$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e3f2b204-39cc-3a44-b2d8-2d8e6470baaa.roa File: e3f2b204-39cc-3a44-b2d8-2d8e6470baaa.roa (raw, json) Hash identifier: gLBppXfWaTwfPZKpqxr5UvlMlObHEcpxsguJml5d6Cw= Subject key identifier: 41:B9:85:0C:C5:25:59:D5:CD:FE:1B:51:31:B2:31:24:6C:38:5A:99 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A63F5B9B176DE63FB923A70C0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e3f2b204-39cc-3a44-b2d8-2d8e6470baaa.roa Signing time: Thu 03 Jul 2025 01:00:48 +0000 ROA not before: Thu 03 Jul 2025 01:00:48 +0000 ROA not after: Wed 01 Oct 2025 01:00:48 +0000 asID: 11233 IP address blocks: 209.237.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:f5:b9:b1:76:de:63:fb:92:3a:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 3 01:00:48 2025 GMT Not After : Oct 1 01:00:48 2025 GMT Subject: CN=b772c2c7-2d0c-4f5a-a2c4-a55c48c28670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3f:5e:ba:b7:fd:e1:24:7c:de:ff:d7:33:a0: ed:95:6f:83:a0:f4:69:f6:b6:c1:9d:99:60:e0:a1: 73:c8:0b:25:c6:a9:8c:fa:e1:b4:71:70:c9:f5:69: d2:02:b9:22:d0:2d:23:b7:d3:e4:fd:da:e2:94:e5: 55:46:2c:d7:3b:6a:56:79:98:50:af:49:61:2e:0c: c2:a7:48:68:b6:ed:21:ae:84:f2:0a:99:87:94:1d: 4e:dc:b4:a6:22:a9:a0:a4:8b:e0:52:ee:99:8f:4c: 82:50:3e:86:ae:0c:66:52:23:8a:0b:c0:d1:45:8e: 46:e6:49:06:f3:82:ad:c1:c3:4c:63:29:ec:67:0c: e3:96:c1:cc:13:7f:1b:c0:d1:18:d7:3c:0d:30:44: 25:8f:33:b0:ba:5f:90:66:a6:1e:fb:cf:67:d1:7f: 97:c3:95:f3:ff:4d:09:38:98:d4:ef:56:53:86:3a: 67:09:c7:f7:bf:ae:04:f4:c9:9b:2a:ae:d4:cb:f2: 33:68:1d:a1:a3:85:14:c2:2e:93:2a:64:9d:f3:8f: 77:2a:e8:73:bc:b5:2b:71:a6:1d:49:04:08:eb:eb: 0c:f0:b2:26:1c:6b:76:0e:f9:38:2b:9f:a5:cd:c9: 5e:1e:b4:85:00:8c:fa:cd:db:57:34:18:a2:d5:eb: 03:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B9:85:0C:C5:25:59:D5:CD:FE:1B:51:31:B2:31:24:6C:38:5A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e3f2b204-39cc-3a44-b2d8-2d8e6470baaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b2:ae:c5:7c:9e:eb:36:cc:75:dc:db:48:a0:1c:c7:7c:84: 26:26:4d:db:90:80:35:4e:98:4a:cb:c3:5b:74:4d:f6:22:8f: 26:0f:a8:1c:c8:bf:ed:86:8b:f4:dc:12:ab:f3:37:0a:f7:20: ac:c0:1e:42:83:21:6d:b5:9b:60:65:c2:a1:c4:d3:db:be:b8: 9a:54:d1:d8:27:0c:74:4f:e4:91:df:71:f8:72:f7:03:04:e9: af:83:43:cd:69:c9:8c:70:47:3b:d6:9b:db:99:23:19:7e:59: 8f:ce:be:28:91:68:89:9a:c1:77:9c:1c:ce:0f:eb:7f:ae:55: 06:6c:92:eb:17:ed:5b:35:57:76:d9:00:2e:e0:60:0f:b9:a8: 43:90:54:fc:b0:82:cf:25:36:8b:a7:5e:3e:a8:42:fd:ba:d0: 40:ce:01:a1:8c:6d:b7:b3:07:ad:a7:1d:ba:ad:56:d5:96:ff: a0:01:0f:8d:25:ae:99:cf:3c:f1:f8:58:d7:e6:40:af:27:9f: 84:e8:a6:25:58:97:09:86:30:0a:b5:c7:2b:43:cd:4e:7b:06: eb:73:16:24:83:ca:96:bc:5a:7c:3a:e0:2a:9d:63:c1:d2:0e: 3f:87:4d:9c:31:b5:66:8e:68:ea:e2:25:4a:21:ea:0a:35:38: 2e:e6:e6:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpj9bmxdt5j+5I6cMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk Yjc3MmMyYzctMmQwYy00ZjVhLWEyYzQtYTU1YzQ4YzI4NjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz9eurf94SR83v/XM6DtlW+DoPRp9rbBnZlg 4KFzyAslxqmM+uG0cXDJ9WnSArki0C0jt9Pk/drilOVVRizXO2pWeZhQr0lhLgzC p0hotu0hroTyCpmHlB1O3LSmIqmgpIvgUu6Zj0yCUD6GrgxmUiOKC8DRRY5G5kkG 84KtwcNMYynsZwzjlsHME38bwNEY1zwNMEQljzOwul+QZqYe+89n0X+Xw5Xz/00J OJjU71ZThjpnCcf3v64E9MmbKq7Uy/IzaB2ho4UUwi6TKmSd8493KuhzvLUrcaYd SQQI6+sM8LImHGt2Dvk4K5+lzcleHrSFAIz6zdtXNBii1esDgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG5hQzFJVnVzf4bUTGyMSRsOFqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZTNmMmIyMDQtMzljYy0z YTQ0LWIyZDgtMmQ4ZTY0NzBiYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSyrsV8nus2zHXc20igHMd8hCYmTduQgDVOmErLw1t0TfYijyYPqBzI v+2Gi/TcEqvzNwr3IKzAHkKDIW21m2BlwqHE09u+uJpU0dgnDHRP5JHfcfhy9wME 6a+DQ81pyYxwRzvWm9uZIxl+WY/OviiRaImawXecHM4P63+uVQZskusX7Vs1V3bZ AC7gYA+5qEOQVPywgs8lNounXj6oQv260EDOAaGMbbezB62nHbqtVtWW/6ABD40l rpnPPPH4WNfmQK8nn4TopiVYlwmGMAq1xytDzU57ButzFiSDypa8Wnw64CqdY8HS Dj+HTZwxtWaOaOriJUoh6go1OC7m5hs= -----END CERTIFICATE-----Generated at Wed Jul 9 15:02:00 2025 by rpki-client