$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa File: 470a0d1c-0b52-3d81-807b-734f35cf00ea.roa (raw, json) Hash identifier: /NH1+ow4cnDAdS4c07OXxKbkQuGDqNZpSwnqxmfU3w4= Subject key identifier: 05:77:50:DB:D1:06:69:58:BB:2B:CC:64:B3:26:03:3E:84:4B:C2:0D Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584A2C2014D87D079D21ED00DB40 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 14618 IP address blocks: 208.71.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:14:d8:7d:07:9d:21:ed:00:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=4d083ea7-a948-4c5d-81b9-b3dca89b2138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:29:b7:9f:b6:cf:78:f5:fa:70:17:e5:83: 07:1c:50:dd:5b:ef:ce:b7:ef:ed:5d:97:7e:43:b9: 18:f8:1d:ac:10:d8:f9:5a:af:6d:55:12:db:c9:4b: 73:2b:71:5b:dd:ee:04:08:97:ab:08:f3:cf:0b:b3: 68:ed:d8:5c:61:21:59:f4:35:c6:78:80:20:ba:01: 83:99:b6:ee:a3:8c:4a:4c:c0:9d:fa:ac:de:a0:fa: 4a:eb:0c:d6:57:0f:ef:66:2c:9e:f7:4e:55:73:4f: 3e:da:b4:07:b0:37:b8:6d:b3:03:93:ce:0f:58:47: a0:1b:ee:02:77:b6:c2:12:40:1f:a5:79:b1:39:77: 05:4c:3c:c1:45:df:2f:5d:3b:ea:a4:26:08:d0:e2: 76:ff:da:5d:11:c7:e7:c9:2f:ac:a4:b7:8f:15:d5: e3:7d:18:98:a9:3a:3d:3d:88:08:10:ea:ca:c7:9b: d9:63:53:48:31:68:8e:83:9c:56:c2:7a:20:e1:b9: 28:15:f0:db:eb:db:73:ec:d8:11:87:09:51:52:62: e0:68:63:44:ad:ac:1b:0d:e3:d0:2e:8b:d3:d5:aa: 9a:8d:af:61:2d:37:64:30:90:40:b7:85:81:a2:c6: d5:f6:32:44:43:a7:80:cc:0d:e9:22:19:37:1d:aa: d1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:77:50:DB:D1:06:69:58:BB:2B:CC:64:B3:26:03:3E:84:4B:C2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:09:aa:e2:da:17:cb:6b:18:ac:95:00:e5:6c:9d:3f:18:9c: 80:45:4b:3b:b3:7c:e2:c2:04:99:e4:a4:97:01:a1:65:d1:aa: ed:93:cb:0c:37:b6:84:51:84:6a:93:ee:9d:47:35:99:18:00: a1:ed:af:76:42:2c:47:b8:22:34:6b:f5:6b:67:8b:02:26:9f: 17:d0:a9:cb:7e:10:6a:9e:b2:10:aa:95:da:20:0c:86:8e:a5: 99:1a:28:eb:88:ac:73:e8:fe:87:7a:23:9b:f5:d6:04:38:a6: f4:10:4d:4e:9e:6b:2b:67:67:f9:80:fb:d1:4a:29:c5:5a:62: d1:6f:54:2a:2d:3b:fc:5b:12:d5:57:46:e7:8e:b1:3e:39:d3: 1b:c6:b9:18:cd:d2:99:39:eb:fb:e4:b0:40:a7:6f:43:35:15: 7d:96:cf:f7:35:83:d8:a1:64:98:b9:27:e7:b8:a4:e0:7c:92: e0:ad:15:88:fd:c2:3e:83:07:21:40:76:f1:0a:03:a0:63:51: 1c:bb:62:cc:26:9f:95:1c:0c:2d:49:01:9b:e4:8a:a0:b8:f1: c9:9b:d5:77:ac:1d:79:d4:0b:20:d9:4a:e1:6e:74:65:b4:73: f7:e9:ce:a9:dd:d0:c0:6a:df:ad:8f:81:2f:75:bf:49:43:0d: 55:3a:54:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBTYfQedIe0A20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk NGQwODNlYTctYTk0OC00YzVkLTgxYjktYjNkY2E4OWIyMTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUUpt5+2z3j1+nAX5YMHHFDdW+/Ot+/tXZd+ Q7kY+B2sENj5Wq9tVRLbyUtzK3Fb3e4ECJerCPPPC7No7dhcYSFZ9DXGeIAgugGD mbbuo4xKTMCd+qzeoPpK6wzWVw/vZiye905Vc08+2rQHsDe4bbMDk84PWEegG+4C d7bCEkAfpXmxOXcFTDzBRd8vXTvqpCYI0OJ2/9pdEcfnyS+spLePFdXjfRiYqTo9 PYgIEOrKx5vZY1NIMWiOg5xWwnog4bkoFfDb69tz7NgRhwlRUmLgaGNErawbDePQ LovT1aqaja9hLTdkMJBAt4WBosbV9jJEQ6eAzA3pIhk3HarRuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAV3UNvRBmlYuyvMZLMmAz6ES8INMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvNDcwYTBkMWMtMGI1Mi0z ZDgxLTgwN2ItNzM0ZjM1Y2YwMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIJquLaF8trGKyVAOVsnT8YnIBFSzuzfOLCBJnkpJcBoWXRqu2Tyww3 toRRhGqT7p1HNZkYAKHtr3ZCLEe4IjRr9WtniwImnxfQqct+EGqeshCqldogDIaO pZkaKOuIrHPo/od6I5v11gQ4pvQQTU6eaytnZ/mA+9FKKcVaYtFvVCotO/xbEtVX RueOsT450xvGuRjN0pk56/vksECnb0M1FX2Wz/c1g9ihZJi5J+e4pOB8kuCtFYj9 wj6DByFAdvEKA6BjURy7Yswmn5UcDC1JAZvkiqC48cmb1XesHXnUCyDZSuFudGW0 c/fpzqnd0MBq362PgS91v0lDDVU6VPE= -----END CERTIFICATE-----Generated at Sun Jun 29 08:06:11 2025 by rpki-client