$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/174371be-58a6-3db2-a551-7f0511c7f934.roa File: 174371be-58a6-3db2-a551-7f0511c7f934.roa (raw, json) Hash identifier: +ICdKTo0yaoY32CEJoaZOmWHJYEu4cnV8SLr898ihGA= Subject key identifier: E3:45:D1:3B:22:AE:0A:FD:CD:CE:97:19:17:C4:5C:BA:8E:E4:70:1E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849CE9A726E4BAC568678B9AE40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/174371be-58a6-3db2-a551-7f0511c7f934.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 7342 IP address blocks: 209.131.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:72:6e:4b:ac:56:86:78:b9:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=f1c75a80-d41e-46c4-a29d-346a04d100f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:4c:d9:0d:60:cd:7f:6a:6b:62:de:d1:b0: 7b:d0:6e:df:64:e5:ca:26:ec:a6:dd:dd:43:7d:f7: d6:6b:ae:58:89:56:35:e2:c2:f4:3b:74:ea:ad:68: d5:be:3e:c6:24:35:25:0f:c6:06:fc:86:50:d0:62: 18:3e:ff:a4:c2:e8:0e:15:03:c2:da:76:67:1c:45: e4:2f:ab:8e:e6:7e:8a:55:d7:6f:8b:65:f7:11:c1: 88:60:c5:f7:eb:f5:a2:41:12:45:75:8e:ad:99:f8: ad:62:ed:04:0d:39:1f:54:65:86:72:39:1a:2d:57: 49:f4:5d:d8:17:f4:93:74:18:8f:dc:90:68:94:dd: f6:eb:c8:a4:da:45:67:dc:39:22:e9:8a:33:cc:f7: 89:b0:20:db:b1:08:5e:e7:fd:e9:0b:b9:6b:bf:ff: 4b:00:a6:7a:fb:c5:7f:0a:b9:64:ef:a1:f9:76:72: 82:1e:0e:f1:92:d6:5f:0e:5c:99:c4:3e:1b:a0:de: 6a:6d:4c:0b:64:f2:72:97:82:86:18:0d:dc:03:25: ed:a2:d4:f1:20:5c:54:a3:bd:5e:25:74:9e:56:7c: 14:e8:58:7c:c2:64:4b:73:b6:f1:05:c8:1c:23:32: a5:7b:79:31:f3:a4:64:43:57:94:32:1a:03:7b:0d: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:45:D1:3B:22:AE:0A:FD:CD:CE:97:19:17:C4:5C:BA:8E:E4:70:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/174371be-58a6-3db2-a551-7f0511c7f934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:08:66:1f:44:e8:30:5d:bf:05:3b:d6:d4:c1:44:c8:8e:02: 6a:68:ea:0a:08:1e:f1:81:94:78:f1:2b:ce:df:fb:e9:0f:11: 81:4f:f9:b3:9c:ec:a8:e2:55:15:70:13:3d:c4:c4:26:d3:f3: 38:5b:2c:14:53:18:08:2b:a9:9f:37:26:75:04:8e:46:24:fd: 5e:06:e6:ad:7f:7e:29:3d:26:d0:5c:c4:d5:fd:13:e5:4d:03: 04:48:2b:a0:16:f1:76:35:8d:c5:ed:be:44:0e:90:b5:50:85: 42:0a:c1:25:28:a9:ed:f0:88:47:e2:46:71:e5:f1:7e:b1:13: 08:5d:c6:6e:98:9a:57:e6:74:16:ff:ac:7a:a8:be:39:96:c8: 6a:d3:6d:15:6e:de:e9:48:55:e0:75:23:9e:20:01:f2:80:1a: c7:54:b4:d8:c6:0f:78:3c:f5:8e:4a:a5:53:99:fd:36:e0:8c: 30:33:1d:12:d9:aa:9d:d7:23:82:a0:54:ba:7c:49:40:5f:09: 57:52:73:c5:03:74:1e:12:22:8f:55:f6:ee:56:d3:c4:0d:4c: 95:f0:cd:e4:ae:99:fb:8b:31:a9:11:cc:73:64:3e:f7:47:2e: 38:b3:27:fd:c6:cc:1f:d5:80:6c:c9:ef:77:dc:40:c3:42:39: 15:b9:a4:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnJuS6xWhni5rkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZjFjNzVhODAtZDQxZS00NmM0LWEyOWQtMzQ2YTA0ZDEwMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtipM2Q1gzX9qa2Le0bB70G7fZOXKJuym3d1D fffWa65YiVY14sL0O3TqrWjVvj7GJDUlD8YG/IZQ0GIYPv+kwugOFQPC2nZnHEXk L6uO5n6KVddvi2X3EcGIYMX36/WiQRJFdY6tmfitYu0EDTkfVGWGcjkaLVdJ9F3Y F/STdBiP3JBolN3268ik2kVn3Dki6YozzPeJsCDbsQhe5/3pC7lrv/9LAKZ6+8V/ Crlk76H5dnKCHg7xktZfDlyZxD4boN5qbUwLZPJyl4KGGA3cAyXtotTxIFxUo71e JXSeVnwU6Fh8wmRLc7bxBcgcIzKle3kx86RkQ1eUMhoDew0F+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONF0Tsirgr9zc6XGRfEXLqO5HAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTc0MzcxYmUtNThhNi0z ZGIyLWE1NTEtN2YwNTExYzdmOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsIZh9E6DBdvwU71tTBRMiOAmpo6goIHvGBlHjxK87f++kPEYFP+bOc 7KjiVRVwEz3ExCbT8zhbLBRTGAgrqZ83JnUEjkYk/V4G5q1/fik9JtBcxNX9E+VN AwRIK6AW8XY1jcXtvkQOkLVQhUIKwSUoqe3wiEfiRnHl8X6xEwhdxm6YmlfmdBb/ rHqovjmWyGrTbRVu3ulIVeB1I54gAfKAGsdUtNjGD3g89Y5KpVOZ/TbgjDAzHRLZ qp3XI4KgVLp8SUBfCVdSc8UDdB4SIo9V9u5W08QNTJXwzeSumfuLMakRzHNkPvdH LjizJ/3GzB/VgGzJ73fcQMNCORW5pBY= -----END CERTIFICATE-----Generated at Sun May 11 00:58:27 2025 by rpki-client