$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e961ff3f-f997-35d9-826a-2dba732b2785.roa File: e961ff3f-f997-35d9-826a-2dba732b2785.roa (raw, json) Hash identifier: 2TXjvgo2s3iHQz9ytxxFj7sjz0/BX3dtMzY/h4eKh8I= Subject key identifier: 19:A6:3B:47:30:CC:9B:96:6E:E3:BA:36:2C:F1:F9:1D:D7:98:D0:F1 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584A480AEA2A4B7A2AA8D30DD1A0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e961ff3f-f997-35d9-826a-2dba732b2785.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 2152 IP address blocks: 209.129.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:ea:2a:4b:7a:2a:a8:d3:0d:d1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=1a97164b-a0a7-41ad-8a41-f3828d3b69e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:68:30:b9:e0:c5:56:92:db:b9:c7:77:9a: a5:33:e8:ab:a6:57:81:17:8d:51:7f:f7:02:5c:44: d3:d0:3d:6d:fa:ab:0e:4b:4a:a0:a7:02:e4:00:5d: aa:df:2f:98:13:be:9a:62:52:01:bc:12:09:10:06: 2b:3d:6a:f5:73:22:75:80:e3:cb:f2:4b:50:aa:8d: 4e:02:80:a0:3c:a3:74:bd:e1:9e:bf:d2:7d:b4:46: 5b:1f:e8:91:eb:aa:1e:33:72:60:67:29:2e:cc:72: 19:29:47:65:25:86:be:21:4d:5f:37:4f:41:3b:e4: 6e:c5:62:b9:31:28:60:c4:3a:ce:9d:bb:4a:a6:b3: cb:ca:7a:f2:93:38:4a:95:97:d7:1f:aa:a0:49:b3: 30:74:4b:1f:c4:9b:ae:78:7f:54:e6:85:26:46:c6: 19:9e:e3:71:49:be:b9:e5:92:27:70:76:97:e9:81: ac:59:91:60:c5:7b:62:de:c4:85:b2:36:1b:dc:60: de:1b:fc:ff:ef:18:9a:6b:f8:fb:53:18:77:cf:50: e5:70:39:9d:bf:f3:73:67:fd:be:90:04:b2:76:d7: 13:4f:08:14:85:0b:41:71:65:c7:70:f5:44:03:e0: c3:7a:ae:d8:9b:9c:52:41:dd:bf:34:db:2a:33:ca: 30:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A6:3B:47:30:CC:9B:96:6E:E3:BA:36:2C:F1:F9:1D:D7:98:D0:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e961ff3f-f997-35d9-826a-2dba732b2785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 209.129.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:bd:70:03:bd:f8:0e:ad:5e:d7:b3:da:f1:6b:ee:35:ae:a0: 72:70:46:f5:30:16:64:3a:e3:bf:ab:c7:c3:69:72:d7:7c:df: ff:d8:b4:ad:8b:bf:a7:e3:1f:59:5b:f8:c8:38:0a:05:d9:e5: 29:0e:78:1c:77:f4:b7:eb:38:b2:d3:ab:de:97:54:1c:c2:a6: ec:2c:6a:ee:fc:d1:7d:3e:9f:23:4c:de:98:d5:f2:ad:f0:06: c4:99:b4:1d:16:52:f5:28:53:05:a3:bd:75:98:d1:da:dd:75: 47:7a:ef:b1:0c:b6:22:81:38:e3:2b:89:fa:e2:6c:ac:07:f7: 2b:44:57:72:de:28:25:22:f9:5b:b2:be:09:0b:22:3b:3f:29: 7d:ec:c5:8f:41:0b:5a:67:cd:a1:10:50:fb:47:fb:e1:45:63: ca:8f:d6:42:54:e8:ba:46:02:0d:b5:19:9d:34:98:38:f1:2c: 8f:8f:55:ab:9b:23:d3:a4:b6:96:f6:2f:81:3a:ec:01:4f:66: 66:35:fd:c8:b9:ff:dc:87:bd:a6:b7:1e:4b:b0:96:ed:8d:44: b4:6f:cf:31:64:4d:e6:49:0c:14:30:14:22:e1:69:ed:3d:59: 90:0c:9d:a2:f0:5a:1f:06:1b:23:5b:d8:6a:be:c6:51:47:20: 50:70:8d:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICuoqS3oqqNMN0aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk MWE5NzE2NGItYTBhNy00MWFkLThhNDEtZjM4MjhkM2I2OWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnahoMLngxVaS27nHd5qlM+irpleBF41Rf/cC XETT0D1t+qsOS0qgpwLkAF2q3y+YE76aYlIBvBIJEAYrPWr1cyJ1gOPL8ktQqo1O AoCgPKN0veGev9J9tEZbH+iR66oeM3JgZykuzHIZKUdlJYa+IU1fN09BO+RuxWK5 MShgxDrOnbtKprPLynrykzhKlZfXH6qgSbMwdEsfxJuueH9U5oUmRsYZnuNxSb65 5ZIncHaX6YGsWZFgxXti3sSFsjYb3GDeG/z/7xiaa/j7Uxh3z1DlcDmdv/NzZ/2+ kASydtcTTwgUhQtBcWXHcPVEA+DDeq7Ym5xSQd2/NNsqM8owWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmmO0cwzJuWbuO6Nizx+R3XmNDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZTk2MWZmM2YtZjk5Ny0z NWQ5LTgyNmEtMmRiYTczMmIyNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm9cAO9+A6tXtez2vFr7jWuoHJwRvUwFmQ647+rx8Npctd83//YtK2L v6fjH1lb+Mg4CgXZ5SkOeBx39LfrOLLTq96XVBzCpuwsau780X0+nyNM3pjV8q3w BsSZtB0WUvUoUwWjvXWY0drddUd677EMtiKBOOMrifribKwH9ytEV3LeKCUi+Vuy vgkLIjs/KX3sxY9BC1pnzaEQUPtH++FFY8qP1kJU6LpGAg21GZ00mDjxLI+PVaub I9Oktpb2L4E67AFPZmY1/ci5/9yHvaa3Hkuwlu2NRLRvzzFkTeZJDBQwFCLhae09 WZAMnaLwWh8GGyNb2Gq+xlFHIFBwja8= -----END CERTIFICATE-----Generated at Mon Jun 30 13:31:47 2025 by rpki-client