$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa File: 83bed6be-982c-32d3-85e7-7d30a77ee70d.roa (raw, json) Hash identifier: NDmzvVEQKjd+h7G6JeCmFw4MCGZGThljpGOfFvUcoyg= Subject key identifier: D8:08:A1:16:33:95:F9:40:E7:69:CC:60:D8:87:99:BA:7F:43:E0:3F Certificate issuer: /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Certificate serial: 010D0C9F4328584A14655D3B5D3F2D7D0348F680 Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 22379 IP address blocks: 209.127.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:5d:3b:5d:3f:2d:7d:03:48:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=2585e084-6022-4a63-92f1-ca215193f9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:97:11:44:96:ca:64:32:65:e1:f5:0b:c5:58: 96:0c:ff:3a:86:1e:ba:9e:d5:41:47:f3:ba:2a:34: 6e:7c:b7:85:29:f3:79:c4:7d:b4:e9:f7:20:bb:69: 27:a7:cc:5f:ef:cd:27:27:4a:d4:8f:00:d9:b2:dc: 04:aa:d2:94:0f:a6:8a:c5:81:d5:1f:3a:e0:48:e0: 55:81:45:c6:1d:3e:20:20:96:af:e3:07:e6:9e:9d: fe:a4:94:8b:52:f3:a4:28:4d:42:c5:ec:9f:16:cc: 10:b0:57:d0:da:5f:94:74:58:14:4b:fa:d0:a5:de: d7:ad:c0:fa:66:56:34:b2:72:7f:0f:26:8b:df:ae: 39:21:ff:6d:87:a6:6f:66:0d:ea:0e:31:d0:01:ec: 91:c2:63:ef:e5:28:73:5c:71:94:35:e5:b1:7e:4c: 72:1a:fe:82:41:75:36:e8:b0:93:91:11:19:c6:4b: d0:ff:c7:eb:d7:d8:33:09:e5:51:06:07:28:58:0c: a5:fc:2a:6c:9d:bc:26:b8:f6:c9:86:a7:06:83:2a: e9:81:8d:13:a2:77:dc:18:5b:b8:c1:c2:ed:7a:5f: e8:0a:6d:dd:c5:b7:fb:03:2e:04:8c:9c:f2:5b:c5: cd:3a:47:42:89:87:b4:2f:6b:ad:08:09:be:46:29: e1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:08:A1:16:33:95:F9:40:E7:69:CC:60:D8:87:99:BA:7F:43:E0:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/83bed6be-982c-32d3-85e7-7d30a77ee70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl X509v3 Authority Key Identifier: keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer sbgp-ipAddrBlock: critical IPv4: 209.127.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:46:9b:a5:af:e1:d7:84:f2:dc:4b:72:7f:e7:9a:28:f2:22: 04:28:17:fb:f9:f3:cf:1c:be:97:0d:7e:14:6a:43:1e:41:ed: 1a:d6:a4:e4:3e:1a:75:88:0e:18:aa:96:ff:db:8f:41:d7:33: 1b:b2:b8:30:57:84:7d:c0:06:f2:a6:2b:c9:14:e5:e1:f2:fd: ef:df:73:2d:32:e0:40:97:94:63:02:4f:65:c3:83:8b:0c:e3: 42:8b:ae:5a:81:e9:68:14:9a:6e:47:99:46:03:bb:91:4d:f7: 8b:29:ba:e0:7c:5d:b5:a7:ee:60:87:28:e2:14:de:33:e9:0b: 90:25:ba:0d:0e:80:19:c2:6a:19:61:6f:da:ce:03:b2:b7:87: bf:67:84:df:92:cb:5a:15:80:b0:78:e4:dc:2d:40:05:0f:a1: 34:3d:b0:62:28:63:3a:30:cd:6b:e2:bd:88:97:ae:e0:eb:b9: ec:b9:de:d7:ae:03:03:6b:18:56:67:90:0b:72:b2:59:b4:61: 76:3d:68:9c:cc:f0:1c:46:a3:01:2c:c1:90:1f:fb:94:2c:d6: ca:df:36:5a:9f:a4:99:d2:e5:8e:f1:e3:63:58:ca:83:c5:29: a4:5d:0e:9b:64:a6:95:28:d5:e2:f0:fe:ce:82:6d:c1:6e:c0: 96:a5:9a:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZV07XT8tfQNI9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJjODgyMDctZTdjNy00NTNlLWE0YWItNzdiNzIxNTJj MzNhMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MjU4NWUwODQtNjAyMi00YTYzLTkyZjEtY2EyMTUxOTNmOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZcRRJbKZDJl4fULxViWDP86hh66ntVBR/O6 KjRufLeFKfN5xH206fcgu2knp8xf780nJ0rUjwDZstwEqtKUD6aKxYHVHzrgSOBV gUXGHT4gIJav4wfmnp3+pJSLUvOkKE1CxeyfFswQsFfQ2l+UdFgUS/rQpd7XrcD6 ZlY0snJ/DyaL3645If9th6ZvZg3qDjHQAeyRwmPv5ShzXHGUNeWxfkxyGv6CQXU2 6LCTkREZxkvQ/8fr19gzCeVRBgcoWAyl/CpsnbwmuPbJhqcGgyrpgY0TonfcGFu4 wcLtel/oCm3dxbf7Ay4EjJzyW8XNOkdCiYe0L2utCAm+Rinh+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgIoRYzlflA52nMYNiHmbp/Q+A/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4 ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3MjE1MmMzM2EvODNiZWQ2YmUtOTgyYy0z MmQzLTg1ZTctN2QzMGE3N2VlNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWJjODgyMDctZTdjNy00NTNlLWE0 YWItNzdiNzIxNTJjMzNhLzliYzg4MjA3LWU3YzctNDUzZS1hNGFiLTc3YjcyMTUy YzMzYS5jcmwwHwYDVR0jBBgwFoAUSTAeHE2iWcjFZa+Ue8VgdNKWIv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3 MjE1MmMzM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0X/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1Gm6Wv4deE8txLcn/nmijyIgQoF/v5888cvpcNfhRqQx5B7RrWpOQ+ GnWIDhiqlv/bj0HXMxuyuDBXhH3ABvKmK8kU5eHy/e/fcy0y4ECXlGMCT2XDg4sM 40KLrlqB6WgUmm5HmUYDu5FN94spuuB8XbWn7mCHKOIU3jPpC5Alug0OgBnCahlh b9rOA7K3h79nhN+Sy1oVgLB45NwtQAUPoTQ9sGIoYzowzWvivYiXruDruey53teu AwNrGFZnkAtyslm0YXY9aJzM8BxGowEswZAf+5Qs1srfNlqfpJnS5Y7x42NYyoPF KaRdDptkppUo1eLw/s6CbcFuwJalmlE= -----END CERTIFICATE-----Generated at Mon Jun 30 07:14:20 2025 by rpki-client