$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/4129eb25-6fb5-3c84-9780-775e270e9c34.roa File: 4129eb25-6fb5-3c84-9780-775e270e9c34.roa (raw, json) Hash identifier: t1I+Vc01GDl+BqhlePqqn6rebHKRy71651JDi5VW4zM= Subject key identifier: 40:8A:AA:25:61:BD:D9:FE:35:89:57:6A:78:8D:84:ED:BC:23:D9:15 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584A5FFE916FF22023C073373FC0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/4129eb25-6fb5-3c84-9780-775e270e9c34.roa Signing time: Tue 01 Jul 2025 14:55:29 +0000 ROA not before: Tue 01 Jul 2025 14:55:29 +0000 ROA not after: Mon 29 Sep 2025 14:55:29 +0000 asID: 152868 IP address blocks: 209.51.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:fe:91:6f:f2:20:23:c0:73:37:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jul 1 14:55:29 2025 GMT Not After : Sep 29 14:55:29 2025 GMT Subject: CN=9decc83b-af8b-43f8-a702-06103aa46cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:33:f2:85:18:95:9f:65:fa:15:a9:32:ff: cf:f3:6c:e3:03:f3:60:33:a9:04:8d:eb:e0:bc:01: f6:c2:4e:72:b3:f6:e0:10:e0:22:ac:cb:bc:00:4b: 40:4c:57:40:4c:00:54:a4:aa:92:6e:f5:c4:a7:21: c7:27:b1:cd:bc:7e:38:b0:db:a4:9a:1e:56:c1:ef: ee:26:b0:33:c2:5f:85:7f:f0:9a:74:54:d3:f8:a0: d7:a3:84:cf:1c:7b:28:89:f7:36:28:50:ef:26:e6: 2f:5f:1e:5a:3b:45:7c:44:a0:54:fa:87:ee:2c:6d: 78:b6:5c:0f:c3:51:89:7c:59:45:3d:61:fe:ec:b7: fe:9b:d2:86:00:df:7f:c3:b9:a6:10:fd:93:6a:4a: f1:26:07:90:dd:1a:a8:b0:69:d8:ce:aa:fc:55:6a: 18:95:0b:5e:a5:7b:b2:46:38:59:a3:11:d3:16:e2: 0d:27:6a:30:09:db:41:14:ce:33:50:0a:47:bd:ed: 0f:a5:6d:47:95:32:9b:9d:51:6f:14:a3:29:6d:a0: f8:e1:e0:98:45:fb:8e:95:2c:d3:8d:cb:86:db:77: fc:5b:2b:55:d6:78:df:71:91:0d:42:f2:46:de:fe: 1a:ff:be:3e:27:00:88:0d:17:04:f4:41:3d:97:89: 49:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:AA:25:61:BD:D9:FE:35:89:57:6A:78:8D:84:ED:BC:23:D9:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/4129eb25-6fb5-3c84-9780-775e270e9c34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 209.51.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:0b:2d:9a:38:8a:54:fe:5b:38:84:4f:65:4a:f7:5f:33:64: 49:7d:02:2b:d5:22:61:ef:6c:4f:a0:8c:3f:49:3f:d9:2f:3f: c9:10:b7:d1:ad:9f:2b:a9:fa:df:43:37:94:fb:78:1b:d5:da: 82:31:63:ff:8b:d6:26:4d:33:93:33:53:2d:c5:36:e0:80:6c: fc:71:29:83:41:e2:c5:9b:b1:72:61:7c:5a:79:83:df:00:d3: c1:5f:76:39:66:5f:f0:7d:81:10:55:ae:71:1d:55:7a:58:2b: 75:cb:9e:0e:e4:a0:79:88:88:dc:ac:a1:ad:a3:09:b6:c4:aa: af:5f:7a:52:ed:4b:cf:88:10:46:24:7f:b1:bf:03:5f:4d:e3: 7e:e9:8d:ae:f6:bb:ef:74:97:21:52:06:e0:48:6b:07:2e:66: 9b:81:50:22:eb:5f:42:71:71:f0:2d:d1:b4:1b:1e:b4:52:46: 87:db:09:48:06:60:d4:18:d1:35:8e:2d:b0:c4:4c:f2:d2:6b: b4:7f:42:d3:dd:ab:7c:c7:d4:4b:cb:51:b2:5c:77:a8:18:57: d5:e8:d7:34:be:f5:84:5c:23:83:f5:0f:2b:8c:94:8b:e5:81: 15:0f:4e:5d:40:f1:f2:0e:d9:0f:55:39:32:1d:8b:8c:82:c0: 9a:43:56:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf/pFv8iAjwHM3P8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDcwMTE0NTUyOVoXDTI1MDkyOTE0NTUyOVowLzEtMCsGA1UEAxMk OWRlY2M4M2ItYWY4Yi00M2Y4LWE3MDItMDYxMDNhYTQ2Y2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXQz8oUYlZ9l+hWpMv/P82zjA/NgM6kEjevg vAH2wk5ys/bgEOAirMu8AEtATFdATABUpKqSbvXEpyHHJ7HNvH44sNukmh5Wwe/u JrAzwl+Ff/CadFTT+KDXo4TPHHsoifc2KFDvJuYvXx5aO0V8RKBU+ofuLG14tlwP w1GJfFlFPWH+7Lf+m9KGAN9/w7mmEP2TakrxJgeQ3RqosGnYzqr8VWoYlQtepXuy RjhZoxHTFuINJ2owCdtBFM4zUApHve0PpW1HlTKbnVFvFKMpbaD44eCYRfuOlSzT jcuG23f8WytV1njfcZENQvJG3v4a/74+JwCIDRcE9EE9l4lJHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECKqiVhvdn+NYlXaniNhO28I9kVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvNDEyOWViMjUtNmZiNS0z Yzg0LTk3ODAtNzc1ZTI3MGU5YzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkLLZo4ilT+WziET2VK918zZEl9AivVImHvbE+gjD9JP9kvP8kQt9Gt nyup+t9DN5T7eBvV2oIxY/+L1iZNM5MzUy3FNuCAbPxxKYNB4sWbsXJhfFp5g98A 08FfdjlmX/B9gRBVrnEdVXpYK3XLng7koHmIiNysoa2jCbbEqq9felLtS8+IEEYk f7G/A19N437pja72u+90lyFSBuBIawcuZpuBUCLrX0JxcfAt0bQbHrRSRofbCUgG YNQY0TWOLbDETPLSa7R/QtPdq3zH1EvLUbJcd6gYV9Xo1zS+9YRcI4P1DyuMlIvl gRUPTl1A8fIO2Q9VOTIdi4yCwJpDVjg= -----END CERTIFICATE-----Generated at Sat Jul 5 04:32:52 2025 by rpki-client