$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa File: da1badaf-a81a-3e30-a837-19d39181a3ec.roa (raw, json) Hash identifier: EcE99evEX74IfgKB18FC37xtGFbaprbFCmrDgS2aBgs= Subject key identifier: 09:40:AE:36:D1:F4:6E:18:98:68:D5:D3:52:45:52:08:C9:F0:29:EF Certificate issuer: /CN=d578f033-7588-487c-9d67-16453bc5710a Certificate serial: 010D0C9F4328584A62909060651454BE4EBD7640 Authority key identifier: 01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 14618 IP address blocks: 209.142.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:90:60:65:14:54:be:4e:bd:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d578f033-7588-487c-9d67-16453bc5710a Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=0372069b-7072-4b98-986b-d115e88f405e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:39:48:7b:82:81:1f:08:8e:86:54:b0:d0:ae: da:54:ce:86:69:30:dd:6e:42:91:fe:c9:00:f4:a7: 02:81:99:65:55:aa:12:9e:94:36:05:2d:ae:56:41: c5:f9:99:4a:63:e0:07:86:d0:64:62:84:05:c0:24: 8c:95:d9:22:46:fe:25:c2:ce:fd:74:95:d0:4f:b8: 8b:82:cb:f7:7d:29:88:d4:f7:21:c1:73:c3:d6:23: c8:b6:da:d7:48:dd:49:e4:88:2b:94:ba:4d:91:1f: d6:54:50:17:44:29:63:56:64:26:d3:d7:3a:7c:04: 60:ed:18:9a:3f:77:a7:52:3e:fb:b4:e0:69:91:c2: d5:2c:ff:f1:2c:a2:65:b1:5e:82:79:99:51:26:36: 62:89:2d:57:7e:65:4f:ab:77:71:3c:76:8d:0e:6a: 7c:82:c7:f3:9f:e4:23:c9:9f:62:eb:84:18:66:1b: 83:78:06:85:15:40:38:4e:b0:b2:65:bf:1f:1c:7c: 1e:50:1a:08:f9:57:d3:32:82:c6:7f:75:00:c1:70: 06:10:76:46:9b:94:21:05:1d:69:4d:eb:8e:45:7f: 62:dc:47:9c:b6:8a:e4:ab:6b:5e:d3:0a:2b:a5:79: 76:93:4d:a5:43:29:df:df:d4:78:c4:9d:3e:db:fa: c6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:40:AE:36:D1:F4:6E:18:98:68:D5:D3:52:45:52:08:C9:F0:29:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.crl X509v3 Authority Key Identifier: keyid:01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer sbgp-ipAddrBlock: critical IPv4: 209.142.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f6:92:d1:53:78:d2:5d:26:a9:e4:df:8f:98:62:b3:c8:80: 9d:b6:10:19:8d:0b:a0:23:7b:bd:c6:0f:9d:19:ec:d8:a6:be: 68:87:98:49:41:b2:e9:83:b5:8c:0a:b8:c3:27:8a:c2:f9:a2: 8b:70:53:dc:f2:9a:a2:dd:74:da:e4:56:e6:eb:f4:30:bc:b6: 14:7c:7d:04:31:75:4e:c8:34:a0:42:81:19:40:c5:f0:2a:23: 34:a5:7e:78:ad:81:c4:3c:1a:b9:de:0c:87:2d:b8:03:67:8d: 35:29:f5:30:5f:bd:28:70:7c:2e:80:3b:88:5b:27:ed:37:e3: 5c:73:60:31:bb:a8:6c:af:bc:0f:da:f4:fc:f9:4b:93:a3:c8: 90:0b:f1:dd:04:a8:99:e8:78:13:db:80:67:da:7f:b7:ed:af: cd:cc:24:c4:d3:48:c8:00:86:0a:e3:dc:66:20:53:18:1b:41: af:46:8e:4a:9e:cc:5b:41:7d:52:42:d8:68:99:ee:0b:c2:ad: 31:66:29:36:bb:27:f2:23:9b:9d:3d:fe:f1:06:83:6e:27:d2: 22:7c:9b:66:70:65:4d:65:5d:d4:60:0d:69:9a:7b:ed:3e:47: 53:24:6f:0d:13:a3:43:45:51:8e:4c:c2:04:25:22:de:ed:2e: b8:46:86:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJBgZRRUvk69dkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3OGYwMzMtNzU4OC00ODdjLTlkNjctMTY0NTNiYzU3 MTBhMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MDM3MjA2OWItNzA3Mi00Yjk4LTk4NmItZDExNWU4OGY0MDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDlIe4KBHwiOhlSw0K7aVM6GaTDdbkKR/skA 9KcCgZllVaoSnpQ2BS2uVkHF+ZlKY+AHhtBkYoQFwCSMldkiRv4lws79dJXQT7iL gsv3fSmI1PchwXPD1iPIttrXSN1J5IgrlLpNkR/WVFAXRCljVmQm09c6fARg7Ria P3enUj77tOBpkcLVLP/xLKJlsV6CeZlRJjZiiS1XfmVPq3dxPHaNDmp8gsfzn+Qj yZ9i64QYZhuDeAaFFUA4TrCyZb8fHHweUBoI+VfTMoLGf3UAwXAGEHZGm5QhBR1p TeuORX9i3Eectorkq2te0worpXl2k02lQynf39R4xJ0+2/rGMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlArjbR9G4YmGjV01JFUgjJ8CnvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNTc4 ZjAzMy03NTg4LTQ4N2MtOWQ2Ny0xNjQ1M2JjNTcxMGEvZGExYmFkYWYtYTgxYS0z ZTMwLWE4MzctMTlkMzkxODFhM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDU3OGYwMzMtNzU4OC00ODdjLTlk NjctMTY0NTNiYzU3MTBhL2Q1NzhmMDMzLTc1ODgtNDg3Yy05ZDY3LTE2NDUzYmM1 NzEwYS5jcmwwHwYDVR0jBBgwFoAUAew4/pi+EkvYbOXl0IPCq+1id4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNTc4ZjAzMy03NTg4LTQ4N2MtOWQ2Ny0xNjQ1 M2JjNTcxMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL2ktFTeNJdJqnk34+YYrPIgJ22EBmNC6Aje73GD50Z7NimvmiHmElB sumDtYwKuMMnisL5ootwU9zymqLddNrkVubr9DC8thR8fQQxdU7INKBCgRlAxfAq IzSlfnitgcQ8GrneDIctuANnjTUp9TBfvShwfC6AO4hbJ+0341xzYDG7qGyvvA/a 9Pz5S5OjyJAL8d0EqJnoeBPbgGfaf7ftr83MJMTTSMgAhgrj3GYgUxgbQa9Gjkqe zFtBfVJC2GiZ7gvCrTFmKTa7J/Ijm509/vEGg24n0iJ8m2ZwZU1lXdRgDWmae+0+ R1Mkbw0To0NFUY5MwgQlIt7tLrhGhkA= -----END CERTIFICATE-----Generated at Tue Jul 22 11:57:15 2025 by rpki-client