$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bfd3889-63d5-3959-8000-59f311cd0e60.roa File: 8bfd3889-63d5-3959-8000-59f311cd0e60.roa (raw, json) Hash identifier: qD/iY3VihsvJkCZy43q08RVwC3kCst4A55oQcHjJ2Po= Subject key identifier: 0A:F7:FE:AD:5A:4D:82:B6:9E:28:F4:72:47:06:3E:FA:07:1C:63:94 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A698B196BDD9F37E5770B6228 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bfd3889-63d5-3959-8000-59f311cd0e60.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 17119 IP address blocks: 209.4.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:19:6b:dd:9f:37:e5:77:0b:62:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=5a1a76c6-375a-4b4b-8c12-89f47c66457a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:34:4b:aa:d4:d3:45:7a:1e:f2:52:5d:ec:58: 06:d8:cb:d4:cf:d0:fa:fc:59:6c:4f:76:30:24:7a: 66:3c:d2:f9:75:53:28:dc:ab:ed:51:61:44:7e:3b: fe:cc:00:55:ba:a7:a6:7a:a9:be:8c:ab:92:5a:e2: 74:ab:93:e1:5b:d9:41:64:6a:39:91:54:5c:f6:d1: e9:51:15:33:e1:2f:87:20:14:30:c3:a6:d2:7f:7d: 82:63:6c:9c:30:98:24:81:5a:20:b6:35:0c:c5:bc: d0:1d:36:af:07:79:84:2a:b6:16:e6:c1:6d:0e:01: 05:61:c1:00:c8:ab:0d:27:c4:75:72:e5:bd:95:dc: 88:30:6f:74:0c:91:f9:9b:b4:d5:bf:89:26:3e:db: 15:dc:b6:3e:71:af:53:18:2c:0c:45:c7:ca:df:38: 81:53:8c:c6:6a:7e:e4:e7:1b:15:1e:54:2c:89:01: e5:19:81:bc:f0:65:52:20:15:9c:7f:1c:f3:ed:3e: 88:08:e3:83:85:a3:21:b1:53:9d:2e:28:e1:e4:06: db:16:c7:5c:52:12:e3:49:1f:be:23:c7:4b:0f:e8: ce:74:90:5c:25:b3:e3:e8:93:f2:b9:ba:c9:72:73: 39:07:c1:87:5f:92:26:d7:c2:2b:b8:f0:a2:9d:8e: c8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F7:FE:AD:5A:4D:82:B6:9E:28:F4:72:47:06:3E:FA:07:1C:63:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bfd3889-63d5-3959-8000-59f311cd0e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.4.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:22:e9:f5:16:53:76:5b:fb:ce:e4:e5:56:0c:92:d6:95:e3: a9:a3:2e:25:a2:8a:22:94:41:a3:b6:81:57:2d:d2:40:8f:a6: 6b:74:f0:2f:1a:22:fe:9f:36:f5:32:ac:76:94:d5:b6:3c:64: 66:3d:7a:34:e8:7b:0a:ec:23:63:a3:79:62:4f:ad:73:5e:7a: eb:4a:26:af:07:d1:d5:e8:27:cd:cb:60:7d:91:cd:61:87:50: e5:a2:fc:e5:ee:b6:0d:55:5c:8a:70:ce:35:14:78:66:e8:0f: 95:33:a3:fc:84:cb:24:aa:f4:9c:75:db:c5:93:9d:b9:59:09: 3b:55:36:18:68:b1:28:68:4e:eb:66:31:5e:84:1c:61:a5:4b: 9e:b5:d8:e0:08:02:da:57:7a:f6:e9:05:84:34:97:94:c8:66: 6e:ca:38:c1:83:92:a4:6b:5e:08:bf:68:ce:7d:c9:77:06:b4: a9:15:db:13:92:49:9e:64:49:55:9e:be:b0:0a:4c:39:52:65: 08:4a:3c:0f:00:aa:98:b1:96:a5:b4:9e:80:03:3a:33:cc:42: 85:45:0e:11:4f:63:a5:86:3e:7f:7e:00:15:06:5a:2e:b3:cb: 36:c8:7c:87:8b:c3:5e:02:06:ae:74:4b:2c:a9:55:82:c9:a9: 32:85:c7:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppixlr3Z835XcLYigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk NWExYTc2YzYtMzc1YS00YjRiLThjMTItODlmNDdjNjY0NTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDRLqtTTRXoe8lJd7FgG2MvUz9D6/FlsT3Yw JHpmPNL5dVMo3KvtUWFEfjv+zABVuqemeqm+jKuSWuJ0q5PhW9lBZGo5kVRc9tHp URUz4S+HIBQww6bSf32CY2ycMJgkgVogtjUMxbzQHTavB3mEKrYW5sFtDgEFYcEA yKsNJ8R1cuW9ldyIMG90DJH5m7TVv4kmPtsV3LY+ca9TGCwMRcfK3ziBU4zGan7k 5xsVHlQsiQHlGYG88GVSIBWcfxzz7T6ICOODhaMhsVOdLijh5AbbFsdcUhLjSR++ I8dLD+jOdJBcJbPj6JPyubrJcnM5B8GHX5Im18IruPCinY7I+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAr3/q1aTYK2nij0ckcGPvoHHGOUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGJmZDM4ODktNjNkNS0z OTU5LTgwMDAtNTlmMzExY2QwZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QS6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIi6fUWU3Zb+87k5VYMktaV46mjLiWiiiKUQaO2gVct0kCPpmt08C8a Iv6fNvUyrHaU1bY8ZGY9ejToewrsI2OjeWJPrXNeeutKJq8H0dXoJ83LYH2RzWGH UOWi/OXutg1VXIpwzjUUeGboD5Uzo/yEyySq9Jx128WTnblZCTtVNhhosShoTutm MV6EHGGlS5612OAIAtpXevbpBYQ0l5TIZm7KOMGDkqRrXgi/aM59yXcGtKkV2xOS SZ5kSVWevrAKTDlSZQhKPA8AqpixlqW0noADOjPMQoVFDhFPY6WGPn9+ABUGWi6z yzbIfIeLw14CBq50SyypVYLJqTKFx4s= -----END CERTIFICATE-----Generated at Wed Jul 9 22:14:00 2025 by rpki-client