$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa File: 8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa (raw, json) Hash identifier: vNVUoic5sBV6tDX3nzIbTjCkIBjp4BnX1MtYVi2jzSE= Subject key identifier: 25:9B:D7:E8:3A:2C:A9:03:01:74:4C:0A:12:BF:31:55:A7:57:40:37 Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F43285849F01A80F300645BF79DDE6180 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 19198 IP address blocks: 209.178.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:80:f3:00:64:5b:f7:9d:de:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=8eb5eebc-72f1-4ed0-afca-65ed8996c3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:89:ca:43:88:6f:3d:2e:ca:00:b8:9b:7d:21: 0c:d7:8b:d8:8c:67:a7:76:61:9d:51:16:7e:30:f0: 91:d5:85:de:df:11:bd:0e:93:37:d8:85:ec:8b:3e: b8:cc:59:0c:4e:1a:d4:9d:13:d0:a8:91:92:06:d0: a3:ca:07:cb:57:2b:ef:d3:81:03:69:4d:91:6e:bd: c8:f1:07:b9:d2:2d:ea:eb:e8:db:d9:4c:72:9c:1e: fe:78:7e:c6:f6:5f:fd:1d:8b:54:9b:18:58:4c:74: 29:0e:25:fc:d3:26:f4:d3:5f:57:b5:ec:7b:8a:9c: 97:e9:97:7e:d9:ed:e3:0c:06:c9:74:4c:8d:62:a9: 85:2b:91:ad:d4:6a:e8:e9:4e:2d:5c:56:93:5b:ae: 84:06:2b:bf:20:71:0e:68:3d:21:31:33:52:e2:7c: 26:db:4f:93:36:90:50:71:9d:08:ee:8a:76:29:3d: 72:8f:ce:1c:3b:8a:03:01:ca:36:a2:71:c9:c8:3c: 20:cb:0e:ff:42:da:39:ff:42:87:4d:7e:20:aa:4f: 18:82:0e:04:67:83:47:ba:19:86:2f:d6:b5:7b:34: 2f:1a:90:72:93:d7:af:3b:7e:8a:cf:22:b8:21:86: dd:c0:e0:c2:52:39:27:bd:3f:62:98:d1:3f:6a:10: 14:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9B:D7:E8:3A:2C:A9:03:01:74:4C:0A:12:BF:31:55:A7:57:40:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 209.178.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a9:6b:33:2d:f4:5f:67:c8:7a:d9:cb:06:48:ca:0f:ef:ce: 51:62:bc:6d:7d:6a:1b:59:e8:27:eb:f5:a5:9d:e5:57:22:9c: 81:17:62:5c:77:da:52:3f:60:9f:b8:97:37:95:86:df:a2:65: 54:c1:d6:74:4c:8a:b3:c3:11:0b:af:21:ca:1d:24:bf:ed:6d: 5c:b8:77:36:a1:0e:a2:a8:4e:39:e6:37:8f:77:c4:db:66:f8: 2e:59:c6:f4:cf:b7:6a:3a:33:21:43:e9:6a:bd:84:4d:35:27: 23:ea:06:3f:91:bb:26:d9:65:6b:7e:ed:00:59:ca:b6:7b:ad: 9e:ca:ef:bb:33:11:a9:b3:aa:f2:2f:07:ba:fb:14:77:87:41: 09:9c:4d:e4:97:a2:1b:35:ab:3d:b0:44:16:6d:82:60:57:2c: 61:fe:4b:34:d9:8e:2c:11:6e:c0:10:60:9a:7f:3e:e9:01:4b: ca:01:48:33:78:eb:ea:90:f8:d0:97:b5:0c:85:88:d6:3d:42: 01:3b:d5:57:8d:5d:84:80:f8:74:da:29:c0:be:df:a2:05:8d: d6:ec:da:8f:08:f1:94:a6:7a:a6:e0:b1:ed:09:39:99:ad:87: 82:68:26:11:5a:09:36:45:82:55:52:6a:db:a2:5f:7c:d6:63: f5:74:2a:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGoDzAGRb953eYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk OGViNWVlYmMtNzJmMS00ZWQwLWFmY2EtNjVlZDg5OTZjM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAionKQ4hvPS7KALibfSEM14vYjGendmGdURZ+ MPCR1YXe3xG9DpM32IXsiz64zFkMThrUnRPQqJGSBtCjygfLVyvv04EDaU2Rbr3I 8Qe50i3q6+jb2UxynB7+eH7G9l/9HYtUmxhYTHQpDiX80yb0019Xtex7ipyX6Zd+ 2e3jDAbJdEyNYqmFK5Gt1Gro6U4tXFaTW66EBiu/IHEOaD0hMTNS4nwm20+TNpBQ cZ0I7op2KT1yj84cO4oDAco2onHJyDwgyw7/Qto5/0KHTX4gqk8Ygg4EZ4NHuhmG L9a1ezQvGpByk9evO36KzyK4IYbdwODCUjknvT9imNE/ahAUwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWb1+g6LKkDAXRMChK/MVWnV0A3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvOGVjZDY5NzgtYzFmMS0z YjlmLTkxMmUtZDRmNmMzMDZjMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0bL0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGpazMt9F9nyHrZywZIyg/vzlFivG19ahtZ6Cfr9aWd5VcinIEXYlx3 2lI/YJ+4lzeVht+iZVTB1nRMirPDEQuvIcodJL/tbVy4dzahDqKoTjnmN493xNtm +C5ZxvTPt2o6MyFD6Wq9hE01JyPqBj+RuybZZWt+7QBZyrZ7rZ7K77szEamzqvIv B7r7FHeHQQmcTeSXohs1qz2wRBZtgmBXLGH+SzTZjiwRbsAQYJp/PukBS8oBSDN4 6+qQ+NCXtQyFiNY9QgE71VeNXYSA+HTaKcC+36IFjdbs2o8I8ZSmeqbgse0JOZmt h4JoJhFaCTZFglVSatuiX3zWY/V0Klw= -----END CERTIFICATE-----Generated at Thu Jul 3 13:09:15 2025 by rpki-client