$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa File: 49e5f290-618f-3550-b059-0c6232263b33.roa (raw, json) Hash identifier: ilSdQ7IG96J2ng9ffhSSqehsHHxqejqVhZotjjx3nuc= Subject key identifier: 87:BA:28:2E:DA:B2:8F:7D:A0:27:AA:BD:E5:6A:C5:BE:A4:18:DD:EF Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Certificate serial: 010D0C9F4328584A480AE7465D390E5E57F1D080 Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 11739 IP address blocks: 209.20.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e7:46:5d:39:0e:5e:57:f1:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=7a7acefc-e529-48e5-ab69-1a63069a4f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b8:fc:b8:24:4c:a1:f4:b7:be:0d:1c:77:b8: 79:55:e0:33:ab:ef:9f:2c:3b:c4:50:c8:c3:39:b5: ff:cb:ef:4c:f2:a0:f7:ca:6a:bc:87:fe:0a:ce:2a: e4:13:cb:09:18:17:b6:a0:67:82:8c:d1:ef:f0:50: e8:ec:a4:0c:ad:b1:62:32:c3:78:97:b9:3b:e6:4a: 93:9b:0d:03:bf:3a:6a:cd:7b:bb:ff:18:3c:db:a2: 39:bb:95:6a:36:ce:ea:e5:b9:97:7b:fb:59:bf:52: 1f:39:0e:15:20:ca:fe:98:a8:87:09:27:4c:ef:55: 6d:dc:51:89:fa:a1:74:32:8b:ae:f1:36:8f:2a:e6: 00:ea:cb:d1:0f:19:a1:67:04:7d:b6:89:b7:c0:94: b0:18:6f:ee:0a:16:d3:3e:2a:97:e8:56:9f:7e:4e: 16:b7:68:45:1b:e6:75:68:97:4e:c7:36:d1:a5:eb: fa:da:90:ff:94:26:ea:06:7a:2a:0e:a8:1b:ac:8e: a6:18:ca:35:2e:37:59:13:7e:db:c8:9e:c0:8f:4f: 84:27:dc:1b:17:10:75:89:16:1a:af:f8:3c:29:11: 7a:43:2b:27:76:14:62:5a:c0:63:3c:87:36:9e:14: c8:10:2a:52:40:01:78:07:cc:27:db:6e:99:57:74: f1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BA:28:2E:DA:B2:8F:7D:A0:27:AA:BD:E5:6A:C5:BE:A4:18:DD:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl X509v3 Authority Key Identifier: keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer sbgp-ipAddrBlock: critical IPv4: 209.20.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ce:5a:90:3d:2a:53:ed:75:fe:50:32:50:56:d0:fb:3b:f4: 11:32:25:5b:60:4e:96:2b:2d:84:31:ae:20:d2:06:cd:f9:57: 7b:9e:b5:f4:13:9e:e0:95:51:ca:ab:57:ea:27:91:7d:1d:57: 10:8b:b0:ae:a4:a2:ff:14:c9:f7:d8:18:29:07:ff:30:6e:aa: ba:f7:8b:17:e7:4c:1b:dd:f5:1e:19:48:03:40:5f:29:cb:9d: 4c:4d:c8:d4:78:4f:9a:c1:c0:7e:a5:c8:de:c8:41:39:88:7d: 77:d1:c8:8d:e3:88:51:6e:d2:28:b1:79:40:b3:26:f1:25:e2: 09:01:3c:cc:6b:19:39:e8:56:65:96:24:00:a1:ab:63:08:46: 85:50:8d:33:9c:8a:62:c1:cd:62:b0:b9:6c:64:b0:cb:94:10: 56:83:96:42:87:1d:28:94:d4:c1:67:f9:c4:a7:b3:39:e1:58: c3:aa:57:13:df:33:2f:f9:af:4c:af:26:10:dd:17:59:07:33: 54:a3:f4:72:20:44:9b:ab:0c:b4:6f:c0:80:28:51:18:2d:c5: e3:4c:3e:b1:65:e7:8d:f3:c1:01:1f:40:2c:f5:89:f8:74:e9: 04:3d:77:e3:45:77:21:65:e9:be:f5:4b:f9:0e:c1:41:2e:74: af:df:58:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICudGXTkOXlfx0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM5YTdkYTAtMzk3NC00OGMyLWEyYzUtZmNhMWVjMzI4 NDhhMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk N2E3YWNlZmMtZTUyOS00OGU1LWFiNjktMWE2MzA2OWE0ZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Lj8uCRMofS3vg0cd7h5VeAzq++fLDvEUMjD ObX/y+9M8qD3ymq8h/4KzirkE8sJGBe2oGeCjNHv8FDo7KQMrbFiMsN4l7k75kqT mw0DvzpqzXu7/xg826I5u5VqNs7q5bmXe/tZv1IfOQ4VIMr+mKiHCSdM71Vt3FGJ +qF0Mouu8TaPKuYA6svRDxmhZwR9tom3wJSwGG/uChbTPiqX6Faffk4Wt2hFG+Z1 aJdOxzbRpev62pD/lCbqBnoqDqgbrI6mGMo1LjdZE37byJ7Aj0+EJ9wbFxB1iRYa r/g8KRF6QysndhRiWsBjPIc2nhTIECpSQAF4B8wn226ZV3TxRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIe6KC7aso99oCeqveVqxb6kGN3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Yzlh N2RhMC0zOTc0LTQ4YzItYTJjNS1mY2ExZWMzMjg0OGEvNDllNWYyOTAtNjE4Zi0z NTUwLWIwNTktMGM2MjMyMjYzYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWM5YTdkYTAtMzk3NC00OGMyLWEy YzUtZmNhMWVjMzI4NDhhLzVjOWE3ZGEwLTM5NzQtNDhjMi1hMmM1LWZjYTFlYzMy ODQ4YS5jcmwwHwYDVR0jBBgwFoAUy3jo0M7GwrVepCPnCc4BiznyXx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81YzlhN2RhMC0zOTc0LTQ4YzItYTJjNS1mY2Ex ZWMzMjg0OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXOWpA9KlPtdf5QMlBW0Ps79BEyJVtgTpYrLYQxriDSBs35V3uetfQT nuCVUcqrV+onkX0dVxCLsK6kov8UyffYGCkH/zBuqrr3ixfnTBvd9R4ZSANAXynL nUxNyNR4T5rBwH6lyN7IQTmIfXfRyI3jiFFu0iixeUCzJvEl4gkBPMxrGTnoVmWW JAChq2MIRoVQjTOcimLBzWKwuWxksMuUEFaDlkKHHSiU1MFn+cSnsznhWMOqVxPf My/5r0yvJhDdF1kHM1Sj9HIgRJurDLRvwIAoURgtxeNMPrFl543zwQEfQCz1ifh0 6QQ9d+NFdyFl6b71S/kOwUEudK/fWJQ= -----END CERTIFICATE-----Generated at Tue Jul 1 20:03:05 2025 by rpki-client