$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa File: bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa (raw, json) Hash identifier: wukKGt3ghTAagMyaoQZD0Uqq3I7dc7rvmW3OCrUtWAY= Subject key identifier: 06:72:12:7D:6C:B4:8D:19:31:42:A7:F3:47:FC:31:1E:B1:7D:B3:BE Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584A7D15F05D4F3C7FE456F7E7C0 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 6079 IP address blocks: 209.236.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f0:5d:4f:3c:7f:e4:56:f7:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=68b9b1c1-9d2b-4138-8794-3d13195944b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:1d:9c:be:8c:e9:bb:ac:1b:f6:cf:b7:d2: f1:f4:46:d6:49:77:de:65:29:53:03:19:c1:f6:fb: bf:24:85:72:85:06:cd:36:8a:fb:bf:35:4a:59:1c: 0e:ca:94:3d:77:b5:d7:e0:3a:a8:3c:de:35:d3:70: 79:fc:6e:fa:56:66:77:f2:07:1a:f1:7f:1c:94:d1: 34:f3:30:13:97:e7:5f:dc:ce:30:ca:7b:f1:69:d4: 0e:4d:ea:5b:de:fd:21:3e:3b:93:0b:a9:6f:c4:91: 32:45:89:ba:86:32:0d:7d:71:89:51:a4:aa:1d:36: 56:29:2a:8c:f0:19:4e:6a:d8:a8:5b:90:9e:98:de: b1:fc:f8:2a:cc:06:07:6c:4c:96:1d:db:d5:fd:8f: ee:f6:07:d1:28:6f:bf:6d:e5:06:a2:c8:1b:b0:1b: ff:c5:8c:a7:7f:9f:b4:3b:12:01:39:92:fb:94:fe: 13:c0:af:a7:1c:a6:eb:88:2f:16:03:5b:08:c8:41: d4:f4:59:6b:85:72:9e:5b:46:ce:49:2f:ba:e4:50: fa:b3:1f:85:59:da:ab:e2:a5:cf:94:e6:29:2b:a7: ad:c1:9f:9b:4c:fd:62:47:ed:c3:a7:02:d6:6f:28: fb:1c:8a:ff:6f:52:b5:95:69:36:99:04:96:20:3b: 5f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:72:12:7D:6C:B4:8D:19:31:42:A7:F3:47:FC:31:1E:B1:7D:B3:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7c:55:5d:f4:fa:71:51:8a:04:8b:8a:70:ec:70:c4:a6:cb: 35:6f:ff:92:3b:73:6f:ee:9a:af:4a:e4:16:1a:fc:37:c9:c3: b9:e1:a4:d8:6b:19:3b:bf:8b:e0:2c:a4:2f:10:78:f8:ac:46: 31:45:c0:7e:64:fc:6c:f4:f7:f5:3a:92:d0:2a:f1:83:0f:0e: 4a:5b:35:38:f8:34:2b:24:1b:61:90:34:03:f9:95:86:6c:22: c7:93:25:68:8b:e3:c5:93:f1:25:50:e3:7c:a7:47:9a:29:2f: a8:71:b3:b0:a1:9a:28:0b:87:91:ef:e4:c8:08:2e:ca:79:3a: ca:30:cb:ca:5e:ff:7e:7c:97:2c:99:f7:1c:df:c2:f4:75:c6: bb:02:53:ea:d5:e1:45:bd:35:69:49:6b:fc:ea:55:e3:d7:b6: db:39:7c:1e:c7:eb:e0:10:ed:01:0f:49:8b:ba:5d:fb:0d:85: 37:3b:37:55:64:f5:79:39:63:23:d9:63:30:c3:c0:01:2a:83: 33:f3:31:b7:5a:01:55:60:ca:bc:3a:fb:82:29:e3:82:a2:fd: f7:ea:17:46:78:fe:f9:75:de:71:d8:a7:49:db:dd:0b:08:ca: 16:71:db:bb:78:bd:84:55:b9:5c:61:50:32:3f:50:41:80:49: c6:cf:a5:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FfBdTzx/5Fb358AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk NjhiOWIxYzEtOWQyYi00MTM4LTg3OTQtM2QxMzE5NTk0NGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB4dnL6M6busG/bPt9Lx9EbWSXfeZSlTAxnB 9vu/JIVyhQbNNor7vzVKWRwOypQ9d7XX4DqoPN4103B5/G76VmZ38gca8X8clNE0 8zATl+df3M4wynvxadQOTepb3v0hPjuTC6lvxJEyRYm6hjINfXGJUaSqHTZWKSqM 8BlOatioW5CemN6x/PgqzAYHbEyWHdvV/Y/u9gfRKG+/beUGosgbsBv/xYynf5+0 OxIBOZL7lP4TwK+nHKbriC8WA1sIyEHU9FlrhXKeW0bOSS+65FD6sx+FWdqr4qXP lOYpK6etwZ+bTP1iR+3DpwLWbyj7HIr/b1K1lWk2mQSWIDtf5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZyEn1stI0ZMUKn80f8MR6xfbO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYmNlZjEzYjEtZDQ3NS0z NGZlLTkzZjQtYmRlMmRiMWM3NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl8VV30+nFRigSLinDscMSmyzVv/5I7c2/umq9K5BYa/DfJw7nhpNhr GTu/i+AspC8QePisRjFFwH5k/Gz09/U6ktAq8YMPDkpbNTj4NCskG2GQNAP5lYZs IseTJWiL48WT8SVQ43ynR5opL6hxs7ChmigLh5Hv5MgILsp5Osowy8pe/358lyyZ 9xzfwvR1xrsCU+rV4UW9NWlJa/zqVePXtts5fB7H6+AQ7QEPSYu6XfsNhTc7N1Vk 9Xk5YyPZYzDDwAEqgzPzMbdaAVVgyrw6+4Ip44Ki/ffqF0Z4/vl13nHYp0nb3QsI yhZx27t4vYRVuVxhUDI/UEGAScbPpaQ= -----END CERTIFICATE-----Generated at Mon Jul 21 07:09:51 2025 by rpki-client