c: 34:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0D:73:D6:DA:C9:83:E8:F2:B3:C6:82:AC:48:28:E3:C5:4E:F7:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.67.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d6:e3:c6:cd:1f:31:03:0a:1f:76:ce:01:29:ff:ad:1b:83: df:69:b7:f7:bc:f3:a4:4f:2b:d2:bc:43:55:d0:da:57:c5:a6: 39:f6:2c:21:8f:be:50:3c:53:7a:97:67:82:b6:46:82:df:fb: e0:5a:77:4e:6e:a1:6a:9f:4a:c2:8d:3b:ff:f8:64:62:34:4d: 8a:ba:40:aa:8f:d0:f2:27:04:7d:6c:75:c4:ff:ea:28:3d:7f: b8:19:b2:89:b3:c4:b2:1e:28:89:a5:a8:7f:04:23:e1:71:01: d4:41:3d:89:24:74:e4:4d:97:e6:63:4f:3e:ec:48:7c:97:97: 7d:62:80:60:04:7c:be:42:6f:de:42:a7:33:73:80:fe:38:b0: 30:9e:d5:99:ea:f1:f5:b9:03:58:8f:52:18:37:55:b4:57:a5: 47:9f:fb:cb:cc:2c:08:b2:46:a2:7c:3c:e2:53:df:0c:a8:9f: 66:e5:ce:9c:1f:b0:c1:10:8b:45:66:3a:bd:e4:28:a7:09:e3: 23:de:13:c5:6b:97:90:af:82:25:c5:48:02:d3:f2:67:3c:41: 37:09:84:11:30:8a:44:6b:ef:7d:cf:c1:53:c1:ea:42:4d:eb: 4c:0d:17:9e:c7:c6:52:60:b5:6c:a6:2c:2f:ee:ab:c2:8b:10: 98:e4:26:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGpahZqr53d/KKaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDI4MDFkOGMtOTdiNy00OWQ4LTgwMWMtNjg2MmUzYTRjZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbExP5fr08EKcYEvBBQKHSruz04YkuRvOOvF zVpwsI9J48b5PaiH1AUvNpjzd5Rrftx2xas/YkaVPrOvs3dlxy1/5arfXSSOzc0X XlAlVjKO6EraEXlupZHIk6oU9GcPafDdFGeKXsleaY7UeZwq5/SU7pyy4zuaHucQ jfAgc7CsP109jBjO3EqpxApzTqRbooxnh5h/9MUIZv0s+MPCBz6ZWeLqJ7ZWRoxt kPen2GQFi/LV8/SGQ8Tl2M0YA0tjcTrD8Q6GvQjyftajNoUq5RV7/8IhhFrsdqWG 9v6l+O5WGySQddd9UU4qWDdbMjLsB7SV2pzfICVjVQx6pDw0WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwNc9bayYPo8rPGgqxIKOPFTveUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvOTVkMmMyOTctYzRlZS0z OTVhLThhM2YtYTY0YjdjMTNmZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkMJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATW48bNHzEDCh92zgEp/60bg99pt/e886RPK9K8Q1XQ2lfFpjn2LCGP vlA8U3qXZ4K2RoLf++Bad05uoWqfSsKNO//4ZGI0TYq6QKqP0PInBH1sdcT/6ig9 f7gZsomzxLIeKImlqH8EI+FxAdRBPYkkdORNl+ZjTz7sSHyXl31igGAEfL5Cb95C pzNzgP44sDCe1Znq8fW5A1iPUhg3VbRXpUef+8vMLAiyRqJ8POJT3wyon2blzpwf sMEQi0VmOr3kKKcJ4yPeE8Vrl5CvgiXFSALT8mc8QTcJhBEwikRr733PwVPB6kJN 60wNF57HxlJgtWymLC/uq8KLEJjkJpI= -----END CERTIFICATE-----Generated at Sun Jun 29 10:21:27 2025 by rpki-client