$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c42a51a5-7de2-3746-870f-8bb2b636bb8e.roa File: c42a51a5-7de2-3746-870f-8bb2b636bb8e.roa (raw, json) Hash identifier: 4aA7o4N1sBjPb9iAxYzG3UncalVMs3t1I9ebrpO9Ig0= Subject key identifier: 2B:61:54:E9:F6:05:94:40:7C:39:7B:BE:7F:72:5C:FD:4E:37:B1:51 Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119 Certificate serial: 010D0C9F43285849F87A8A1283B618935DD77D40 Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c42a51a5-7de2-3746-870f-8bb2b636bb8e.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 19955 IP address blocks: 209.221.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:8a:12:83:b6:18:93:5d:d7:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=138cdb8a-0198-4eda-8f03-f5d26fd17370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:75:bf:28:b5:10:50:53:16:82:f2:b8:cb: 89:dc:f5:a1:de:d8:33:75:e1:fa:93:44:83:2f:c1: e4:a2:87:68:24:cc:0d:fa:01:79:a0:74:69:d4:5d: 6b:51:6d:bf:cd:06:70:bc:89:e8:56:9e:4d:7b:e7: 32:c2:d6:ed:22:3e:65:a2:1c:ea:57:3d:1e:3a:d0: 24:ec:a9:ce:2a:1d:5b:97:8b:c8:12:a5:52:7c:3f: 81:cf:13:64:5c:2f:22:05:76:f1:ca:01:e6:f3:41: c4:3b:fd:0d:8f:e8:28:9e:a9:b5:9e:59:06:ea:53: f7:74:7f:47:b1:9d:8e:ea:49:40:9a:4c:2e:bc:c9: d2:70:fc:c3:e6:03:ca:76:05:f2:28:b3:c8:b3:38: d7:ed:a8:ce:e7:2a:21:cb:4e:09:d5:2e:ae:69:1f: 48:58:e0:af:2b:8d:28:73:c4:ad:e6:8d:0d:80:71: 32:6d:32:d8:b1:21:52:1b:70:1c:be:14:1e:04:54: 52:03:fa:b0:a3:b5:cc:73:f7:2d:21:ac:4c:fb:80: 08:7d:3c:8a:97:cc:e1:0c:65:af:91:c6:0b:2c:08: 88:92:5c:24:39:4b:c6:9f:cf:1e:dc:8b:2f:f8:9f: 68:9f:89:b5:b6:1d:f0:25:17:9b:65:e6:ae:1a:08: 3b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:61:54:E9:F6:05:94:40:7C:39:7B:BE:7F:72:5C:FD:4E:37:B1:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c42a51a5-7de2-3746-870f-8bb2b636bb8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl X509v3 Authority Key Identifier: keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer sbgp-ipAddrBlock: critical IPv4: 209.221.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:69:66:5f:31:22:97:4a:4b:fc:88:4c:bc:a1:b9:56:c2:a8: 65:90:11:5c:45:dc:ee:f6:b7:5d:ff:e6:d0:44:79:60:d3:a6: 96:96:5d:dd:72:09:ed:aa:fa:c2:a1:83:bd:c4:b0:d4:bc:5c: 19:b3:3a:44:9d:d3:bc:87:26:c7:ef:82:1f:6c:46:1b:bf:7e: dc:80:03:92:a6:c7:67:cd:7d:56:19:16:59:e6:65:43:f3:13: 12:dd:3d:34:0d:5b:d1:1a:d0:19:fc:ec:2e:b0:13:99:12:59: 99:7c:1c:55:26:19:8a:54:80:73:8e:41:a1:01:a9:ca:bc:04: 04:9c:89:fa:b4:0d:79:78:b2:76:7e:cb:9c:d2:ab:2d:75:65: 9a:d2:ac:34:12:b9:c8:31:9e:b1:38:70:9c:4d:dd:d8:56:36: e9:1e:14:ab:d0:c8:9c:54:78:01:16:7c:9f:77:e1:66:14:d8: 15:48:e6:99:0c:31:6a:88:a5:cf:92:03:0e:d7:c6:f0:b3:4f: a4:11:d2:c4:b1:6e:41:11:09:f5:9d:fd:b5:d8:4e:70:42:9c: 3f:7e:68:c5:e0:55:68:0f:0d:50:cc:f3:10:64:e3:0e:6f:0f: 11:cb:37:8f:fd:fe:6c:82:8c:23:9f:72:fe:6d:8e:a9:9d:f0: a3:aa:ba:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eooSg7YYk13XfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh MTE5MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MTM4Y2RiOGEtMDE5OC00ZWRhLThmMDMtZjVkMjZmZDE3MzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgx1vyi1EFBTFoLyuMuJ3PWh3tgzdeH6k0SD L8HkoodoJMwN+gF5oHRp1F1rUW2/zQZwvInoVp5Ne+cywtbtIj5lohzqVz0eOtAk 7KnOKh1bl4vIEqVSfD+BzxNkXC8iBXbxygHm80HEO/0Nj+gonqm1nlkG6lP3dH9H sZ2O6klAmkwuvMnScPzD5gPKdgXyKLPIszjX7ajO5yohy04J1S6uaR9IWOCvK40o c8St5o0NgHEybTLYsSFSG3AcvhQeBFRSA/qwo7XMc/ctIaxM+4AIfTyKl8zhDGWv kcYLLAiIklwkOUvGn88e3Isv+J9on4m1th3wJRebZeauGgg7WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCthVOn2BZRAfDl7vn9yXP1ON7FRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1 ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYzQyYTUxYTUtN2RlMi0z NzQ2LTg3MGYtOGJiMmI2MzZiYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRpZl8xIpdKS/yITLyhuVbCqGWQEVxF3O72t13/5tBEeWDTppaWXd1y Ce2q+sKhg73EsNS8XBmzOkSd07yHJsfvgh9sRhu/ftyAA5Kmx2fNfVYZFlnmZUPz ExLdPTQNW9Ea0Bn87C6wE5kSWZl8HFUmGYpUgHOOQaEBqcq8BAScifq0DXl4snZ+ y5zSqy11ZZrSrDQSucgxnrE4cJxN3dhWNukeFKvQyJxUeAEWfJ934WYU2BVI5pkM MWqIpc+SAw7XxvCzT6QR0sSxbkERCfWd/bXYTnBCnD9+aMXgVWgPDVDM8xBk4w5v DxHLN4/9/myCjCOfcv5tjqmd8KOqunY= -----END CERTIFICATE-----Generated at Sun Jun 29 10:39:36 2025 by rpki-client