$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa File: 509971a2-2e61-329b-aabd-5f74f8132974.roa (raw, json) Hash identifier: yZSguhen7Pz1a8R8qPkpyLbj1JRjDYPjLErJnezxtRU= Subject key identifier: D0:14:F5:BA:C5:88:1B:01:63:D4:5D:8F:A3:10:73:52:06:A1:95:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1465945BE3081C8824C96440 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 7342 IP address blocks: 209.131.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:94:5b:e3:08:1c:88:24:c9:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=18bbcfd6-a5ad-476e-94cc-2bcb938b8ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f5:7e:8f:53:25:d8:24:5c:b4:cb:16:08:95: d0:40:e5:85:2b:06:e3:59:a4:ff:f5:81:e7:b4:37: fa:b0:75:58:10:f6:4b:5f:2a:47:91:dc:09:1a:d2: a3:b8:22:68:34:10:dd:50:d6:6d:dc:86:2a:e6:c6: 5e:f5:52:d3:81:53:2b:5a:72:85:56:5b:5a:c2:fa: 42:92:5a:ba:2c:dd:f7:67:38:f3:8a:49:dd:bf:bf: d9:42:e4:c8:9a:3b:90:d4:d2:d2:02:71:91:a8:02: 4c:78:da:12:0c:b7:06:b7:c4:46:32:30:31:0e:3c: 35:77:83:c7:31:4a:76:45:af:28:d1:45:35:90:ac: d0:b4:3a:bb:ce:d6:a9:93:02:8d:ee:cc:a7:7e:99: 82:a7:8a:13:0a:ef:6a:dc:fa:e5:cf:cf:5c:f4:4d: 58:5a:d2:8d:c6:59:cf:00:b8:43:a8:00:d8:26:30: 7a:8a:62:db:7a:47:cc:38:c6:9b:ff:9c:e2:20:d0: d2:a3:53:34:ab:5f:ff:f0:1c:1b:2b:a7:eb:bb:52: 08:14:fa:9a:e7:82:b1:bc:aa:bf:92:8a:2a:7d:ca: e3:01:a9:2b:fe:41:a2:e4:46:ce:c9:f3:5e:97:76: 03:15:69:f1:2b:4e:de:6c:f6:1f:7f:59:e4:51:55: e4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:14:F5:BA:C5:88:1B:01:63:D4:5D:8F:A3:10:73:52:06:A1:95:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5b:78:3e:40:e2:ef:f1:e1:93:8b:cf:59:96:53:77:a9:9d: 4c:d9:d8:a3:98:c9:e0:88:3b:98:9c:fd:f7:65:90:75:98:10: 01:09:f6:97:3f:e7:e8:72:64:2a:b2:16:8e:48:8f:41:c3:7b: b4:bb:e0:ac:55:c1:77:82:51:36:f2:e8:66:65:e8:18:36:3d: b3:d0:d2:cb:3d:7e:d1:6d:b2:49:c9:33:cb:49:3b:76:95:94: 68:dd:67:c7:e3:7c:4a:0d:e4:39:15:32:c3:23:be:5f:c0:ac: c2:5c:c7:f6:f7:9d:7f:c7:cc:63:ab:e7:20:e7:6a:f8:26:08: 1c:2f:12:6a:20:99:e5:56:73:26:21:07:53:82:ce:3f:cd:48: 24:c8:04:ba:3b:bf:61:42:33:63:db:8e:d2:ba:df:d1:44:d1: f6:50:f4:6b:4a:82:33:cd:5f:e8:e8:58:f9:85:68:39:19:54: 68:00:7c:63:eb:39:99:0b:95:0b:a4:69:e0:09:c1:4e:62:28: 9e:60:68:58:11:85:e7:16:d7:13:bf:07:ad:26:4a:df:b2:bd: 2f:48:da:da:07:db:3d:e4:b3:fd:4d:db:65:51:d7:66:ed:e1: a5:8a:c6:2b:94:5f:22:2f:36:fa:a7:5a:bb:a1:73:77:70:ba: d9:7c:6e:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZZRb4wgciCTJZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MThiYmNmZDYtYTVhZC00NzZlLTk0Y2MtMmJjYjkzOGI4ZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvV+j1Ml2CRctMsWCJXQQOWFKwbjWaT/9YHn tDf6sHVYEPZLXypHkdwJGtKjuCJoNBDdUNZt3IYq5sZe9VLTgVMrWnKFVltawvpC klq6LN33Zzjzikndv7/ZQuTImjuQ1NLSAnGRqAJMeNoSDLcGt8RGMjAxDjw1d4PH MUp2Ra8o0UU1kKzQtDq7ztapkwKN7synfpmCp4oTCu9q3Prlz89c9E1YWtKNxlnP ALhDqADYJjB6imLbekfMOMab/5ziINDSo1M0q1//8BwbK6fru1IIFPqa54KxvKq/ kooqfcrjAakr/kGi5EbOyfNel3YDFWnxK07ebPYff1nkUVXk+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAU9brFiBsBY9Rdj6MQc1IGoZVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTA5OTcxYTItMmU2MS0z MjliLWFhYmQtNWY3NGY4MTMyOTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRbeD5A4u/x4ZOLz1mWU3epnUzZ2KOYyeCIO5ic/fdlkHWYEAEJ9pc/ 5+hyZCqyFo5Ij0HDe7S74KxVwXeCUTby6GZl6Bg2PbPQ0ss9ftFtsknJM8tJO3aV lGjdZ8fjfEoN5DkVMsMjvl/ArMJcx/b3nX/HzGOr5yDnavgmCBwvEmogmeVWcyYh B1OCzj/NSCTIBLo7v2FCM2PbjtK639FE0fZQ9GtKgjPNX+joWPmFaDkZVGgAfGPr OZkLlQukaeAJwU5iKJ5gaFgRhecW1xO/B60mSt+yvS9I2toH2z3ks/1N22VR12bt 4aWKxiuUXyIvNvqnWruhc3dwutl8bko= -----END CERTIFICATE-----Generated at Tue Jul 1 17:15:33 2025 by rpki-client