$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa File: 10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa (raw, json) Hash identifier: bDCKDsLBMLh42wYrpxQybxxVl4UzgXmn1yz/wVLvL3w= Subject key identifier: C5:ED:E2:64:9F:3B:44:12:9A:EF:7F:CC:C4:FC:C9:F9:26:D9:B6:0C Certificate issuer: /CN=8c902da3-488d-44d9-9833-f1295a9fd887 Certificate serial: 010D0C9F4328584A49706787E1E5CA7DAC0F85C0 Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 3925 IP address blocks: 209.165.201.0/24 maxlen: 24 209.165.202.0/24 maxlen: 24 209.165.209.0/24 maxlen: 24 209.165.211.0/24 maxlen: 24 209.165.212.0/24 maxlen: 24 209.165.213.0/24 maxlen: 24 209.165.214.0/24 maxlen: 24 209.165.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:67:87:e1:e5:ca:7d:ac:0f:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=b95f421d-27ac-4db2-b1bb-298b19541edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5e:0c:ac:65:4c:97:18:78:ee:17:6c:b4:cc: 2e:00:83:dd:4b:b3:8a:76:1c:c7:8e:2e:09:ca:05: 9e:5d:82:06:62:c8:e8:47:4b:b9:1f:bc:35:1c:6d: 46:a6:59:73:19:c8:bc:c2:bd:02:15:d6:93:c9:63: fb:b2:17:32:1b:34:6f:fd:27:be:17:63:7a:65:a4: c7:ce:78:c0:96:28:e2:8b:27:5e:61:aa:bb:24:9e: 49:e5:c3:02:17:da:c5:aa:dc:77:75:d4:bf:10:0b: 49:9b:40:aa:6a:92:c0:5e:05:4b:dc:74:9f:a5:41: f3:f2:88:c9:a6:b3:48:5e:0c:a1:a6:1d:b8:f5:3b: e3:b4:e9:84:41:0c:ce:f8:fa:15:0d:fd:40:4e:b1: 73:05:a1:c3:c6:2c:c4:4d:bb:7c:26:cc:80:d0:7a: fb:7f:68:61:fb:2b:a4:41:84:65:bc:fc:b0:d0:d1: 8b:f4:4d:b9:f1:f4:4e:46:aa:ea:44:25:60:c6:db: ff:ac:c8:9c:b3:f6:30:22:8d:d9:a3:f1:e7:40:9e: 60:d4:dc:c6:68:df:b7:c4:02:74:2c:c0:17:32:bf: d2:e5:10:de:6b:4a:ae:78:fd:53:0a:23:f8:e1:2a: d9:ea:e7:aa:a1:61:0e:db:bd:d2:95:0b:66:e5:85: 4a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:ED:E2:64:9F:3B:44:12:9A:EF:7F:CC:C4:FC:C9:F9:26:D9:B6:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl X509v3 Authority Key Identifier: keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer sbgp-ipAddrBlock: critical IPv4: 209.165.201.0-209.165.202.255 209.165.209.0/24 209.165.211.0-209.165.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:38:4e:81:d9:47:00:be:ec:f2:56:df:db:a3:c4:10:02:54: 39:95:dc:4e:c4:ea:6d:0c:a0:98:76:8f:79:4f:4b:fe:06:19: 30:3f:1d:4d:a4:19:50:51:23:76:03:59:a3:5a:02:50:8b:30: e6:f5:b5:14:49:1c:90:75:c3:0e:17:30:4e:0f:71:f4:c9:29: 4a:9b:cb:bc:bc:7a:8c:d3:65:4c:2f:99:89:57:75:2e:3f:fb: 01:23:97:02:49:1d:67:12:2c:ae:0c:1e:19:9a:8f:e8:eb:e1: 49:ce:34:a3:a0:96:40:b3:51:68:f4:7a:82:61:69:42:36:97: 9c:fa:6e:4a:33:ae:47:0b:f4:ab:5c:c8:77:02:d7:c8:ba:2a: 38:1f:30:64:bb:8d:88:a7:08:d4:22:9e:09:dc:bc:45:37:01: 26:2f:ae:b6:84:c8:b0:d7:2a:2d:f6:9b:02:df:4e:42:92:c7: 2e:f0:ea:ae:a9:c7:d4:00:4b:aa:88:86:42:ea:c1:38:aa:65: b6:9e:73:6f:0c:3f:98:a4:e2:71:87:dc:99:17:79:39:8c:b4: c7:a3:b2:f8:14:a8:68:8e:08:f6:31:08:80:f8:11:13:c5:12: bb:83:a3:87:b9:38:8a:12:70:a7:d5:b7:fe:04:12:f7:97:e6: bc:f1:e1:5c -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEpJcGeH4eXKfawPhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5MDJkYTMtNDg4ZC00NGQ5LTk4MzMtZjEyOTVhOWZk ODg3MB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk Yjk1ZjQyMWQtMjdhYy00ZGIyLWIxYmItMjk4YjE5NTQxZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll4MrGVMlxh47hdstMwuAIPdS7OKdhzHji4J ygWeXYIGYsjoR0u5H7w1HG1GpllzGci8wr0CFdaTyWP7shcyGzRv/Se+F2N6ZaTH znjAlijiiydeYaq7JJ5J5cMCF9rFqtx3ddS/EAtJm0CqapLAXgVL3HSfpUHz8ojJ prNIXgyhph249TvjtOmEQQzO+PoVDf1ATrFzBaHDxizETbt8JsyA0Hr7f2hh+yuk QYRlvPyw0NGL9E258fRORqrqRCVgxtv/rMics/YwIo3Zo/HnQJ5g1NzGaN+3xAJ0 LMAXMr/S5RDea0queP1TCiP44SrZ6ueqoWEO273SlQtm5YVKRQIDAQABo4IDcTCC A20wHQYDVR0OBBYEFMXt4mSfO0QSmu9/zMT8yfkm2bYMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Yzkw MmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5NWE5ZmQ4ODcvMTBhNTk4NTYtZjcxYS0z NWZhLWFhMGQtM2MyOTNmYWE4Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGM5MDJkYTMtNDg4ZC00NGQ5LTk4 MzMtZjEyOTVhOWZkODg3LzhjOTAyZGEzLTQ4OGQtNDRkOS05ODMzLWYxMjk1YTlm ZDg4Ny5jcmwwHwYDVR0jBBgwFoAUGj+9SLgY1i6JF4HSClS12Uz2NvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YzkwMmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5 NWE5ZmQ4ODcuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBADRpckD BADRpcoDBADRpdEwDAMEANGl0wMEA9Gl0DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQOE6B2UcAvuzyVt/b o8QQAlQ5ldxOxOptDKCYdo95T0v+BhkwPx1NpBlQUSN2A1mjWgJQizDm9bUUSRyQ dcMOFzBOD3H0ySlKm8u8vHqM02VML5mJV3UuP/sBI5cCSR1nEiyuDB4Zmo/o6+FJ zjSjoJZAs1Fo9HqCYWlCNpec+m5KM65HC/SrXMh3AtfIuio4HzBku42IpwjUIp4J 3LxFNwEmL662hMiw1yot9psC305Ckscu8OquqcfUAEuqiIZC6sE4qmW2nnNvDD+Y pOJxh9yZF3k5jLTHo7L4FKhojgj2MQiA+BETxRK7g6OHuTiKEnCn1bf+BBL3l+a8 8eFc -----END CERTIFICATE-----Generated at Tue Jul 1 16:32:09 2025 by rpki-client