$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b11f0458-b61c-3e5a-9df7-55e9dc385389.roa File: b11f0458-b61c-3e5a-9df7-55e9dc385389.roa (raw, json) Hash identifier: Zxo5Oix9BwpA/C1p8sSGpVIeNhRAs5UlGI4VBygDYek= Subject key identifier: 88:BC:9E:DB:08:1B:DE:B0:A9:B4:D0:45:2A:16:4A:87:C6:81:3B:88 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584A66C090F476485AA43DAF20C0 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b11f0458-b61c-3e5a-9df7-55e9dc385389.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 10753 IP address blocks: 209.211.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:90:f4:76:48:5a:a4:3d:af:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=09cf73fa-d009-4789-b567-e2429bd3323f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6b:3b:2b:1a:ed:22:7f:9d:23:a9:14:df:f1: 94:d6:16:57:b9:16:1f:70:dd:aa:f0:ba:92:2d:1a: ab:7c:84:a3:94:02:bc:0c:5e:ed:ed:bc:d4:cb:0e: 4e:8e:a9:8a:19:dc:16:87:72:50:06:62:d9:53:fe: bb:31:06:7a:bc:3a:c2:91:7f:dc:34:99:e0:01:99: 2a:a5:9e:be:7b:12:81:97:66:a3:3f:e9:fe:0e:77: 13:27:be:af:1f:74:21:53:0b:42:cb:5d:98:07:c8: 95:16:d2:ce:2d:72:2c:bc:5a:a2:49:5a:ad:a3:7b: 03:5c:ac:46:98:ce:78:36:50:6d:ec:4c:98:2e:ae: 43:47:b3:27:d0:83:9a:cb:51:4e:27:0e:e3:2f:67: 0c:10:f9:fb:a3:c5:fe:95:13:f5:31:2d:8b:c2:10: a7:c9:ee:b7:41:16:fc:d5:48:d1:55:4f:30:ce:e0: ca:22:14:21:50:cb:aa:56:30:b2:81:f7:68:5b:89: 12:89:75:77:fb:f0:f5:b2:2e:96:8d:e9:7a:e1:f8: b9:61:ed:fa:df:f2:75:ac:39:30:91:54:7e:4b:24: 4c:d5:92:ce:b9:6e:5a:ca:c3:ed:db:22:e2:37:74: 28:80:f1:ba:f9:7f:58:b2:d4:72:65:4f:56:b5:90: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BC:9E:DB:08:1B:DE:B0:A9:B4:D0:45:2A:16:4A:87:C6:81:3B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b11f0458-b61c-3e5a-9df7-55e9dc385389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:11:b6:88:a7:04:ba:49:c6:8e:aa:ca:fa:4b:cc:97:9d:5e: de:6a:55:09:15:b9:25:68:28:4d:d1:3e:a7:14:84:2a:ee:64: 7c:fe:f9:f3:8a:45:1f:ee:28:60:c4:43:07:89:97:89:bf:1e: 0e:59:60:b4:1c:03:46:3b:f4:da:6a:ff:55:64:0a:e5:5a:a7: 09:61:80:83:23:4f:97:94:c9:4c:6a:41:3d:bc:94:e3:4a:db: a3:4d:2d:5e:4c:f7:dc:a6:f4:cc:05:71:4e:1d:1f:8b:d5:47: 39:8d:6a:1c:b1:53:cc:dc:73:c0:65:1a:05:d9:59:7e:2a:aa: 74:c0:7d:17:18:50:63:5e:a1:26:29:bd:54:bf:a8:cb:fa:67: 5a:e4:a9:75:46:f2:33:80:84:c2:65:a6:5f:ee:ce:6c:00:c7: ab:d1:c9:1c:03:7f:51:ad:28:6d:e6:5f:82:ff:b9:f2:68:b5: 78:b4:88:ca:45:84:57:09:e0:81:79:91:a5:4e:af:fc:95:46: f6:21:de:a6:4a:47:65:c3:4e:ea:39:24:a1:9a:ca:ad:a8:30: 78:f0:e0:d8:49:71:85:4f:bc:a5:e0:67:94:0f:3e:00:fa:ef: c1:85:ec:1c:12:fa:44:84:3b:92:e6:72:61:fe:d1:c6:7c:44: 50:b5:48:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwJD0dkhapD2vIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk MDljZjczZmEtZDAwOS00Nzg5LWI1NjctZTI0MjliZDMzMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgms7KxrtIn+dI6kU3/GU1hZXuRYfcN2q8LqS LRqrfISjlAK8DF7t7bzUyw5OjqmKGdwWh3JQBmLZU/67MQZ6vDrCkX/cNJngAZkq pZ6+exKBl2ajP+n+DncTJ76vH3QhUwtCy12YB8iVFtLOLXIsvFqiSVqto3sDXKxG mM54NlBt7EyYLq5DR7Mn0IOay1FOJw7jL2cMEPn7o8X+lRP1MS2LwhCnye63QRb8 1UjRVU8wzuDKIhQhUMuqVjCygfdoW4kSiXV3+/D1si6Wjel64fi5Ye363/J1rDkw kVR+SyRM1ZLOuW5aysPt2yLiN3QogPG6+X9YstRyZU9WtZDlFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIi8ntsIG96wqbTQRSoWSofGgTuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYjExZjA0NTgtYjYxYy0z ZTVhLTlkZjctNTVlOWRjMzg1Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGARtoinBLpJxo6qyvpLzJedXt5qVQkVuSVoKE3RPqcUhCruZHz++fOK RR/uKGDEQweJl4m/Hg5ZYLQcA0Y79Npq/1VkCuVapwlhgIMjT5eUyUxqQT28lONK 26NNLV5M99ym9MwFcU4dH4vVRzmNahyxU8zcc8BlGgXZWX4qqnTAfRcYUGNeoSYp vVS/qMv6Z1rkqXVG8jOAhMJlpl/uzmwAx6vRyRwDf1GtKG3mX4L/ufJotXi0iMpF hFcJ4IF5kaVOr/yVRvYh3qZKR2XDTuo5JKGayq2oMHjw4NhJcYVPvKXgZ5QPPgD6 78GF7BwS+kSEO5LmcmH+0cZ8RFC1SLA= -----END CERTIFICATE-----Generated at Thu Jul 10 12:52:28 2025 by rpki-client