$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/60042d83-8d8e-305f-a888-cb71b604274e.roa File: 60042d83-8d8e-305f-a888-cb71b604274e.roa (raw, json) Hash identifier: 4SyD6GFvhE9iNjbwe+tesh2NYTWIJFW6KYKRqGA+U7s= Subject key identifier: 9D:47:23:C5:E5:72:C7:AF:65:A7:98:FD:4D:08:01:A5:44:41:49:50 Certificate issuer: /CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Certificate serial: 010D0C9F43285849674EF5255198A989367A8B00 Authority key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/60042d83-8d8e-305f-a888-cb71b604274e.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 20283 IP address blocks: 209.73.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:f5:25:51:98:a9:89:36:7a:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=e7dd49bb-e9f9-41ff-95c3-b83ec47267c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:5e:44:62:ee:e0:44:e6:86:98:59:c7:4f: 13:c8:4b:2a:f5:ba:6b:bd:2d:99:40:aa:92:92:38: bc:bc:35:80:dc:58:b7:b9:f2:21:d8:97:f9:68:e9: 7a:84:da:6b:58:59:70:a4:a0:11:e1:5d:d6:e2:8b: 12:e3:b9:70:9a:25:c4:f8:a5:2e:93:37:58:55:3d: 80:dd:47:86:64:8b:58:80:a3:88:55:e8:ce:55:bd: fa:e7:42:24:d4:67:f4:89:f9:5d:18:c1:9c:94:5b: 29:53:5a:65:15:0c:da:6a:4a:ce:27:b3:98:3a:5d: 32:bd:5c:d5:b6:da:48:c0:9c:9b:ad:19:06:93:61: 21:8e:b7:c5:ed:e8:93:42:4f:49:b5:52:cf:b7:65: c4:37:fb:74:84:f6:71:83:39:d1:dd:ce:16:e2:91: 72:62:8f:d3:71:d0:0e:53:7f:53:ea:e0:c4:c9:fc: 9c:c6:07:ad:f8:04:89:22:09:23:4b:84:0b:d3:cd: 5e:5d:80:ef:fe:ea:63:6d:44:21:4a:a4:f3:74:76: ff:ba:38:dc:c9:da:a3:83:52:3e:8c:40:82:3a:0b: 81:55:74:be:29:2a:5a:b3:b1:39:4e:a6:46:c5:f8: 2e:55:91:cb:0f:90:bd:53:c3:67:51:be:07:e9:d5: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:47:23:C5:E5:72:C7:AF:65:A7:98:FD:4D:08:01:A5:44:41:49:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/60042d83-8d8e-305f-a888-cb71b604274e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl X509v3 Authority Key Identifier: keyid:90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer sbgp-ipAddrBlock: critical IPv4: 209.73.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:6d:54:b8:12:a6:45:85:25:2f:90:d8:53:dc:63:89:7f:31: 4d:a2:bd:c5:99:c4:fa:55:42:4f:28:d1:60:d4:e7:16:c2:26: 0c:0c:04:75:36:77:c0:48:68:74:9a:4e:99:95:b7:73:be:4f: a5:57:61:cc:41:83:93:d3:70:45:0b:9a:c0:c5:b8:72:97:0a: 15:8d:e1:6c:53:98:c6:00:f0:b1:de:af:f6:b9:c7:b8:59:df: 1b:ad:42:66:e7:8b:86:cd:6b:4b:f9:d3:c3:b5:52:1d:18:10: c2:6d:99:bd:53:9a:11:65:0f:ec:52:d1:54:cb:36:f0:32:5f: 2c:50:d9:59:aa:59:b8:74:6b:2e:32:27:95:83:78:33:02:e4: 37:2b:7f:6f:c3:9e:5c:2b:08:7f:5a:95:44:b6:fb:3b:39:ac: b0:82:53:dc:d8:30:d7:37:3a:04:a8:91:17:02:a0:24:ab:12: f8:9c:b3:2a:16:e7:ab:0d:2a:b8:3b:bc:2c:bf:d7:b8:d6:17: 0c:47:cd:36:e8:74:1c:e0:e2:76:26:b2:33:89:42:1f:48:f7: 56:64:8f:81:13:d0:7c:e6:ea:f4:16:7a:8e:16:53:4d:8e:33: a5:0f:ab:11:ae:a8:bb:98:af:68:da:3e:8c:5c:0c:51:67:bb: a4:73:f1:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTvUlUZipiTZ6iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNiZjIzNTItODI5Ni00MWZkLWJmZDUtNTc2YzAyYjlk NDgzMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk ZTdkZDQ5YmItZTlmOS00MWZmLTk1YzMtYjgzZWM0NzI2N2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw71eRGLu4ETmhphZx08TyEsq9bprvS2ZQKqS kji8vDWA3Fi3ufIh2Jf5aOl6hNprWFlwpKAR4V3W4osS47lwmiXE+KUukzdYVT2A 3UeGZItYgKOIVejOVb3650Ik1Gf0ifldGMGclFspU1plFQzaakrOJ7OYOl0yvVzV ttpIwJybrRkGk2EhjrfF7eiTQk9JtVLPt2XEN/t0hPZxgznR3c4W4pFyYo/TcdAO U39T6uDEyfycxget+ASJIgkjS4QL081eXYDv/upjbUQhSqTzdHb/ujjcydqjg1I+ jECCOguBVXS+KSpas7E5TqZGxfguVZHLD5C9U8NnUb4H6dWRdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1HI8XlcsevZaeY/U0IAaVEQUlQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mY2Jm MjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZjMDJiOWQ0ODMvNjAwNDJkODMtOGQ4ZS0z MDVmLWE4ODgtY2I3MWI2MDQyNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmNiZjIzNTItODI5Ni00MWZkLWJm ZDUtNTc2YzAyYjlkNDgzL2ZjYmYyMzUyLTgyOTYtNDFmZC1iZmQ1LTU3NmMwMmI5 ZDQ4My5jcmwwHwYDVR0jBBgwFoAUkPsuPGKbkYBkeb/u3LL9c2psWWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mY2JmMjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZj MDJiOWQ0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0UlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1tVLgSpkWFJS+Q2FPcY4l/MU2ivcWZxPpVQk8o0WDU5xbCJgwMBHU2 d8BIaHSaTpmVt3O+T6VXYcxBg5PTcEULmsDFuHKXChWN4WxTmMYA8LHer/a5x7hZ 3xutQmbni4bNa0v508O1Uh0YEMJtmb1TmhFlD+xS0VTLNvAyXyxQ2VmqWbh0ay4y J5WDeDMC5Dcrf2/DnlwrCH9alUS2+zs5rLCCU9zYMNc3OgSokRcCoCSrEvicsyoW 56sNKrg7vCy/17jWFwxHzTbodBzg4nYmsjOJQh9I91Zkj4ET0Hzm6vQWeo4WU02O M6UPqxGuqLuYr2jaPoxcDFFnu6Rz8co= -----END CERTIFICATE-----Generated at Mon May 12 22:58:06 2025 by rpki-client