$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa File: 67ef0949-c298-330b-aabd-6a4c950d7ad6.roa (raw, json) Hash identifier: uIlDD4OlqLgAva3aTjRyyRqncly+b3RdESCFQLrZVBI= Subject key identifier: 9E:6C:8C:0F:A5:6F:6C:24:34:E0:48:5D:A6:73:9F:4C:4F:4D:06:80 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849E4EFC2344B6E608EE56B1980 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 209.20.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c2:34:4b:6e:60:8e:e5:6b:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=239be0ae-b1c9-4809-9b08-65aa7831f2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:83:43:28:59:49:75:43:80:4b:ff:60:46: a9:30:b7:5c:6c:1c:dc:52:4e:e2:aa:d4:13:94:6e: 84:67:8e:34:23:57:93:92:d5:bc:de:67:5c:d6:7a: f6:3b:18:e0:61:25:9f:96:77:46:df:0c:2b:06:d3: 2a:f8:8b:12:d5:39:ad:8b:9c:d4:3a:da:3d:47:0a: a3:c1:9d:75:3d:9b:5b:a4:3e:13:fc:07:1e:c7:e7: 06:20:d4:ce:0d:50:57:15:95:3d:1c:68:7b:90:bb: 67:30:1a:06:95:bf:41:7a:d0:3f:1f:77:6f:02:4f: 96:bb:6f:4c:c0:fc:e6:2d:fd:d7:e1:18:3a:10:67: 6c:ad:ea:cc:3d:4b:e9:e6:99:aa:81:36:9e:26:15: a0:2c:3c:93:7e:2a:83:2a:e1:d5:e9:4c:f0:22:e7: a6:6d:47:01:24:ea:e6:2b:6f:b9:72:a6:f8:17:e2: 91:b9:ff:ba:98:d4:0f:9f:40:6a:4a:d0:e5:bc:82: 2b:ef:f5:cb:d2:ae:e4:29:f1:8b:f4:d2:02:0a:89: 87:39:51:e2:d3:f4:67:d4:69:eb:f9:9d:e5:39:c3: b9:21:2a:56:02:d0:ef:1a:3e:c0:d3:75:59:b9:cf: cd:5c:4c:c0:dd:6f:b2:c2:b5:5b:3f:fa:46:d4:24: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6C:8C:0F:A5:6F:6C:24:34:E0:48:5D:A6:73:9F:4C:4F:4D:06:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 209.20.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:41:a2:04:47:7e:cf:1e:1f:7c:34:d9:31:30:81:37:0a:e4: 28:84:31:31:48:69:a1:19:3d:48:6e:4a:45:98:9b:4b:26:ff: 4e:a0:bc:34:53:a8:23:f8:08:4b:8a:14:da:43:12:af:73:dc: c9:92:2b:e3:c8:7c:b8:f0:44:fb:e6:ff:f4:68:a9:6b:8f:98: 50:69:4f:31:80:ca:73:85:18:95:53:1e:08:22:c8:e8:83:b9: 64:4e:c2:a6:e8:ea:c5:a7:22:49:f2:55:47:6e:e6:c4:d5:40: da:28:87:e5:e4:ad:9d:50:d2:e8:b5:3f:10:54:ac:15:43:ef: cd:bf:cd:1b:1c:ce:ce:e7:23:33:ab:aa:62:c8:40:02:6b:cc: 2b:37:a6:9f:7d:99:f5:6d:b8:d9:62:75:97:fc:f3:fb:63:b9: 02:74:77:5a:b0:b7:4b:6c:8a:36:a1:d3:4a:71:ca:56:05:46: 57:3d:e9:bf:ed:7c:3b:43:db:92:d1:b3:58:bf:92:57:f4:36: 1d:22:3a:d7:d3:14:f6:6e:fd:b9:a3:a5:c9:36:9b:fe:29:47: c5:77:8c:8c:5f:2f:44:61:ba:00:db:72:d1:95:5c:c5:06:a1: 2c:2e:c8:2f:16:50:9b:20:9f:a8:5f:5e:82:95:7b:0b:d1:af: 72:26:51:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78I0S25gjuVrGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk MjM5YmUwYWUtYjFjOS00ODA5LTliMDgtNjVhYTc4MzFmMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAODQyhZSXVDgEv/YEapMLdcbBzcUk7iqtQT lG6EZ440I1eTktW83mdc1nr2OxjgYSWflndG3wwrBtMq+IsS1Tmti5zUOto9Rwqj wZ11PZtbpD4T/Acex+cGINTODVBXFZU9HGh7kLtnMBoGlb9BetA/H3dvAk+Wu29M wPzmLf3X4Rg6EGdsrerMPUvp5pmqgTaeJhWgLDyTfiqDKuHV6UzwIuembUcBJOrm K2+5cqb4F+KRuf+6mNQPn0BqStDlvIIr7/XL0q7kKfGL9NICComHOVHi0/Rn1Gnr +Z3lOcO5ISpWAtDvGj7A03VZuc/NXEzA3W+ywrVbP/pG1CRYhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5sjA+lb2wkNOBIXaZzn0xPTQaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjdlZjA5NDktYzI5OC0z MzBiLWFhYmQtNmE0Yzk1MGQ3YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRBogRHfs8eH3w02TEwgTcK5CiEMTFIaaEZPUhuSkWYm0sm/06gvDRT qCP4CEuKFNpDEq9z3MmSK+PIfLjwRPvm//RoqWuPmFBpTzGAynOFGJVTHggiyOiD uWROwqbo6sWnIknyVUdu5sTVQNooh+XkrZ1Q0ui1PxBUrBVD782/zRsczs7nIzOr qmLIQAJrzCs3pp99mfVtuNlidZf88/tjuQJ0d1qwt0tsijah00pxylYFRlc96b/t fDtD25LRs1i/klf0Nh0iOtfTFPZu/bmjpck2m/4pR8V3jIxfL0RhugDbctGVXMUG oSwuyC8WUJsgn6hfXoKVewvRr3ImUWQ= -----END CERTIFICATE-----Generated at Mon Jun 30 02:46:55 2025 by rpki-client