$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd200034-783f-34cb-8a36-ba5a59401793.roa File: bd200034-783f-34cb-8a36-ba5a59401793.roa (raw, json) Hash identifier: 6aqnV7uKIHC66zpCeDwXabHuyXtVVK84WpUAN7xPXEg= Subject key identifier: FC:82:8C:B2:76:65:BB:30:2E:6A:D1:28:F1:8F:17:4F:9E:0C:F0:F7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858497F09A877A269E0A15D483980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd200034-783f-34cb-8a36-ba5a59401793.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 7342 IP address blocks: 209.131.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a8:77:a2:69:e0:a1:5d:48:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=ac95517e-931a-4253-b623-bbe4f5e62676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:da:59:6b:fd:ab:31:65:90:da:78:db:70:32: 21:3a:23:0b:96:31:f0:cb:d4:5b:2e:66:dc:3b:11: 73:83:b6:c4:b6:94:83:7f:2d:fc:e5:92:44:7a:d8: ad:89:ce:87:1f:69:82:88:0c:75:60:bf:4f:e9:3e: d4:cc:81:ae:d5:18:dd:66:1c:e3:16:e8:a2:33:f2: 54:62:08:b7:e9:fd:2f:e0:55:26:61:98:e8:78:d8: de:b0:f0:5d:d7:70:9b:60:1e:49:5f:e7:61:5a:3d: 0a:8e:58:8e:c9:92:b3:d8:f7:a2:45:e9:26:11:d7: b0:d9:b0:fa:85:52:7d:46:90:f7:de:30:4e:f2:e7: 85:01:fb:da:87:3d:70:9a:0f:31:53:72:44:2d:c3: d2:25:b3:2b:bc:6f:b0:b0:54:dc:52:87:65:45:a0: 26:a3:28:1d:bd:8f:9d:50:41:ee:b2:1f:36:5e:b7: 0b:1d:29:6b:3f:63:f1:f6:59:7f:ea:2c:67:5a:f7: d1:49:ed:71:c9:1d:39:b6:26:55:f1:3a:b2:ca:83: 80:a9:cc:e0:ca:53:6f:92:4b:f3:52:bb:02:33:2b: 33:67:27:ce:cb:e1:0d:94:99:4d:cc:3e:66:c9:5c: 71:ed:4e:19:4b:18:62:66:61:af:b4:30:2c:b1:be: 34:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:82:8C:B2:76:65:BB:30:2E:6A:D1:28:F1:8F:17:4F:9E:0C:F0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd200034-783f-34cb-8a36-ba5a59401793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:51:d7:d6:98:95:ce:a6:64:90:5d:9e:dd:a4:92:db:45:96: 3c:6a:dc:34:c5:ea:05:37:7c:b7:5d:c5:06:24:dc:e9:f4:6a: 9b:25:b4:ef:97:e8:71:4d:7e:4f:b7:65:ed:d9:79:23:db:6c: d6:2f:41:8d:49:15:23:1d:66:1d:8b:c5:9a:c4:bc:85:b7:3b: 00:a4:96:eb:d8:7c:83:33:56:9f:9d:09:62:c8:3f:dd:c3:86: ab:b6:d1:ef:09:e0:01:cf:b7:ca:1f:6e:9e:13:55:d4:19:62: 7d:47:71:0c:12:b7:2c:68:7d:12:b6:71:67:11:c2:6e:ac:d0: 1c:4b:21:51:5b:cf:e2:ed:9b:49:ac:e9:76:86:ca:e0:f4:6c: c1:c8:ed:0b:b7:44:67:e4:8f:ee:cf:1a:b3:d0:ff:93:7a:86: 0d:ab:1a:f3:c6:df:98:f9:a1:ff:51:9d:f5:44:4f:7c:1b:02: a7:fb:25:72:cf:74:47:d9:60:e8:e1:13:99:fb:4e:66:9a:18: 6a:61:56:83:82:df:54:2d:35:25:ad:36:58:76:cf:14:e3:03: 1c:7a:c7:cd:92:6a:31:54:d4:8e:13:b6:b1:db:9d:65:8f:48: 9a:22:68:e3:2c:e3:e8:b6:32:e2:f3:1a:66:9d:60:45:5d:5a: d3:5e:b9:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/Cah3omngoV1IOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk YWM5NTUxN2UtOTMxYS00MjUzLWI2MjMtYmJlNGY1ZTYyNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdpZa/2rMWWQ2njbcDIhOiMLljHwy9RbLmbc OxFzg7bEtpSDfy385ZJEetitic6HH2mCiAx1YL9P6T7UzIGu1RjdZhzjFuiiM/JU Ygi36f0v4FUmYZjoeNjesPBd13CbYB5JX+dhWj0KjliOyZKz2PeiRekmEdew2bD6 hVJ9RpD33jBO8ueFAfvahz1wmg8xU3JELcPSJbMrvG+wsFTcUodlRaAmoygdvY+d UEHush82XrcLHSlrP2Px9ll/6ixnWvfRSe1xyR05tiZV8TqyyoOAqczgylNvkkvz UrsCMyszZyfOy+ENlJlNzD5myVxx7U4ZSxhiZmGvtDAssb40/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyCjLJ2ZbswLmrRKPGPF0+eDPD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmQyMDAwMzQtNzgzZi0z NGNiLThhMzYtYmE1YTU5NDAxNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5R19aYlc6mZJBdnt2kkttFljxq3DTF6gU3fLddxQYk3On0apsltO+X 6HFNfk+3Ze3ZeSPbbNYvQY1JFSMdZh2LxZrEvIW3OwCkluvYfIMzVp+dCWLIP93D hqu20e8J4AHPt8ofbp4TVdQZYn1HcQwStyxofRK2cWcRwm6s0BxLIVFbz+Ltm0ms 6XaGyuD0bMHI7Qu3RGfkj+7PGrPQ/5N6hg2rGvPG35j5of9RnfVET3wbAqf7JXLP dEfZYOjhE5n7TmaaGGphVoOC31QtNSWtNlh2zxTjAxx6x82SajFU1I4TtrHbnWWP SJoiaOMs4+i2MuLzGmadYEVdWtNeuT4= -----END CERTIFICATE-----Generated at Sun May 11 01:30:09 2025 by rpki-client