$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa File: 4a8f44c2-2408-33dc-84a6-dcc034360053.roa (raw, json) Hash identifier: hGNKbSYqTKho4yrDgEnD2HkLICq6rMZAnNEgGm3CifQ= Subject key identifier: 83:50:FA:42:FD:CB:65:E9:29:C9:0A:96:23:E8:50:A7:04:DE:E4:D6 Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584A51D073DB153A9F20C2AE1B40 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 12119 IP address blocks: 209.128.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:73:db:15:3a:9f:20:c2:ae:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=1787f110-c532-46b8-9963-6ea7f42b64d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a1:dd:f2:f4:0b:dc:4f:3a:eb:06:1f:67:bf: df:3b:0e:7f:f4:4f:11:8b:d4:a6:97:e0:23:84:d2: f8:fb:80:75:12:39:0a:e0:5d:82:de:2c:35:26:32: 95:11:a0:13:4f:89:de:73:3d:8e:fd:c4:05:e2:ed: fa:11:37:89:2b:f4:2f:0c:6d:2f:55:d7:e2:4c:79: 02:72:b6:7a:5e:b7:4d:74:6f:10:16:2c:92:5d:dd: 8b:5e:db:a7:73:92:f1:0f:09:b8:21:8b:09:2f:4b: 63:18:8a:36:07:df:c3:ae:e4:81:35:5a:d9:d9:52: 21:48:2c:94:1f:f6:8e:3b:63:ad:ef:bb:87:96:52: 3c:3a:2d:4f:3d:0d:22:cf:45:6c:6d:c4:b4:3e:14: 17:b7:98:fc:03:50:9b:6b:14:b2:b7:82:b9:ad:86: ef:b7:f4:7c:81:d5:bd:84:c1:31:08:14:1a:4d:b3: 28:2a:65:07:82:c8:a3:b6:65:6a:31:61:22:c7:9d: 04:d0:79:6d:35:ca:58:99:90:40:95:a7:8e:27:5b: a5:31:1d:6c:9b:d8:94:2b:d8:0d:c2:e2:08:c5:63: 1e:64:2f:ff:d8:bc:e3:f0:f6:9c:e2:a4:a6:e6:0e: 05:be:39:b8:72:8e:f6:91:ca:5b:17:04:dc:0f:69: 18:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:50:FA:42:FD:CB:65:E9:29:C9:0A:96:23:E8:50:A7:04:DE:E4:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 209.128.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:01:a0:91:57:00:ba:66:55:46:04:75:36:4a:9f:41:a8:c9: e6:49:b6:53:50:97:11:6a:93:56:7c:f0:01:5d:cd:07:8f:ba: 8a:cd:59:ca:c8:d5:db:4c:3a:b6:c4:05:49:eb:fa:aa:d3:c0: cc:71:7d:f2:f1:84:d4:94:fd:77:97:25:eb:51:7c:62:51:6a: f8:67:67:12:f6:e2:b1:52:cb:5d:ef:aa:a4:9f:49:b0:dd:4a: 61:6f:91:12:bd:f3:4c:1b:8a:92:14:8b:e5:e8:f3:90:9e:1a: 65:95:b6:a8:30:60:d2:61:7b:60:b7:41:21:78:86:73:ed:f2: e2:eb:81:1e:f0:54:4d:bf:e0:0c:22:7a:d2:61:06:a8:75:b0: f4:9c:f3:5b:44:67:c6:bb:42:87:8b:20:75:96:2e:12:fd:aa: dd:4d:81:2d:cc:db:b6:d5:65:dd:ae:3c:5e:8a:12:11:39:65: 8f:0a:fa:dd:1e:82:4d:8c:a9:b7:63:a1:72:f3:b7:7e:be:1c: a1:c8:53:da:13:f4:e7:18:60:69:40:fb:30:45:02:55:bf:f2: 9e:bd:a8:55:61:3a:20:77:28:43:0e:c5:ae:e3:c9:47:7e:4e: f2:b2:e7:41:0c:68:66:b9:d7:05:b6:46:8f:73:8a:e6:30:02: d6:34:5c:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HPbFTqfIMKuG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk MTc4N2YxMTAtYzUzMi00NmI4LTk5NjMtNmVhN2Y0MmI2NGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqHd8vQL3E866wYfZ7/fOw5/9E8Ri9Sml+Aj hNL4+4B1EjkK4F2C3iw1JjKVEaATT4necz2O/cQF4u36ETeJK/QvDG0vVdfiTHkC crZ6XrdNdG8QFiySXd2LXtunc5LxDwm4IYsJL0tjGIo2B9/DruSBNVrZ2VIhSCyU H/aOO2Ot77uHllI8Oi1PPQ0iz0VsbcS0PhQXt5j8A1CbaxSyt4K5rYbvt/R8gdW9 hMExCBQaTbMoKmUHgsijtmVqMWEix50E0HltNcpYmZBAlaeOJ1ulMR1sm9iUK9gN wuIIxWMeZC//2Lzj8Pac4qSm5g4Fvjm4co72kcpbFwTcD2kYDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINQ+kL9y2XpKckKliPoUKcE3uTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvNGE4ZjQ0YzItMjQwOC0z M2RjLTg0YTYtZGNjMDM0MzYwMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACABoJFXALpmVUYEdTZKn0GoyeZJtlNQlxFqk1Z88AFdzQePuorNWcrI 1dtMOrbEBUnr+qrTwMxxffLxhNSU/XeXJetRfGJRavhnZxL24rFSy13vqqSfSbDd SmFvkRK980wbipIUi+Xo85CeGmWVtqgwYNJhe2C3QSF4hnPt8uLrgR7wVE2/4Awi etJhBqh1sPSc81tEZ8a7QoeLIHWWLhL9qt1NgS3M27bVZd2uPF6KEhE5ZY8K+t0e gk2MqbdjoXLzt36+HKHIU9oT9OcYYGlA+zBFAlW/8p69qFVhOiB3KEMOxa7jyUd+ TvKy50EMaGa51wW2Ro9ziuYwAtY0XFE= -----END CERTIFICATE-----Generated at Mon Jun 30 01:20:55 2025 by rpki-client