$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa File: c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa (raw, json) Hash identifier: xsSpSs4hZJFhATn6CXurE7oD29P912pSLLLjO+CqtBM= Subject key identifier: EB:CE:DA:C4:BC:73:5B:0B:C5:06:82:CF:B5:80:A1:11:61:D6:F3:B4 Certificate issuer: /CN=ba2a1fed-6973-4607-a297-20f3f241a739 Certificate serial: 010D0C9F4328584A3B7AF8872614572BE5AF6C80 Authority key identifier: 96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 14618 IP address blocks: 192.207.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f8:87:26:14:57:2b:e5:af:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2a1fed-6973-4607-a297-20f3f241a739 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=bf3ded3e-ab1e-4592-915c-28b6a92aafc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e2:95:9e:f2:9f:3a:3d:56:3d:99:c6:cc:2f: 33:73:8c:ce:7d:f3:c0:19:0d:2b:49:e7:05:e5:e7: bb:f5:a8:68:84:8c:f0:f0:e3:27:65:68:4d:aa:87: 9b:51:fb:74:18:b2:07:e2:fd:94:e6:d4:95:cc:10: a8:32:de:93:d6:b2:28:ef:b0:f2:69:53:f2:a5:60: 2b:03:4b:0f:fe:97:f6:d6:2c:35:36:e4:b7:18:1e: 2e:56:b2:ae:07:d2:4e:c8:dc:85:3f:84:b9:a3:ed: bd:c1:72:99:14:23:88:e4:f5:59:8b:d9:3b:93:6b: d7:5f:37:c4:fa:27:57:6e:74:7d:31:36:88:0c:d2: aa:06:d9:53:af:51:6c:c5:38:22:c3:34:06:5a:99: 75:70:a5:14:9d:8e:b5:9c:c5:ed:7c:28:96:c5:3a: 33:af:f0:de:95:45:7b:14:be:88:e2:81:dc:f5:5b: 27:74:66:ba:13:6d:18:be:8a:59:81:f8:45:1d:7a: da:50:91:9b:40:be:33:6f:40:7c:ef:0c:d0:4d:1a: c7:6d:31:66:84:e8:bf:59:83:f0:9b:1f:7e:3e:2b: e4:8b:3b:da:fd:e9:4d:3c:c5:2f:c4:8e:a2:38:14: 7e:f4:f6:5c:f0:16:42:bb:ad:b5:6e:30:52:36:67: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CE:DA:C4:BC:73:5B:0B:C5:06:82:CF:B5:80:A1:11:61:D6:F3:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl X509v3 Authority Key Identifier: keyid:96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer sbgp-ipAddrBlock: critical IPv4: 192.207.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:31:4d:1d:93:d2:67:9c:22:19:78:97:2c:6e:57:81:36:97: 5a:62:05:dc:a4:cf:41:9f:3a:5e:97:6a:9f:2a:04:25:46:5c: 51:fe:0b:c7:77:ee:ed:f8:49:02:4e:a9:9f:8f:69:57:fa:d3: a4:34:e0:42:f3:e8:2d:93:13:4f:b9:64:ec:91:d8:6d:7c:39: 4f:73:cb:04:c9:0e:51:34:36:0d:a5:b3:f6:f0:20:dd:aa:25: 7a:ed:7e:b5:eb:9f:9c:f8:aa:ff:b4:32:bf:6d:ab:b4:41:95: cf:cb:2a:11:d5:1d:d3:13:96:3c:ec:22:99:81:94:20:dd:25: bc:52:33:38:e8:19:83:ec:74:0d:9c:6b:68:ba:5c:41:96:bc: 8e:6d:d5:51:74:4b:90:c1:59:44:ea:db:61:1a:24:0e:7b:55: 4d:a3:a6:33:e0:58:28:4a:be:bc:ab:a6:a9:55:fd:85:65:a1: 98:af:d7:c4:a3:a0:19:d5:f7:67:81:c2:33:65:98:f4:cd:07: d1:b8:28:bf:91:cb:e8:e5:86:bb:69:06:fa:73:f1:22:86:30: 06:27:7c:ba:19:54:31:94:76:cf:91:56:5d:ec:4f:b5:07:3b: a5:f2:d4:49:52:c1:41:09:da:54:7f:20:ae:9d:25:e5:61:9e: 68:35:38:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7eviHJhRXK+WvbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyYTFmZWQtNjk3My00NjA3LWEyOTctMjBmM2YyNDFh NzM5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YmYzZGVkM2UtYWIxZS00NTkyLTkxNWMtMjhiNmE5MmFhZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eKVnvKfOj1WPZnGzC8zc4zOffPAGQ0rSecF 5ee79ahohIzw8OMnZWhNqoebUft0GLIH4v2U5tSVzBCoMt6T1rIo77DyaVPypWAr A0sP/pf21iw1NuS3GB4uVrKuB9JOyNyFP4S5o+29wXKZFCOI5PVZi9k7k2vXXzfE +idXbnR9MTaIDNKqBtlTr1FsxTgiwzQGWpl1cKUUnY61nMXtfCiWxTozr/DelUV7 FL6I4oHc9VsndGa6E20YvopZgfhFHXraUJGbQL4zb0B87wzQTRrHbTFmhOi/WYPw mx9+Pivkizva/elNPMUvxI6iOBR+9PZc8BZCu621bjBSNmfogQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvO2sS8c1sLxQaCz7WAoRFh1vO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTJh MWZlZC02OTczLTQ2MDctYTI5Ny0yMGYzZjI0MWE3MzkvYzlmODRlYmItZWI5MC0z YjFlLWEzYTYtOWQ5NTU0MGNlOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmEyYTFmZWQtNjk3My00NjA3LWEy OTctMjBmM2YyNDFhNzM5L2JhMmExZmVkLTY5NzMtNDYwNy1hMjk3LTIwZjNmMjQx YTczOS5jcmwwHwYDVR0jBBgwFoAUlrqf3KvN2czFyO1vDzA9ccCNIbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTJhMWZlZC02OTczLTQ2MDctYTI5Ny0yMGYz ZjI0MWE3MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwxTR2T0mecIhl4lyxuV4E2l1piBdykz0GfOl6Xap8qBCVGXFH+C8d3 7u34SQJOqZ+PaVf606Q04ELz6C2TE0+5ZOyR2G18OU9zywTJDlE0Ng2ls/bwIN2q JXrtfrXrn5z4qv+0Mr9tq7RBlc/LKhHVHdMTljzsIpmBlCDdJbxSMzjoGYPsdA2c a2i6XEGWvI5t1VF0S5DBWUTq22EaJA57VU2jpjPgWChKvryrpqlV/YVloZiv18Sj oBnV92eBwjNlmPTNB9G4KL+Ry+jlhrtpBvpz8SKGMAYnfLoZVDGUds+RVl3sT7UH O6Xy1ElSwUEJ2lR/IK6dJeVhnmg1OLo= -----END CERTIFICATE-----Generated at Sun Jun 29 08:47:11 2025 by rpki-client