$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/8dff3c1b-6a84-3cb5-a867-74d4ab7facdc.roa File: 8dff3c1b-6a84-3cb5-a867-74d4ab7facdc.roa (raw, json) Hash identifier: ykTkjlC52Sw/rkctxvozU0fRVFslYup3L8JQvbkDkUo= Subject key identifier: DD:91:83:5F:59:03:EB:95:87:35:89:9F:B2:24:E2:63:08:DB:E4:70 Certificate issuer: /CN=01a4b3c4-670e-4045-9d0e-a7046f352d92 Certificate serial: 010D0C9F4328584A00DABDE4F1DB3E215B079720 Authority key identifier: 51:97:4C:3C:57:09:75:CE:02:5D:DA:91:32:8B:19:B0:C0:A9:99:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/8dff3c1b-6a84-3cb5-a867-74d4ab7facdc.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 399332 IP address blocks: 209.209.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/01a4b3c4-670e-4045-9d0e-a7046f352d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/01a4b3c4-670e-4045-9d0e-a7046f352d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:bd:e4:f1:db:3e:21:5b:07:97:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01a4b3c4-670e-4045-9d0e-a7046f352d92 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=0b29aca8-6a27-4005-8bc4-eb881615ac9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:01:ff:a0:e7:f2:69:5f:8c:28:ee:6d:a8: d7:0c:25:54:60:62:41:de:1d:c9:fd:94:71:90:d5: 5c:8d:1d:a8:23:29:51:a7:7b:2b:3c:b9:f4:ab:80: 63:a3:10:e0:ba:dc:d4:a2:3c:cd:63:09:a2:21:6e: fa:72:cb:f8:97:b9:95:bf:a7:32:55:1a:7b:97:f8: 59:fb:0c:e2:18:f2:69:bd:fe:29:aa:93:40:ed:70: 01:d1:bc:28:79:9f:42:3f:10:84:80:d4:3b:5e:5a: fa:b6:8a:ad:cc:60:62:6e:e3:c6:e3:92:73:3b:e6: aa:54:21:ed:0a:6e:34:e9:2b:22:67:37:86:c6:da: 7b:1e:3a:c0:1f:2b:11:73:28:02:4e:ee:6c:a3:d3: 05:1d:26:f8:a0:f4:4f:0d:4e:b7:91:ba:b7:ec:81: 50:57:09:34:a6:c6:93:7b:a8:29:ef:61:ad:10:e7: 55:91:5b:8c:65:73:9a:1e:40:49:e1:10:77:65:d0: 44:69:7a:e8:6a:ed:06:71:40:93:e9:fd:d2:0b:63: 03:65:15:be:0a:a2:4f:82:54:25:f9:58:00:16:e2: 99:1d:2a:c9:eb:2e:06:12:eb:f6:a0:1c:54:12:70: 7e:66:9d:9e:76:a8:da:9d:22:f5:9e:d4:3d:2c:4f: 8d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:91:83:5F:59:03:EB:95:87:35:89:9F:B2:24:E2:63:08:DB:E4:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/8dff3c1b-6a84-3cb5-a867-74d4ab7facdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/01a4b3c4-670e-4045-9d0e-a7046f352d92.crl X509v3 Authority Key Identifier: keyid:51:97:4C:3C:57:09:75:CE:02:5D:DA:91:32:8B:19:B0:C0:A9:99:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92.cer sbgp-ipAddrBlock: critical IPv4: 209.209.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:00:ad:7d:0f:95:40:a6:7c:bd:b4:4f:13:11:96:18:ad:d4: da:c7:44:22:a1:5d:a0:ac:4b:6b:3e:3c:e2:8b:a1:25:57:ce: 8c:d1:4a:55:e2:e9:70:8e:21:2f:b7:8a:51:30:6e:a0:6f:6a: f7:e4:d9:49:e4:ec:c3:dd:8c:d9:b7:c7:a9:a2:ac:f8:b3:cb: 45:07:ab:3b:36:3e:93:86:67:fa:3f:a9:72:e6:41:46:14:3f: 8a:e6:a3:e1:dc:b6:1a:d5:f9:7a:17:26:fb:72:22:90:4a:ee: 4c:c3:f5:69:e1:31:68:90:13:7c:a6:e6:f5:50:1e:72:7a:3a: cf:63:82:27:3e:55:05:05:ec:2c:fa:05:bf:f0:c6:35:e2:e7: 08:06:19:8a:c5:39:ed:f2:d6:8b:0d:09:52:55:02:bf:7f:e3: e7:eb:47:dd:c4:5a:d8:30:f5:2d:d7:b9:96:eb:cf:c9:05:18: 77:12:60:c6:17:a2:47:66:20:ac:35:80:00:aa:97:53:18:f4: 21:8b:b2:cd:0f:f5:05:4e:ed:2d:87:4a:f5:7a:17:16:42:61: 0f:46:4d:0a:3b:9b:5b:22:40:32:9c:de:c8:71:67:4d:c0:4f: ed:45:8f:12:97:88:e0:a0:99:47:88:25:3e:31:29:a1:b0:9b: 48:54:6e:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2r3k8ds+IVsHlyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDFhNGIzYzQtNjcwZS00MDQ1LTlkMGUtYTcwNDZmMzUy ZDkyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk MGIyOWFjYTgtNmEyNy00MDA1LThiYzQtZWI4ODE2MTVhYzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujEB/6Dn8mlfjCjubajXDCVUYGJB3h3J/ZRx kNVcjR2oIylRp3srPLn0q4BjoxDgutzUojzNYwmiIW76csv4l7mVv6cyVRp7l/hZ +wziGPJpvf4pqpNA7XAB0bwoeZ9CPxCEgNQ7Xlr6toqtzGBibuPG45JzO+aqVCHt Cm406SsiZzeGxtp7HjrAHysRcygCTu5so9MFHSb4oPRPDU63kbq37IFQVwk0psaT e6gp72GtEOdVkVuMZXOaHkBJ4RB3ZdBEaXroau0GcUCT6f3SC2MDZRW+CqJPglQl +VgAFuKZHSrJ6y4GEuv2oBxUEnB+Zp2edqjanSL1ntQ9LE+N/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2Rg19ZA+uVhzWJn7Ik4mMI2+RwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMWE0 YjNjNC02NzBlLTQwNDUtOWQwZS1hNzA0NmYzNTJkOTIvOGRmZjNjMWItNmE4NC0z Y2I1LWE4NjctNzRkNGFiN2ZhY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDFhNGIzYzQtNjcwZS00MDQ1LTlk MGUtYTcwNDZmMzUyZDkyLzAxYTRiM2M0LTY3MGUtNDA0NS05ZDBlLWE3MDQ2ZjM1 MmQ5Mi5jcmwwHwYDVR0jBBgwFoAUUZdMPFcJdc4CXdqRMosZsMCpmXIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMWE0YjNjNC02NzBlLTQwNDUtOWQwZS1hNzA0 NmYzNTJkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwArX0PlUCmfL20TxMRlhit1NrHRCKhXaCsS2s+POKLoSVXzozRSlXi 6XCOIS+3ilEwbqBvavfk2Unk7MPdjNm3x6mirPizy0UHqzs2PpOGZ/o/qXLmQUYU P4rmo+HcthrV+XoXJvtyIpBK7kzD9WnhMWiQE3ym5vVQHnJ6Os9jgic+VQUF7Cz6 Bb/wxjXi5wgGGYrFOe3y1osNCVJVAr9/4+frR93EWtgw9S3XuZbrz8kFGHcSYMYX okdmIKw1gACql1MY9CGLss0P9QVO7S2HSvV6FxZCYQ9GTQo7m1siQDKc3shxZ03A T+1FjxKXiOCgmUeIJT4xKaGwm0hUblI= -----END CERTIFICATE-----Generated at Mon Jun 30 01:16:35 2025 by rpki-client