$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa File: 8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa (raw, json) Hash identifier: nWNSY7yabHmDTHvZj9CMYGm1ewn7e15Z2KayrR7EJ6c= Subject key identifier: DB:15:D0:02:5C:04:A3:84:23:54:5D:F2:19:E4:03:21:B8:D0:CA:35 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584A1F902657AE5B0972D8105980 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 2152 IP address blocks: 209.129.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:26:57:ae:5b:09:72:d8:10:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=ad5c489d-4527-4db5-af9f-e391d268533e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:1c:f1:5f:51:ed:33:00:26:d8:9a:67:4f: 2f:0d:1a:52:c4:38:9b:e1:cd:f3:84:12:e2:e3:b2: 36:4a:9f:55:71:a8:c4:a4:58:27:5c:66:63:a6:11: 59:f9:05:b1:d4:1c:c1:b5:ea:51:64:50:aa:a2:f3: 8e:b6:82:7b:ea:a8:d4:ed:de:3a:bb:02:dc:32:8b: c5:6b:06:ab:33:f2:c2:2b:67:76:07:91:6e:27:b3: d9:5e:7d:ad:05:2e:fb:34:f6:c0:e7:63:b9:b6:74: 5c:5a:54:34:8b:d8:ff:c6:27:7f:4b:13:af:c2:e2: 8c:5b:b6:87:0d:fd:3e:14:5a:67:e4:a0:0a:28:97: 9b:67:0a:d3:a2:b9:30:9f:7f:63:14:7d:00:86:2b: 9b:dc:a9:b8:f4:73:26:61:c7:59:f8:b3:01:f2:b2: 8c:80:a9:86:4b:59:ca:8a:9c:27:ed:08:78:9d:8c: 26:f8:90:ed:f4:55:d6:cd:89:f4:c4:48:79:65:e1: 43:49:53:bb:1d:1d:b1:78:0a:b9:c4:ea:d4:96:7e: bf:79:7e:f2:2b:e4:22:2e:70:b1:30:29:5e:a8:35: 4c:3d:e9:80:e3:f3:2a:ee:18:34:4b:32:e5:12:63: 5b:03:65:3d:d9:c5:47:40:db:1c:fe:ea:57:de:37: 6c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:15:D0:02:5C:04:A3:84:23:54:5D:F2:19:E4:03:21:B8:D0:CA:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 209.129.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:d6:5e:13:4c:9e:0d:5e:9a:04:95:ec:51:bd:b5:df:a9:cc: 98:57:e9:98:b5:92:33:57:d6:b0:fe:36:b0:3b:aa:80:04:42: e1:9f:7f:49:04:25:83:bf:18:14:2d:fb:cb:fd:08:f3:be:9e: 06:b3:fd:13:08:38:81:cd:2a:5d:55:ed:80:2c:7f:33:26:98: 1c:fc:d7:a9:2e:ba:a1:fe:55:ea:71:b8:74:eb:84:bb:ee:a3: 35:02:bb:01:b2:8c:48:19:33:1c:6c:c1:67:ee:eb:c4:d6:12: 0a:b0:1f:d9:08:7f:87:e0:63:23:c3:c9:41:8d:e6:40:0a:e9: 49:ab:02:ca:26:7e:f3:ae:2e:0f:27:ed:11:f8:c3:12:bb:bf: 72:c5:23:b5:3f:a2:3f:3e:36:e1:a6:d9:25:7f:f8:2f:84:17: 38:79:3f:0f:23:c9:4b:40:01:a8:33:c2:2a:c8:92:e3:d3:2d: 19:5d:b3:bf:ad:ad:e0:51:0d:d2:5a:c7:62:eb:23:24:db:a5: 6d:2c:79:54:e1:ac:0c:d4:74:e7:5a:96:3c:ed:a0:7b:2c:78: ff:2a:2d:4e:b0:c5:90:9e:74:94:cf:09:ba:43:9f:6c:7c:6b: e9:ec:c5:eb:10:23:e5:06:15:e5:86:3e:bc:70:c6:83:ee:f1: 2b:81:55:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCZXrlsJctgQWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk YWQ1YzQ4OWQtNDUyNy00ZGI1LWFmOWYtZTM5MWQyNjg1MzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI8c8V9R7TMAJtiaZ08vDRpSxDib4c3zhBLi 47I2Sp9VcajEpFgnXGZjphFZ+QWx1BzBtepRZFCqovOOtoJ76qjU7d46uwLcMovF awarM/LCK2d2B5FuJ7PZXn2tBS77NPbA52O5tnRcWlQ0i9j/xid/SxOvwuKMW7aH Df0+FFpn5KAKKJebZwrTorkwn39jFH0Ahiub3Km49HMmYcdZ+LMB8rKMgKmGS1nK ipwn7Qh4nYwm+JDt9FXWzYn0xEh5ZeFDSVO7HR2xeAq5xOrUln6/eX7yK+QiLnCx MCleqDVMPemA4/Mq7hg0SzLlEmNbA2U92cVHQNsc/upX3jdsNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsV0AJcBKOEI1Rd8hnkAyG40Mo1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvOGI5OThjNmQtNDI0Zi0z YWZlLThjYjEtOWIxMzk4ZmJhYzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3WXhNMng1emgSV7FG9td+pzJhX6Zi1kjNX1rD+NrA7qoAEQuGff0kE JYO/GBQt+8v9CPO+ngaz/RMIOIHNKl1V7YAsfzMmmBz816kuuqH+VepxuHTrhLvu ozUCuwGyjEgZMxxswWfu68TWEgqwH9kIf4fgYyPDyUGN5kAK6UmrAsomfvOuLg8n 7RH4wxK7v3LFI7U/oj8+NuGm2SV/+C+EFzh5Pw8jyUtAAagzwirIkuPTLRlds7+t reBRDdJax2LrIyTbpW0seVThrAzUdOdaljztoHsseP8qLU6wxZCedJTPCbpDn2x8 a+nsxesQI+UGFeWGPrxwxoPu8SuBVfM= -----END CERTIFICATE-----Generated at Mon Jun 30 23:39:46 2025 by rpki-client