$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa File: 43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa (raw, json) Hash identifier: B+VUu2L1pyJOIJ7YzH+Lc/Fpsfic9FYNnmCIKaUWKi0= Subject key identifier: F7:3C:AD:13:1C:84:86:E3:BC:7D:FA:23:4E:E6:36:F1:D0:A9:A2:CE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A698B197E50727BFB2A8BC600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 17119 IP address blocks: 209.4.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:19:7e:50:72:7b:fb:2a:8b:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=22cd11c9-d86a-4ccd-958b-ab54f5ebd255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8e:71:50:26:65:8b:82:53:2c:a3:19:4b:d2: 29:6e:1d:b4:69:67:6c:c2:c9:14:27:56:2c:9e:fb: d9:10:a0:fb:c8:dc:d3:ae:8e:49:6a:dc:95:b6:71: 63:68:ea:59:c8:24:8e:fc:bb:3b:b1:f1:62:db:92: 43:14:0e:a6:24:ba:8a:b3:f6:53:b5:29:00:7a:3b: 99:38:62:81:6e:50:21:66:02:6f:35:a9:4b:f0:a0: 7e:e8:32:2a:84:41:5e:08:45:11:ba:ad:e8:2e:86: a8:ed:2a:db:06:13:6a:89:7b:11:ce:21:29:5b:a5: fe:bd:b4:fd:1f:5b:f2:22:7f:32:ae:70:af:5e:e4: 0a:ee:b9:82:45:e1:c4:97:cb:9a:e3:d2:7d:98:68: 37:b8:90:ab:94:5a:b2:30:54:eb:a1:30:66:79:7e: b8:de:0c:74:48:c2:94:77:15:dd:1a:33:b9:b2:b8: 3d:ef:a9:7b:3c:7d:ff:85:b0:cb:45:93:33:ce:a2: 9d:64:00:62:52:ec:9d:6a:ac:67:b2:e4:af:d8:32: 0e:e7:54:41:b6:e1:58:38:19:18:b5:a5:46:15:35: 91:32:e5:e2:c4:cd:f2:fa:d7:34:44:1f:15:22:e0: 13:06:dc:1e:cc:38:87:f2:f1:29:4e:06:1d:87:5f: d1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3C:AD:13:1C:84:86:E3:BC:7D:FA:23:4E:E6:36:F1:D0:A9:A2:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.4.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3c:10:c1:14:0a:bf:ee:27:e8:6f:f1:6e:f2:1a:f0:4e:de: 65:65:65:e3:a6:e2:c6:ff:e4:fb:05:34:e0:94:2b:3c:47:ad: d1:4a:b4:76:88:df:1f:77:65:ea:67:10:6f:82:18:5a:84:b0: c6:49:7f:b3:08:e2:c1:71:b0:d2:06:cb:81:d0:b4:f6:13:bf: 59:3d:98:8c:ab:ca:b8:bd:9f:99:1a:97:f7:a7:b3:35:5b:e4: d0:81:79:f6:cd:38:b5:73:4c:8b:ff:31:9d:c7:df:4d:ed:44: d2:88:3b:e2:01:98:27:da:d1:ea:d2:66:fd:10:b1:a0:96:ee: 5f:db:83:c9:73:fb:86:a0:24:5f:bb:1d:c2:fe:07:45:db:c4: a1:c2:b7:43:f6:90:46:a6:bb:bd:28:d5:30:6b:17:4e:b6:18: 87:13:49:f5:56:54:9a:e2:57:07:a0:dc:64:90:d5:6d:1c:a6: 5e:b6:c6:58:50:9d:53:80:dc:b7:ee:0f:09:96:c5:f6:9d:2f: f7:7f:f6:b6:cf:95:8c:7e:0b:e7:ad:ac:5c:a1:4a:fa:3b:36: 8a:69:99:6d:12:9e:3a:bc:49:57:72:8e:7d:56:45:46:7a:2d: bc:93:48:ee:44:d1:72:20:f6:a6:aa:8a:c1:7d:3e:5a:31:4e: 32:36:e0:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppixl+UHJ7+yqLxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk MjJjZDExYzktZDg2YS00Y2NkLTk1OGItYWI1NGY1ZWJkMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn45xUCZli4JTLKMZS9Ipbh20aWdswskUJ1Ys nvvZEKD7yNzTro5JatyVtnFjaOpZyCSO/Ls7sfFi25JDFA6mJLqKs/ZTtSkAejuZ OGKBblAhZgJvNalL8KB+6DIqhEFeCEURuq3oLoao7SrbBhNqiXsRziEpW6X+vbT9 H1vyIn8yrnCvXuQK7rmCReHEl8ua49J9mGg3uJCrlFqyMFTroTBmeX643gx0SMKU dxXdGjO5srg976l7PH3/hbDLRZMzzqKdZABiUuydaqxnsuSv2DIO51RBtuFYOBkY taVGFTWRMuXixM3y+tc0RB8VIuATBtwezDiH8vEpTgYdh1/RSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPc8rRMchIbjvH36I07mNvHQqaLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDNiZWJhOGEtZTQ1My0z Y2IwLWE3N2QtYWFiZDZjMWFkMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QS7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM8EMEUCr/uJ+hv8W7yGvBO3mVlZeOm4sb/5PsFNOCUKzxHrdFKtHaI 3x93ZepnEG+CGFqEsMZJf7MI4sFxsNIGy4HQtPYTv1k9mIyryri9n5kal/enszVb 5NCBefbNOLVzTIv/MZ3H303tRNKIO+IBmCfa0erSZv0QsaCW7l/bg8lz+4agJF+7 HcL+B0XbxKHCt0P2kEamu70o1TBrF062GIcTSfVWVJriVweg3GSQ1W0cpl62xlhQ nVOA3LfuDwmWxfadL/d/9rbPlYx+C+etrFyhSvo7NoppmW0Snjq8SVdyjn1WRUZ6 LbyTSO5E0XIg9qaqisF9PloxTjI24Fs= -----END CERTIFICATE-----Generated at Wed Jul 9 21:08:41 2025 by rpki-client