$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9c23e29-5b04-3904-9b53-e42822ad8212.roa File: b9c23e29-5b04-3904-9b53-e42822ad8212.roa (raw, json) Hash identifier: zdk+VkegDUGjSeAF68kHL82zltUNiYrHxdY1s2Y1O3E= Subject key identifier: 4F:6E:8A:90:F5:0A:1E:F6:22:7D:FF:07:12:DE:A5:A0:A5:FB:A1:1A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1B6012B5CB7BE8C2C0546B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9c23e29-5b04-3904-9b53-e42822ad8212.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 7342 IP address blocks: 209.131.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:12:b5:cb:7b:e8:c2:c0:54:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=6cdec9ef-6b35-43c0-9a6e-05f82b9071d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:ff:cb:2d:35:b0:78:68:95:95:dd:1b:89: 03:77:20:db:a8:20:1a:b6:99:84:47:8e:eb:26:47: ef:8d:c3:03:52:9c:dc:37:b2:c6:19:c3:bb:c3:12: 26:bc:15:03:cd:f6:46:d5:3d:81:88:17:d5:7e:f0: d9:be:91:79:ca:98:be:1e:90:be:b8:06:99:ca:7d: 90:48:3e:25:27:e1:2c:87:3b:e1:23:0e:67:37:93: 42:1c:db:ca:c2:5f:d5:8b:e2:8c:76:83:b5:9e:34: 66:a4:ab:72:76:de:df:b9:e8:fe:eb:65:60:31:a4: da:7a:ff:4a:95:c5:c1:8c:62:8e:f4:56:05:08:cb: 15:53:4b:15:e0:2f:1c:6b:ff:86:1c:7b:99:7d:61: 51:6d:dd:b4:3e:a3:5c:8c:1b:a2:7c:a0:dd:41:7c: 6d:ff:85:56:f9:fe:2c:30:7c:a6:01:ff:6f:15:3d: ef:31:0c:7b:ec:f3:43:f8:c1:dd:ee:6a:b3:32:9f: d4:ec:9a:a5:6e:c0:96:49:1b:d4:20:f9:6b:5a:cd: 9b:5d:3b:64:a9:b6:07:93:04:d8:df:f8:ad:62:f4: 41:30:18:39:40:2b:29:61:f1:7c:c3:ca:21:18:0d: 0d:2e:b4:24:5e:7f:ec:14:eb:ae:a2:2a:92:a5:a6: 17:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6E:8A:90:F5:0A:1E:F6:22:7D:FF:07:12:DE:A5:A0:A5:FB:A1:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9c23e29-5b04-3904-9b53-e42822ad8212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fb:96:61:1e:62:a9:6d:1f:4a:f4:4c:77:60:58:32:8f:cd: e5:b0:bf:d3:98:0f:4d:df:ec:8e:2c:77:96:85:46:09:d9:f3: 99:aa:df:73:16:44:8d:d0:49:f7:23:63:1d:72:02:b3:9e:38: 5d:8b:91:fe:0f:d1:86:54:dd:a4:8c:e0:13:7c:05:16:21:4c: 00:7e:da:b5:b5:4d:92:52:db:01:2a:14:ac:46:8d:a8:d9:5c: a8:c3:41:6b:e6:c8:10:54:04:85:ca:93:1c:bf:b3:ef:a6:7a: db:d8:60:84:b4:d5:18:22:30:a3:b1:41:b1:4c:9a:0b:cb:c0: 59:fa:55:0f:57:d5:e5:39:42:b0:16:eb:b2:6d:2a:f1:f1:4b: 47:62:1d:a1:9a:ad:0c:54:fe:39:04:ff:bc:d2:4a:7f:0f:98: f9:70:00:02:d1:2e:2c:c3:b0:ea:58:a8:57:a8:3a:cc:26:e9: e6:59:e5:29:a2:9c:31:23:18:6b:94:60:e0:55:06:43:a8:e4: 0d:9f:f2:33:1a:9f:91:e6:a4:18:d7:8a:87:1d:82:03:5d:94: 76:02:35:8f:bb:0d:8e:db:60:c5:71:e4:39:ba:d3:1a:3e:ca: 37:52:5a:1d:c7:0a:04:e3:45:81:3e:bb:b8:dc:99:c1:1e:c8: 53:0c:f5:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBK1y3vowsBUa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NmNkZWM5ZWYtNmIzNS00M2MwLTlhNmUtMDVmODJiOTA3MWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzb/yy01sHholZXdG4kDdyDbqCAatpmER47r JkfvjcMDUpzcN7LGGcO7wxImvBUDzfZG1T2BiBfVfvDZvpF5ypi+HpC+uAaZyn2Q SD4lJ+EshzvhIw5nN5NCHNvKwl/Vi+KMdoO1njRmpKtydt7fuej+62VgMaTaev9K lcXBjGKO9FYFCMsVU0sV4C8ca/+GHHuZfWFRbd20PqNcjBuifKDdQXxt/4VW+f4s MHymAf9vFT3vMQx77PND+MHd7mqzMp/U7JqlbsCWSRvUIPlrWs2bXTtkqbYHkwTY 3/itYvRBMBg5QCspYfF8w8ohGA0NLrQkXn/sFOuuoiqSpaYXiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9uipD1Ch72In3/BxLepaCl+6EaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjljMjNlMjktNWIwNC0z OTA0LTliNTMtZTQyODIyYWQ4MjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr7lmEeYqltH0r0THdgWDKPzeWwv9OYD03f7I4sd5aFRgnZ85mq33MW RI3QSfcjYx1yArOeOF2Lkf4P0YZU3aSM4BN8BRYhTAB+2rW1TZJS2wEqFKxGjajZ XKjDQWvmyBBUBIXKkxy/s++metvYYIS01RgiMKOxQbFMmgvLwFn6VQ9X1eU5QrAW 67JtKvHxS0diHaGarQxU/jkE/7zSSn8PmPlwAALRLizDsOpYqFeoOswm6eZZ5Smi nDEjGGuUYOBVBkOo5A2f8jMan5HmpBjXiocdggNdlHYCNY+7DY7bYMVx5Dm60xo+ yjdSWh3HCgTjRYE+u7jcmcEeyFMM9Y0= -----END CERTIFICATE-----Generated at Tue Jul 1 00:46:29 2025 by rpki-client