$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c750b5a-9dac-33a9-b602-8da387d7c5e8.roa File: 9c750b5a-9dac-33a9-b602-8da387d7c5e8.roa (raw, json) Hash identifier: aVjLl4Gh3sznQqRr0NCzH4z/YjfKqFhOuc+s6TdzjdA= Subject key identifier: 93:0B:83:7D:2E:DB:CA:20:FE:49:8B:01:AA:8F:B0:52:62:73:79:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFDB013E91FF0B7C313D480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c750b5a-9dac-33a9-b602-8da387d7c5e8.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33491 IP address blocks: 209.23.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:b0:13:e9:1f:f0:b7:c3:13:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=6436f0d1-f78f-44f9-99fb-c0538a22d91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:32:cf:29:c9:4d:f2:56:37:79:2b:07:57:9f: 51:b7:0b:9c:c0:fe:68:6f:62:ef:a7:b4:0f:84:9c: cc:10:1d:56:1a:d5:22:e4:81:2a:f9:fc:aa:c5:e2: 49:dc:e1:57:53:b0:01:5a:93:34:e9:77:b2:ac:cc: eb:61:98:25:2a:9a:48:9d:20:39:ac:51:31:df:d6: 5b:6f:cf:a8:c8:d9:8c:6d:4e:9f:75:1d:a4:78:b7: 0c:60:27:5f:c0:c2:a8:d5:f8:02:41:bf:0b:94:28: cf:6d:39:26:7d:97:69:3d:12:bf:35:20:65:ce:54: b2:7c:95:e1:f0:9e:a2:38:d3:50:4b:38:64:66:75: b6:ca:ae:e4:73:ca:09:83:53:39:53:70:40:18:9f: 5b:8f:4d:dc:47:f4:48:40:aa:e7:f6:a8:e8:2a:d6: 7a:0b:3d:b1:f7:1e:db:10:52:10:9b:ff:0f:05:14: 1f:6c:19:a2:f4:5f:b0:c3:fe:c8:62:7c:cb:11:de: 9b:7f:e6:47:7c:3a:c9:12:bd:07:de:ff:50:76:f8: 5d:a0:98:83:34:7e:a9:dc:ef:8d:0f:15:22:c2:61: 39:31:e7:5f:c9:fc:48:32:84:10:6b:5b:98:9d:58: 34:fa:0b:3a:de:88:47:ff:6f:50:10:c3:51:4a:e1: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0B:83:7D:2E:DB:CA:20:FE:49:8B:01:AA:8F:B0:52:62:73:79:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c750b5a-9dac-33a9-b602-8da387d7c5e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 209.23.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:f9:f5:7c:e9:3d:b3:74:d1:5d:91:a2:6e:14:2d:4f:ab:8e: a4:4f:78:e6:e7:d2:29:d3:e8:ef:07:61:30:03:7b:b8:85:77: b6:6c:18:53:d9:9a:45:7d:89:ad:ee:23:51:b0:52:da:d1:cf: 7f:7f:f7:af:e5:e7:6a:77:f1:a2:7b:b0:fd:c3:01:3e:40:47: 8f:b1:cf:6f:26:bf:d5:d4:a9:13:13:55:1b:55:f4:d0:c7:17: e5:35:c4:1f:40:8c:99:c0:f7:0c:91:f9:07:15:46:af:07:ca: 21:0f:d9:e7:05:fd:79:d7:36:cc:e5:e2:21:a2:7e:40:c2:f9: c2:b6:53:94:90:b5:48:cd:2b:73:19:d2:c5:8b:db:17:c4:5c: 30:d3:d1:4b:87:4a:e6:0d:31:3a:50:5b:9f:37:81:b5:8c:ca: 31:0d:d2:44:89:cb:cc:dc:bd:1c:6e:9e:f6:1a:e8:12:54:f7: 6c:14:0d:38:92:9d:a3:95:2e:c9:a2:ea:8c:7a:c1:0e:d3:c1: 99:b2:5c:e1:eb:80:02:20:72:fc:e7:81:c2:fb:c0:9d:5a:a4: 32:fe:7d:4f:ba:41:48:0a:a9:13:1f:d3:d3:db:9a:ed:a6:37: 6e:1a:8c:69:3a:b2:5c:0b:61:d3:58:31:09:f7:57:ba:e7:4f: 3f:ae:39:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/bAT6R/wt8MT1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NjQzNmYwZDEtZjc4Zi00NGY5LTk5ZmItYzA1MzhhMjJkOTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjLPKclN8lY3eSsHV59RtwucwP5ob2Lvp7QP hJzMEB1WGtUi5IEq+fyqxeJJ3OFXU7ABWpM06XeyrMzrYZglKppInSA5rFEx39Zb b8+oyNmMbU6fdR2keLcMYCdfwMKo1fgCQb8LlCjPbTkmfZdpPRK/NSBlzlSyfJXh 8J6iONNQSzhkZnW2yq7kc8oJg1M5U3BAGJ9bj03cR/RIQKrn9qjoKtZ6Cz2x9x7b EFIQm/8PBRQfbBmi9F+ww/7IYnzLEd6bf+ZHfDrJEr0H3v9QdvhdoJiDNH6p3O+N DxUiwmE5MedfyfxIMoQQa1uYnVg0+gs63ohH/29QEMNRSuFSswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMLg30u28og/kmLAaqPsFJic3nzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWM3NTBiNWEtOWRhYy0z M2E5LWI2MDItOGRhMzg3ZDdjNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL759XzpPbN00V2Rom4ULU+rjqRPeObn0inT6O8HYTADe7iFd7ZsGFPZ mkV9ia3uI1GwUtrRz39/96/l52p38aJ7sP3DAT5AR4+xz28mv9XUqRMTVRtV9NDH F+U1xB9AjJnA9wyR+QcVRq8HyiEP2ecF/XnXNszl4iGifkDC+cK2U5SQtUjNK3MZ 0sWL2xfEXDDT0UuHSuYNMTpQW583gbWMyjEN0kSJy8zcvRxunvYa6BJU92wUDTiS naOVLsmi6ox6wQ7TwZmyXOHrgAIgcvzngcL7wJ1apDL+fU+6QUgKqRMf09Pbmu2m N24ajGk6slwLYdNYMQn3V7rnTz+uOcA= -----END CERTIFICATE-----Generated at Mon Jun 30 23:49:59 2025 by rpki-client