$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/81fd3d75-f499-398e-be0f-478cd3ebb591.roa File: 81fd3d75-f499-398e-be0f-478cd3ebb591.roa (raw, json) Hash identifier: Dis7BuIRwkywn4fXI9pk5RKcUMOTwWIaAPC4fy61ZRQ= Subject key identifier: 9B:CF:1D:DF:47:51:D2:DE:34:51:1E:32:4A:76:31:33:B3:E1:B4:A5 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584A7D15E6C6B134BEBCFD110900 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/81fd3d75-f499-398e-be0f-478cd3ebb591.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 11404 IP address blocks: 209.236.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:e6:c6:b1:34:be:bc:fd:11:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=f90bbaaa-6ad9-4d53-a6cb-df1364b5ee37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2d:d9:7a:32:fc:95:bd:36:fa:a2:1c:3b:8e: 26:97:60:c1:0a:83:33:d0:e8:df:8d:ba:a8:8a:2b: cc:4d:7d:17:57:69:29:c5:ef:86:6f:e3:a6:3e:90: 21:e3:b1:3b:23:ba:84:11:9c:dd:58:e5:4f:bd:a7: aa:c3:1d:82:b7:7a:87:6a:62:0a:1d:3a:4f:b3:87: b2:12:b7:03:37:36:db:1f:dc:97:fd:58:a6:0b:20: b7:e4:e1:76:6e:e4:db:a4:12:a2:f1:f9:b0:72:41: b1:2d:ca:1f:79:3a:07:fb:a7:ee:7f:14:9e:3f:6f: e5:97:77:6e:7a:a0:d5:b7:b9:14:bb:cf:86:bb:87: a3:a0:cb:d5:74:12:7b:63:83:a4:0a:98:44:44:20: f4:f6:8e:14:47:42:fc:c2:65:f0:79:96:f5:9d:83: 50:ad:7d:57:f8:2f:26:97:ef:86:f7:2d:16:ec:ca: 46:95:9d:c9:b7:41:5b:3d:d2:64:5c:30:68:75:76: 94:6d:58:98:6e:dc:c5:53:b3:0e:2c:a5:ee:39:7c: 20:1e:a4:37:cb:7a:89:e5:08:55:62:4a:ee:a0:26: 6e:17:c6:be:6f:cf:18:ac:90:48:ee:4d:0b:ea:f2: e0:0e:22:92:aa:3e:bf:43:4b:72:ac:a7:79:35:c5: a8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CF:1D:DF:47:51:D2:DE:34:51:1E:32:4A:76:31:33:B3:E1:B4:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/81fd3d75-f499-398e-be0f-478cd3ebb591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:43:2e:ed:48:c5:75:5f:a1:5c:d0:b0:bb:1f:f6:f9:52:79: dc:3a:75:d5:96:a7:8d:a4:e0:11:1a:92:b0:f4:20:a3:c3:f2: f6:2f:3c:81:f9:0f:8a:a1:6f:0c:8d:ec:cc:24:ec:b1:c9:72: ba:bb:29:ce:0a:d9:b5:48:6e:4c:2c:e7:90:72:ca:2f:82:42: 2f:b9:d9:24:7a:51:0c:39:59:20:d4:d0:c5:fa:ca:8e:1e:fc: a8:54:64:78:31:81:e2:cf:25:27:2b:aa:4d:fb:ce:c9:b8:88: 9d:eb:0a:84:40:da:45:f8:ff:b9:87:72:75:9d:7a:7b:f0:8f: be:9d:ff:b2:93:2d:60:03:8e:1b:48:8d:69:95:82:56:5c:90: 5b:68:01:50:7c:aa:2e:fc:67:1e:9a:f7:57:74:30:59:54:65: 3c:6d:51:c8:a4:79:39:91:96:20:29:7d:a9:d0:e1:54:68:4d: ab:83:f2:cd:05:e6:28:9c:53:a1:aa:5b:ce:80:c3:49:73:08: 28:5d:a1:89:18:ad:a7:0c:c3:f4:01:a3:87:a7:96:34:aa:40: 73:ea:ed:53:18:5e:4d:f7:bc:01:bc:11:f6:1c:71:43:25:a7: 24:b4:e4:27:8e:59:12:30:74:97:6b:ab:5e:96:9f:76:ed:1e: 01:2c:67:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FebGsTS+vP0RCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk ZjkwYmJhYWEtNmFkOS00ZDUzLWE2Y2ItZGYxMzY0YjVlZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy3ZejL8lb02+qIcO44ml2DBCoMz0Ojfjbqo iivMTX0XV2kpxe+Gb+OmPpAh47E7I7qEEZzdWOVPvaeqwx2Ct3qHamIKHTpPs4ey ErcDNzbbH9yX/VimCyC35OF2buTbpBKi8fmwckGxLcofeToH+6fufxSeP2/ll3du eqDVt7kUu8+Gu4ejoMvVdBJ7Y4OkCphERCD09o4UR0L8wmXweZb1nYNQrX1X+C8m l++G9y0W7MpGlZ3Jt0FbPdJkXDBodXaUbViYbtzFU7MOLKXuOXwgHqQ3y3qJ5QhV YkruoCZuF8a+b88YrJBI7k0L6vLgDiKSqj6/Q0tyrKd5NcWoawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvPHd9HUdLeNFEeMkp2MTOz4bSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvODFmZDNkNzUtZjQ5OS0z OThlLWJlMGYtNDc4Y2QzZWJiNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJDLu1IxXVfoVzQsLsf9vlSedw6ddWWp42k4BEakrD0IKPD8vYvPIH5 D4qhbwyN7Mwk7LHJcrq7Kc4K2bVIbkws55Byyi+CQi+52SR6UQw5WSDU0MX6yo4e /KhUZHgxgeLPJScrqk37zsm4iJ3rCoRA2kX4/7mHcnWdenvwj76d/7KTLWADjhtI jWmVglZckFtoAVB8qi78Zx6a91d0MFlUZTxtUcikeTmRliApfanQ4VRoTauD8s0F 5iicU6GqW86Aw0lzCChdoYkYracMw/QBo4enljSqQHPq7VMYXk33vAG8EfYccUMl pyS05CeOWRIwdJdrq16Wn3btHgEsZ3k= -----END CERTIFICATE-----Generated at Wed Jul 23 16:11:39 2025 by rpki-client