$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/916e3eba-989b-3327-9cfa-2307267e8513.roa File: 916e3eba-989b-3327-9cfa-2307267e8513.roa (raw, json) Hash identifier: EiJ8TnW6XCusNHc9CIPuhknbQQqLF7bxVnGSxQ+8rO8= Subject key identifier: 73:3B:76:A8:38:EB:BF:F8:39:50:B2:E5:3A:76:D5:D2:0E:B5:E9:D2 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584A7D15E6B0FEF19566492F4330 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/916e3eba-989b-3327-9cfa-2307267e8513.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 11404 IP address blocks: 209.236.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:e6:b0:fe:f1:95:66:49:2f:43:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=3dfd8253-56f7-4ecf-bf94-49f1d4f35f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:d4:65:08:5e:fb:55:89:57:de:5b:4c:4c: 28:b1:cc:c5:0e:f9:fb:61:a9:e0:e8:86:1e:6f:f8: 6f:a9:ba:a2:f4:e6:96:9b:46:a9:e5:60:fe:e2:c8: 90:f5:ee:4d:78:cc:64:bd:1c:10:b3:f1:a9:bb:07: 09:d8:9a:32:3a:72:a8:65:70:ab:6a:a7:87:6e:85: 5e:74:97:b8:2c:7a:92:c9:36:bd:6f:bf:9c:c0:68: cd:04:67:30:25:1d:f0:6c:ed:db:b9:16:50:e0:15: b7:88:9b:a5:7a:6d:a9:ec:ce:bf:ec:7a:3c:1f:98: 32:78:b4:67:26:75:91:8e:64:48:65:b7:86:35:e5: 6b:c3:18:6f:42:f0:d5:bd:59:f8:9b:a4:ed:73:de: 28:3d:e6:04:ff:66:8d:71:95:77:2a:fb:bd:97:bd: ac:4f:10:8f:20:22:18:15:b9:12:61:63:0c:75:fe: e1:c8:79:a1:fe:f2:4e:97:bc:e2:90:d2:f5:ff:e2: 92:fd:d7:d4:b2:01:b1:94:78:d7:0a:68:85:c6:2d: e9:6e:e6:2a:b5:e6:3f:8f:c9:d3:64:02:20:61:cd: f9:90:5f:24:83:cf:41:c6:f8:ad:2d:67:54:d7:82: 68:3a:9e:a5:4b:82:6a:08:da:de:49:78:a4:b2:e7: a8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3B:76:A8:38:EB:BF:F8:39:50:B2:E5:3A:76:D5:D2:0E:B5:E9:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/916e3eba-989b-3327-9cfa-2307267e8513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:56:53:4f:67:6d:c5:cf:9b:95:2a:6e:65:e3:10:c4:b5:7c: ee:11:7d:52:1d:5d:8c:79:f5:ba:55:9e:a5:e5:8c:e4:4f:d0: 24:dd:c5:9d:74:82:34:12:4e:6f:31:1e:59:4c:82:e6:cb:d8: c0:6b:a8:a0:64:47:7e:d5:04:84:33:89:30:e0:b5:34:99:98: 4d:02:dc:90:e0:7b:67:9d:49:9e:d9:22:48:0a:b7:56:82:8b: d5:fb:d6:89:0c:ea:26:9e:2f:31:1c:55:e0:d5:eb:b9:66:c6: fa:f4:50:ca:d7:2c:9f:83:f6:0a:4e:b3:bd:39:78:5e:21:47: 37:5a:29:84:8b:17:20:ea:ed:2d:e4:78:14:1c:2f:73:fc:b1: ea:32:de:3e:94:b1:62:73:83:09:cd:f7:b8:91:ac:ff:5b:37: 34:43:a7:d7:ce:dc:c9:d0:64:77:18:e9:2a:cb:06:c4:91:83: 8b:3b:ef:e0:6c:5a:71:78:70:40:d7:ea:d5:99:98:b0:07:76: 3f:d6:5d:47:7a:91:82:e1:41:c0:c6:14:c6:a1:b1:27:89:60: 78:70:91:08:da:cc:74:ed:89:97:0c:25:cb:f1:e8:1f:11:c8: f6:59:43:a4:aa:ee:52:32:b3:8f:a7:d6:34:53:08:bf:32:1a: de:17:36:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Feaw/vGVZkkvQzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk M2RmZDgyNTMtNTZmNy00ZWNmLWJmOTQtNDlmMWQ0ZjM1Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocLUZQhe+1WJV95bTEwosczFDvn7Yang6IYe b/hvqbqi9OaWm0ap5WD+4siQ9e5NeMxkvRwQs/GpuwcJ2JoyOnKoZXCraqeHboVe dJe4LHqSyTa9b7+cwGjNBGcwJR3wbO3buRZQ4BW3iJulem2p7M6/7Ho8H5gyeLRn JnWRjmRIZbeGNeVrwxhvQvDVvVn4m6Ttc94oPeYE/2aNcZV3Kvu9l72sTxCPICIY FbkSYWMMdf7hyHmh/vJOl7zikNL1/+KS/dfUsgGxlHjXCmiFxi3pbuYqteY/j8nT ZAIgYc35kF8kg89BxvitLWdU14JoOp6lS4JqCNreSXiksueozwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHM7dqg467/4OVCy5Tp21dIOtenSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOTE2ZTNlYmEtOTg5Yi0z MzI3LTljZmEtMjMwNzI2N2U4NTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpWU09nbcXPm5UqbmXjEMS1fO4RfVIdXYx59bpVnqXljORP0CTdxZ10 gjQSTm8xHllMgubL2MBrqKBkR37VBIQziTDgtTSZmE0C3JDge2edSZ7ZIkgKt1aC i9X71okM6iaeLzEcVeDV67lmxvr0UMrXLJ+D9gpOs705eF4hRzdaKYSLFyDq7S3k eBQcL3P8seoy3j6UsWJzgwnN97iRrP9bNzRDp9fO3MnQZHcY6SrLBsSRg4s77+Bs WnF4cEDX6tWZmLAHdj/WXUd6kYLhQcDGFMahsSeJYHhwkQjazHTtiZcMJcvx6B8R yPZZQ6Sq7lIys4+n1jRTCL8yGt4XNnU= -----END CERTIFICATE-----Generated at Wed Jul 23 16:09:41 2025 by rpki-client