$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd200034-783f-34cb-8a36-ba5a59401793.roa File: bd200034-783f-34cb-8a36-ba5a59401793.roa (raw, json) Hash identifier: X1UgW1SaZK23F3LwYFNjyYRmERYJ3JaEn97onZdIQJA= Subject key identifier: 81:55:F0:50:2C:5A:05:1D:82:7F:48:93:CC:CC:6E:10:9E:12:A9:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5E60658884CC95B4A2B00080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd200034-783f-34cb-8a36-ba5a59401793.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7342 IP address blocks: 209.131.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:65:88:84:cc:95:b4:a2:b0:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=02315cb1-98aa-45e3-8818-670443886c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:2f:f8:c4:83:e4:e8:a6:fd:54:6b:cd:a6: ad:8d:25:33:a2:e9:06:43:66:7a:ff:49:5d:3c:a5: f0:2c:18:5d:44:61:b4:79:9d:79:21:70:3f:21:5f: f7:55:90:42:cc:84:f4:fd:15:7d:b3:8b:b3:f0:87: cd:8a:3a:fa:fc:95:dc:99:2a:88:1e:47:5d:f5:de: 37:f6:f7:ac:9d:ae:6f:62:df:9e:4d:8a:80:0b:27: 62:77:52:c0:15:6a:2a:2e:d5:30:75:80:94:c8:9f: 26:03:06:18:19:b0:9b:2c:ea:03:d1:bc:b1:86:3b: 42:45:ee:ce:61:e9:44:8a:c1:b4:a6:09:d4:bd:71: 2c:a5:bf:08:bd:54:01:4d:fd:b3:d7:94:bf:dc:77: 06:db:86:bd:b4:22:bd:9b:f5:e7:b2:ae:af:77:74: e2:69:4c:b7:1f:65:e1:5c:25:45:4f:3e:29:d2:72: 73:2c:b5:a4:d9:bc:08:04:7d:62:91:33:9c:16:00: 04:9e:fd:40:a6:19:73:f4:df:f1:c2:5e:b4:b6:09: 98:bf:50:2e:f1:b8:d8:f6:6f:0f:c5:64:3c:1d:d6: c0:ba:d7:1a:c1:6d:73:fc:1c:6e:4a:a6:77:6c:f9: 3f:76:b0:ae:10:98:9d:ec:3e:44:eb:f4:49:7f:f7: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:55:F0:50:2C:5A:05:1D:82:7F:48:93:CC:CC:6E:10:9E:12:A9:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd200034-783f-34cb-8a36-ba5a59401793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:6a:ae:2d:5e:6a:de:0b:d1:56:c6:e9:d4:df:aa:81:8f:18: f7:65:93:09:35:e5:c0:25:f8:e4:a7:77:bc:92:41:92:e9:ab: ec:15:7a:43:ec:9e:77:cf:b1:65:48:5a:10:05:a2:59:ac:cd: 0c:27:51:be:82:06:af:be:1b:07:d6:ba:3d:17:0f:63:16:d9: 46:15:ef:49:42:09:f8:1c:9b:52:17:d2:ad:51:f2:5e:c2:df: 37:67:5f:25:df:41:92:00:c6:ad:e7:95:10:99:09:d5:f4:0b: fa:ea:5b:e8:ee:05:4f:8d:af:e7:fa:81:e0:32:d6:f1:65:8e: d6:4f:90:d0:02:fe:e5:eb:07:3e:90:14:6d:f3:38:8f:63:96: a7:8c:d8:8c:96:e8:3f:97:07:7e:bd:81:5c:28:06:90:eb:a1: d1:c1:04:13:82:d1:c2:78:f1:bd:5f:36:92:4e:73:26:b4:24: 11:74:71:4c:f3:03:35:45:be:83:99:ce:d3:f3:73:cf:cf:18: af:7d:cd:6a:c9:fb:9d:4a:67:04:00:bb:70:69:a5:43:8d:2f: a1:7e:58:30:30:5d:c8:ba:75:89:bd:f4:0b:8a:6f:85:c9:5a: a5:74:d7:df:e1:cb:54:01:39:52:b3:a9:d8:3f:35:c4:59:2e: 3a:1c:84:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGWIhMyVtKKwAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk MDIzMTVjYjEtOThhYS00NWUzLTg4MTgtNjcwNDQzODg2YzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvcv+MSD5Oim/VRrzaatjSUzoukGQ2Z6/0ld PKXwLBhdRGG0eZ15IXA/IV/3VZBCzIT0/RV9s4uz8IfNijr6/JXcmSqIHkdd9d43 9vesna5vYt+eTYqACydid1LAFWoqLtUwdYCUyJ8mAwYYGbCbLOoD0byxhjtCRe7O YelEisG0pgnUvXEspb8IvVQBTf2z15S/3HcG24a9tCK9m/Xnsq6vd3TiaUy3H2Xh XCVFTz4p0nJzLLWk2bwIBH1ikTOcFgAEnv1Aphlz9N/xwl60tgmYv1Au8bjY9m8P xWQ8HdbAutcawW1z/BxuSqZ3bPk/drCuEJid7D5E6/RJf/eygwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFV8FAsWgUdgn9Ik8zMbhCeEqlpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmQyMDAwMzQtNzgzZi0z NGNiLThhMzYtYmE1YTU5NDAxNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZqri1eat4L0VbG6dTfqoGPGPdlkwk15cAl+OSnd7ySQZLpq+wVekPs nnfPsWVIWhAFolmszQwnUb6CBq++GwfWuj0XD2MW2UYV70lCCfgcm1IX0q1R8l7C 3zdnXyXfQZIAxq3nlRCZCdX0C/rqW+juBU+Nr+f6geAy1vFljtZPkNAC/uXrBz6Q FG3zOI9jlqeM2IyW6D+XB369gVwoBpDrodHBBBOC0cJ48b1fNpJOcya0JBF0cUzz AzVFvoOZztPzc8/PGK99zWrJ+51KZwQAu3BppUONL6F+WDAwXci6dYm99AuKb4XJ WqV019/hy1QBOVKzqdg/NcRZLjochMQ= -----END CERTIFICATE-----Generated at Tue Jul 1 17:07:45 2025 by rpki-client