$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9db22770-7fc9-33f5-b210-41b7efad06d2.roa File: 9db22770-7fc9-33f5-b210-41b7efad06d2.roa (raw, json) Hash identifier: fcJ1yuWztUdP0I5QpEZw001ALGB6jDxbXMtRSZCnHFA= Subject key identifier: AA:6E:B3:29:5D:DF:F5:DC:23:33:63:48:73:63:E6:9A:D8:64:A4:7D Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584A3FAACFFE5A86E867F2E3E100 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9db22770-7fc9-33f5-b210-41b7efad06d2.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 21782 IP address blocks: 67.209.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:cf:fe:5a:86:e8:67:f2:e3:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=872252c4-4c5d-4369-b579-0b612ca5fe10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1b:8b:0f:93:13:2b:42:1e:84:a6:18:7d:a6: 62:12:90:54:e0:8e:08:aa:12:25:5b:72:b9:17:c3: 82:2f:3e:4f:9c:f2:eb:4b:10:a0:69:d1:0a:67:61: 21:df:c1:68:47:0b:d0:99:d2:34:bb:c1:2b:f2:03: f8:8b:58:71:6b:26:a9:27:fd:d5:5e:ad:2a:3e:13: de:cd:dd:4d:9f:57:2c:a0:c5:46:c2:fd:2a:f8:7a: eb:10:e5:e0:f2:90:bb:19:31:64:9a:67:be:8b:67: ea:f6:67:fc:86:9c:8a:ea:23:77:56:75:b6:de:0a: 95:7c:e4:0d:ce:6b:37:bc:34:1b:e2:68:15:11:e8: 84:51:29:45:e4:38:bd:9c:d5:06:b4:d3:72:7b:9e: 98:1d:3b:2e:4e:dc:57:37:b5:87:9c:cd:48:64:ac: cb:93:ab:67:fe:01:88:cd:e7:69:48:7b:62:a4:9f: 7a:31:62:f1:c1:98:98:48:b8:a8:10:c9:cf:62:3e: 1d:a6:f9:28:74:19:b8:98:8a:8a:2b:de:d6:09:5f: f1:47:07:82:2a:cf:2e:bc:88:f0:b8:2d:74:53:ce: 02:83:ce:e4:2f:40:98:18:9d:86:21:75:db:07:a9: a2:0c:52:5d:48:73:46:f8:36:8f:98:ef:6e:aa:e4: ac:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6E:B3:29:5D:DF:F5:DC:23:33:63:48:73:63:E6:9A:D8:64:A4:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9db22770-7fc9-33f5-b210-41b7efad06d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 67.209.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:9a:74:90:0a:dc:81:d6:cc:72:02:57:90:3d:f6:a0:2c:55: 18:89:d5:95:4f:cb:dc:bf:65:7a:0c:af:bc:9b:3b:4d:d9:37: 2e:c8:39:8a:8d:b4:76:94:7f:f0:06:25:6a:3a:70:8d:13:de: bc:c1:29:54:3d:77:9f:31:4d:3c:ae:fd:db:76:45:79:19:31: 13:0a:f6:49:c2:14:4b:49:3b:a7:94:ef:50:e3:f3:30:45:7c: d3:a2:73:5b:20:ba:dd:f6:cd:28:9b:35:39:3f:b9:85:13:06: 9d:42:fa:8e:cf:6c:1b:ea:75:f0:bd:a6:b2:c3:76:e4:83:6c: f9:69:c9:54:01:3c:4e:1c:30:e9:a2:c8:e3:01:52:36:84:70: b3:71:a3:af:82:7d:73:4e:fd:c7:de:92:69:52:ea:88:dd:49: 9f:f0:75:fb:15:16:fc:f0:81:c1:3e:c1:a7:da:02:4e:09:f5: a5:eb:6f:fb:f8:0d:97:85:9e:72:e0:92:c4:8e:24:0c:c5:fd: fe:cf:60:c8:8d:df:98:84:26:2d:84:f4:c6:11:e1:84:aa:a2: 40:f0:5f:84:a2:23:8b:7d:18:86:ec:f2:25:0f:8e:e2:db:69: ab:0d:88:21:33:b8:b7:20:02:3a:49:61:82:57:4a:0f:cc:4c: 8e:12:81:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qs/+WoboZ/Lj4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk ODcyMjUyYzQtNGM1ZC00MzY5LWI1NzktMGI2MTJjYTVmZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8huLD5MTK0IehKYYfaZiEpBU4I4IqhIlW3K5 F8OCLz5PnPLrSxCgadEKZ2Eh38FoRwvQmdI0u8Er8gP4i1hxayapJ/3VXq0qPhPe zd1Nn1csoMVGwv0q+HrrEOXg8pC7GTFkmme+i2fq9mf8hpyK6iN3VnW23gqVfOQN zms3vDQb4mgVEeiEUSlF5Di9nNUGtNNye56YHTsuTtxXN7WHnM1IZKzLk6tn/gGI zedpSHtipJ96MWLxwZiYSLioEMnPYj4dpvkodBm4mIqKK97WCV/xRweCKs8uvIjw uC10U84Cg87kL0CYGJ2GIXXbB6miDFJdSHNG+DaPmO9uquSsgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpusyld3/XcIzNjSHNj5prYZKR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvOWRiMjI3NzAtN2ZjOS0z M2Y1LWIyMTAtNDFiN2VmYWQwNmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9HAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqadJAK3IHWzHICV5A99qAsVRiJ1ZVPy9y/ZXoMr7ybO03ZNy7IOYqN tHaUf/AGJWo6cI0T3rzBKVQ9d58xTTyu/dt2RXkZMRMK9knCFEtJO6eU71Dj8zBF fNOic1sgut32zSibNTk/uYUTBp1C+o7PbBvqdfC9prLDduSDbPlpyVQBPE4cMOmi yOMBUjaEcLNxo6+CfXNO/cfekmlS6ojdSZ/wdfsVFvzwgcE+wafaAk4J9aXrb/v4 DZeFnnLgksSOJAzF/f7PYMiN35iEJi2E9MYR4YSqokDwX4SiI4t9GIbs8iUPjuLb aasNiCEzuLcgAjpJYYJXSg/MTI4SgWA= -----END CERTIFICATE-----Generated at Mon Jun 30 13:44:23 2025 by rpki-client