$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8173fc6f-7f0d-3db3-8647-6d275781dbbc.roa File: 8173fc6f-7f0d-3db3-8647-6d275781dbbc.roa (raw, json) Hash identifier: NqT0b5QtDu+5+xob3ubyGYZqQBHJ1yErzg45iD7nLXo= Subject key identifier: 74:EB:BC:7D:D7:78:40:50:DB:74:F3:60:27:11:D4:77:4B:72:B8:3F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849CE9A7D513F1ADB12AE5CEB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8173fc6f-7f0d-3db3-8647-6d275781dbbc.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 7342 IP address blocks: 209.131.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:7d:51:3f:1a:db:12:ae:5c:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=c41d2ae1-7a84-4c60-8433-c6c702212f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:77:ec:c7:69:2f:3c:4f:e6:4c:ed:2a:b2: a3:34:30:02:1d:5e:b3:36:b1:2a:59:a8:5d:2f:fb: d0:77:b4:ee:1d:bc:0a:df:23:cc:0a:bc:02:31:10: 99:aa:4d:50:84:ec:89:86:cf:12:19:02:2a:da:63: aa:47:97:07:2c:cb:09:08:99:5d:98:a0:7e:3d:70: 79:15:da:dc:0c:90:54:10:3d:39:12:f7:0b:7f:aa: c7:63:a0:ed:03:5e:73:26:bd:98:39:10:9c:ca:57: 87:e5:98:e4:05:bc:6a:c5:1c:94:dc:04:30:02:cf: 2b:0f:58:e5:36:22:ba:95:35:e1:23:7d:d6:46:88: ad:b9:bf:45:a9:d2:f8:68:16:c5:fc:3e:ea:63:85: b8:19:8f:dc:ba:90:c4:e3:ba:63:c8:ed:be:1d:e3: 44:dc:27:5e:32:50:ea:8e:8c:46:70:da:d8:84:b9: 3e:b5:a0:26:12:c2:fe:90:95:e4:b0:fd:8c:ba:b3: 43:5d:ba:af:35:5c:0f:a3:90:a9:86:6a:57:d8:4d: e7:b5:33:81:b1:9f:94:a8:45:6f:4c:fe:5b:a0:2e: 60:79:43:4c:53:13:d8:c2:be:5a:2c:f6:d1:78:39: 98:e2:a8:1f:82:0a:b5:c0:7a:f0:dc:58:69:7f:d8: 8e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EB:BC:7D:D7:78:40:50:DB:74:F3:60:27:11:D4:77:4B:72:B8:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8173fc6f-7f0d-3db3-8647-6d275781dbbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1b:60:90:68:c3:a0:a3:01:c2:ee:ce:27:f0:28:bb:63:1e: fc:ae:4d:8c:65:f2:f7:3d:56:b5:3b:d8:40:1a:b0:8b:81:2d: fc:ef:89:3b:10:6e:4c:5c:91:77:94:7b:02:90:fa:66:64:97: 01:9f:bc:8a:4b:2c:0d:31:1a:c9:fa:da:ce:67:cb:f9:db:50: 2c:22:15:85:8f:7f:85:37:1e:00:fd:ae:68:f4:90:d4:5b:19: 4e:77:5e:61:c1:f5:3a:a3:eb:da:b0:3f:21:3d:f4:e1:7a:ba: 1a:01:62:a1:46:a6:f1:4a:8a:a7:06:11:d5:9f:f2:c7:7a:a4: 63:1a:ee:a3:65:07:6d:df:f9:4f:0d:16:9f:3f:48:ec:1a:e8: bd:15:b6:1b:76:54:73:b4:52:10:e1:76:9c:db:cf:15:5e:81: 0f:a1:58:29:c0:38:3b:91:09:20:ff:df:8f:85:28:e1:b6:bf: a5:40:76:fa:e2:c8:f9:32:ab:57:21:1f:9f:f8:3e:c2:cf:7f: a3:17:8f:6a:95:3b:0e:07:d8:03:1f:ae:9a:9c:20:48:d2:04: 5b:8e:08:e6:9c:8a:e8:56:1f:4a:03:c1:4d:80:bd:8f:6a:e9: 20:85:72:ea:57:11:6a:d6:17:66:bf:bb:51:fe:59:5e:6d:28: 5e:e9:de:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmn1RPxrbEq5c64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YzQxZDJhZTEtN2E4NC00YzYwLTg0MzMtYzZjNzAyMjEyZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNJ37MdpLzxP5kztKrKjNDACHV6zNrEqWahd L/vQd7TuHbwK3yPMCrwCMRCZqk1QhOyJhs8SGQIq2mOqR5cHLMsJCJldmKB+PXB5 FdrcDJBUED05EvcLf6rHY6DtA15zJr2YORCcyleH5ZjkBbxqxRyU3AQwAs8rD1jl NiK6lTXhI33WRoitub9FqdL4aBbF/D7qY4W4GY/cupDE47pjyO2+HeNE3CdeMlDq joxGcNrYhLk+taAmEsL+kJXksP2MurNDXbqvNVwPo5CphmpX2E3ntTOBsZ+UqEVv TP5boC5geUNMUxPYwr5aLPbReDmY4qgfggq1wHrw3Fhpf9iOlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTrvH3XeEBQ23TzYCcR1HdLcrg/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODE3M2ZjNmYtN2YwZC0z ZGIzLTg2NDctNmQyNzU3ODFkYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYbYJBow6CjAcLuzifwKLtjHvyuTYxl8vc9VrU72EAasIuBLfzviTsQ bkxckXeUewKQ+mZklwGfvIpLLA0xGsn62s5ny/nbUCwiFYWPf4U3HgD9rmj0kNRb GU53XmHB9Tqj69qwPyE99OF6uhoBYqFGpvFKiqcGEdWf8sd6pGMa7qNlB23f+U8N Fp8/SOwa6L0Vtht2VHO0UhDhdpzbzxVegQ+hWCnAODuRCSD/34+FKOG2v6VAdvri yPkyq1chH5/4PsLPf6MXj2qVOw4H2AMfrpqcIEjSBFuOCOaciuhWH0oDwU2AvY9q 6SCFcupXEWrWF2a/u1H+WV5tKF7p3gg= -----END CERTIFICATE-----Generated at Sun May 11 09:33:20 2025 by rpki-client