$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa File: daf14092-dafe-3ba6-9746-8236744966f4.roa (raw, json) Hash identifier: CDvA40GLCyZMj3WLjDyxb35OlvzlJhvBJiDRJdrGtjQ= Subject key identifier: 5D:0D:D1:44:5B:C1:7F:DF:3E:AE:E2:13:57:A3:DF:20:A0:8E:13:29 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285849B9AA007DA6C252E1394A1980 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 397422 IP address blocks: 209.237.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:00:7d:a6:c2:52:e1:39:4a:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=e4b954e4-add5-4cee-8ebf-a91c602c1129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e8:05:55:7a:9d:d5:67:3d:d5:ac:48:e2:bf: f7:27:59:8e:46:b5:e7:15:75:5a:48:30:d7:2c:0f: 59:41:8e:cc:d7:9f:bf:03:70:54:f8:33:b6:81:e7: ee:77:8f:91:ae:2c:6b:9c:11:fb:fc:ad:a6:36:ba: ad:90:3c:a7:93:6a:6a:53:ee:38:e4:fe:17:20:6f: 76:e8:fe:f0:58:73:e2:64:1c:3e:7a:64:87:74:ae: dd:66:63:22:7c:3b:54:ae:7d:af:52:c4:99:9e:60: 3d:ed:84:6b:6d:76:da:c9:5f:e8:ba:26:86:1f:65: 89:35:0f:60:a5:c8:02:69:d6:45:df:6d:9b:26:e9: 84:36:ea:e3:80:7d:7f:c5:b4:f4:09:06:3a:2d:c9: 32:8c:17:9a:77:00:dd:16:60:27:c4:0d:7f:0c:f8: e3:c3:e3:75:00:16:7f:1e:57:df:de:f2:d5:41:bd: fe:e2:32:88:0e:0d:d9:8f:12:60:d8:44:d4:89:6d: fd:2b:88:70:97:d5:1c:3c:e7:25:09:cb:ae:2f:46: e2:46:ff:6e:29:88:80:5b:40:9e:87:39:a7:fa:f1: bf:ca:6d:4d:6c:88:1c:b8:d5:6f:c8:76:42:62:ef: 8e:4d:fb:38:4c:96:b2:6d:a9:a4:2f:ce:44:ad:26: 0d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0D:D1:44:5B:C1:7F:DF:3E:AE:E2:13:57:A3:DF:20:A0:8E:13:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:61:6c:dc:ad:77:98:29:89:fe:8f:40:bb:39:93:fc:c6:03: 0c:de:b7:02:bd:d9:e5:71:7f:c9:a3:23:f0:ca:5c:e0:87:a7: e8:bf:63:09:b5:fa:49:04:5b:9e:fb:e7:c4:7d:11:c8:b3:be: a1:5b:3e:f9:31:a2:ef:a8:88:af:eb:ea:50:f1:9c:ae:72:df: cf:8e:ac:d7:4d:d1:af:df:60:6c:b6:53:3a:a2:7a:87:05:cf: 9f:8c:ba:e5:81:2d:4d:e5:35:79:f8:f6:43:79:e7:8b:20:a7: a3:4d:e9:a6:91:cf:a6:93:4e:dd:9e:a5:ef:17:65:d5:76:db: 0b:74:79:68:62:fe:57:b7:f7:69:f5:f4:c9:d3:ae:21:31:e8: df:89:bd:89:23:0d:77:55:b6:ea:87:d6:ab:62:77:fa:bf:e4: 88:62:d3:80:31:e1:94:51:73:e4:13:8d:ea:b7:0b:c7:46:0f: c2:a0:f7:a6:fe:46:a8:2b:26:fc:66:9f:e9:ad:6e:67:51:6d: 61:bd:13:59:af:bb:62:14:f4:6f:79:6d:6f:97:6c:b1:f5:d2: 3a:0c:db:98:56:54:1e:57:a6:b8:f0:9b:42:b8:96:49:17:07: 07:51:60:5d:66:3b:9c:60:52:45:6b:15:29:98:e4:e8:5d:0a: 24:98:f1:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgB9psJS4TlKGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ZTRiOTU0ZTQtYWRkNS00Y2VlLThlYmYtYTkxYzYwMmMxMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOgFVXqd1Wc91axI4r/3J1mORrXnFXVaSDDX LA9ZQY7M15+/A3BU+DO2gefud4+RrixrnBH7/K2mNrqtkDynk2pqU+445P4XIG92 6P7wWHPiZBw+emSHdK7dZmMifDtUrn2vUsSZnmA97YRrbXbayV/ouiaGH2WJNQ9g pcgCadZF322bJumENurjgH1/xbT0CQY6LckyjBeadwDdFmAnxA1/DPjjw+N1ABZ/ Hlff3vLVQb3+4jKIDg3ZjxJg2ETUiW39K4hwl9UcPOclCcuuL0biRv9uKYiAW0Ce hzmn+vG/ym1NbIgcuNVvyHZCYu+OTfs4TJaybamkL85ErSYNmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0N0URbwX/fPq7iE1ej3yCgjhMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGFmMTQwOTItZGFmZS0z YmE2LTk3NDYtODIzNjc0NDk2NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZhbNytd5gpif6PQLs5k/zGAwzetwK92eVxf8mjI/DKXOCHp+i/Ywm1 +kkEW57758R9EcizvqFbPvkxou+oiK/r6lDxnK5y38+OrNdN0a/fYGy2UzqieocF z5+MuuWBLU3lNXn49kN554sgp6NN6aaRz6aTTt2epe8XZdV22wt0eWhi/le392n1 9MnTriEx6N+JvYkjDXdVtuqH1qtid/q/5Ihi04Ax4ZRRc+QTjeq3C8dGD8Kg96b+ RqgrJvxmn+mtbmdRbWG9E1mvu2IU9G95bW+XbLH10joM25hWVB5Xprjwm0K4lkkX BwdRYF1mO5xgUkVrFSmY5OhdCiSY8Ww= -----END CERTIFICATE-----Generated at Wed May 7 01:38:30 2025 by rpki-client