$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/59c985f6-423f-32c7-86e4-5f836bd897fe.roa File: 59c985f6-423f-32c7-86e4-5f836bd897fe.roa (raw, json) Hash identifier: btHogpCZEaIfF4aJLus/VmHqAE+iri45ar/lSrk5wEk= Subject key identifier: 2E:30:81:90:69:8C:C0:45:7C:28:B9:9F:B3:CE:64:ED:B3:DA:6F:98 Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Certificate serial: 010D0C9F43285849DC8FC32BE5F4A6E3CC99FA00 Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/59c985f6-423f-32c7-86e4-5f836bd897fe.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 1004 IP address blocks: 209.112.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c3:2b:e5:f4:a6:e3:cc:99:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=b4669367-56b6-42d5-9631-a6fe8c2445be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:c3:b1:fd:02:51:2e:5a:b1:ca:5c:99:46: 88:0d:3a:3b:fa:99:c3:95:03:07:15:e6:82:e4:53: 21:24:b5:fc:5c:82:94:e5:cb:ab:35:d7:2d:69:22: ac:c5:66:4c:37:fb:ec:54:0d:40:d7:d0:5a:e9:66: 3a:ca:cc:06:3c:49:65:dd:9a:37:ad:02:65:7c:51: 18:a8:1c:aa:b1:52:23:b0:a3:ff:ef:b8:e4:d8:18: d9:68:06:64:ea:85:b5:fb:be:43:22:16:b6:d9:ea: 74:3d:e7:04:01:ad:ad:83:c4:9c:63:bd:ec:69:26: 02:19:99:81:99:af:b2:6d:fa:17:19:e8:e1:e1:93: 61:5f:83:6f:a7:bb:65:b8:f9:13:bb:68:c4:bc:02: 1c:64:83:62:e7:65:3b:69:9b:27:ed:0e:98:fe:a5: c5:1a:48:90:80:b9:a6:fb:6c:0c:23:71:35:ca:74: e4:1b:01:bf:1b:40:93:62:b5:5f:f3:68:fc:6b:3c: e9:76:94:02:8c:e3:f6:ef:08:31:3c:15:e6:83:50: 5f:19:eb:47:de:a9:2e:c1:d9:f4:d9:22:4c:8d:79: f5:fb:81:89:dd:6d:d9:1a:eb:b0:77:86:53:50:fc: 32:5c:ac:c9:46:75:19:5c:84:c9:e5:07:3a:46:47: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:30:81:90:69:8C:C0:45:7C:28:B9:9F:B3:CE:64:ED:B3:DA:6F:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/59c985f6-423f-32c7-86e4-5f836bd897fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl X509v3 Authority Key Identifier: keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer sbgp-ipAddrBlock: critical IPv4: 209.112.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:17:31:b4:40:57:9f:16:c5:06:9a:c3:4c:10:03:ce:41:0c: ac:3d:fa:4c:c6:72:8e:6a:4b:dc:ae:97:f1:d0:a5:b0:e8:1e: b9:7e:b6:3e:84:6c:81:b8:3c:64:4a:e7:b6:fb:45:dd:22:23: cf:de:9f:22:f1:9b:99:b2:35:62:df:13:99:75:dc:13:b3:d5: f3:03:7c:66:bd:fa:60:81:38:64:04:7f:55:a0:82:21:10:ba: 99:f8:ad:a3:28:e4:e9:81:56:17:70:ac:00:96:0c:a4:d2:d3: 82:d7:e5:ed:f2:fa:15:b1:96:ba:f0:c9:e7:70:29:bd:ab:1c: ac:71:55:3f:c9:74:b1:0f:3e:bd:c7:73:5d:0c:e7:21:43:9e: 06:82:e5:77:99:6e:87:a1:fd:23:ce:fc:dc:79:4c:79:37:bd: 7d:fb:7e:1f:0d:e9:50:c6:e9:c2:16:d0:cf:b2:bb:db:a2:e3: 5f:1e:31:d4:e1:88:7c:af:b7:84:60:95:67:cd:70:46:f1:52: 40:8e:4c:c3:44:a6:44:23:15:d1:ee:7a:a0:71:16:38:a5:f5: f3:aa:2e:04:b5:c8:d4:a1:d7:81:10:04:3e:40:2d:a7:b3:40: 14:62:66:a0:08:98:79:fa:de:5e:5e:62:e1:66:8c:58:f2:09: 63:1e:64:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8Mr5fSm48yZ+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz ZTM3MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YjQ2NjkzNjctNTZiNi00MmQ1LTk2MzEtYTZmZThjMjQ0NWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaLDsf0CUS5ascpcmUaIDTo7+pnDlQMHFeaC 5FMhJLX8XIKU5curNdctaSKsxWZMN/vsVA1A19Ba6WY6yswGPEll3Zo3rQJlfFEY qByqsVIjsKP/77jk2BjZaAZk6oW1+75DIha22ep0PecEAa2tg8ScY73saSYCGZmB ma+ybfoXGejh4ZNhX4Nvp7tluPkTu2jEvAIcZINi52U7aZsn7Q6Y/qXFGkiQgLmm +2wMI3E1ynTkGwG/G0CTYrVf82j8azzpdpQCjOP27wgxPBXmg1BfGetH3qkuwdn0 2SJMjXn1+4GJ3W3ZGuuwd4ZTUPwyXKzJRnUZXITJ5Qc6RkfM6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4wgZBpjMBFfCi5n7POZO2z2m+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5 Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvNTljOTg1ZjYtNDIzZi0z MmM3LTg2ZTQtNWY4MzZiZDg5N2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2 MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYXMbRAV58WxQaaw0wQA85BDKw9+kzGco5qS9yul/HQpbDoHrl+tj6E bIG4PGRK57b7Rd0iI8/enyLxm5myNWLfE5l13BOz1fMDfGa9+mCBOGQEf1WggiEQ upn4raMo5OmBVhdwrACWDKTS04LX5e3y+hWxlrrwyedwKb2rHKxxVT/JdLEPPr3H c10M5yFDngaC5XeZboeh/SPO/Nx5THk3vX37fh8N6VDG6cIW0M+yu9ui418eMdTh iHyvt4RglWfNcEbxUkCOTMNEpkQjFdHueqBxFjil9fOqLgS1yNSh14EQBD5ALaez QBRiZqAImHn63l5eYuFmjFjyCWMeZFc= -----END CERTIFICATE-----Generated at Sun Jun 29 18:04:09 2025 by rpki-client