$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa File: 5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa (raw, json) Hash identifier: +GaUTi5CKWKPzbpeb24Dw5yR0+1Sj1bb03jK95bwSMA= Subject key identifier: 13:66:11:0E:5A:E0:B4:FB:70:34:AF:8C:81:C9:0B:2A:62:35:4E:3F Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584A6C55D42E3557591F0B1B8D00 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 36298 IP address blocks: 209.166.148.0/24 maxlen: 24 209.166.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d4:2e:35:57:59:1f:0b:1b:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=62f6a7c5-f659-45cf-80ce-cb04458a1617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:da:f9:a0:31:8b:e2:3f:56:a4:70:84:bd:7f: 33:2d:9d:7c:e1:78:6e:dd:39:d9:5a:4f:fc:4f:41: ad:9b:c3:9a:c5:4e:ef:e7:1a:2e:92:cd:1a:80:b7: a5:23:16:2f:27:af:95:9e:f7:4e:e4:b2:49:33:c9: 87:fa:88:6c:c4:3f:08:82:7e:b4:31:a2:43:ad:d6: 72:62:b1:b1:48:c1:4c:fc:bb:50:3f:68:c4:05:73: ee:07:b7:20:64:38:15:fb:4e:ab:dc:3f:91:4f:15: 73:0b:e3:fb:7f:da:be:f0:ee:2c:71:69:50:de:c3: 8a:c2:42:98:29:ab:59:ac:25:d3:fc:50:ad:72:b3: 6e:d8:77:54:17:cc:2b:a9:57:7b:76:bc:ee:61:1b: 0b:c1:a9:85:9f:86:bc:dd:d1:44:47:5d:9e:24:97: 66:8e:c3:df:00:4f:f7:2f:17:27:c1:59:1d:7a:eb: a3:c9:e7:e8:dc:b0:49:1d:08:6e:9f:2b:ca:05:92: ad:28:8c:f3:4a:a6:3a:29:2a:63:dc:b8:f0:74:75: a7:8e:5d:00:78:f2:0c:bc:a2:cc:fa:66:6d:2c:f6: e6:24:17:81:ba:fc:2a:55:60:84:c4:79:5e:da:aa: 75:10:46:6f:5f:64:8e:c8:82:0e:8f:0d:02:5e:17: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:66:11:0E:5A:E0:B4:FB:70:34:AF:8C:81:C9:0B:2A:62:35:4E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:54:1a:92:67:b6:e9:fc:6c:7e:1f:ce:c3:49:d2:3f:fd:8d: cd:8c:9d:66:63:03:5c:4e:3b:0d:ce:8d:01:24:f1:95:7e:12: b5:6e:79:9c:65:27:3f:7a:2c:11:14:ed:c1:b5:40:d8:3c:71: d8:8d:de:a0:c3:f6:e5:27:ad:ac:c2:4b:e3:cd:b5:f2:fe:65: 7e:9a:5b:40:80:5f:6c:c1:1b:f5:ea:0f:24:d6:28:ee:8a:ee: 12:48:2e:93:80:89:68:77:fe:76:a7:c2:6a:bb:08:cb:37:89: a3:47:77:fe:b4:1e:89:05:df:c5:71:10:93:71:03:bb:ca:5f: 42:fc:e5:fd:20:9e:62:18:93:5e:ac:21:55:7e:a0:bc:34:03: cc:f9:23:e8:85:b1:17:1a:af:c7:82:89:88:6a:90:92:c3:a5: b4:50:61:19:b4:3c:c8:47:21:36:a8:17:54:62:2f:2f:95:83: f6:7e:51:92:f7:1a:24:5f:eb:76:e8:39:4b:b9:17:db:e8:d6: 9a:15:47:f0:11:c4:d4:28:42:75:bb:43:c7:81:f8:57:0e:b0: a9:1b:62:0f:94:16:52:54:91:fd:ae:26:9f:d0:e0:68:37:a3: b7:ab:3f:fa:aa:8a:5a:80:d8:db:2a:20:a7:dd:71:0b:b3:7f: ba:1b:67:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdQuNVdZHwsbjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk NjJmNmE3YzUtZjY1OS00NWNmLTgwY2UtY2IwNDQ1OGExNjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitr5oDGL4j9WpHCEvX8zLZ184Xhu3TnZWk/8 T0Gtm8OaxU7v5xouks0agLelIxYvJ6+VnvdO5LJJM8mH+ohsxD8Ign60MaJDrdZy YrGxSMFM/LtQP2jEBXPuB7cgZDgV+06r3D+RTxVzC+P7f9q+8O4scWlQ3sOKwkKY KatZrCXT/FCtcrNu2HdUF8wrqVd7drzuYRsLwamFn4a83dFER12eJJdmjsPfAE/3 LxcnwVkdeuujyefo3LBJHQhunyvKBZKtKIzzSqY6KSpj3LjwdHWnjl0AePIMvKLM +mZtLPbmJBeBuvwqVWCExHle2qp1EEZvX2SOyIIOjw0CXhfJDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNmEQ5a4LT7cDSvjIHJCypiNU4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNWNjNGQ2YzEtZWZmMi0z YTQwLTg2MTktNWY2MTZmOGFmMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0aaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdUGpJntun8bH4fzsNJ0j/9jc2MnWZjA1xOOw3OjQEk8ZV+ErVueZxl Jz96LBEU7cG1QNg8cdiN3qDD9uUnrazCS+PNtfL+ZX6aW0CAX2zBG/XqDyTWKO6K 7hJILpOAiWh3/nanwmq7CMs3iaNHd/60HokF38VxEJNxA7vKX0L85f0gnmIYk16s IVV+oLw0A8z5I+iFsRcar8eCiYhqkJLDpbRQYRm0PMhHITaoF1RiLy+Vg/Z+UZL3 GiRf63boOUu5F9vo1poVR/ARxNQoQnW7Q8eB+FcOsKkbYg+UFlJUkf2uJp/Q4Gg3 o7erP/qqilqA2NsqIKfdcQuzf7obZzY= -----END CERTIFICATE-----Generated at Sat Jul 12 04:49:48 2025 by rpki-client