$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa File: f880db5b-e47b-395f-bff3-27346670e7a5.roa (raw, json) Hash identifier: wOZAFrPbBNGXkaGNDCPKMCyulahTFV5D3BfRj9t4fnk= Subject key identifier: 05:59:C1:A7:65:D0:11:43:81:7D:C8:CE:02:89:07:5B:AF:0D:4A:D8 Certificate issuer: /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Certificate serial: 010D0C9F432858497DA46FCAAE1706197A543A80 Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 16509 IP address blocks: 209.127.216.0/24 maxlen: 24 209.188.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:6f:ca:ae:17:06:19:7a:54:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=5e8ee252-20fe-4d1a-9348-01b8f8fbc5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:09:0b:8b:a3:b9:39:5e:15:aa:fd:b4:74:83: 9d:3d:f0:2a:0a:d4:dd:15:dc:2d:ca:e1:3e:df:a0: a2:f9:11:d9:27:05:f4:cb:6d:a8:81:8d:41:84:a8: 66:ef:a5:6c:a0:bc:dd:56:87:c0:68:c4:aa:a3:40: ab:9a:17:ef:85:7a:98:ab:bc:c5:a7:d2:c2:6b:8e: 9b:68:e9:b6:70:b2:a3:7b:82:ca:f7:a2:f1:08:a2: 28:df:77:c4:b2:88:08:b2:4d:07:00:90:4c:c5:8e: 43:be:8a:21:e2:f1:4d:f4:ac:c8:51:04:02:49:0d: d8:4f:9a:dc:80:c2:c0:32:bc:2a:9e:d4:c1:3c:e2: 4c:3f:b9:9b:3c:e0:4c:96:84:d5:ac:54:9c:1a:6f: c7:45:10:94:6a:16:a5:fe:56:2c:20:3f:ec:d0:17: 4c:2e:54:16:6e:95:e8:bd:0a:b1:7c:31:49:c9:5d: 7f:3a:a9:c5:14:8c:3f:0a:73:92:14:79:9f:80:1c: d2:af:e0:00:96:7d:d5:73:77:0f:fc:b7:f7:be:d1: 54:69:05:df:6b:0a:4b:0e:4e:bc:15:90:99:53:82: f7:75:69:e3:15:95:91:3b:9b:ff:43:bd:09:70:1a: 5e:04:28:ff:17:12:f8:73:19:1d:8a:29:1b:2e:64: d0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:59:C1:A7:65:D0:11:43:81:7D:C8:CE:02:89:07:5B:AF:0D:4A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl X509v3 Authority Key Identifier: keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer sbgp-ipAddrBlock: critical IPv4: 209.127.216.0/24 209.188.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c3:e1:b7:52:76:85:73:2c:06:12:f2:e3:c6:b6:f9:f5:d2: 9d:ac:f6:9b:8d:fe:cc:24:d6:41:c4:c3:42:73:67:27:ef:0c: 9d:8c:5c:49:ae:3f:0f:76:02:b0:a8:f0:c5:9e:56:ce:a0:4d: 02:d9:fd:11:8e:32:96:04:72:b9:f2:42:14:ac:74:1d:ae:96: db:72:42:c3:76:bf:c3:d0:9b:62:ad:13:c8:79:a5:cd:9e:cf: 3d:aa:8f:bb:a6:e2:08:08:27:8f:6e:8c:7d:ec:04:86:f0:13: 18:67:02:7f:84:e3:77:53:21:fc:1f:1d:28:e2:66:35:96:6d: 39:57:3a:87:7f:53:f7:a9:80:3c:b5:8d:67:8c:85:8e:26:09: c5:46:e3:12:8d:33:96:bb:dc:18:f8:19:f2:1f:5d:94:b8:b6: 72:00:95:c1:f4:6a:c5:d0:2b:47:56:67:ea:9f:01:a0:14:f5: d4:ee:6f:9a:10:26:eb:6f:e9:7f:73:3e:bd:25:36:31:03:5c: 23:d0:ba:69:11:97:30:88:e4:96:46:1f:a2:a4:aa:5c:a9:66: f6:19:b1:ab:16:4a:e1:2a:b9:09:7a:5a:ff:56:8e:ce:86:bf: ba:f7:ae:1d:f2:73:20:17:98:ed:3a:8d:4a:d8:fc:ac:51:30: f5:44:be:84 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEl9pG/KrhcGGXpUOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlmZTQ2YjAtNzAzNC00ZDdiLWE3NDYtN2E3MGY3ODhj M2Y1MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWU4ZWUyNTItMjBmZS00ZDFhLTkzNDgtMDFiOGY4ZmJjNWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgkLi6O5OV4Vqv20dIOdPfAqCtTdFdwtyuE+ 36Ci+RHZJwX0y22ogY1BhKhm76VsoLzdVofAaMSqo0CrmhfvhXqYq7zFp9LCa46b aOm2cLKje4LK96LxCKIo33fEsogIsk0HAJBMxY5Dvooh4vFN9KzIUQQCSQ3YT5rc gMLAMrwqntTBPOJMP7mbPOBMloTVrFScGm/HRRCUahal/lYsID/s0BdMLlQWbpXo vQqxfDFJyV1/OqnFFIw/CnOSFHmfgBzSr+AAln3Vc3cP/Lf3vtFUaQXfawpLDk68 FZCZU4L3dWnjFZWRO5v/Q70JcBpeBCj/FxL4cxkdiikbLmTQTQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAVZwadl0BFDgX3IzgKJB1uvDUrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZl NDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4OGMzZjUvZjg4MGRiNWItZTQ3Yi0z OTVmLWJmZjMtMjczNDY2NzBlN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDlmZTQ2YjAtNzAzNC00ZDdiLWE3 NDYtN2E3MGY3ODhjM2Y1LzA5ZmU0NmIwLTcwMzQtNGQ3Yi1hNzQ2LTdhNzBmNzg4 YzNmNS5jcmwwHwYDVR0jBBgwFoAUKlIbdd2p7j6R7Mtvp8LrPeq8OEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcw Zjc4OGMzZjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0X/YAwQA 0bxtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKLD4bdSdoVzLAYS8uPGtvn10p2s9puN/swk1kHEw0JzZyfv DJ2MXEmuPw92ArCo8MWeVs6gTQLZ/RGOMpYEcrnyQhSsdB2ulttyQsN2v8PQm2Kt E8h5pc2ezz2qj7um4ggIJ49ujH3sBIbwExhnAn+E43dTIfwfHSjiZjWWbTlXOod/ U/epgDy1jWeMhY4mCcVG4xKNM5a73Bj4GfIfXZS4tnIAlcH0asXQK0dWZ+qfAaAU 9dTub5oQJutv6X9zPr0lNjEDXCPQumkRlzCI5JZGH6KkqlypZvYZsasWSuEquQl6 Wv9Wjs6Gv7r3rh3ycyAXmO06jUrY/KxRMPVEvoQ= -----END CERTIFICATE-----Generated at Thu May 8 09:57:35 2025 by rpki-client