$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa File: 149f19f9-ddf2-32e1-9d07-a184289910a5.roa (raw, json) Hash identifier: b39C3Hdg+itDTF4qNef96y5SyB8Tlqrq5n0rifwUAWQ= Subject key identifier: 2C:B7:4B:F6:8A:C8:74:64:F4:FF:61:4D:15:58:7A:B5:87:DA:DF:AE Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285849B9AA008DE1298CFEDC528BA0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 397422 IP address blocks: 209.237.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:00:8d:e1:29:8c:fe:dc:52:8b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=da88b0a1-4049-4d5d-a220-a44dddaee0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:50:d9:c2:17:9f:36:d6:16:80:3e:90:86: a3:18:18:60:74:1b:27:14:ef:5a:0d:1a:92:a8:86: 00:5c:ca:26:b1:5a:0f:66:40:5d:e3:01:f7:e0:46: 27:63:58:6f:e3:56:76:f9:c3:d3:82:9e:0c:7f:a9: f5:79:39:ec:22:ef:6a:ed:b8:91:ea:a8:8c:09:70: ed:0a:45:66:fd:5e:05:50:41:26:a1:26:9f:b9:81: e8:97:bd:99:26:95:82:3d:48:d6:5d:b0:c2:b2:40: cd:62:a7:fa:8a:6f:c4:9a:62:6a:01:e0:1d:6c:c7: c8:e9:aa:62:62:84:b6:1b:4c:36:c3:e7:aa:f6:c3: c0:7f:b3:e5:96:80:62:b7:d3:38:c8:13:09:c3:7c: df:98:77:6c:94:24:e9:0d:df:7a:b7:d7:7d:69:25: d3:81:ed:c7:84:0b:fb:85:28:2b:c1:15:c7:fd:b3: 6f:24:9c:40:52:21:0f:f9:65:7c:0d:30:f4:12:87: f5:c8:da:6f:85:03:79:16:6f:03:94:c5:cd:05:b0: 94:89:f4:a5:3f:54:aa:32:bf:3a:68:e6:51:ef:36: 14:ea:53:a2:e0:05:77:42:66:87:ce:4a:45:69:17: 6d:ed:9b:5c:c4:43:12:dc:66:73:03:e9:c0:35:e4: e9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B7:4B:F6:8A:C8:74:64:F4:FF:61:4D:15:58:7A:B5:87:DA:DF:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c8:8e:d8:43:24:1d:19:ef:cf:bc:90:17:b5:91:55:6c:3e: 1a:aa:6d:8a:f2:31:00:f3:8e:1b:83:a3:3c:d0:f7:38:8a:5b: 88:7f:4c:0f:16:71:48:3c:ad:61:58:bf:e1:66:5b:a2:e3:68: a9:3e:fa:de:3e:d5:59:51:f5:ec:33:45:c1:f9:b1:d4:58:51: 56:24:95:fa:65:2d:26:14:bd:8b:7f:91:91:1d:00:ea:0b:ff: ed:c3:2c:d0:d6:ca:09:ed:5d:a5:0b:3d:ca:49:54:4f:42:1c: 1b:54:a1:18:d0:97:d2:fa:39:7c:78:32:a1:80:b4:f2:39:e2: 67:bc:97:48:aa:2e:6c:53:f0:23:74:80:54:74:7c:35:81:33: af:72:20:9d:ac:da:09:6c:e6:29:fb:85:78:50:a0:c1:2c:0e: d0:ff:a9:a3:03:c9:7d:98:c8:6b:42:78:1b:8f:ed:81:3b:b5: 25:26:44:52:20:93:b9:eb:3f:83:7c:8c:d7:f5:52:24:a5:e4: 8d:f1:e5:9a:5f:08:13:c9:db:26:17:de:3b:0e:ed:17:f1:9a: f3:16:6a:50:a0:23:16:bc:e4:14:d0:26:eb:c5:bc:e3:9a:a9: c3:67:06:02:97:60:f2:73:01:3d:dc:bc:e9:4c:ba:63:41:13: 0b:de:2d:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgCN4SmM/txSi6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ZGE4OGIwYTEtNDA0OS00ZDVkLWEyMjAtYTQ0ZGRkYWVlMGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ5Q2cIXnzbWFoA+kIajGBhgdBsnFO9aDRqS qIYAXMomsVoPZkBd4wH34EYnY1hv41Z2+cPTgp4Mf6n1eTnsIu9q7biR6qiMCXDt CkVm/V4FUEEmoSafuYHol72ZJpWCPUjWXbDCskDNYqf6im/EmmJqAeAdbMfI6api YoS2G0w2w+eq9sPAf7PlloBit9M4yBMJw3zfmHdslCTpDd96t9d9aSXTge3HhAv7 hSgrwRXH/bNvJJxAUiEP+WV8DTD0Eof1yNpvhQN5Fm8DlMXNBbCUifSlP1SqMr86 aOZR7zYU6lOi4AV3QmaHzkpFaRdt7ZtcxEMS3GZzA+nANeTp3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy3S/aKyHRk9P9hTRVYerWH2t+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMTQ5ZjE5ZjktZGRmMi0z MmUxLTlkMDctYTE4NDI4OTkxMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXIjthDJB0Z78+8kBe1kVVsPhqqbYryMQDzjhuDozzQ9ziKW4h/TA8W cUg8rWFYv+FmW6LjaKk++t4+1VlR9ewzRcH5sdRYUVYklfplLSYUvYt/kZEdAOoL /+3DLNDWygntXaULPcpJVE9CHBtUoRjQl9L6OXx4MqGAtPI54me8l0iqLmxT8CN0 gFR0fDWBM69yIJ2s2gls5in7hXhQoMEsDtD/qaMDyX2YyGtCeBuP7YE7tSUmRFIg k7nrP4N8jNf1UiSl5I3x5ZpfCBPJ2yYX3jsO7RfxmvMWalCgIxa85BTQJuvFvOOa qcNnBgKXYPJzAT3cvOlMumNBEwveLYg= -----END CERTIFICATE-----Generated at Mon Jun 30 00:45:20 2025 by rpki-client