$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/a319d602-a131-3901-9f4e-2e323336cb6f.roa File: a319d602-a131-3901-9f4e-2e323336cb6f.roa (raw, json) Hash identifier: qwY+NZ/WrskW7hPEHCAnXzhKFzkY30oOhntPmHoyCOc= Subject key identifier: B7:65:EB:D2:B6:6C:9F:9D:FB:89:49:EB:01:B9:1F:35:C2:56:6C:0B Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584A3B7AEE38390FAF42098CBA00 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/a319d602-a131-3901-9f4e-2e323336cb6f.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 207990 IP address blocks: 209.242.223.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:ee:38:39:0f:af:42:09:8c:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=161ed443-ddad-4eb6-9e47-c40b882f8e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ae:98:06:20:80:7b:67:83:40:c2:cc:4c:68: 30:30:7f:cb:85:19:4b:4f:74:65:a3:0a:fe:70:fc: 5d:ee:5a:c5:50:0e:d4:2e:92:fa:a5:83:c4:fd:1d: 47:52:2d:02:ba:e8:a2:de:bc:ed:3a:c7:7b:75:f6: 67:51:f7:cc:4d:08:f0:e7:ec:e8:22:1f:f6:9d:d1: 8f:d5:52:52:96:cf:07:b2:42:59:1b:3d:29:c3:80: 97:4f:15:34:ce:13:14:c4:d4:29:ce:ff:0d:79:9d: f8:09:48:b4:0f:bb:aa:b2:4b:7e:8d:36:06:d5:55: fe:31:6f:ef:ee:95:f7:70:36:ac:b4:9c:dd:3e:89: 35:ad:85:6a:66:97:a2:4e:b4:e1:a1:25:5a:00:8e: b5:3f:6d:87:c4:03:6a:b6:3f:da:59:38:88:ff:00: ad:f8:34:ec:20:5b:4e:23:6e:cd:5c:8b:a1:ac:78: 5d:67:02:10:30:42:32:d4:3f:fc:b9:75:eb:5b:a7: 1e:e6:66:91:2e:62:76:4a:a7:b2:da:43:60:0f:c4: d9:79:f0:34:91:02:10:a3:72:d6:cc:04:25:b7:8f: 78:d7:97:8d:12:bd:20:98:6a:9d:c8:4e:4d:33:06: 39:72:5d:88:47:51:d2:74:66:fc:22:a3:e8:41:af: c6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:65:EB:D2:B6:6C:9F:9D:FB:89:49:EB:01:B9:1F:35:C2:56:6C:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/a319d602-a131-3901-9f4e-2e323336cb6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 209.242.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a5:1b:04:11:48:7a:46:cc:66:56:98:28:3d:f9:6e:a1:39: 88:50:df:fc:f9:a8:ef:62:fc:90:a0:92:42:29:e4:80:1b:ec: a3:fc:b8:93:4c:96:a6:b0:b1:36:01:f2:42:71:e0:9e:7a:e5: 21:92:8c:c6:ba:e3:ad:7b:67:f6:a2:91:98:f0:78:fb:e4:27: d1:f4:ea:2e:18:ec:c1:a2:62:2e:bf:2f:d0:ce:81:9d:5c:4a: 6b:a7:f4:49:a8:5e:a1:74:d3:0a:6f:9f:97:38:b4:76:a8:86: 8f:58:ff:eb:c6:d6:ea:a8:a4:7d:fb:5d:66:14:45:2b:5a:8c: d7:87:67:38:a4:71:36:a9:71:0e:51:ca:14:3a:eb:73:e1:32: 91:77:18:dd:08:11:66:91:b8:2a:9f:2d:95:67:d3:e4:3a:20: 0e:be:3e:e9:31:ab:60:22:40:c7:ff:68:0d:14:c1:67:9a:2d: 08:e5:6c:31:37:0a:3e:fb:77:f4:83:3c:1e:f6:de:8f:e9:f5: b6:ae:27:23:af:23:28:a0:ce:f6:52:b6:e7:b6:07:c7:db:d5: 57:38:da:08:ab:32:6b:31:e6:96:b1:da:2c:80:66:bf:4a:f4: 16:1a:ef:d1:e8:bb:6b:21:48:11:4f:da:70:fb:20:a9:64:9b: fa:fe:ed:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7eu44OQ+vQgmMugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MTYxZWQ0NDMtZGRhZC00ZWI2LTllNDctYzQwYjg4MmY4ZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q6YBiCAe2eDQMLMTGgwMH/LhRlLT3Rlowr+ cPxd7lrFUA7ULpL6pYPE/R1HUi0Cuuii3rztOsd7dfZnUffMTQjw5+zoIh/2ndGP 1VJSls8HskJZGz0pw4CXTxU0zhMUxNQpzv8NeZ34CUi0D7uqskt+jTYG1VX+MW/v 7pX3cDastJzdPok1rYVqZpeiTrThoSVaAI61P22HxANqtj/aWTiI/wCt+DTsIFtO I27NXIuhrHhdZwIQMEIy1D/8uXXrW6ce5maRLmJ2Sqey2kNgD8TZefA0kQIQo3LW zAQlt49415eNEr0gmGqdyE5NMwY5cl2IR1HSdGb8IqPoQa/G1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdl69K2bJ+d+4lJ6wG5HzXCVmwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYTMxOWQ2MDItYTEzMS0z OTAxLTlmNGUtMmUzMjMzMzZjYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqlGwQRSHpGzGZWmCg9+W6hOYhQ3/z5qO9i/JCgkkIp5IAb7KP8uJNM lqawsTYB8kJx4J565SGSjMa64617Z/aikZjwePvkJ9H06i4Y7MGiYi6/L9DOgZ1c Smun9EmoXqF00wpvn5c4tHaoho9Y/+vG1uqopH37XWYURStajNeHZzikcTapcQ5R yhQ663PhMpF3GN0IEWaRuCqfLZVn0+Q6IA6+Pukxq2AiQMf/aA0UwWeaLQjlbDE3 Cj77d/SDPB723o/p9bauJyOvIyigzvZStue2B8fb1Vc42girMmsx5pax2iyAZr9K 9BYa79Hou2shSBFP2nD7IKlkm/r+7eM= -----END CERTIFICATE-----Generated at Mon Jun 30 16:03:00 2025 by rpki-client