$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/823f045c-56e3-3844-8d04-8e44b7241d53.roa File: 823f045c-56e3-3844-8d04-8e44b7241d53.roa (raw, json) Hash identifier: qrYa1qKVfPxs8vUG5ZhbmNeVDd29/CzFAfapxjnJPc0= Subject key identifier: F7:04:D1:71:FB:3E:A1:13:11:82:9B:DD:DA:D9:C8:9E:0E:21:7E:27 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584A66C07AA56E984553674C0480 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/823f045c-56e3-3844-8d04-8e44b7241d53.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 394889 IP address blocks: 209.211.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:7a:a5:6e:98:45:53:67:4c:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=507bf427-ec1f-4ef0-8d06-2f09bb7d6987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:0d:1d:1e:97:87:19:0e:44:3b:26:7a:cf: 0b:eb:b3:ea:8c:33:e0:29:8a:67:2b:ae:5c:3a:dc: 51:ad:42:c1:3a:79:cc:01:61:18:77:82:cc:51:bf: 33:10:4f:87:a9:01:1f:b5:5d:18:b1:36:aa:75:2a: e6:92:15:f4:cd:e6:17:1c:31:56:e2:67:1c:7a:5e: 46:1a:48:68:35:64:25:14:45:8a:b0:15:db:49:ea: 87:bf:7b:9e:2b:b6:ba:66:ec:e7:d1:3d:c2:58:ae: a1:cf:04:69:6a:86:2a:a8:2f:59:2b:76:df:db:d1: c6:01:56:ce:94:73:4a:72:c4:26:59:f4:f3:7a:fc: 7a:dc:e6:12:16:e1:e0:85:7f:4e:78:9c:55:f9:52: d0:01:e1:c4:13:a3:47:1f:08:bf:62:6e:c7:20:78: da:b2:db:8a:7e:76:cc:eb:d0:ee:f6:c6:07:41:d1: c5:f0:63:c1:0d:af:c7:8c:0b:5f:ed:b5:5d:24:33: 6b:aa:88:f8:43:42:db:30:13:e6:9a:09:c9:b0:9a: 85:dd:28:89:59:fc:cd:3d:03:7e:84:4f:5a:e0:d7: 7d:39:f0:03:9a:9e:de:b5:79:21:86:23:8f:8e:11: 15:d4:b5:62:6e:79:ec:e6:f9:be:e3:31:26:82:ca: 28:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:04:D1:71:FB:3E:A1:13:11:82:9B:DD:DA:D9:C8:9E:0E:21:7E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/823f045c-56e3-3844-8d04-8e44b7241d53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:fe:59:87:8f:31:0c:c7:ce:23:4a:13:77:be:85:28:4d:9b: 12:21:12:5d:40:c2:d3:46:dd:c9:3f:3c:b6:1e:fa:e8:e6:86: f4:77:68:79:d8:a4:98:2e:ba:dd:9b:cc:f5:47:a6:4a:19:40: 9e:8c:20:cd:fd:11:6a:f9:e5:9a:4a:ca:d8:ba:e6:47:ec:4d: 45:15:eb:46:30:48:8a:df:55:e1:a0:0e:95:ac:59:bf:48:62: 48:35:8c:db:9a:3e:a3:11:c9:aa:6a:42:b8:a3:8a:4a:06:d3: 78:25:c5:c6:18:28:97:d1:b2:ba:12:e2:e0:27:e5:a9:41:de: d7:12:96:86:2f:80:93:db:33:1a:30:7a:bf:c2:f2:f0:02:fd: 6a:2d:98:2b:70:f9:9d:26:bc:ce:d2:e3:94:75:36:a5:a1:64: 2d:81:fe:28:72:6f:3f:32:d4:9e:57:76:5b:88:2a:21:d0:f7: 28:48:b3:29:8c:31:22:d2:c9:d4:74:bb:15:1d:1a:cc:f2:1f: e6:e2:ae:45:27:55:9a:1d:61:90:ae:eb:50:c2:9e:f8:ce:9d: bf:57:74:4f:c6:38:89:e9:bd:15:f7:97:eb:6f:c7:48:02:79: be:39:ae:57:7b:aa:c3:74:61:42:ae:6d:81:d9:95:35:f0:f7: 0e:d8:48:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHqlbphFU2dMBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk NTA3YmY0MjctZWMxZi00ZWYwLThkMDYtMmYwOWJiN2Q2OTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiwNHR6XhxkORDsmes8L67PqjDPgKYpnK65c OtxRrULBOnnMAWEYd4LMUb8zEE+HqQEftV0YsTaqdSrmkhX0zeYXHDFW4mccel5G GkhoNWQlFEWKsBXbSeqHv3ueK7a6Zuzn0T3CWK6hzwRpaoYqqC9ZK3bf29HGAVbO lHNKcsQmWfTzevx63OYSFuHghX9OeJxV+VLQAeHEE6NHHwi/Ym7HIHjastuKfnbM 69Du9sYHQdHF8GPBDa/HjAtf7bVdJDNrqoj4Q0LbMBPmmgnJsJqF3SiJWfzNPQN+ hE9a4Nd9OfADmp7etXkhhiOPjhEV1LVibnns5vm+4zEmgsoo+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcE0XH7PqETEYKb3drZyJ4OIX4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvODIzZjA0NWMtNTZlMy0z ODQ0LThkMDQtOGU0NGI3MjQxZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj+WYePMQzHziNKE3e+hShNmxIhEl1AwtNG3ck/PLYe+ujmhvR3aHnY pJguut2bzPVHpkoZQJ6MIM39EWr55ZpKyti65kfsTUUV60YwSIrfVeGgDpWsWb9I Ykg1jNuaPqMRyapqQrijikoG03glxcYYKJfRsroS4uAn5alB3tcSloYvgJPbMxow er/C8vAC/WotmCtw+Z0mvM7S45R1NqWhZC2B/ihybz8y1J5XdluIKiHQ9yhIsymM MSLSydR0uxUdGszyH+birkUnVZodYZCu61DCnvjOnb9XdE/GOInpvRX3l+tvx0gC eb45rld7qsN0YUKubYHZlTXw9w7YSAU= -----END CERTIFICATE-----Generated at Thu Jul 10 06:49:01 2025 by rpki-client