$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa File: be603bce-d702-3a38-a547-dae20b5de158.roa (raw, json) Hash identifier: mBTkXfxmOUtY6D7Td8g/rdwh6EbCUMWXUtiti9RuUd0= Subject key identifier: AB:5A:AC:C4:DA:85:5B:15:0B:B9:39:2F:2F:3A:51:F3:CE:F6:07:3F Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584A6C55D3E8D50829DEB7C34A00 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 31813 IP address blocks: 209.221.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d3:e8:d5:08:29:de:b7:c3:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=1f504bdb-f61a-46f7-9c95-663ea0317e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:84:5d:c5:f0:f3:eb:16:fa:5d:49:2c:e0: 40:87:b3:a6:99:a0:1e:21:d7:5b:03:78:a6:4f:46: 34:2f:e0:ac:51:de:39:5d:ad:dc:61:d0:89:60:72: da:03:da:39:ad:87:0a:aa:c6:b8:4e:f0:eb:54:5b: 22:d5:ab:cf:58:5f:68:e4:d3:d0:98:0f:c3:bd:9a: 74:92:98:e1:aa:18:59:7a:1d:ed:16:52:90:29:a6: d6:47:fa:dc:f9:75:60:d0:4f:12:88:26:aa:9b:9b: 02:6f:f7:e2:5c:36:63:cf:e0:17:6d:b6:ae:71:b7: 36:2b:21:cb:81:06:bc:3a:39:51:dd:00:c7:b2:c3: 68:2b:5f:76:d3:44:d9:49:52:6e:71:f4:db:31:e2: 93:9a:71:69:f6:c1:83:36:1b:90:af:12:59:dc:80: 39:0e:e2:b3:0c:de:6f:e2:2d:f5:54:e9:13:e7:5e: f4:1f:66:e0:19:48:f7:4c:73:1a:2d:ea:cb:a7:81: ce:3b:22:56:79:64:a3:c8:9a:87:91:be:0f:23:cd: 31:f0:1f:af:d2:24:6b:fa:c1:7b:d5:bc:69:48:10: 83:32:fb:0b:0f:7b:b0:ca:e6:47:67:25:28:73:45: 88:72:24:6c:87:b7:a0:14:cf:43:e0:3e:6b:3f:c1: da:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5A:AC:C4:DA:85:5B:15:0B:B9:39:2F:2F:3A:51:F3:CE:F6:07:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.221.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:35:e5:ee:27:ce:dc:1f:21:ba:96:c3:53:6e:2d:55:54:f5: 55:60:cb:4e:96:ed:d9:c4:e6:30:d5:48:07:4d:33:88:49:aa: 3d:d2:15:0b:77:ba:63:06:52:c9:94:05:14:5d:cd:ed:a2:f7: 65:26:97:3f:aa:c8:05:46:39:bb:95:f7:cc:49:04:89:54:47: b7:13:7a:98:11:4b:62:fa:9d:31:89:17:4b:ed:08:8c:14:96: 68:f2:14:46:11:96:70:24:06:aa:43:fb:3d:62:63:69:b1:2f: 59:71:a8:28:32:83:52:86:00:a4:11:56:10:4c:dc:30:17:fb: 33:0b:e5:eb:1f:50:0a:53:9b:ca:1c:72:6f:d1:19:26:d8:5e: ff:7c:c7:7e:fd:16:6d:75:df:99:4f:58:7f:69:f3:79:ac:83: 28:aa:a9:f1:e3:eb:b6:dd:95:e7:21:0c:ba:0f:fc:a5:84:48: 2f:a2:e6:5b:bf:a0:c1:bc:a2:19:c4:57:1a:00:89:64:c1:cb: 8c:15:b4:2b:7e:49:10:86:57:92:0e:80:ec:b3:2d:1e:68:c4: 87:2f:78:30:a5:cc:eb:36:9c:aa:27:92:10:3f:2b:88:c4:90: b6:d7:92:f4:47:57:7f:76:98:40:20:4a:f1:4e:24:50:5e:ca: c2:d3:08:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdPo1Qgp3rfDSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk MWY1MDRiZGItZjYxYS00NmY3LTljOTUtNjYzZWEwMzE3ZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT6EXcXw8+sW+l1JLOBAh7OmmaAeIddbA3im T0Y0L+CsUd45Xa3cYdCJYHLaA9o5rYcKqsa4TvDrVFsi1avPWF9o5NPQmA/DvZp0 kpjhqhhZeh3tFlKQKabWR/rc+XVg0E8SiCaqm5sCb/fiXDZjz+AXbbaucbc2KyHL gQa8OjlR3QDHssNoK19200TZSVJucfTbMeKTmnFp9sGDNhuQrxJZ3IA5DuKzDN5v 4i31VOkT5170H2bgGUj3THMaLerLp4HOOyJWeWSjyJqHkb4PI80x8B+v0iRr+sF7 1bxpSBCDMvsLD3uwyuZHZyUoc0WIciRsh7egFM9D4D5rP8HaUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtarMTahVsVC7k5Ly86UfPO9gc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYmU2MDNiY2UtZDcwMi0z YTM4LWE1NDctZGFlMjBiNWRlMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF015e4nztwfIbqWw1NuLVVU9VVgy06W7dnE5jDVSAdNM4hJqj3SFQt3 umMGUsmUBRRdze2i92Umlz+qyAVGObuV98xJBIlUR7cTepgRS2L6nTGJF0vtCIwU lmjyFEYRlnAkBqpD+z1iY2mxL1lxqCgyg1KGAKQRVhBM3DAX+zML5esfUApTm8oc cm/RGSbYXv98x379Fm1135lPWH9p83msgyiqqfHj67bdlechDLoP/KWESC+i5lu/ oMG8ohnEVxoAiWTBy4wVtCt+SRCGV5IOgOyzLR5oxIcveDClzOs2nKonkhA/K4jE kLbXkvRHV392mEAgSvFOJFBeysLTCOQ= -----END CERTIFICATE-----Generated at Sat Jul 12 05:25:59 2025 by rpki-client