$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17f6df5c-868d-323a-8270-bd26497127b3.roa File: 17f6df5c-868d-323a-8270-bd26497127b3.roa (raw, json) Hash identifier: RQ6fZFdq9csMna49manAGRT8pHHVMgHK8TaUXVTmszk= Subject key identifier: A7:E6:7B:B9:F8:2C:64:2E:18:C5:DC:7D:2C:D4:88:37:39:E7:80:7D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC8E28DDD8D7AEB1EB2280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17f6df5c-868d-323a-8270-bd26497127b3.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 63415 IP address blocks: 209.23.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:8e:28:dd:d8:d7:ae:b1:eb:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=86a9b0e7-5108-4c41-a3d9-3c8f3bc601cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6a:36:7a:aa:f5:ad:65:16:a2:b8:ed:4e:1a: cb:5f:89:2d:b0:e0:ef:2f:ce:cd:3f:87:13:b3:90: 5e:9a:32:93:9c:81:e4:74:84:9f:80:8f:b9:95:65: 25:96:f6:c4:04:b0:15:ff:31:f6:10:c1:6d:98:4c: 4e:98:e4:40:6c:18:ac:a8:0f:59:bc:91:0c:8a:b3: ef:66:bf:fe:72:0f:2a:64:5e:80:90:0c:a8:c6:af: ee:84:f6:eb:67:c1:da:fb:23:b5:fd:0b:77:c0:66: 1b:4f:7b:2e:49:7c:4f:e1:e6:10:e1:09:9e:e9:25: b4:a3:b3:6a:0f:f0:0d:bb:a3:bb:9c:d9:9e:87:94: 04:c0:27:b4:d1:ee:c0:47:10:81:b8:9c:d9:33:f4: 27:e6:f2:78:ac:67:67:b5:53:6a:7b:20:3a:bf:ea: 03:12:a6:98:a4:48:1d:59:86:ab:1c:63:c6:b5:c8: 60:9e:73:60:2d:34:64:70:7c:f9:6d:a3:7e:70:ee: 09:91:6b:7b:39:62:48:c8:43:80:dd:24:c0:62:2b: cd:bb:b6:4f:ca:d0:b6:fd:ac:8f:e2:0e:31:73:7d: 99:05:50:1c:24:e9:22:52:86:b7:f4:e4:f3:5c:76: 2c:3b:92:62:8e:f9:96:f6:89:ef:15:33:7d:b0:ac: b9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E6:7B:B9:F8:2C:64:2E:18:C5:DC:7D:2C:D4:88:37:39:E7:80:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17f6df5c-868d-323a-8270-bd26497127b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 209.23.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:69:9c:e9:1a:9e:0f:24:3a:fd:07:21:24:02:8f:4c:e3:0e: 2e:ec:05:90:25:82:51:45:55:db:72:98:05:ea:22:ec:98:71: cc:b8:97:3b:59:56:30:24:97:28:72:31:03:17:dd:2c:c6:bf: ce:20:d8:dc:e6:4b:7c:24:9f:91:2e:1a:3f:b4:99:23:0b:47: 2f:52:e5:b4:58:36:bd:6b:e0:90:25:15:49:bb:87:17:8e:bc: b6:50:3e:e9:1f:d8:45:17:65:8f:5f:8f:e5:1a:13:a1:52:31: 0b:51:4e:1f:d2:78:0c:b9:14:65:a4:8a:ed:c7:ca:ca:2f:6d: bf:b6:43:7c:22:ab:7d:d8:5a:bf:c8:f7:e3:e6:95:28:1b:4b: fc:bb:b2:65:e5:13:a4:5c:5c:68:8a:42:93:db:0c:6b:fc:cf: c8:c2:48:b4:b9:f3:c6:c0:e6:e7:32:33:35:73:9f:10:b3:60: d4:f3:3e:69:72:02:23:df:f3:16:ed:7c:99:40:2d:93:24:b5: ae:90:24:bd:91:7c:31:41:06:83:bb:2c:ac:a7:9c:12:51:e5: 9b:b3:7d:4f:33:ce:99:c9:57:39:e4:d0:0a:46:75:f7:7b:94: 36:68:40:67:6b:d1:e4:07:ab:a5:0c:81:42:e6:28:3e:97:53: 86:64:1f:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/I4o3djXrrHrIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ODZhOWIwZTctNTEwOC00YzQxLWEzZDktM2M4ZjNiYzYwMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWo2eqr1rWUWorjtThrLX4ktsODvL87NP4cT s5BemjKTnIHkdISfgI+5lWUllvbEBLAV/zH2EMFtmExOmORAbBisqA9ZvJEMirPv Zr/+cg8qZF6AkAyoxq/uhPbrZ8Ha+yO1/Qt3wGYbT3suSXxP4eYQ4Qme6SW0o7Nq D/ANu6O7nNmeh5QEwCe00e7ARxCBuJzZM/Qn5vJ4rGdntVNqeyA6v+oDEqaYpEgd WYarHGPGtchgnnNgLTRkcHz5baN+cO4JkWt7OWJIyEOA3STAYivNu7ZPytC2/ayP 4g4xc32ZBVAcJOkiUoa39OTzXHYsO5JijvmW9onvFTN9sKy5dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfme7n4LGQuGMXcfSzUiDc554B9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTdmNmRmNWMtODY4ZC0z MjNhLTgyNzAtYmQyNjQ5NzEyN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RfOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlpnOkang8kOv0HISQCj0zjDi7sBZAlglFFVdtymAXqIuyYccy4lztZ VjAklyhyMQMX3SzGv84g2NzmS3wkn5EuGj+0mSMLRy9S5bRYNr1r4JAlFUm7hxeO vLZQPukf2EUXZY9fj+UaE6FSMQtRTh/SeAy5FGWkiu3Hysovbb+2Q3wiq33YWr/I 9+PmlSgbS/y7smXlE6RcXGiKQpPbDGv8z8jCSLS588bA5ucyMzVznxCzYNTzPmly AiPf8xbtfJlALZMkta6QJL2RfDFBBoO7LKynnBJR5ZuzfU8zzpnJVznk0ApGdfd7 lDZoQGdr0eQHq6UMgULmKD6XU4ZkH84= -----END CERTIFICATE-----Generated at Tue Jul 1 09:14:12 2025 by rpki-client