$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa File: 3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa (raw, json) Hash identifier: 6fepOOmVTtEIEHOQ31bcuCpUdiMu6TXwwQgAGQ/fc6Y= Subject key identifier: F6:35:71:34:D5:74:32:DA:BA:85:5A:E3:0E:FD:3E:CF:D8:31:E1:7B Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F43285849B14A0D391F4F74CAD76E5C00 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 62651 IP address blocks: 209.107.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0d:39:1f:4f:74:ca:d7:6e:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d353eeaf-d9c1-4786-bc3c-9340e5ccca90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:00:09:f1:4c:33:ab:c1:0c:e1:ae:7e:cc: 3a:76:6b:a3:2d:09:a9:6d:87:d7:71:76:7e:9d:1f: 04:a5:cd:09:a0:15:57:03:50:52:a3:08:6e:5a:1a: 75:24:54:f9:22:0f:01:06:5c:a8:04:21:39:64:1f: bf:3b:59:27:5b:bb:fc:eb:63:46:03:ef:12:ac:24: ed:4d:5d:8e:c0:30:e3:51:44:a3:49:a7:5e:1c:b0: 1e:40:4e:d6:bc:7d:a9:dc:e5:cd:e9:1e:11:5e:08: 94:69:d2:2b:30:ef:1f:57:c2:84:6e:db:29:39:4d: cf:34:7b:41:cb:3e:f2:59:14:33:4d:0f:47:7f:b8: 34:6e:05:76:80:d3:52:63:c7:a6:6d:92:3a:fe:96: 03:36:d9:75:74:3f:44:a9:07:ed:2d:eb:51:00:cf: 30:e0:ea:71:97:f2:72:43:c3:46:84:d7:c2:49:b6: 37:32:4c:c0:29:f6:86:a5:36:82:c7:8c:09:db:6e: e8:10:43:19:1d:d8:b8:f8:02:8d:d8:82:a9:f0:a0: 65:83:6e:ec:16:42:cf:7d:7b:f7:7a:1f:e2:76:84: f7:bb:e9:ef:b3:f4:b8:6b:ec:59:2b:83:c8:b2:f2: 1c:72:dc:ee:d6:a5:a8:7c:76:d6:b6:d1:27:80:bb: f9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:35:71:34:D5:74:32:DA:BA:85:5A:E3:0E:FD:3E:CF:D8:31:E1:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:07:bf:76:6f:49:83:88:75:20:21:ea:51:64:01:c4:9c:75: 52:f7:61:18:76:b0:46:32:d9:15:cc:e9:ff:7e:df:1a:21:fa: 75:da:7d:1a:41:3e:86:81:85:38:95:74:9c:c1:60:62:b7:94: 55:36:3e:62:9d:00:81:fa:a1:80:bd:f6:5e:16:4e:8d:16:f4: 81:b8:5f:4f:a3:69:03:e6:cf:1c:71:d9:fc:12:18:61:5e:d5: 8b:b5:88:f3:c8:fa:22:f6:d5:df:71:04:92:76:fd:aa:bd:bf: 77:1c:95:b9:e6:95:31:a8:b1:4b:44:27:42:56:78:7a:b8:8c: 3e:88:5f:41:eb:e2:8e:65:94:20:f9:27:2c:13:30:8f:dc:78: 74:a4:8c:06:58:1a:fa:1b:6b:36:2c:fc:bb:19:05:d7:67:f9: d5:27:91:39:4f:96:c2:63:ae:8f:ee:c6:45:98:4f:8f:11:76: ca:d1:66:3f:1f:42:99:5c:35:b3:b3:c5:3f:95:79:03:1c:b1: f5:cb:37:86:a3:bc:66:8d:c3:ea:89:73:fe:81:5f:6c:60:d7: f1:12:04:7d:e1:2b:6c:fa:2d:07:e6:b4:98:d1:2e:9c:a2:d5: 6a:e9:ba:2a:5a:42:a5:30:1f:db:50:23:2c:e5:37:71:8a:7d: 88:09:79:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSg05H090ytduXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDM1M2VlYWYtZDljMS00Nzg2LWJjM2MtOTM0MGU1Y2NjYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucMACfFMM6vBDOGufsw6dmujLQmpbYfXcXZ+ nR8Epc0JoBVXA1BSowhuWhp1JFT5Ig8BBlyoBCE5ZB+/O1knW7v862NGA+8SrCTt TV2OwDDjUUSjSadeHLAeQE7WvH2p3OXN6R4RXgiUadIrMO8fV8KEbtspOU3PNHtB yz7yWRQzTQ9Hf7g0bgV2gNNSY8embZI6/pYDNtl1dD9EqQftLetRAM8w4Opxl/Jy Q8NGhNfCSbY3MkzAKfaGpTaCx4wJ227oEEMZHdi4+AKN2IKp8KBlg27sFkLPfXv3 eh/idoT3u+nvs/S4a+xZK4PIsvIcctzu1qWofHbWttEngLv5YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPY1cTTVdDLauoVa4w79Ps/YMeF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvM2IxYTRlZDItYjY5Yi0z OTJhLThkZGMtZjM3ZDk1NWZhNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsHv3ZvSYOIdSAh6lFkAcScdVL3YRh2sEYy2RXM6f9+3xoh+nXafRpB PoaBhTiVdJzBYGK3lFU2PmKdAIH6oYC99l4WTo0W9IG4X0+jaQPmzxxx2fwSGGFe 1Yu1iPPI+iL21d9xBJJ2/aq9v3cclbnmlTGosUtEJ0JWeHq4jD6IX0Hr4o5llCD5 JywTMI/ceHSkjAZYGvobazYs/LsZBddn+dUnkTlPlsJjro/uxkWYT48RdsrRZj8f QplcNbOzxT+VeQMcsfXLN4ajvGaNw+qJc/6BX2xg1/ESBH3hK2z6LQfmtJjRLpyi 1WrpuipaQqUwH9tQIyzlN3GKfYgJeRc= -----END CERTIFICATE-----Generated at Fri May 9 17:35:44 2025 by rpki-client