$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa File: cd93a255-e514-3611-be7c-946b8830ac3e.roa (raw, json) Hash identifier: r9PHi2yDtAcD3E+tqOjP/lccWVs69Ta7w9cJDE20L3w= Subject key identifier: F6:EE:B3:33:C3:84:7D:DA:83:22:40:88:E1:AC:E9:E6:6A:E7:FA:77 Certificate issuer: /CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Certificate serial: 010D0C9F43285849E2252D942065B9EB5D1FE980 Authority key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 62827 IP address blocks: 209.209.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:2d:94:20:65:b9:eb:5d:1f:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=4f813e7e-f137-454b-a168-cbcbe39d97a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6b:2b:d2:e1:df:66:02:79:c8:67:bc:90:70: d9:5d:e0:bd:68:88:a1:7e:0f:c6:77:41:1b:ee:53: 37:32:e2:33:d7:48:38:e0:be:83:fa:91:8c:9d:56: 02:66:b1:50:84:f6:de:5f:68:09:01:68:cf:61:92: 92:8c:3c:9e:eb:39:01:bf:d4:62:9d:28:a9:28:4f: b2:32:40:e0:0b:2e:e5:d1:fc:44:50:30:0f:a1:22: bf:26:ca:5a:12:34:ee:ff:85:37:6d:c6:62:1e:63: d4:f2:41:4c:87:01:72:a5:c3:42:e6:49:6c:07:7a: 72:48:5a:ac:24:de:68:a8:6c:d7:a6:93:31:f5:02: 8d:89:d7:18:8f:39:45:97:a3:8e:65:e3:27:c3:1f: 30:af:13:9c:2c:61:80:f2:a8:fd:d7:ff:a1:36:39: 7d:d6:55:22:51:96:1a:98:ee:83:2a:51:44:06:43: 15:b4:8f:9c:51:4e:a1:6f:2a:d8:32:fc:2f:0d:14: 70:0f:b6:37:61:68:b9:f7:d5:ee:2d:41:59:99:34: 52:d7:d4:e5:62:b8:0c:05:bf:c7:24:a3:65:36:bc: d5:f4:06:e8:ae:53:c6:35:04:2f:27:d9:cf:3c:9b: f9:25:5c:3f:5e:1c:e7:7d:4d:b3:31:ef:80:de:27: 2c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EE:B3:33:C3:84:7D:DA:83:22:40:88:E1:AC:E9:E6:6A:E7:FA:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl X509v3 Authority Key Identifier: keyid:7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer sbgp-ipAddrBlock: critical IPv4: 209.209.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:bd:da:92:fc:37:2a:10:47:d1:87:04:2b:99:ea:41:39:5c: da:04:fe:79:a2:16:7b:cb:15:a1:48:dd:38:24:d9:82:7a:53: dd:15:c2:34:e2:fb:c4:f2:7b:a1:62:f6:db:ff:01:a4:86:93: 06:41:3b:ec:50:56:a2:2a:15:1a:44:cd:a4:00:72:5a:7e:69: 41:14:ef:20:8c:f5:5a:f0:7d:72:f3:f8:9d:61:b2:26:ca:f5: 8b:52:2a:ae:ec:73:0e:1f:32:00:f6:0a:ad:a1:cf:1e:4f:14: 90:6d:c4:09:7e:59:54:70:cf:c3:51:19:6a:26:77:e6:aa:19: 5a:94:f8:35:b2:77:93:6c:bc:aa:7b:56:e7:59:27:59:88:f3: b5:56:ae:2c:ac:e7:d1:7b:72:e9:a8:dd:c2:7e:bd:d9:73:ab: c0:92:a0:ef:57:2b:f7:2b:75:11:32:96:27:e7:a0:64:2e:ae: e2:5c:7a:4f:d4:4f:24:26:75:b1:d8:2c:72:8e:1c:37:0f:0c: 6f:ac:ea:83:f0:82:88:f5:25:df:26:e6:98:d6:53:5d:fa:f3: f4:f7:dd:ec:1b:54:6e:84:5e:16:05:aa:b9:f9:94:48:7e:3c: 30:77:40:58:7d:8d:cb:86:c1:fa:93:91:5a:02:97:61:5f:2c: 66:35:3b:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJS2UIGW5610f6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA0YmM3ZmQtNTMzNC00NWVlLTlhNDgtM2ZmYjExN2Fk NGYzMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NGY4MTNlN2UtZjEzNy00NTRiLWExNjgtY2JjYmUzOWQ5N2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGsr0uHfZgJ5yGe8kHDZXeC9aIihfg/Gd0Eb 7lM3MuIz10g44L6D+pGMnVYCZrFQhPbeX2gJAWjPYZKSjDye6zkBv9RinSipKE+y MkDgCy7l0fxEUDAPoSK/JspaEjTu/4U3bcZiHmPU8kFMhwFypcNC5klsB3pySFqs JN5oqGzXppMx9QKNidcYjzlFl6OOZeMnwx8wrxOcLGGA8qj91/+hNjl91lUiUZYa mO6DKlFEBkMVtI+cUU6hbyrYMvwvDRRwD7Y3YWi599XuLUFZmTRS19TlYrgMBb/H JKNlNrzV9AborlPGNQQvJ9nPPJv5JVw/XhznfU2zMe+A3icsPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbuszPDhH3agyJAiOGs6eZq5/p3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRi YzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZiMTE3YWQ0ZjMvY2Q5M2EyNTUtZTUxNC0z NjExLWJlN2MtOTQ2Yjg4MzBhYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjA0YmM3ZmQtNTMzNC00NWVlLTlh NDgtM2ZmYjExN2FkNGYzL2YwNGJjN2ZkLTUzMzQtNDVlZS05YTQ4LTNmZmIxMTdh ZDRmMy5jcmwwHwYDVR0jBBgwFoAUe2AW/SJ5rexO1KDn29yN44VzpwYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRiYzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZi MTE3YWQ0ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0dFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe92pL8NyoQR9GHBCuZ6kE5XNoE/nmiFnvLFaFI3Tgk2YJ6U90VwjTi +8Tye6Fi9tv/AaSGkwZBO+xQVqIqFRpEzaQAclp+aUEU7yCM9VrwfXLz+J1hsibK 9YtSKq7scw4fMgD2Cq2hzx5PFJBtxAl+WVRwz8NRGWomd+aqGVqU+DWyd5NsvKp7 VudZJ1mI87VWriys59F7cumo3cJ+vdlzq8CSoO9XK/crdREylifnoGQuruJcek/U TyQmdbHYLHKOHDcPDG+s6oPwgoj1Jd8m5pjWU1368/T33ewbVG6EXhYFqrn5lEh+ PDB3QFh9jcuGwfqTkVoCl2FfLGY1Ox4= -----END CERTIFICATE-----Generated at Mon Jun 30 13:35:25 2025 by rpki-client