$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/dc145ca8-e30d-383a-8322-6eb74ecabab4.roa File: dc145ca8-e30d-383a-8322-6eb74ecabab4.roa (raw, json) Hash identifier: S/GF7vB98C7Xu18VOptqKH9UvvE6dMWXPS0cnZ+Hs4U= Subject key identifier: 89:98:71:01:DA:3E:B8:10:1E:B8:93:A4:BB:1A:0A:CC:19:6D:CA:70 Certificate issuer: /CN=25d7d3fc-8bab-49db-bccd-5054dcd6f19b Certificate serial: 010D0C9F4328584A6C55D952FE2218B9EF18C680 Authority key identifier: 4D:24:2B:65:21:DB:48:BF:86:5D:B8:81:7F:30:5C:5D:07:93:C0:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/dc145ca8-e30d-383a-8322-6eb74ecabab4.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 8075 IP address blocks: 209.94.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d9:52:fe:22:18:b9:ef:18:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d7d3fc-8bab-49db-bccd-5054dcd6f19b Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=a4db2af7-dceb-4556-9425-97a726dc0f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:91:2d:ae:4e:be:85:bf:c8:1f:ab:c3:99:ad: 1a:fb:25:58:42:75:ac:7b:f4:f6:86:54:f0:c9:0f: 10:31:38:1f:40:0a:bd:e9:01:b1:91:ae:12:26:63: d5:18:b5:36:ea:e9:54:92:45:04:e9:18:33:05:fd: 55:11:99:ac:f3:84:42:c2:bf:8c:d4:e9:39:fa:2c: 63:a5:ab:1d:f2:a3:1c:e4:63:82:a8:e1:ca:3f:0a: 61:a9:85:30:39:6f:49:51:bc:ea:4e:6c:d8:06:4d: 9d:c3:85:81:55:30:b9:f8:dd:b7:b7:d7:64:16:08: d2:1d:55:57:0c:1c:ba:df:8a:a1:d9:bc:bb:89:e6: 2c:00:cc:8e:78:f9:51:f6:fb:0b:eb:5d:ea:b8:cc: 73:49:35:71:ac:79:92:67:8d:f3:22:b5:73:52:99: 3b:21:24:75:c9:26:61:91:f5:92:e7:5a:4d:f0:b8: 68:18:ac:85:17:dc:72:8f:c4:2f:e2:9a:ce:e0:80: 92:9f:ba:dc:22:49:98:ef:4f:f3:03:a2:9f:63:09: 74:28:57:2b:cc:0a:ba:7a:92:6e:71:23:0f:70:80: 0c:56:1c:d6:1b:3b:5d:63:1d:17:fd:23:af:e7:5b: a4:23:30:8a:7d:a6:50:f4:d2:01:7e:66:93:d7:5d: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:98:71:01:DA:3E:B8:10:1E:B8:93:A4:BB:1A:0A:CC:19:6D:CA:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/dc145ca8-e30d-383a-8322-6eb74ecabab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.crl X509v3 Authority Key Identifier: keyid:4D:24:2B:65:21:DB:48:BF:86:5D:B8:81:7F:30:5C:5D:07:93:C0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.cer sbgp-ipAddrBlock: critical IPv4: 209.94.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f5:63:31:4e:2c:ea:1d:77:4b:65:5a:07:6c:0e:c8:22:9b: bf:75:83:d4:71:ef:e8:7e:c9:52:f9:0e:29:d6:18:31:5a:ed: 9a:f1:ac:e8:80:1b:71:f0:24:e1:8f:38:87:b0:2e:a6:7a:0f: 38:da:81:01:d3:48:16:97:68:90:86:d5:cd:71:64:ec:15:c6: 00:0a:d1:91:c8:82:d2:2a:49:96:73:4f:67:98:d8:4a:27:69: 22:a4:b2:2b:f5:71:fc:d2:22:08:fa:02:25:b0:b3:c5:0c:13: bf:43:33:de:eb:59:a5:5e:c0:a7:c7:02:48:d4:26:01:8b:87: 51:da:26:33:f0:d2:b9:1f:ee:3c:d4:b0:85:74:ec:f7:0e:d3: 8a:cc:8d:15:d3:e7:92:7f:02:87:00:db:f0:dd:84:53:bc:63: 43:e6:b2:24:36:7b:84:ac:74:d9:52:66:f2:53:67:28:9a:c7: f0:fd:70:de:ad:66:ad:dc:68:91:2a:d2:33:e6:7f:a4:dc:91: 73:5a:ac:d8:ee:ed:bc:cc:d8:05:77:64:18:ec:82:ec:26:fe: 62:f0:4d:6b:f3:fb:5f:94:49:b5:5f:b6:e5:dd:7c:80:d3:df: 3a:37:97:2f:b4:a4:7e:c5:af:1d:87:6a:03:10:0f:53:16:1e: de:ef:0c:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdlS/iIYue8YxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkN2QzZmMtOGJhYi00OWRiLWJjY2QtNTA1NGRjZDZm MTliMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk YTRkYjJhZjctZGNlYi00NTU2LTk0MjUtOTdhNzI2ZGMwZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5Etrk6+hb/IH6vDma0a+yVYQnWse/T2hlTw yQ8QMTgfQAq96QGxka4SJmPVGLU26ulUkkUE6RgzBf1VEZms84RCwr+M1Ok5+ixj pasd8qMc5GOCqOHKPwphqYUwOW9JUbzqTmzYBk2dw4WBVTC5+N23t9dkFgjSHVVX DBy634qh2by7ieYsAMyOePlR9vsL613quMxzSTVxrHmSZ43zIrVzUpk7ISR1ySZh kfWS51pN8LhoGKyFF9xyj8Qv4prO4ICSn7rcIkmY70/zA6KfYwl0KFcrzAq6epJu cSMPcIAMVhzWGztdYx0X/SOv51ukIzCKfaZQ9NIBfmaT113gbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImYcQHaPrgQHriTpLsaCswZbcpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNWQ3 ZDNmYy04YmFiLTQ5ZGItYmNjZC01MDU0ZGNkNmYxOWIvZGMxNDVjYTgtZTMwZC0z ODNhLTgzMjItNmViNzRlY2FiYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjVkN2QzZmMtOGJhYi00OWRiLWJj Y2QtNTA1NGRjZDZmMTliLzI1ZDdkM2ZjLThiYWItNDlkYi1iY2NkLTUwNTRkY2Q2 ZjE5Yi5jcmwwHwYDVR0jBBgwFoAUTSQrZSHbSL+GXbiBfzBcXQeTwGUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNWQ3ZDNmYy04YmFiLTQ5ZGItYmNjZC01MDU0 ZGNkNmYxOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0V5RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID1YzFOLOodd0tlWgdsDsgim791g9Rx7+h+yVL5DinWGDFa7ZrxrOiA G3HwJOGPOIewLqZ6DzjagQHTSBaXaJCG1c1xZOwVxgAK0ZHIgtIqSZZzT2eY2Eon aSKksiv1cfzSIgj6AiWws8UME79DM97rWaVewKfHAkjUJgGLh1HaJjPw0rkf7jzU sIV07PcO04rMjRXT55J/AocA2/DdhFO8Y0PmsiQ2e4SsdNlSZvJTZyiax/D9cN6t Zq3caJEq0jPmf6TckXNarNju7bzM2AV3ZBjsguwm/mLwTWvz+1+USbVftuXdfIDT 3zo3ly+0pH7Frx2HagMQD1MWHt7vDEc= -----END CERTIFICATE-----Generated at Wed Jul 9 14:50:46 2025 by rpki-client