$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/221c5f01-9412-38d6-b4e7-72db492d7460.roa File: 221c5f01-9412-38d6-b4e7-72db492d7460.roa (raw, json) Hash identifier: htY2a/MuSOC9s5gYBDLdIcEfhpXVad5Vp2a0ukEoI3c= Subject key identifier: 28:EC:81:3B:AA:F9:4C:2E:E7:3E:1E:FF:58:AF:C9:1F:1B:37:AF:A0 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584A3B7B02FFDA63B7C96B5A0A80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/221c5f01-9412-38d6-b4e7-72db492d7460.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 393249 IP address blocks: 209.87.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:02:ff:da:63:b7:c9:6b:5a:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=c38e3da5-d06c-4d09-902f-a8df0a3e7097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:34:bc:be:d0:a7:42:e6:67:51:8b:0a:89: 88:b4:a4:b0:3d:86:81:77:00:69:bd:ea:95:c2:74: a0:80:1b:55:bb:2d:3e:71:07:9f:65:6b:e9:da:76: 2b:de:2b:3e:d5:b5:9c:9c:bf:32:7a:d8:66:7a:1f: 41:30:d7:81:44:ba:82:2a:72:28:18:46:06:af:88: b1:6b:05:62:fd:a0:d8:be:0f:69:7e:f1:dd:03:4a: 5e:de:3f:9d:f9:13:75:d6:b2:24:e1:cc:2f:15:bb: 62:8a:d9:f1:66:85:49:14:26:c2:23:e6:f4:f8:3b: ec:4f:e5:75:70:07:9d:c4:01:0a:04:70:30:88:70: e2:4b:53:46:dd:c7:8a:4a:f2:2d:c1:1b:20:4f:1e: ba:91:a1:d8:e9:e2:23:ca:cc:b1:db:d3:f5:a9:35: a5:7c:12:57:98:46:a3:9a:d9:c0:e7:ba:6f:03:da: 7a:8a:c6:7e:c5:db:9f:2f:45:05:32:a1:3f:c9:51: e5:80:3a:f7:03:17:46:92:81:60:5d:a9:29:eb:84: c5:4b:a6:3f:ce:d3:63:5b:8a:40:56:ba:03:96:e7: 68:80:e4:e3:3b:4e:48:e1:f5:c3:70:32:bf:3b:fb: c6:71:e9:3e:a7:08:26:62:41:2a:89:7a:d1:60:67: 45:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EC:81:3B:AA:F9:4C:2E:E7:3E:1E:FF:58:AF:C9:1F:1B:37:AF:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/221c5f01-9412-38d6-b4e7-72db492d7460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:30:00:38:53:d9:be:2a:30:98:65:ad:04:f1:db:dd:fe:51: 8a:61:03:0c:94:f5:fe:4e:e8:15:b9:e3:7b:98:dd:8e:d6:cf: 37:e4:25:58:e8:9b:20:87:4e:b4:c2:33:cc:8b:84:d5:00:9e: 83:62:f7:aa:47:f2:e8:8e:84:47:2e:01:99:09:68:ea:03:55: b6:1c:75:92:9d:70:8a:56:05:82:2c:a4:26:2f:31:de:62:54: ee:89:e0:20:8c:f2:a9:84:09:79:53:f4:65:a9:cc:4f:47:e9: 70:e3:d5:4c:ee:5a:62:d3:55:96:b9:41:1e:c8:0b:5d:11:7a: 7e:cb:57:5f:c7:33:82:77:89:33:eb:19:cf:38:08:29:b8:70: 6d:0d:1f:d7:71:61:06:24:cd:f9:13:d6:59:a1:bd:23:34:0b: f1:44:83:00:36:1b:d0:aa:5c:31:9b:b0:ed:82:82:00:3c:6b: b8:ca:10:e0:e6:db:21:8d:32:07:11:3e:de:42:8b:47:40:28: 57:b3:80:b2:ab:05:99:8b:61:a1:62:08:a0:f1:09:91:27:13: d2:4c:5b:60:f3:5f:37:d8:37:52:02:47:27:53:16:b1:46:b6: 77:cb:89:b8:9c:75:a7:2f:9c:2a:06:7e:9e:56:a9:06:a8:8c: 1b:24:d6:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewL/2mO3yWtaCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YzM4ZTNkYTUtZDA2Yy00ZDA5LTkwMmYtYThkZjBhM2U3MDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+Q0vL7Qp0LmZ1GLComItKSwPYaBdwBpveqV wnSggBtVuy0+cQefZWvp2nYr3is+1bWcnL8yethmeh9BMNeBRLqCKnIoGEYGr4ix awVi/aDYvg9pfvHdA0pe3j+d+RN11rIk4cwvFbtiitnxZoVJFCbCI+b0+DvsT+V1 cAedxAEKBHAwiHDiS1NG3ceKSvItwRsgTx66kaHY6eIjysyx29P1qTWlfBJXmEaj mtnA57pvA9p6isZ+xdufL0UFMqE/yVHlgDr3AxdGkoFgXakp64TFS6Y/ztNjW4pA VroDludogOTjO05I4fXDcDK/O/vGcek+pwgmYkEqiXrRYGdFoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjsgTuq+Uwu5z4e/1ivyR8bN6+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMjIxYzVmMDEtOTQxMi0z OGQ2LWI0ZTctNzJkYjQ5MmQ3NDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIwADhT2b4qMJhlrQTx293+UYphAwyU9f5O6BW543uY3Y7WzzfkJVjo myCHTrTCM8yLhNUAnoNi96pH8uiOhEcuAZkJaOoDVbYcdZKdcIpWBYIspCYvMd5i VO6J4CCM8qmECXlT9GWpzE9H6XDj1UzuWmLTVZa5QR7IC10Ren7LV1/HM4J3iTPr Gc84CCm4cG0NH9dxYQYkzfkT1lmhvSM0C/FEgwA2G9CqXDGbsO2CggA8a7jKEODm 2yGNMgcRPt5Ci0dAKFezgLKrBZmLYaFiCKDxCZEnE9JMW2DzXzfYN1ICRydTFrFG tnfLibicdacvnCoGfp5WqQaojBsk1vg= -----END CERTIFICATE-----Generated at Sun Jun 29 22:32:57 2025 by rpki-client