$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa File: 23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa (raw, json) Hash identifier: bFSAgsWhj2QGGTftY3mDR/gAS13ngq9asjGLLNaytBk= Subject key identifier: 45:06:8E:1B:E6:23:D6:90:EC:A6:7C:4D:7D:BF:8A:88:C4:DD:FF:66 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F4328584A81E6507A40CB43CBEEE60400 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa Signing time: Sun 13 Jul 2025 18:24:06 +0000 ROA not before: Sun 13 Jul 2025 18:24:06 +0000 ROA not after: Sat 11 Oct 2025 18:24:06 +0000 asID: 208259 IP address blocks: 209.240.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:e6:50:7a:40:cb:43:cb:ee:e6:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Jul 13 18:24:06 2025 GMT Not After : Oct 11 18:24:06 2025 GMT Subject: CN=e5b51a81-795f-4207-a89c-4bcff95afc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:5e:f8:35:7e:2e:48:70:11:c2:bf:ad:8e: c5:27:7d:b1:9c:27:95:2a:fe:39:03:cb:81:0c:bb: 0a:3a:70:63:07:f5:5a:00:49:ab:c8:e6:0c:70:f4: 96:a7:88:56:2b:d4:cf:ea:3d:dc:e9:c5:15:b1:22: a5:9f:04:c2:7f:38:4f:1b:3e:19:f3:67:7d:e8:84: ea:88:e1:80:86:0f:69:16:99:ac:39:95:ce:eb:49: b1:8c:6f:10:19:96:8e:f2:a3:4d:b9:83:81:77:ff: 8e:d2:8f:ec:47:9b:d9:12:8b:ef:51:ce:ec:be:0b: 3b:f1:7e:23:ac:f0:a7:7f:e5:a4:cf:76:95:11:f3: 46:d2:e2:a7:2f:42:bd:b1:d9:80:6b:d6:f4:c5:34: 3f:5a:2d:b1:e9:53:72:ed:d6:9e:d2:29:ce:68:4a: 5f:ff:22:4d:20:25:45:92:67:e6:c2:00:9b:4c:a6: 43:ac:0e:2d:0e:d9:2e:58:89:33:f6:10:b4:6b:ad: 2d:33:56:19:b2:0d:6f:8f:77:21:91:e3:af:a1:ae: d6:a5:8c:8b:ca:09:f0:0e:b4:89:b0:40:3c:5d:7d: e5:52:02:e8:65:ef:4a:62:f2:15:c3:d8:d4:96:19: f7:e2:bf:ec:61:84:39:8a:40:b2:e3:9f:83:55:8f: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:06:8E:1B:E6:23:D6:90:EC:A6:7C:4D:7D:BF:8A:88:C4:DD:FF:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:fe:8f:c3:9e:6c:32:fa:49:13:41:ff:d4:5e:4e:be:29:7d: fd:23:26:e3:66:96:8c:90:af:a9:7f:84:e1:65:46:73:ac:73: 4f:5c:e2:69:91:08:24:ec:d8:8c:f6:78:e9:96:de:87:a4:cd: 2d:00:99:c2:5d:0f:a5:3d:d3:a6:83:4c:cc:06:61:c4:20:85: e4:14:c7:78:d5:e6:10:81:48:df:77:2c:96:de:a6:fe:de:9a: d4:92:08:bb:39:ff:00:24:1a:68:ae:17:c4:0c:b0:fe:2c:8f: 72:bc:8f:a1:dd:58:58:97:bd:39:74:ed:c9:37:5f:da:b5:ef: 21:1e:3a:01:91:76:7e:68:4c:0f:a3:56:41:f8:93:99:00:3d: 71:04:d2:5a:5f:ef:95:92:ed:ac:47:68:ee:53:4d:e8:9d:83: ba:91:a8:fb:28:35:7b:15:32:8a:9b:7f:0b:b2:33:69:85:b8: e9:e7:ee:d5:16:a6:4d:a1:fd:93:8a:fe:8b:2b:f3:07:f8:d0: 86:bc:ca:ee:86:35:21:83:b2:08:30:0b:cc:80:2c:b5:40:9c: e4:a2:26:23:aa:45:fd:05:6b:94:8f:0e:0c:d5:f3:6f:24:be: 81:79:86:1e:a1:ca:f4:bf:69:0a:61:70:5c:e7:6f:44:63:04: ee:9b:76:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqB5lB6QMtDy+7mBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI1MDcxMzE4MjQwNloXDTI1MTAxMTE4MjQwNlowLzEtMCsGA1UEAxMk ZTViNTFhODEtNzk1Zi00MjA3LWE4OWMtNGJjZmY5NWFmYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGBe+DV+LkhwEcK/rY7FJ32xnCeVKv45A8uB DLsKOnBjB/VaAEmryOYMcPSWp4hWK9TP6j3c6cUVsSKlnwTCfzhPGz4Z82d96ITq iOGAhg9pFpmsOZXO60mxjG8QGZaO8qNNuYOBd/+O0o/sR5vZEovvUc7svgs78X4j rPCnf+Wkz3aVEfNG0uKnL0K9sdmAa9b0xTQ/Wi2x6VNy7dae0inOaEpf/yJNICVF kmfmwgCbTKZDrA4tDtkuWIkz9hC0a60tM1YZsg1vj3chkeOvoa7WpYyLygnwDrSJ sEA8XX3lUgLoZe9KYvIVw9jUlhn34r/sYYQ5ikCy45+DVY/2zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUGjhvmI9aQ7KZ8TX2/iojE3f9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvMjM2NTUxMDQtMGI5ZS0z MWM2LTlhNWMtOWMxZDIwZmMxNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0fAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn+j8OebDL6SRNB/9ReTr4pff0jJuNmloyQr6l/hOFlRnOsc09c4mmR CCTs2Iz2eOmW3oekzS0AmcJdD6U906aDTMwGYcQgheQUx3jV5hCBSN93LJbepv7e mtSSCLs5/wAkGmiuF8QMsP4sj3K8j6HdWFiXvTl07ck3X9q17yEeOgGRdn5oTA+j VkH4k5kAPXEE0lpf75WS7axHaO5TTeidg7qRqPsoNXsVMoqbfwuyM2mFuOnn7tUW pk2h/ZOK/osr8wf40Ia8yu6GNSGDsggwC8yALLVAnOSiJiOqRf0Fa5SPDgzV828k voF5hh6hyvS/aQphcFznb0RjBO6bdlA= -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:28 2025 by rpki-client