$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/7eef53f2-a70a-3de5-87e9-3cbc6bcc740d.roa File: 7eef53f2-a70a-3de5-87e9-3cbc6bcc740d.roa (raw, json) Hash identifier: eVm1F299m2yPQ+O05GRuOLGeYb8VgryAQyJO61DfsbU= Subject key identifier: 45:78:F4:90:A4:5A:51:AB:89:28:88:0C:84:FF:44:23:0D:43:21:0D Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Certificate serial: 010D0C9F4328584A480AE759D48F8691EEE3CB24 Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/7eef53f2-a70a-3de5-87e9-3cbc6bcc740d.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 11739 IP address blocks: 209.20.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e7:59:d4:8f:86:91:ee:e3:cb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=0b0e8bf5-0147-4517-b31f-c7de53dc6f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7d:e1:0e:88:47:99:0a:1c:8a:80:59:97:11: c8:9d:dd:5b:01:04:a6:ca:c9:2a:23:0a:aa:24:a1: 82:66:2d:7a:9f:51:9b:30:18:4b:d2:8b:25:ba:31: bf:ea:33:e7:97:c6:fd:57:bc:3c:79:a2:2c:78:6a: fb:43:b8:e3:22:e5:b5:71:89:c0:b3:c7:3f:3c:e7: ec:dc:34:63:50:55:8a:8b:85:3d:70:e5:07:4a:c0: 0e:d5:0f:75:2c:4b:fe:5e:b5:c8:3c:fb:80:6a:fe: c7:97:75:3e:cc:57:c3:c5:65:3c:37:7a:76:28:c8: ba:ae:33:d4:95:77:54:48:fb:b1:42:77:69:1b:65: 81:03:d6:0f:a0:26:04:28:e2:40:8d:3a:de:eb:c1: 50:b1:9f:b8:73:72:73:85:4c:7a:35:ee:90:d1:9c: b1:47:26:1e:e8:25:0e:f1:08:1e:ed:b4:b4:8a:cb: 93:18:0b:af:2d:03:43:cc:ad:ae:c3:63:16:41:69: be:8f:06:4a:78:4e:d5:ea:52:e5:a9:7c:72:3b:9c: 5f:be:98:db:9f:10:b8:d3:48:7b:0b:79:6c:6a:7a: 33:d4:5a:54:ad:55:30:ac:e1:74:71:ab:6f:9e:b7: e7:ba:95:86:03:16:0b:8f:6e:25:f8:ff:74:40:e1: f4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:78:F4:90:A4:5A:51:AB:89:28:88:0C:84:FF:44:23:0D:43:21:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/7eef53f2-a70a-3de5-87e9-3cbc6bcc740d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl X509v3 Authority Key Identifier: keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer sbgp-ipAddrBlock: critical IPv4: 209.20.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ec:0d:3f:27:de:dc:16:87:64:1e:e7:2a:36:01:0c:0e:8b: 2e:c9:2b:c5:f2:90:87:6a:cc:45:15:0f:75:a9:44:74:27:6c: f9:b0:14:14:59:74:da:9d:91:39:eb:86:0a:6d:4c:12:f4:d7: 70:9a:69:90:d7:f1:06:26:45:81:e4:31:cc:7e:f7:66:e1:76: 68:b3:f4:a1:28:a1:a1:8f:77:29:86:a8:31:2a:9e:9d:54:cd: 00:bc:de:e9:02:f7:8b:18:84:8e:73:d7:bf:ff:85:96:31:9e: 3c:cc:fa:b2:61:9e:a0:58:e3:40:1d:bf:47:38:4d:6e:36:26: e1:e3:e3:89:0e:84:10:7f:6f:23:14:fd:18:b5:8e:62:51:ed: d4:58:0b:fe:d1:5d:42:d1:5f:ee:e4:a6:d9:1a:f1:dd:cb:3c: 9a:65:a0:82:c3:50:ab:a8:ca:2a:f4:14:46:0e:2f:5f:e4:02: 14:3a:9f:cb:45:c7:f7:43:01:35:74:99:82:08:45:83:e6:d4: 7f:75:d9:da:04:5c:3b:62:ce:2f:1d:52:2d:e1:5c:2a:6f:35: 6b:71:a0:70:90:1a:e4:1c:5f:79:85:c1:5f:f7:d6:4d:81:5d: 0e:80:1c:92:01:d5:1d:48:ad:db:5e:60:a8:6d:5e:35:ea:8d: b8:14:8b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICudZ1I+Gke7jyyQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM5YTdkYTAtMzk3NC00OGMyLWEyYzUtZmNhMWVjMzI4 NDhhMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk MGIwZThiZjUtMDE0Ny00NTE3LWIzMWYtYzdkZTUzZGM2ZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH3hDohHmQocioBZlxHInd1bAQSmyskqIwqq JKGCZi16n1GbMBhL0oslujG/6jPnl8b9V7w8eaIseGr7Q7jjIuW1cYnAs8c/POfs 3DRjUFWKi4U9cOUHSsAO1Q91LEv+XrXIPPuAav7Hl3U+zFfDxWU8N3p2KMi6rjPU lXdUSPuxQndpG2WBA9YPoCYEKOJAjTre68FQsZ+4c3JzhUx6Ne6Q0ZyxRyYe6CUO 8Qge7bS0isuTGAuvLQNDzK2uw2MWQWm+jwZKeE7V6lLlqXxyO5xfvpjbnxC400h7 C3lsanoz1FpUrVUwrOF0catvnrfnupWGAxYLj24l+P90QOH04wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV49JCkWlGriSiIDIT/RCMNQyENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Yzlh N2RhMC0zOTc0LTQ4YzItYTJjNS1mY2ExZWMzMjg0OGEvN2VlZjUzZjItYTcwYS0z ZGU1LTg3ZTktM2NiYzZiY2M3NDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWM5YTdkYTAtMzk3NC00OGMyLWEy YzUtZmNhMWVjMzI4NDhhLzVjOWE3ZGEwLTM5NzQtNDhjMi1hMmM1LWZjYTFlYzMy ODQ4YS5jcmwwHwYDVR0jBBgwFoAUy3jo0M7GwrVepCPnCc4BiznyXx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81YzlhN2RhMC0zOTc0LTQ4YzItYTJjNS1mY2Ex ZWMzMjg0OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLsDT8n3twWh2Qe5yo2AQwOiy7JK8XykIdqzEUVD3WpRHQnbPmwFBRZ dNqdkTnrhgptTBL013CaaZDX8QYmRYHkMcx+92bhdmiz9KEooaGPdymGqDEqnp1U zQC83ukC94sYhI5z17//hZYxnjzM+rJhnqBY40Adv0c4TW42JuHj44kOhBB/byMU /Ri1jmJR7dRYC/7RXULRX+7kptka8d3LPJploILDUKuoyir0FEYOL1/kAhQ6n8tF x/dDATV0mYIIRYPm1H912doEXDtizi8dUi3hXCpvNWtxoHCQGuQcX3mFwV/31k2B XQ6AHJIB1R1IrdteYKhtXjXqjbgUi/k= -----END CERTIFICATE-----Generated at Tue Jul 1 23:26:01 2025 by rpki-client