$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa File: d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa (raw, json) Hash identifier: K5eWxo3uPVnICUldXunlzt5CSbIKVFly8IUUsUb1Jw0= Subject key identifier: FE:19:89:3B:FE:9A:A4:D2:E8:BC:A2:C8:87:41:B2:CA:CB:98:AB:EB Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584A7D15F016506970E7D3EDFB00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 6079 IP address blocks: 209.236.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f0:16:50:69:70:e7:d3:ed:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=a33ee746-df58-4f78-833c-3f202deca690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:88:ff:b6:c2:be:4e:d9:fc:32:7c:4d:03: bc:63:38:41:48:88:b0:b4:85:16:be:4b:ae:94:8f: f4:27:5a:d9:3e:17:f6:13:2f:06:75:ed:b8:12:cb: b1:a1:7a:35:70:96:a9:51:47:99:fd:08:98:42:e1: da:0f:b9:9a:36:ac:b8:fe:b1:9e:d8:39:17:26:02: 28:f3:c0:82:48:d0:6f:6b:63:35:0d:ab:2c:f1:f4: 20:a7:bf:29:9f:f7:a0:d7:63:e3:21:a6:7d:aa:de: b6:d5:42:c1:3c:d9:ae:a0:74:2b:33:92:7e:4e:6e: d1:b7:3d:ba:58:7f:11:a4:fc:f0:28:09:2c:0b:ba: b2:cf:c9:c2:39:a1:30:c7:b5:92:f2:16:84:e5:ba: e6:a9:36:62:99:af:9e:5a:20:94:2b:c4:75:c5:39: 50:0f:04:d4:48:bc:b1:c1:96:9d:da:07:86:11:09: 71:7e:fe:4a:a7:04:c6:1f:9b:10:0e:fd:30:55:ec: e4:ed:5e:db:7b:c6:c8:a0:ee:99:81:5a:d5:2a:d8: b7:67:0a:42:7b:53:bb:4d:ed:b3:aa:76:d0:d1:3e: a6:14:08:f2:91:a1:a3:64:dd:64:ee:4d:bb:24:07: 6f:86:9e:68:d2:fe:ed:95:76:6e:2b:bf:19:55:54: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:19:89:3B:FE:9A:A4:D2:E8:BC:A2:C8:87:41:B2:CA:CB:98:AB:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:33:d1:78:80:57:89:a8:0a:f8:2c:dc:99:4c:94:38:3c:cd: 8a:01:f3:c8:95:03:75:06:d3:75:d0:4f:70:ac:67:4c:0a:28: e0:b4:a7:2f:4d:6e:83:f4:23:51:53:7a:c3:0a:7f:6b:a6:9d: 1d:06:86:c1:6c:36:72:74:c1:d1:cb:3a:ea:b4:f8:ae:d1:b7: 2c:b0:db:ef:76:44:ab:16:d1:a8:b2:06:26:fb:b0:ba:87:45: e7:40:52:45:5c:4d:92:a8:38:46:09:5d:4a:d9:06:c1:27:bc: c5:48:a6:cd:a9:97:34:0f:84:9f:62:6e:67:c9:a7:d7:b8:04: 5b:40:b2:22:56:4a:7a:f3:91:c9:35:e2:e1:2b:9c:05:94:90: 4d:06:74:9e:40:7e:42:e0:d2:0c:68:6c:89:de:6d:99:bf:ba: 86:7f:48:8f:80:11:6a:0a:87:5e:69:5d:de:86:f1:ef:31:14: c4:b9:95:7c:aa:01:6b:30:e2:76:02:cc:2c:ac:60:ca:d6:2f: b6:e2:a3:52:fa:64:63:90:b5:e5:98:d9:bb:69:da:85:0b:2a: bb:eb:04:35:59:59:47:47:91:b9:40:e8:20:8f:b6:25:b0:d3: 0f:59:2b:90:1f:d3:e7:4c:ad:54:22:33:53:21:84:db:e9:9a: b7:c4:53:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FfAWUGlw59Pt+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk YTMzZWU3NDYtZGY1OC00Zjc4LTgzM2MtM2YyMDJkZWNhNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriSI/7bCvk7Z/DJ8TQO8YzhBSIiwtIUWvkuu lI/0J1rZPhf2Ey8Gde24EsuxoXo1cJapUUeZ/QiYQuHaD7maNqy4/rGe2DkXJgIo 88CCSNBva2M1Dass8fQgp78pn/eg12PjIaZ9qt621ULBPNmuoHQrM5J+Tm7Rtz26 WH8RpPzwKAksC7qyz8nCOaEwx7WS8haE5brmqTZima+eWiCUK8R1xTlQDwTUSLyx wZad2geGEQlxfv5KpwTGH5sQDv0wVezk7V7be8bIoO6ZgVrVKti3ZwpCe1O7Te2z qnbQ0T6mFAjykaGjZN1k7k27JAdvhp5o0v7tlXZuK78ZVVSLoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4ZiTv+mqTS6LyiyIdBssrLmKvrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZDg4ODJlOTItYzFlYy0z ZTNiLThlYmMtNmM1ZGVhYmVjZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQz0XiAV4moCvgs3JlMlDg8zYoB88iVA3UG03XQT3CsZ0wKKOC0py9N boP0I1FTesMKf2umnR0GhsFsNnJ0wdHLOuq0+K7Rtyyw2+92RKsW0aiyBib7sLqH RedAUkVcTZKoOEYJXUrZBsEnvMVIps2plzQPhJ9ibmfJp9e4BFtAsiJWSnrzkck1 4uErnAWUkE0GdJ5AfkLg0gxobInebZm/uoZ/SI+AEWoKh15pXd6G8e8xFMS5lXyq AWsw4nYCzCysYMrWL7bio1L6ZGOQteWY2btp2oULKrvrBDVZWUdHkblA6CCPtiWw 0w9ZK5Af0+dMrVQiM1MhhNvpmrfEU+0= -----END CERTIFICATE-----Generated at Mon Jul 21 07:09:55 2025 by rpki-client