$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa File: cfbac226-9694-3b77-98b0-76526b389042.roa (raw, json) Hash identifier: rqRfLo2Fuwi5na95Xji6dJfxGpJnMcrQ24Uq/O/9dig= Subject key identifier: 06:1B:A9:EA:48:71:C1:98:37:C3:CF:A5:0E:B6:DA:68:B2:F3:28:07 Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F4328584A49706D57F8B067D2209E7B40 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 25697 IP address blocks: 209.151.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:6d:57:f8:b0:67:d2:20:9e:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=53c84949-4afd-471a-b372-9a2f72d05704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:04:ff:51:1c:f6:74:19:b1:53:50:a7:59:28: 65:41:f9:9b:dc:3a:b4:bc:ab:91:61:5d:55:98:cc: 95:13:a0:2f:c2:76:39:58:82:d0:78:68:6b:b3:3c: a1:e7:80:ae:1a:af:29:42:2b:6b:e6:39:b1:db:f0: a2:c4:98:98:a9:5b:01:d2:e5:e9:2b:1a:6b:aa:ce: b8:8c:6e:8f:99:0e:bb:b5:77:5b:bd:b4:14:22:a8: b1:d4:58:81:ce:bc:b2:39:60:67:41:a1:57:3c:a7: 2e:e1:e2:e3:02:fd:4f:71:f3:fc:ca:cd:ac:a4:b8: 69:5f:c1:dd:38:c5:26:a3:d3:a6:94:07:50:6d:24: c2:bb:db:ba:44:8f:75:a0:51:e6:a7:7e:4d:a9:d8: ad:e1:0d:d2:0b:27:eb:71:31:c1:73:6d:c3:7d:33: db:7b:34:3c:5b:21:1f:ec:3a:86:98:3c:21:c3:49: e4:94:cf:4c:5e:8f:1f:33:b9:e3:d2:51:e0:50:ba: 99:90:25:e9:17:b9:d6:f4:49:25:08:39:16:9d:c9: c4:1d:88:f0:89:cd:7a:09:77:b1:f9:be:e1:dc:07: 65:9b:a8:65:a2:6c:e4:63:5a:6e:b5:2a:65:5b:58: 49:9c:97:9c:f4:be:bf:6b:a0:94:97:4d:57:e3:67: d9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1B:A9:EA:48:71:C1:98:37:C3:CF:A5:0E:B6:DA:68:B2:F3:28:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 209.151.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:17:7c:05:42:4f:bc:0e:5f:fd:ea:3b:83:15:a5:7c:0c:d9: 24:01:0b:ec:d5:0f:de:61:5e:c2:a2:79:78:75:48:ca:dc:f2: e3:fb:de:52:4e:40:ad:0b:e2:30:a8:d6:d3:1a:8a:67:47:0f: 86:86:3f:be:5d:7b:66:86:21:e8:4d:75:42:ab:36:7a:24:98: 06:46:4d:8b:05:f3:8a:b8:49:15:33:94:62:ee:a0:ab:cc:01: 24:1f:69:fb:3c:f7:56:50:13:11:8f:57:0b:cd:79:5d:18:0c: 3a:dd:84:e9:1e:6d:95:6a:fd:de:c6:47:a7:e3:4f:e5:98:71: 1e:db:d4:d0:7f:68:1c:9f:92:71:08:52:3b:fc:2d:54:21:63: ba:cf:c8:35:62:59:08:91:7d:a3:07:58:04:28:52:fd:f6:57: 27:bc:ae:cc:11:bd:cc:fc:5d:5a:cc:ed:36:74:d3:86:dd:76: e9:1d:20:1c:97:98:ad:74:21:ec:10:1e:cb:de:62:64:52:b4: b1:e4:78:8d:1d:08:f7:76:58:f3:dd:42:54:13:e7:83:1a:79: 1a:84:35:06:3b:b8:32:0e:dc:fc:dc:35:92:1b:84:9e:56:a0: 46:5d:57:d4:f6:08:67:af:ac:50:94:d4:2d:4c:3d:58:4b:f2: c7:13:8e:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcG1X+LBn0iCee0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NTNjODQ5NDktNGFmZC00NzFhLWIzNzItOWEyZjcyZDA1NzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQT/URz2dBmxU1CnWShlQfmb3Dq0vKuRYV1V mMyVE6AvwnY5WILQeGhrszyh54CuGq8pQitr5jmx2/CixJiYqVsB0uXpKxprqs64 jG6PmQ67tXdbvbQUIqix1FiBzryyOWBnQaFXPKcu4eLjAv1PcfP8ys2spLhpX8Hd OMUmo9OmlAdQbSTCu9u6RI91oFHmp35Nqdit4Q3SCyfrcTHBc23DfTPbezQ8WyEf 7DqGmDwhw0nklM9MXo8fM7nj0lHgULqZkCXpF7nW9EklCDkWncnEHYjwic16CXex +b7h3Adlm6hlomzkY1putSplW1hJnJec9L6/a6CUl01X42fZZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYbqepIccGYN8PPpQ622miy8ygHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvY2ZiYWMyMjYtOTY5NC0z Yjc3LTk4YjAtNzY1MjZiMzg5MDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYXfAVCT7wOX/3qO4MVpXwM2SQBC+zVD95hXsKieXh1SMrc8uP73lJO QK0L4jCo1tMaimdHD4aGP75de2aGIehNdUKrNnokmAZGTYsF84q4SRUzlGLuoKvM ASQfafs891ZQExGPVwvNeV0YDDrdhOkebZVq/d7GR6fjT+WYcR7b1NB/aByfknEI Ujv8LVQhY7rPyDViWQiRfaMHWAQoUv32Vye8rswRvcz8XVrM7TZ004bddukdIByX mK10IewQHsveYmRStLHkeI0dCPd2WPPdQlQT54MaeRqENQY7uDIO3PzcNZIbhJ5W oEZdV9T2CGevrFCU1C1MPVhL8scTjvg= -----END CERTIFICATE-----Generated at Mon Jun 30 17:00:19 2025 by rpki-client