$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86a2fa96-af1c-3520-b8e2-324df289efd3.roa File: 86a2fa96-af1c-3520-b8e2-324df289efd3.roa (raw, json) Hash identifier: NNMer3OBaoL4xcy2D+Cgmtmj2pjxBP9obMfC4ddQ+Js= Subject key identifier: 89:7A:37:59:66:4D:32:19:9C:E1:9B:26:11:D6:6A:36:C1:FD:E2:AD Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584A3B7B0262A33B7BB89F68FB00 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86a2fa96-af1c-3520-b8e2-324df289efd3.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 393249 IP address blocks: 206.12.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:02:62:a3:3b:7b:b8:9f:68:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=ba211685-8eb4-4c31-933d-45d166be46d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:a5:e4:69:9d:40:ac:4e:2b:db:e8:c0:ad: e1:79:d2:32:84:9d:a5:0f:63:3a:f8:92:e4:e1:89: 7b:8f:52:25:64:dd:3d:83:01:ab:78:be:00:a2:aa: df:db:29:6c:0f:39:fa:87:d4:9f:f7:79:e4:01:c7: cc:14:97:bf:bd:d1:79:c1:a4:a5:29:4d:40:9f:2b: 34:3c:82:aa:ca:d2:1a:30:0e:06:d5:ba:e1:6f:e9: d1:ee:cb:5b:82:b8:bb:5d:9c:79:a9:b1:83:18:10: 96:73:6d:58:d5:86:2c:f1:a8:e5:74:02:8c:2a:e2: 1f:a8:61:5e:04:0d:47:4c:2d:65:8d:d4:3e:36:dc: d8:a9:bf:78:47:17:f6:64:07:16:f8:d8:ad:9a:b9: 07:4e:22:18:4c:e9:53:7d:28:a7:3d:bf:6d:b5:af: b5:ec:88:aa:ca:2a:8e:36:c8:bd:be:0a:e4:9c:73: 7e:ea:7d:09:b2:af:0a:f5:59:e6:d7:ad:e6:d0:c9: d7:4f:d7:d1:15:cc:24:8f:4a:b9:66:d1:a1:b3:be: 92:18:db:9b:b9:6c:68:e2:9b:3e:ab:6c:c5:b8:dc: cf:f3:14:78:58:de:6e:d8:bb:c0:33:c9:ac:47:ac: ac:06:f6:e3:6d:20:01:b6:96:5d:11:7d:38:d8:cb: e0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7A:37:59:66:4D:32:19:9C:E1:9B:26:11:D6:6A:36:C1:FD:E2:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86a2fa96-af1c-3520-b8e2-324df289efd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.12.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:bb:ed:5c:2b:3e:cb:40:08:10:b9:70:52:7a:81:16:ff:f5: e3:bb:ec:ed:25:35:f0:55:b3:b3:2c:c4:50:42:5f:65:ec:46: bc:74:c5:27:cb:c4:5d:a3:41:56:fb:b5:b6:8b:ea:14:17:2c: 0a:ae:65:79:91:80:48:fc:47:2d:e8:5c:20:ab:e7:1b:fe:96: 49:6f:da:7d:47:35:ee:0b:6d:4f:0a:75:0c:32:72:87:3e:fb: 24:46:22:48:44:57:85:0e:f5:30:f2:a1:42:3c:d8:7c:d9:c0: e8:f7:50:00:f9:5b:48:a1:4e:9c:03:38:f6:4a:4d:82:56:45: dd:7f:00:53:a6:88:e4:cf:64:c5:d3:56:98:97:39:7c:72:8a: a8:41:18:b2:14:0e:65:36:dc:0c:85:70:3c:35:b6:03:32:80: 41:12:0d:8d:d0:cf:e8:4f:fe:64:3c:0e:ce:74:dd:6f:43:c9: 93:30:76:b5:14:42:10:6f:f4:2c:f8:99:a5:08:c2:58:76:bc: 0d:f2:1b:2f:09:eb:9a:d7:68:64:39:23:05:94:a8:a4:ef:a9: ea:dd:27:fc:9f:b4:81:da:df:40:23:60:2c:39:e2:44:e3:a8: 4f:4c:49:e3:9d:06:85:84:71:16:95:3d:c1:17:e3:64:25:c7: 78:74:70:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewJiozt7uJ9o+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YmEyMTE2ODUtOGViNC00YzMxLTkzM2QtNDVkMTY2YmU0NmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymOl5GmdQKxOK9vowK3hedIyhJ2lD2M6+JLk 4Yl7j1IlZN09gwGreL4Aoqrf2ylsDzn6h9Sf93nkAcfMFJe/vdF5waSlKU1Anys0 PIKqytIaMA4G1brhb+nR7stbgri7XZx5qbGDGBCWc21Y1YYs8ajldAKMKuIfqGFe BA1HTC1ljdQ+NtzYqb94Rxf2ZAcW+NitmrkHTiIYTOlTfSinPb9tta+17IiqyiqO Nsi9vgrknHN+6n0Jsq8K9Vnm163m0MnXT9fRFcwkj0q5ZtGhs76SGNubuWxo4ps+ q2zFuNzP8xR4WN5u2LvAM8msR6ysBvbjbSABtpZdEX042MvgLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIl6N1lmTTIZnOGbJhHWajbB/eKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvODZhMmZhOTYtYWYxYy0z NTIwLWI4ZTItMzI0ZGYyODllZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzgzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABa77VwrPstACBC5cFJ6gRb/9eO77O0lNfBVs7MsxFBCX2XsRrx0xSfL xF2jQVb7tbaL6hQXLAquZXmRgEj8Ry3oXCCr5xv+lklv2n1HNe4LbU8KdQwycoc+ +yRGIkhEV4UO9TDyoUI82HzZwOj3UAD5W0ihTpwDOPZKTYJWRd1/AFOmiOTPZMXT VpiXOXxyiqhBGLIUDmU23AyFcDw1tgMygEESDY3Qz+hP/mQ8Ds503W9DyZMwdrUU QhBv9Cz4maUIwlh2vA3yGy8J65rXaGQ5IwWUqKTvqerdJ/yftIHa30AjYCw54kTj qE9MSeOdBoWEcRaVPcEX42Qlx3h0cFQ= -----END CERTIFICATE-----Generated at Sun Jun 29 22:30:47 2025 by rpki-client