$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa File: ce3af1c7-43c9-367b-a21d-717aaaf44463.roa (raw, json) Hash identifier: hrZTABxoAXQ9vooncRj79KYXYeL5Z5gbFK1IRMETSXg= Subject key identifier: 85:DE:5D:E6:EC:B9:7C:30:D9:58:54:8F:ED:B1:1C:C4:86:41:24:3A Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584A7D15E67CF2920040E501C616 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 209.236.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:e6:7c:f2:92:00:40:e5:01:c6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=b32785cf-6b57-4f1a-9adc-58e108c4382b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2a:40:24:f8:34:e5:f5:46:30:05:c6:09:e0: 60:bc:77:04:ca:4d:60:3c:6f:e8:52:21:2f:40:26: e6:4d:0c:0a:64:e1:8d:a5:c2:c9:40:e2:42:ac:5c: bf:41:b2:3e:91:65:7d:14:91:2c:64:6a:03:ca:83: e9:5e:0e:e1:66:27:dc:8c:56:fc:74:c3:c5:cc:40: 8f:9a:98:67:d6:94:da:c9:ff:d7:cf:ad:a1:be:aa: d9:11:05:79:70:0e:0f:96:5b:c8:a5:58:fd:92:b5: d3:a4:30:21:4b:52:2e:79:0a:ce:a0:ad:85:6b:de: dd:d4:ee:7f:a2:03:e2:f4:71:88:6a:30:22:b7:0e: 74:f1:2e:74:f4:ed:23:e4:8d:bd:e8:23:de:9f:e1: 9a:3e:0a:c9:d7:e5:4b:af:73:fb:a0:d4:e6:f0:84: b4:ab:7a:6e:3e:06:28:0c:d1:94:23:ab:29:af:fd: 7c:8b:0f:f9:dc:e1:ed:95:c6:3d:14:45:e5:4b:b0: fc:8f:3d:1a:06:d4:4a:c7:cd:ee:4b:55:f1:28:86: e8:ac:0c:6d:be:dd:c9:a9:eb:b2:1f:ee:f7:87:f1: 16:2b:bc:e6:82:23:dc:70:7a:a6:85:d9:a9:36:df: 4b:df:65:47:1c:40:fd:18:e9:03:e1:84:fd:72:fe: 3d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DE:5D:E6:EC:B9:7C:30:D9:58:54:8F:ED:B1:1C:C4:86:41:24:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c7:70:20:d5:f7:90:0b:78:21:91:42:f8:14:ea:af:1b:e6: 55:87:96:ff:bb:20:6d:55:d3:3a:0b:5b:76:4d:60:91:a2:0c: 66:40:e8:0c:7d:e9:78:c6:0e:b2:67:5d:ac:9f:0e:4a:e9:28: 26:48:5e:83:f3:5a:4f:02:ea:06:91:15:aa:5e:7e:96:8f:3d: 94:f6:a4:20:ab:b4:2b:33:e0:c8:f6:55:8c:fc:84:26:79:67: 7c:de:74:cc:fb:b5:e2:45:38:a9:27:ff:e1:77:6a:6b:4b:08: 99:85:ab:5c:a4:e5:17:54:97:90:41:da:ba:20:f3:c8:0c:de: 2a:df:25:f1:7a:7f:6e:84:2d:4e:d2:fa:d6:72:fa:51:dd:47: a3:07:3a:1b:64:cd:59:c5:18:3d:28:0b:eb:f8:38:b6:f2:8c: f0:09:92:9e:b0:3f:4c:53:81:1b:00:d1:e6:b7:a9:68:37:4c: 23:27:66:a1:f8:f7:89:7c:25:59:24:eb:f6:c1:50:bd:1e:3d: 85:fa:aa:b6:e4:2f:d0:0b:0b:01:a0:24:57:f7:f4:34:d6:83: 8b:64:8f:f0:ac:4e:f6:c9:b9:fa:99:0f:b6:c3:1b:9c:70:60: 4c:1d:48:01:9a:e3:d4:ad:29:6d:46:b0:2e:7f:1d:30:8e:dd: 2b:c6:d7:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FeZ88pIAQOUBxhYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk YjMyNzg1Y2YtNmI1Ny00ZjFhLTlhZGMtNThlMTA4YzQzODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SpAJPg05fVGMAXGCeBgvHcEyk1gPG/oUiEv QCbmTQwKZOGNpcLJQOJCrFy/QbI+kWV9FJEsZGoDyoPpXg7hZifcjFb8dMPFzECP mphn1pTayf/Xz62hvqrZEQV5cA4PllvIpVj9krXTpDAhS1IueQrOoK2Fa97d1O5/ ogPi9HGIajAitw508S509O0j5I296CPen+GaPgrJ1+VLr3P7oNTm8IS0q3puPgYo DNGUI6spr/18iw/53OHtlcY9FEXlS7D8jz0aBtRKx83uS1XxKIborAxtvt3Jqeuy H+73h/EWK7zmgiPccHqmhdmpNt9L32VHHED9GOkD4YT9cv49lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXeXebsuXww2VhUj+2xHMSGQSQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvY2UzYWYxYzctNDNjOS0z NjdiLWEyMWQtNzE3YWFhZjQ0NDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7HcCDV95ALeCGRQvgU6q8b5lWHlv+7IG1V0zoLW3ZNYJGiDGZA6Ax9 6XjGDrJnXayfDkrpKCZIXoPzWk8C6gaRFapefpaPPZT2pCCrtCsz4Mj2VYz8hCZ5 Z3zedMz7teJFOKkn/+F3amtLCJmFq1yk5RdUl5BB2rog88gM3irfJfF6f26ELU7S +tZy+lHdR6MHOhtkzVnFGD0oC+v4OLbyjPAJkp6wP0xTgRsA0ea3qWg3TCMnZqH4 94l8JVkk6/bBUL0ePYX6qrbkL9ALCwGgJFf39DTWg4tkj/CsTvbJufqZD7bDG5xw YEwdSAGa49StKW1GsC5/HTCO3SvG13o= -----END CERTIFICATE-----Generated at Mon Jul 21 06:50:14 2025 by rpki-client