$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8ea5ec7f-0637-3669-803d-1b6218ff87ff.roa File: 8ea5ec7f-0637-3669-803d-1b6218ff87ff.roa (raw, json) Hash identifier: rEm4b3yp7/3sNZWe/lECz5E8EqMp6OyhfsrRtxHYXNc= Subject key identifier: 85:AC:F4:08:0B:A4:FA:64:30:FA:24:A9:36:AE:A9:FB:90:08:D7:BD Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584A7D15E66D3BE4FC99817221A0 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8ea5ec7f-0637-3669-803d-1b6218ff87ff.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 209.236.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:e6:6d:3b:e4:fc:99:81:72:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=8f81010f-8723-4104-a165-8e0bff25be37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:20:90:6e:87:dd:7c:3a:b7:10:8b:2a:1a: c5:39:04:ea:51:5a:f8:13:e5:17:cd:e6:52:f1:33: 4f:7c:aa:f4:90:c8:ca:5f:f2:e1:3d:6f:fa:75:38: 5e:4f:71:3b:81:a6:d9:06:a7:25:b0:a1:be:a3:11: b5:3c:bd:c6:60:f7:1a:8e:39:bd:a2:be:86:9d:6a: 72:52:23:3e:56:3d:7b:f5:0b:98:64:10:a6:83:90: 1a:16:57:25:38:fd:22:bb:e5:4a:c9:ec:0a:75:17: 1d:25:cd:58:27:2f:38:c9:12:a7:cc:7e:f7:5f:37: 12:a8:52:f0:a5:63:8e:d8:ef:74:68:72:63:a2:ec: 3a:f4:62:6c:9e:c1:4a:2a:63:1d:6d:4a:f7:89:87: c2:f9:49:6c:2a:08:6b:8f:75:af:23:47:01:0f:69: 99:06:8b:f2:3a:dd:38:9f:a7:58:d6:09:47:42:bf: ff:eb:5d:2a:a1:c7:8b:4d:1a:90:f7:4c:ee:ad:ae: 3c:29:b5:95:e2:d0:7b:8f:7f:89:31:fa:77:7a:3a: 64:d5:df:08:06:ff:11:a8:39:5a:e2:2b:af:be:15: 19:e4:b9:05:fd:47:0f:75:2b:c6:1a:5f:5d:31:e8: c5:c1:46:31:7a:75:15:db:c1:9f:01:93:72:b9:cb: 4c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AC:F4:08:0B:A4:FA:64:30:FA:24:A9:36:AE:A9:FB:90:08:D7:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8ea5ec7f-0637-3669-803d-1b6218ff87ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:59:9c:b3:77:88:3a:8d:f2:24:1d:6a:1a:bd:8a:cd:5d:25: 59:65:37:87:4f:1b:f1:50:c2:43:31:10:98:6a:dd:32:30:30: d5:24:ea:cb:32:c7:af:51:a0:b0:23:81:c3:b2:c3:75:c1:eb: 0b:0f:66:76:60:17:65:22:38:ee:e6:fc:e9:a3:31:cc:f9:89: b3:c8:aa:82:92:71:9d:65:5c:b3:18:92:b4:69:c5:02:c3:d6: 13:31:c4:37:14:60:f8:00:8e:62:ca:e9:75:f3:06:ae:dd:a5: 39:7d:66:93:a6:ca:ba:2a:88:91:ff:28:9e:12:05:22:5a:0e: 4d:b0:98:2c:d4:09:dd:4b:2e:64:35:43:fe:88:be:87:5c:de: af:2c:19:15:39:ba:4a:dd:cb:9b:a5:87:4b:6a:f8:08:20:96: 61:41:1c:63:f6:09:cb:c7:d7:c2:97:70:a4:a5:25:94:52:3a: 39:d0:53:60:48:36:04:4f:29:ab:e7:93:66:1d:70:7c:34:67: 13:47:0d:c7:bf:2f:79:97:22:5d:fd:f4:e1:db:56:f1:26:eb: 33:ce:3c:cb:ab:aa:7e:6d:2f:cd:f6:2a:01:22:7d:a6:39:d2: f0:d3:d1:e1:a6:27:17:5d:39:35:18:97:12:41:49:1e:55:64: cf:15:0b:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FeZtO+T8mYFyIaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk OGY4MTAxMGYtODcyMy00MTA0LWExNjUtOGUwYmZmMjViZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQIgkG6H3Xw6txCLKhrFOQTqUVr4E+UXzeZS 8TNPfKr0kMjKX/LhPW/6dTheT3E7gabZBqclsKG+oxG1PL3GYPcajjm9or6GnWpy UiM+Vj179QuYZBCmg5AaFlclOP0iu+VKyewKdRcdJc1YJy84yRKnzH73XzcSqFLw pWOO2O90aHJjouw69GJsnsFKKmMdbUr3iYfC+UlsKghrj3WvI0cBD2mZBovyOt04 n6dY1glHQr//610qoceLTRqQ90zura48KbWV4tB7j3+JMfp3ejpk1d8IBv8RqDla 4iuvvhUZ5LkF/UcPdSvGGl9dMejFwUYxenUV28GfAZNyuctMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWs9AgLpPpkMPokqTauqfuQCNe9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOGVhNWVjN2YtMDYzNy0z NjY5LTgwM2QtMWI2MjE4ZmY4N2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9ZnLN3iDqN8iQdahq9is1dJVllN4dPG/FQwkMxEJhq3TIwMNUk6ssy x69RoLAjgcOyw3XB6wsPZnZgF2UiOO7m/OmjMcz5ibPIqoKScZ1lXLMYkrRpxQLD 1hMxxDcUYPgAjmLK6XXzBq7dpTl9ZpOmyroqiJH/KJ4SBSJaDk2wmCzUCd1LLmQ1 Q/6Ivodc3q8sGRU5ukrdy5ulh0tq+AgglmFBHGP2CcvH18KXcKSlJZRSOjnQU2BI NgRPKavnk2YdcHw0ZxNHDce/L3mXIl399OHbVvEm6zPOPMurqn5tL832KgEifaY5 0vDT0eGmJxddOTUYlxJBSR5VZM8VCwg= -----END CERTIFICATE-----Generated at Mon Jul 21 06:49:20 2025 by rpki-client