$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa File: ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa (raw, json) Hash identifier: hrxqXt2H0VT2f4bY4zXLL3UTA+foAjh4lWolP4LVZ8U= Subject key identifier: 9F:5C:58:61:A9:B1:17:CF:7B:76:A4:E1:8F:25:BA:58:4B:00:D6:BC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1B60179EE98DF6676B9C5F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 7342 IP address blocks: 209.131.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:17:9e:e9:8d:f6:67:6b:9c:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=9418d166-f431-4528-b974-6b3ae61035c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9a:76:41:04:c8:ad:46:97:94:89:4e:35:0e: 68:3d:48:26:64:d3:c8:c3:17:28:d7:3e:24:62:8d: 52:58:dc:1c:58:ff:02:02:a8:36:69:cc:94:c9:55: b8:98:8b:6f:23:3c:ef:df:af:f1:ce:ae:88:55:91: 44:eb:32:92:b0:f6:0c:e0:0e:6a:5f:56:5d:4b:91: 1b:b9:9b:00:46:95:36:af:b1:e6:65:78:67:34:cd: 32:32:14:5a:59:90:0b:f5:48:78:b2:89:39:0a:72: 6b:52:e4:93:b4:a6:35:b2:fc:66:fc:b6:99:48:dd: af:fd:f1:d6:18:47:a0:d2:49:7f:4f:4a:91:11:01: e2:57:72:69:64:51:a6:73:12:ce:f3:24:98:64:43: 5d:04:82:7a:df:97:7c:1c:64:ab:e0:8c:6e:5a:4d: 08:79:6e:2c:37:ba:99:ec:28:a6:fe:29:60:a2:15: 4f:74:32:d2:99:1f:1e:ba:f3:72:7a:70:22:ad:51: 90:81:cd:0f:e5:88:92:72:9b:ff:69:3b:d1:fc:6e: c4:35:58:61:72:f8:de:ce:ea:11:93:12:d2:2e:85: 67:fa:58:88:9b:dd:1a:87:57:81:f2:07:da:62:11: 79:bf:97:2c:44:20:11:e1:fb:a4:df:18:35:91:56: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5C:58:61:A9:B1:17:CF:7B:76:A4:E1:8F:25:BA:58:4B:00:D6:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:20:62:7c:00:76:c8:37:80:6d:d8:d8:bf:77:02:f6:6c:49: cc:8f:23:d5:2c:2e:b6:47:ad:31:44:db:1e:14:68:7b:65:93: 1a:43:85:e1:f6:d7:ee:9d:c1:ca:34:23:cc:04:a0:27:23:c4: d1:08:cf:57:d6:9b:58:7f:4b:e0:fc:88:f2:da:1f:68:66:17: 7e:b1:6c:f4:55:8e:9c:04:30:b5:1e:5d:db:2b:fd:f9:83:04: ea:da:83:99:73:9e:b6:97:f3:87:6b:d0:d4:5f:33:ce:71:cd: 9c:89:c7:4a:55:61:32:29:44:e4:8f:d2:78:d6:73:be:ce:5f: 01:62:b6:6b:c4:90:f1:82:a9:f3:54:ba:5b:09:30:61:ea:89: c9:35:b8:4a:85:fa:5d:8c:cc:75:ae:27:9b:a3:f9:72:fa:e2: 1f:c0:6f:52:e2:e7:35:52:e6:49:53:d5:10:23:26:ba:15:2d: 30:18:5c:69:c1:ef:7a:f5:aa:97:1f:f7:ce:df:02:59:83:7b: 27:8f:81:3b:16:84:59:a4:e3:21:f0:f7:a4:0c:be:3c:c2:c2: 71:8b:4b:a1:53:0d:0f:f1:57:61:16:da:a8:db:db:03:38:35: 03:d2:fa:ab:a5:ae:96:90:fe:40:a5:88:42:c2:56:fd:76:0a: db:d6:95:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBee6Y32Z2ucXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk OTQxOGQxNjYtZjQzMS00NTI4LWI5NzQtNmIzYWU2MTAzNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJp2QQTIrUaXlIlONQ5oPUgmZNPIwxco1z4k Yo1SWNwcWP8CAqg2acyUyVW4mItvIzzv36/xzq6IVZFE6zKSsPYM4A5qX1ZdS5Eb uZsARpU2r7HmZXhnNM0yMhRaWZAL9Uh4sok5CnJrUuSTtKY1svxm/LaZSN2v/fHW GEeg0kl/T0qREQHiV3JpZFGmcxLO8ySYZENdBIJ635d8HGSr4IxuWk0IeW4sN7qZ 7Cim/ilgohVPdDLSmR8euvNyenAirVGQgc0P5YiScpv/aTvR/G7ENVhhcvjezuoR kxLSLoVn+liIm90ah1eB8gfaYhF5v5csRCAR4fuk3xg1kVaK1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9cWGGpsRfPe3ak4Y8lulhLANa8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2E0M2VmNDAtYTg5MS0z ZTQyLWEzMmQtNmY5NjdiM2JjNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8gYnwAdsg3gG3Y2L93AvZsScyPI9UsLrZHrTFE2x4UaHtlkxpDheH2 1+6dwco0I8wEoCcjxNEIz1fWm1h/S+D8iPLaH2hmF36xbPRVjpwEMLUeXdsr/fmD BOrag5lznraX84dr0NRfM85xzZyJx0pVYTIpROSP0njWc77OXwFitmvEkPGCqfNU ulsJMGHqick1uEqF+l2MzHWuJ5uj+XL64h/Ab1Li5zVS5klT1RAjJroVLTAYXGnB 73r1qpcf987fAlmDeyePgTsWhFmk4yHw96QMvjzCwnGLS6FTDQ/xV2EW2qjb2wM4 NQPS+qulrpaQ/kCliELCVv12CtvWlWY= -----END CERTIFICATE-----Generated at Mon Jun 30 13:40:38 2025 by rpki-client