$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa File: a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa (raw, json) Hash identifier: 8Su6LILw+Xij0xWY5635/8DJXluErz4x81egf6ZI2E4= Subject key identifier: C4:B1:65:1F:5A:AC:5A:B2:1B:4C:5A:D0:EE:2A:E7:91:AF:F8:72:4F Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584A7D15E70ECFFF5C14C620C080 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 11404 IP address blocks: 209.236.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:e7:0e:cf:ff:5c:14:c6:20:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=2699281e-7182-4741-9642-339cb1ba7aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:4d:6f:80:01:6d:07:39:15:45:10:b7:a5: a6:20:52:e2:45:f8:ee:b6:60:32:a0:e4:7f:7a:e4: 7a:bc:d2:63:2d:4f:f1:67:62:df:65:d7:7a:db:fc: 9e:73:7b:37:54:ce:8d:de:80:1c:5a:f5:dd:8e:bb: 75:62:6c:4d:72:49:63:76:70:5f:4c:33:a1:d6:2c: 43:de:68:a6:2a:c6:9b:0e:19:63:88:0f:a9:d2:b7: d4:9a:e9:17:7f:36:5d:59:d2:c9:ce:11:e5:4d:e1: 16:1b:2b:7d:73:ec:fc:81:93:f5:ac:b8:f4:a1:94: 8d:10:cc:dc:9d:20:e1:a0:08:f3:19:f4:0e:0c:99: df:3e:45:9c:4e:af:02:5f:bc:64:7e:d3:33:b7:bb: 7a:94:12:32:80:37:0b:c3:e3:75:42:c7:07:42:1b: cd:99:3b:58:71:a7:5f:e0:6d:e8:e3:c9:e8:87:56: a5:ae:ad:73:db:b3:fd:44:01:9d:6a:9c:4e:e4:4a: c4:c1:f5:56:ff:b5:12:a4:b7:81:df:72:b1:62:32: 0a:6d:65:48:3d:64:18:64:34:76:4e:ab:14:43:f9: c7:f5:ca:76:f2:0b:ab:dc:40:5a:e3:49:28:f8:ff: 0a:58:92:27:ba:db:08:2e:4a:8d:e4:52:ad:b7:ad: dc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B1:65:1F:5A:AC:5A:B2:1B:4C:5A:D0:EE:2A:E7:91:AF:F8:72:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:38:50:52:46:eb:fd:36:a5:d4:6f:a2:4f:3a:26:69:bd:47: 41:b1:20:a8:76:d6:73:b6:98:61:a6:1f:e5:22:86:40:f6:99: 70:01:0a:d4:c9:ca:b8:07:6d:64:7e:f3:28:c1:da:80:d2:ea: 9c:ad:03:a7:10:4c:9e:02:78:b6:a4:55:bc:d1:84:e4:e5:5b: 21:9f:9d:de:e3:03:b8:65:84:0c:bf:83:fb:55:03:17:ec:8d: 81:1d:2b:5e:60:9f:88:39:8e:72:87:65:e9:43:35:ad:a9:a3: c5:34:9c:d3:c5:16:46:10:5f:43:b3:05:24:20:e1:bc:29:f6: 41:99:82:91:a8:50:23:b7:51:07:bc:8c:fc:39:56:08:56:f9: 48:e8:9f:80:db:1a:2a:2a:98:c0:64:f8:20:2a:c7:5f:1a:e3: 5b:b0:05:e7:66:c6:0b:a2:d1:41:64:d0:6b:0c:91:9b:ab:98: d6:1d:47:87:3b:e7:8c:98:d0:1e:49:73:33:df:e8:9d:57:53: 03:32:eb:96:66:e8:36:cb:2e:b5:8b:0c:35:f1:3e:5a:e0:7c: a7:16:33:87:48:3e:4c:05:87:38:98:a0:d7:ff:56:d1:83:f0: ef:1e:23:5b:ae:80:29:5a:50:ef:66:f2:08:c6:4b:9c:d7:37: 0c:43:b9:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FecOz/9cFMYgwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MjY5OTI4MWUtNzE4Mi00NzQxLTk2NDItMzM5Y2IxYmE3YWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvopNb4ABbQc5FUUQt6WmIFLiRfjutmAyoOR/ euR6vNJjLU/xZ2LfZdd62/yec3s3VM6N3oAcWvXdjrt1YmxNckljdnBfTDOh1ixD 3mimKsabDhljiA+p0rfUmukXfzZdWdLJzhHlTeEWGyt9c+z8gZP1rLj0oZSNEMzc nSDhoAjzGfQODJnfPkWcTq8CX7xkftMzt7t6lBIygDcLw+N1QscHQhvNmTtYcadf 4G3o48noh1alrq1z27P9RAGdapxO5ErEwfVW/7USpLeB33KxYjIKbWVIPWQYZDR2 TqsUQ/nH9cp28gur3EBa40ko+P8KWJInutsILkqN5FKtt63cCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSxZR9arFqyG0xa0O4q55Gv+HJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYThjNTExZjMtZTNkOC0z MDU4LTk5OTEtNjBhODlkMmRkMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs4UFJG6/02pdRvok86Jmm9R0GxIKh21nO2mGGmH+UihkD2mXABCtTJ yrgHbWR+8yjB2oDS6pytA6cQTJ4CeLakVbzRhOTlWyGfnd7jA7hlhAy/g/tVAxfs jYEdK15gn4g5jnKHZelDNa2po8U0nNPFFkYQX0OzBSQg4bwp9kGZgpGoUCO3UQe8 jPw5VghW+Ujon4DbGioqmMBk+CAqx18a41uwBedmxgui0UFk0GsMkZurmNYdR4c7 54yY0B5JczPf6J1XUwMy65Zm6DbLLrWLDDXxPlrgfKcWM4dIPkwFhziYoNf/VtGD 8O8eI1uugClaUO9m8gjGS5zXNwxDuek= -----END CERTIFICATE-----Generated at Wed Jul 23 16:00:23 2025 by rpki-client