$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e070577b-23d5-30b5-bedf-c5093059263c.roa File: e070577b-23d5-30b5-bedf-c5093059263c.roa (raw, json) Hash identifier: KUivT21KiwfUytalIDOP5V4fBXdj0uQRoO+LZPRjdSA= Subject key identifier: C2:A6:93:49:C8:B5:B3:5B:15:C9:11:7F:74:30:D7:99:6F:40:5B:D4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858493C09373E70F05C4FC4CFA000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e070577b-23d5-30b5-bedf-c5093059263c.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 7342 IP address blocks: 209.131.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:37:3e:70:f0:5c:4f:c4:cf:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=86b04ec6-79db-45e6-b95b-db835d2fb8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0a:a4:76:fe:d7:45:8f:d8:ee:b4:bc:d3:01: e8:9a:c6:a6:37:8f:2f:bc:04:33:5d:c9:87:d1:c0: 4d:ea:99:f1:0c:de:7a:c8:a8:52:52:77:b4:56:78: 21:a5:2b:8a:67:4b:f6:10:a2:5f:a6:11:99:8a:d8: 22:b2:43:b9:bf:12:04:a3:0d:54:f4:bd:a6:e2:50: 31:2b:5d:b9:b1:4b:5a:81:f9:b2:1e:a9:99:32:56: 00:e0:89:95:b0:da:22:28:fa:a9:aa:01:9c:dd:bb: ec:e6:4a:c5:db:9e:68:61:ad:ef:ff:83:a2:c2:19: f2:03:ad:ad:4a:d0:d8:21:f1:26:05:be:13:1a:0d: 3a:f5:f4:6a:8e:65:a0:b0:5c:8a:12:c8:1f:1a:56: fc:0c:a7:78:c9:17:bd:98:9c:87:e7:5e:33:f8:29: 07:2c:2e:75:76:59:3c:d5:c3:91:ac:3b:0e:82:1d: 44:15:1a:cb:ff:41:bd:4e:79:65:ab:05:78:22:24: 49:59:89:b5:69:e0:27:a7:23:0f:7e:dd:21:96:74: e0:0e:98:e9:07:db:1f:67:e9:60:52:45:6e:e9:e0: 9b:e1:63:66:52:13:26:2a:7d:50:3d:f9:58:63:69: af:cd:9a:b2:c4:8d:4c:0d:df:26:ca:aa:8f:a9:26: fc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A6:93:49:C8:B5:B3:5B:15:C9:11:7F:74:30:D7:99:6F:40:5B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e070577b-23d5-30b5-bedf-c5093059263c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:72:70:90:db:c6:0d:7f:9e:f5:1c:5f:e0:a6:0c:e7:58:18: d9:94:3c:31:20:a4:29:31:4e:e4:78:e0:b0:9c:55:2c:99:7d: ef:5c:32:cd:0e:83:59:34:a8:d9:b2:f1:bd:eb:ad:01:65:44: 50:34:94:04:00:af:c8:a1:1d:92:b1:ba:b0:a3:f0:fd:a3:f1: bf:c5:ce:53:f6:45:70:f9:d7:de:38:28:6f:1a:e4:fa:11:27: 09:e4:6f:1b:25:5f:d4:1d:2e:3b:12:df:fa:a2:f2:12:3a:c3: ec:b3:06:b9:8f:bf:89:8a:f9:10:63:99:54:58:50:c5:09:b4: 01:dd:37:90:61:68:94:00:4a:4d:0e:6e:7f:a4:d6:8e:61:8f: c3:4e:2e:04:df:2b:39:9b:5f:93:88:7e:7b:78:3d:29:11:b8: a3:59:3f:7a:24:75:81:18:45:2a:15:c0:fd:1e:59:f0:bc:a6: d8:4d:f9:7f:dc:cf:9b:e6:5b:0f:02:bf:27:bc:aa:24:bc:d6: c8:60:2b:81:80:77:f2:84:d5:44:76:eb:e7:42:4a:2c:4c:fb: e8:20:08:1f:f1:f3:e8:7d:a0:ae:ef:06:04:d4:a1:42:0a:0e: dd:70:99:0c:0a:26:61:fb:83:7a:45:d8:71:34:65:68:30:01: ea:67:e2:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTc+cPBcT8TPoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ODZiMDRlYzYtNzlkYi00NWU2LWI5NWItZGI4MzVkMmZiOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAqkdv7XRY/Y7rS80wHomsamN48vvAQzXcmH 0cBN6pnxDN56yKhSUne0VnghpSuKZ0v2EKJfphGZitgiskO5vxIEow1U9L2m4lAx K125sUtagfmyHqmZMlYA4ImVsNoiKPqpqgGc3bvs5krF255oYa3v/4OiwhnyA62t StDYIfEmBb4TGg069fRqjmWgsFyKEsgfGlb8DKd4yRe9mJyH514z+CkHLC51dlk8 1cORrDsOgh1EFRrL/0G9TnllqwV4IiRJWYm1aeAnpyMPft0hlnTgDpjpB9sfZ+lg UkVu6eCb4WNmUhMmKn1QPflYY2mvzZqyxI1MDd8myqqPqSb8pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKmk0nItbNbFckRf3Qw15lvQFvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTA3MDU3N2ItMjNkNS0z MGI1LWJlZGYtYzUwOTMwNTkyNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZycJDbxg1/nvUcX+CmDOdYGNmUPDEgpCkxTuR44LCcVSyZfe9cMs0O g1k0qNmy8b3rrQFlRFA0lAQAr8ihHZKxurCj8P2j8b/FzlP2RXD51944KG8a5PoR JwnkbxslX9QdLjsS3/qi8hI6w+yzBrmPv4mK+RBjmVRYUMUJtAHdN5BhaJQASk0O bn+k1o5hj8NOLgTfKzmbX5OIfnt4PSkRuKNZP3okdYEYRSoVwP0eWfC8pthN+X/c z5vmWw8Cvye8qiS81shgK4GAd/KE1UR26+dCSixM++ggCB/x8+h9oK7vBgTUoUIK Dt1wmQwKJmH7g3pF2HE0ZWgwAepn4ls= -----END CERTIFICATE-----Generated at Sun May 11 06:24:52 2025 by rpki-client