$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3bc82832-766c-3b7f-8c81-125272a98e60.roa File: 3bc82832-766c-3b7f-8c81-125272a98e60.roa (raw, json) Hash identifier: ak9gey3jdsvymCLfluxSvs6NnNLaraEPPkzcNiGB8rs= Subject key identifier: 57:A5:DD:EF:8E:F3:C2:E9:9C:6D:31:04:61:53:E2:4A:6D:27:E7:37 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584A7D15EFF88607E48649430880 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3bc82832-766c-3b7f-8c81-125272a98e60.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 6079 IP address blocks: 209.236.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:ef:f8:86:07:e4:86:49:43:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=5d485663-bcda-416f-9de6-5a0f47e1f7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cd:97:1b:d0:f5:4b:ad:3e:9a:e9:5a:5a:9e: 40:94:29:22:8d:9a:32:fe:da:cf:88:ef:3e:d7:cc: 13:32:ce:31:30:8f:b3:f3:6e:f4:8d:22:2a:af:b8: 54:89:68:9e:f5:97:dd:4d:61:e2:47:2b:f4:d8:ac: 95:b6:b4:af:08:d3:e8:8e:90:9c:46:45:bf:48:d6: c1:56:d0:5e:12:2c:5e:e1:56:76:d4:39:40:0f:ca: 94:20:5e:ec:5f:a0:e5:9c:11:90:f6:24:05:bc:c2: 7c:ac:88:b0:45:a1:38:fe:d8:01:59:bb:0d:38:16: a7:aa:ce:b0:dc:74:4a:cd:97:94:3b:51:c5:16:58: 51:e5:86:8d:45:92:92:34:10:06:8e:19:30:08:6b: da:f3:a2:74:ed:71:2b:05:b4:95:a9:a2:1a:2e:22: cd:e7:79:cb:98:5f:cb:e7:e6:dc:c9:7c:f0:7f:e5: f6:47:98:ea:5d:61:96:14:db:98:1e:52:53:5d:92: 76:3d:12:a7:54:f8:d1:a5:f4:32:dc:c8:aa:f3:ad: 57:2f:78:52:99:e4:51:07:c0:60:aa:c8:c7:48:2a: 4c:ef:27:11:9b:3d:b8:8c:9e:44:d9:df:58:89:ab: 32:25:fa:91:66:33:a0:46:5f:19:1a:80:1a:2e:83: e9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A5:DD:EF:8E:F3:C2:E9:9C:6D:31:04:61:53:E2:4A:6D:27:E7:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3bc82832-766c-3b7f-8c81-125272a98e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a3:7b:f2:bf:c4:8a:b9:55:79:52:e6:5d:9b:22:32:1d:34: 19:3e:09:e0:63:af:3d:dd:36:cb:8d:10:eb:c5:25:4e:be:5d: 13:39:7d:f8:72:8f:89:83:ce:b4:90:4d:0c:6e:98:2a:0c:15: a8:ee:d3:b1:19:ec:3e:35:1e:c1:e1:eb:22:67:e6:52:6b:42: 5a:fe:11:41:62:0a:47:e7:33:1c:36:f4:cd:55:66:ec:30:a2: e8:b5:ca:c7:33:77:58:7f:45:cd:0e:b5:f8:de:44:3f:19:64: 58:a7:d0:25:16:66:67:84:48:c6:47:14:d3:dc:23:ca:ac:65: 72:22:77:12:f0:76:a8:fe:6a:6e:27:bb:3b:c1:86:28:9f:83: d4:c0:bf:d5:4f:94:99:f1:14:e7:89:a4:42:5d:df:1e:00:31: 31:d9:b4:98:c7:f2:3a:41:f3:de:8b:e8:e3:c4:ae:71:5d:43: f4:9f:8f:e7:38:4f:58:30:3c:74:52:f3:9c:5b:ee:e7:63:f0: 2a:b4:57:fc:dc:fa:36:74:ea:f6:b9:29:92:13:db:cb:e3:aa: a2:89:47:32:f5:d3:89:68:15:f3:66:f5:71:7a:8d:32:7a:4b: 01:0b:ae:f7:ad:7a:20:f1:5f:f8:be:ab:4e:03:51:89:44:8f: 0e:ce:ff:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Fe/4hgfkhklDCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk NWQ0ODU2NjMtYmNkYS00MTZmLTlkZTYtNWEwZjQ3ZTFmN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis2XG9D1S60+mulaWp5AlCkijZoy/trPiO8+ 18wTMs4xMI+z8270jSIqr7hUiWie9ZfdTWHiRyv02KyVtrSvCNPojpCcRkW/SNbB VtBeEixe4VZ21DlAD8qUIF7sX6DlnBGQ9iQFvMJ8rIiwRaE4/tgBWbsNOBanqs6w 3HRKzZeUO1HFFlhR5YaNRZKSNBAGjhkwCGva86J07XErBbSVqaIaLiLN53nLmF/L 5+bcyXzwf+X2R5jqXWGWFNuYHlJTXZJ2PRKnVPjRpfQy3Miq861XL3hSmeRRB8Bg qsjHSCpM7ycRmz24jJ5E2d9YiasyJfqRZjOgRl8ZGoAaLoPpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFel3e+O88LpnG0xBGFT4kptJ+c3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvM2JjODI4MzItNzY2Yy0z YjdmLThjODEtMTI1MjcyYTk4ZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqje/K/xIq5VXlS5l2bIjIdNBk+CeBjrz3dNsuNEOvFJU6+XRM5ffhy j4mDzrSQTQxumCoMFaju07EZ7D41HsHh6yJn5lJrQlr+EUFiCkfnMxw29M1VZuww oui1ysczd1h/Rc0OtfjeRD8ZZFin0CUWZmeESMZHFNPcI8qsZXIidxLwdqj+am4n uzvBhiifg9TAv9VPlJnxFOeJpEJd3x4AMTHZtJjH8jpB896L6OPErnFdQ/Sfj+c4 T1gwPHRS85xb7udj8Cq0V/zc+jZ06va5KZIT28vjqqKJRzL104loFfNm9XF6jTJ6 SwELrveteiDxX/i+q04DUYlEjw7O/24= -----END CERTIFICATE-----Generated at Mon Jul 21 07:09:56 2025 by rpki-client