$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/bd55586c-5cd2-36c4-b0b6-b866cbfd6bb0.roa File: bd55586c-5cd2-36c4-b0b6-b866cbfd6bb0.roa (raw, json) Hash identifier: FEyY+W9igAOaL43uSurjNrqCHj8vuAC+UOHFZ2DUR/Y= Subject key identifier: E3:17:4A:44:F5:E6:DA:19:99:5D:D3:99:31:B7:46:41:41:0C:3F:95 Certificate issuer: /CN=61078829-6930-46b0-9ac8-91898d36b056 Certificate serial: 010D0C9F4328584A62909F83E5461741CC3EB480 Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/bd55586c-5cd2-36c4-b0b6-b866cbfd6bb0.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 33548 IP address blocks: 209.54.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:9f:83:e5:46:17:41:cc:3e:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=f50eeff9-9b5f-4888-a9a3-5088e342ace6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:e3:a1:1b:6f:1e:56:d1:f4:1f:ef:bc:7f: 37:9d:43:0d:66:84:be:9c:74:fb:2d:89:84:4f:40: 10:2c:0e:69:8a:fd:cc:55:41:8b:bf:e8:20:61:f7: 87:c4:af:66:99:3e:cc:dc:55:cb:fe:2a:fa:32:f2: f9:bb:cc:37:65:4e:bd:5e:de:38:73:26:62:da:8f: e0:93:12:c6:b5:aa:eb:e3:ab:2a:01:af:3f:ae:e5: 40:36:e5:7d:d8:ca:62:97:ad:24:38:41:31:04:2d: c1:17:50:58:08:59:9a:3b:cc:c4:49:c9:50:0e:dc: f2:e1:71:d3:c1:9e:d0:60:58:cf:eb:33:da:14:69: 27:a5:18:b2:8c:c9:27:77:0a:fc:69:50:15:4c:03: 9e:02:52:52:7f:9c:a8:11:d8:c9:7e:3c:9a:b1:5c: be:97:35:d2:79:d0:8c:cb:e8:5d:66:dd:99:57:ff: a1:8e:1e:b7:25:e0:50:c0:62:60:8d:70:dd:f1:d2: f5:ff:d2:43:ff:83:3b:46:49:b5:15:20:19:89:66: aa:aa:99:a7:56:89:ef:6d:1a:fa:2b:81:8c:90:d9: 25:57:74:34:6a:5a:cf:88:8b:45:77:f1:f7:66:d5: 30:fb:05:8a:e1:a5:21:ea:5b:69:8e:2d:ea:83:60: e1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:17:4A:44:F5:E6:DA:19:99:5D:D3:99:31:B7:46:41:41:0C:3F:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/bd55586c-5cd2-36c4-b0b6-b866cbfd6bb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl X509v3 Authority Key Identifier: keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer sbgp-ipAddrBlock: critical IPv4: 209.54.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e2:b1:a2:57:f6:f8:d9:b5:ef:ae:bd:51:6f:db:2a:5c:bf: 12:98:6c:82:15:3c:4f:0c:4e:7d:1f:69:cc:75:b8:84:04:31: ee:d1:f9:8c:7c:52:96:93:ab:2e:ac:8d:50:50:9e:42:76:9a: c2:23:a3:19:cb:8e:ff:fe:48:15:0d:48:cf:93:95:4f:bb:2b: 9b:43:8c:73:a1:12:74:ff:98:b5:e6:8a:2d:10:79:8b:05:f6: f6:c2:26:59:49:9c:bb:9b:d1:c3:92:94:b8:2f:ae:00:16:45: f6:29:24:dc:97:db:e9:92:96:77:61:95:ad:d1:d4:dd:f5:29: 3e:e0:7a:02:77:3a:30:f6:ba:4c:c4:c3:b0:ea:b8:23:be:79: a5:22:0d:21:c9:1e:4f:44:ec:45:16:65:11:33:7a:d9:e4:cf: 55:96:6e:f5:07:cc:21:b9:2f:7a:49:7c:17:ff:b5:fb:ea:f1: 73:33:f0:09:f6:9e:e9:f8:1d:d7:e0:4c:2d:d0:4a:d2:56:5d: 7d:5e:6e:6f:b4:c8:2c:75:b3:d3:88:aa:16:f4:11:4d:25:8d: f6:44:79:fa:29:1b:f7:ce:01:54:5c:7e:81:ab:2c:df:5e:46: b4:40:51:03:97:18:fd:e1:de:45:49:68:9b:c7:aa:d4:4e:41: 26:70:f0:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJ+D5UYXQcw+tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi MDU2MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZjUwZWVmZjktOWI1Zi00ODg4LWE5YTMtNTA4OGUzNDJhY2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqubjoRtvHlbR9B/vvH83nUMNZoS+nHT7LYmE T0AQLA5piv3MVUGLv+ggYfeHxK9mmT7M3FXL/ir6MvL5u8w3ZU69Xt44cyZi2o/g kxLGtarr46sqAa8/ruVANuV92Mpil60kOEExBC3BF1BYCFmaO8zESclQDtzy4XHT wZ7QYFjP6zPaFGknpRiyjMkndwr8aVAVTAOeAlJSf5yoEdjJfjyasVy+lzXSedCM y+hdZt2ZV/+hjh63JeBQwGJgjXDd8dL1/9JD/4M7Rkm1FSAZiWaqqpmnVonvbRr6 K4GMkNklV3Q0alrPiItFd/H3ZtUw+wWK4aUh6ltpji3qg2DhFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMXSkT15toZmV3TmTG3RkFBDD+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3 ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvYmQ1NTU4NmMtNWNkMi0z NmM0LWIwYjYtYjg2NmNiZmQ2YmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2 YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5 OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0TYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHisaJX9vjZte+uvVFv2ypcvxKYbIIVPE8MTn0facx1uIQEMe7R+Yx8 UpaTqy6sjVBQnkJ2msIjoxnLjv/+SBUNSM+TlU+7K5tDjHOhEnT/mLXmii0QeYsF 9vbCJllJnLub0cOSlLgvrgAWRfYpJNyX2+mSlndhla3R1N31KT7gegJ3OjD2ukzE w7DquCO+eaUiDSHJHk9E7EUWZREzetnkz1WWbvUHzCG5L3pJfBf/tfvq8XMz8An2 nun4HdfgTC3QStJWXX1ebm+0yCx1s9OIqhb0EU0ljfZEefopG/fOAVRcfoGrLN9e RrRAUQOXGP3h3kVJaJvHqtROQSZw8BQ= -----END CERTIFICATE-----Generated at Wed Jul 9 21:08:41 2025 by rpki-client