$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/43cff616-436a-30b8-bd98-b94373b4be05.roa File: 43cff616-436a-30b8-bd98-b94373b4be05.roa (raw, json) Hash identifier: 9caAwJO7CQtGHO+4gy722j0ERkVxWp7A8muN59C+D2s= Subject key identifier: A2:19:97:7A:D2:E9:CA:B3:56:25:60:43:DA:25:AE:E3:C6:E6:31:0C Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F4328584A43DB067BBE1B4345220A4380 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/43cff616-436a-30b8-bd98-b94373b4be05.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 33146 IP address blocks: 209.222.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:06:7b:be:1b:43:45:22:0a:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=9959027e-a6dd-4ed5-b6c8-b209670508b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:16:71:b3:fa:75:07:70:7b:3d:e3:4d:bc:00: 0f:78:11:e5:44:e8:00:55:2b:9b:20:ac:13:10:6a: c7:23:13:89:0d:51:fe:c0:a6:d8:9e:35:8f:de:9a: a6:0b:b0:04:42:2a:0b:ec:0e:c8:9c:9d:0f:9e:b4: 84:73:e7:f6:f1:c6:a0:d9:8e:80:3a:2a:cb:a7:e7: 46:e5:99:aa:9e:aa:98:64:a6:a0:6b:9c:c0:8c:66: e8:97:e4:f0:1e:4d:b6:0c:de:56:a3:10:59:7d:6b: af:f2:d2:40:c0:63:eb:ac:47:aa:56:6e:ca:40:29: 62:ac:33:b9:9d:50:3b:61:38:e4:cf:0c:58:33:c8: 22:21:98:e4:35:e0:56:2a:21:8e:2b:39:2c:f4:d3: d3:40:05:85:54:b6:c0:8f:72:b3:24:f9:d4:da:39: e8:03:c5:c4:ac:1b:64:ce:ff:5e:5e:42:fe:02:e6: cf:9e:80:b4:02:5a:62:43:07:1d:5a:e1:24:73:15: 87:90:ce:81:76:e1:8c:82:4b:9c:c7:28:0f:c6:0a: 57:af:db:e6:65:5d:f2:f4:33:32:23:ac:3c:e8:00: f3:b4:23:7a:d1:f9:9f:f9:2e:88:50:d0:53:d7:0a: cc:5d:54:de:3c:97:10:64:01:9f:36:49:c3:e3:2c: 1a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:19:97:7A:D2:E9:CA:B3:56:25:60:43:DA:25:AE:E3:C6:E6:31:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/43cff616-436a-30b8-bd98-b94373b4be05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:99:9c:5a:58:38:39:40:11:45:71:5f:4d:2e:55:4a:dd:f0: 6a:2b:d3:21:95:d9:33:a7:e5:75:16:76:36:94:8c:5d:cb:26: 0e:c0:5f:57:cc:5e:94:e1:3d:75:39:96:e8:2f:7c:84:5a:f9: 9a:25:1e:76:d8:45:b9:af:0d:5d:49:f1:75:e6:56:7b:4d:86: f0:7f:e8:9c:8b:2c:c2:67:8c:55:bf:ff:53:95:ee:e8:82:4d: 99:c1:7a:5b:da:7b:83:c1:fc:ba:43:86:cd:07:f9:91:67:0b: 41:8b:a2:43:62:fd:f5:09:30:12:32:fd:09:d0:0a:d9:c3:a9: 4f:02:82:4d:d2:29:ce:73:6f:e3:90:24:68:59:2b:ae:34:3c: d4:7c:03:78:c2:c2:4c:9d:2f:51:44:04:16:2c:10:8f:bd:4d: 43:9d:51:bb:98:6f:35:c0:d9:d2:10:92:2c:2e:53:d4:7d:d1: 26:0f:76:83:54:53:95:67:c2:47:26:c4:2e:39:21:51:43:2c: 1b:fc:d7:44:ec:99:7f:16:94:a1:63:4a:09:0e:10:0c:db:58: 4b:aa:de:25:8b:5f:46:c0:45:9a:6b:0a:fe:91:6f:73:69:3f: 58:08:5c:b5:09:42:34:7e:e8:7b:da:01:c8:54:6e:a6:87:f8: ab:54:bd:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wZ7vhtDRSIKQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk OTk1OTAyN2UtYTZkZC00ZWQ1LWI2YzgtYjIwOTY3MDUwOGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBZxs/p1B3B7PeNNvAAPeBHlROgAVSubIKwT EGrHIxOJDVH+wKbYnjWP3pqmC7AEQioL7A7InJ0PnrSEc+f28cag2Y6AOirLp+dG 5ZmqnqqYZKaga5zAjGbol+TwHk22DN5WoxBZfWuv8tJAwGPrrEeqVm7KQClirDO5 nVA7YTjkzwxYM8giIZjkNeBWKiGOKzks9NPTQAWFVLbAj3KzJPnU2jnoA8XErBtk zv9eXkL+AubPnoC0AlpiQwcdWuEkcxWHkM6BduGMgkucxygPxgpXr9vmZV3y9DMy I6w86ADztCN60fmf+S6IUNBT1wrMXVTePJcQZAGfNknD4ywaLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIZl3rS6cqzViVgQ9olruPG5jEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvNDNjZmY2MTYtNDM2YS0z MGI4LWJkOTgtYjk0MzczYjRiZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0d7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmZnFpYODlAEUVxX00uVUrd8Gor0yGV2TOn5XUWdjaUjF3LJg7AX1fM XpThPXU5lugvfIRa+ZolHnbYRbmvDV1J8XXmVntNhvB/6JyLLMJnjFW//1OV7uiC TZnBelvae4PB/LpDhs0H+ZFnC0GLokNi/fUJMBIy/QnQCtnDqU8Cgk3SKc5zb+OQ JGhZK640PNR8A3jCwkydL1FEBBYsEI+9TUOdUbuYbzXA2dIQkiwuU9R90SYPdoNU U5VnwkcmxC45IVFDLBv810TsmX8WlKFjSgkOEAzbWEuq3iWLX0bARZprCv6Rb3Np P1gIXLUJQjR+6HvaAchUbqaH+KtUvYk= -----END CERTIFICATE-----Generated at Sun Jul 27 12:52:53 2025 by rpki-client