$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24e9780f-da80-3241-86e2-93db72785a5f.roa File: 24e9780f-da80-3241-86e2-93db72785a5f.roa (raw, json) Hash identifier: 5DD3OxIvBtaGQD6PXhl9jPCMo+rgNZbjrQYC/Bl97aU= Subject key identifier: 92:9A:0E:22:07:68:BF:58:B8:5A:D0:DA:2F:3A:06:E9:38:6C:A4:E1 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A2ABADD586DB2BB6F8F7C13B0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24e9780f-da80-3241-86e2-93db72785a5f.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 25961 IP address blocks: 209.237.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:dd:58:6d:b2:bb:6f:8f:7c:13:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=6f2886c4-4a53-417b-bb8e-e88269f49755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a1:2d:37:30:bf:9c:97:c0:79:8c:04:22:3b: 5a:77:8b:27:76:a3:d3:cd:46:07:42:48:e1:5d:34: 9b:62:16:0a:9e:2d:dd:a9:92:87:36:f1:fe:d0:df: 05:2c:e1:a4:7a:d4:de:fa:e0:08:76:d5:01:cd:c1: ec:eb:65:b3:4b:cc:1d:f1:be:84:83:ec:d8:8a:0f: ed:74:86:4d:18:97:2e:1a:b1:18:e2:61:c5:0c:a2: 8c:21:58:1a:73:8a:60:d2:d8:da:77:0b:8e:d3:ef: bb:3d:a7:8b:9b:31:f9:22:53:e8:25:ed:d4:09:0a: 57:9c:74:b2:72:0e:a5:02:57:b5:d8:2a:7f:0f:cc: 45:0f:9d:15:fe:a8:84:b1:cd:d8:3f:45:c0:83:81: f6:78:7b:6a:ea:af:11:d7:c8:29:ba:29:46:cb:ce: 63:3a:49:34:8e:e8:ad:78:07:7a:ed:2f:70:7f:41: 70:10:6e:0a:fd:c8:a2:76:87:ac:01:5d:40:c4:6a: 53:ab:e3:e1:2b:3c:de:3a:bb:b1:c7:ce:6a:8c:e7: 94:bc:c8:bc:56:c7:1d:03:12:05:4f:82:b0:72:56: ef:a1:d9:c9:10:ad:82:31:b9:28:a0:00:97:74:7a: e4:c8:dd:28:eb:33:24:25:dc:7b:4d:eb:46:01:55: 27:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9A:0E:22:07:68:BF:58:B8:5A:D0:DA:2F:3A:06:E9:38:6C:A4:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24e9780f-da80-3241-86e2-93db72785a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:35:85:97:4d:41:73:10:98:ac:09:fc:76:30:04:90:01:77: d7:4c:7c:3e:5c:1f:70:cb:36:1d:a8:c0:65:6d:21:b5:b9:e6: c2:12:c5:72:77:7b:8e:b9:b2:db:e5:6a:51:fe:91:97:b9:c0: af:56:b7:61:1d:ac:a6:1c:c5:ca:93:62:09:71:a8:93:c7:1f: ae:1b:28:20:6d:16:7c:56:f3:44:e8:e3:d9:05:f6:b4:61:99: c2:49:64:c3:a9:80:d2:ce:1e:55:32:74:95:69:75:51:01:c7: e2:40:e1:d5:0c:6e:86:14:b6:04:4f:51:65:fe:49:eb:ec:5b: f3:69:c3:ac:67:cd:39:9d:df:07:70:c6:21:bc:9a:97:9b:7c: 30:c6:23:27:03:76:ec:38:00:ce:a5:67:09:50:e9:5d:c3:5b: 95:82:c7:cf:bd:7f:cb:b6:1d:48:fc:fc:2d:e1:e5:fb:93:37: 6b:8a:be:57:9f:32:4d:4f:e2:c8:3f:07:12:cf:f3:15:e7:1d: 49:1e:45:f6:a4:6d:de:f1:0f:5b:9a:3b:e5:38:5c:2e:7c:f5: 7d:bc:94:71:56:b4:61:72:44:5a:d4:fc:89:c2:ff:9d:0b:cc: 2e:3d:02:b5:ac:62:ca:cb:23:92:64:0f:8b:68:98:47:c9:70: 25:e3:52:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqut1YbbK7b498E7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NmYyODg2YzQtNGE1My00MTdiLWJiOGUtZTg4MjY5ZjQ5NzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqEtNzC/nJfAeYwEIjtad4sndqPTzUYHQkjh XTSbYhYKni3dqZKHNvH+0N8FLOGketTe+uAIdtUBzcHs62WzS8wd8b6Eg+zYig/t dIZNGJcuGrEY4mHFDKKMIVgac4pg0tjadwuO0++7PaeLmzH5IlPoJe3UCQpXnHSy cg6lAle12Cp/D8xFD50V/qiEsc3YP0XAg4H2eHtq6q8R18gpuilGy85jOkk0juit eAd67S9wf0FwEG4K/ciidoesAV1AxGpTq+PhKzzeOruxx85qjOeUvMi8VscdAxIF T4KwclbvodnJEK2CMbkooACXdHrkyN0o6zMkJdx7TetGAVUncwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKaDiIHaL9YuFrQ2i86Buk4bKThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMjRlOTc4MGYtZGE4MC0z MjQxLTg2ZTItOTNkYjcyNzg1YTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEM1hZdNQXMQmKwJ/HYwBJABd9dMfD5cH3DLNh2owGVtIbW55sISxXJ3 e465stvlalH+kZe5wK9Wt2EdrKYcxcqTYglxqJPHH64bKCBtFnxW80To49kF9rRh mcJJZMOpgNLOHlUydJVpdVEBx+JA4dUMboYUtgRPUWX+SevsW/Npw6xnzTmd3wdw xiG8mpebfDDGIycDduw4AM6lZwlQ6V3DW5WCx8+9f8u2HUj8/C3h5fuTN2uKvlef Mk1P4sg/BxLP8xXnHUkeRfakbd7xD1uaO+U4XC589X28lHFWtGFyRFrU/InC/50L zC49ArWsYsrLI5JkD4tomEfJcCXjUqU= -----END CERTIFICATE-----Generated at Mon Jun 30 01:01:04 2025 by rpki-client