$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c51050f2-23af-3dec-8d4e-1f3b91704e16.roa File: c51050f2-23af-3dec-8d4e-1f3b91704e16.roa (raw, json) Hash identifier: u0IfVg8OeYNCsTeSbgP78PYIN89UMUbRgKbSVWt7sAU= Subject key identifier: 8A:F3:89:C3:9F:4A:80:A7:F5:13:52:B5:EA:3D:96:4C:2B:82:2B:17 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1465943FAD777EA0DEBAD798 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c51050f2-23af-3dec-8d4e-1f3b91704e16.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 7342 IP address blocks: 209.131.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:94:3f:ad:77:7e:a0:de:ba:d7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=63fe5fd7-eb98-4a2f-81ad-137349b8965c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:74:57:bf:26:37:8e:8d:37:2b:b0:18:84: db:f7:be:6e:e7:80:09:06:c7:79:8f:09:7c:0d:06: bf:43:f2:9c:6d:31:f1:ee:a3:fd:fb:ef:fa:c5:a0: 2f:01:8d:26:40:92:80:f8:5b:e4:6e:17:ee:f7:dd: e8:31:91:81:f1:2a:88:19:d5:eb:85:44:15:cd:a5: 4b:d5:c0:d5:63:d5:9a:1d:25:61:53:35:18:a1:e1: 28:3c:87:1b:fa:d8:1f:da:67:3e:ef:19:7e:75:94: 5c:14:c2:09:21:fb:34:ed:80:71:70:f0:a4:22:b4: 77:c6:9f:0b:47:18:a4:68:53:bc:12:c5:dc:33:ad: 25:2a:7f:78:c9:40:9e:9b:f8:97:49:7d:97:44:be: 94:8e:b6:92:17:75:a2:79:8a:9c:71:17:6b:23:a3: f8:de:60:81:93:87:7f:7e:12:82:f2:a0:41:d0:ea: 54:1a:26:54:c7:02:e9:38:77:00:93:95:5b:db:23: 36:67:95:aa:c4:a9:83:c9:d0:11:af:d7:4c:f8:f5: 11:f3:e5:89:ea:a8:2f:9a:9a:f1:8c:d2:84:d6:b5: fb:4c:e3:2a:43:de:bc:12:fa:56:7e:00:2a:5b:29: 58:80:7f:59:9e:0c:f3:98:d5:e2:54:ee:0f:1b:ea: 2a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F3:89:C3:9F:4A:80:A7:F5:13:52:B5:EA:3D:96:4C:2B:82:2B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c51050f2-23af-3dec-8d4e-1f3b91704e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:38:4d:05:f8:7b:b6:a8:c2:11:07:93:65:8a:80:61:57:f3: 3a:02:3f:23:fb:4f:82:d5:bd:37:1f:fd:01:63:81:d6:b8:9b: 9f:d3:69:3e:63:bc:d5:92:38:4e:22:e5:a2:5b:06:ad:8c:05: 85:ec:0c:73:31:9a:dc:2e:a6:65:80:76:a9:1a:a2:91:b8:a3: e1:d8:4e:50:07:72:56:5f:57:6f:d1:85:2e:87:18:a6:3f:89: a7:12:ac:55:fc:b6:94:f5:21:74:ea:79:3a:16:a8:f5:7f:db: 72:fb:c6:2b:8a:5e:23:0b:b0:6f:a7:52:0a:5a:ec:50:da:82: 83:67:6e:47:af:6b:95:c5:63:4d:50:c2:8d:18:4d:5e:26:77: 71:a7:26:0b:e6:96:7e:01:b0:3e:d7:24:78:2b:04:a1:65:8a: b6:eb:7f:e4:83:5e:07:0d:97:f8:5c:cb:7d:0f:96:03:23:ca: f9:9c:72:51:c7:0d:8a:fb:bb:db:82:bf:d7:c7:9b:8a:7b:fd: d2:24:c2:aa:66:c0:45:e9:f1:ca:9e:56:84:2f:d6:fa:97:d4: cf:89:09:1f:79:26:95:9b:18:9c:ae:9c:f3:15:94:9d:f6:ca: 0c:ad:05:18:98:8c:a5:48:48:e3:c0:8d:71:d2:4c:a1:c9:66: 3d:d2:bb:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZZQ/rXd+oN6615gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NjNmZTVmZDctZWI5OC00YTJmLTgxYWQtMTM3MzQ5Yjg5NjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhl0V78mN46NNyuwGITb975u54AJBsd5jwl8 DQa/Q/KcbTHx7qP9++/6xaAvAY0mQJKA+Fvkbhfu993oMZGB8SqIGdXrhUQVzaVL 1cDVY9WaHSVhUzUYoeEoPIcb+tgf2mc+7xl+dZRcFMIJIfs07YBxcPCkIrR3xp8L RxikaFO8EsXcM60lKn94yUCem/iXSX2XRL6UjraSF3WieYqccRdrI6P43mCBk4d/ fhKC8qBB0OpUGiZUxwLpOHcAk5Vb2yM2Z5WqxKmDydARr9dM+PUR8+WJ6qgvmprx jNKE1rX7TOMqQ968EvpWfgAqWylYgH9ZngzzmNXiVO4PG+oqpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrzicOfSoCn9RNSteo9lkwrgisXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzUxMDUwZjItMjNhZi0z ZGVjLThkNGUtMWYzYjkxNzA0ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YO5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo4TQX4e7aowhEHk2WKgGFX8zoCPyP7T4LVvTcf/QFjgda4m5/TaT5j vNWSOE4i5aJbBq2MBYXsDHMxmtwupmWAdqkaopG4o+HYTlAHclZfV2/RhS6HGKY/ iacSrFX8tpT1IXTqeToWqPV/23L7xiuKXiMLsG+nUgpa7FDagoNnbkeva5XFY01Q wo0YTV4md3GnJgvmln4BsD7XJHgrBKFlirbrf+SDXgcNl/hcy30PlgMjyvmcclHH DYr7u9uCv9fHm4p7/dIkwqpmwEXp8cqeVoQv1vqX1M+JCR95JpWbGJyunPMVlJ32 ygytBRiYjKVISOPAjXHSTKHJZj3Su90= -----END CERTIFICATE-----Generated at Mon Jun 30 11:41:16 2025 by rpki-client