$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/d489c930-352c-3f17-a5d2-b2cc806aff09.roa File: d489c930-352c-3f17-a5d2-b2cc806aff09.roa (raw, json) Hash identifier: 9vZyuTQPodpWC1OX61mTtVaV4lYV/UY7COgsMV9YrqA= Subject key identifier: 9E:74:01:DE:2A:AA:D2:14:41:EC:2E:D8:29:5F:39:98:85:EA:94:55 Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Certificate serial: 010D0C9F4328584A480AE9A3525F5D35AA099B40 Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/d489c930-352c-3f17-a5d2-b2cc806aff09.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 11739 IP address blocks: 209.20.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e9:a3:52:5f:5d:35:aa:09:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=204f9743-b0b4-44a8-918e-72600191d613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:34:d1:cd:fc:c9:1d:a0:2b:55:37:fc:68:e4: 5a:11:39:fa:1d:4e:bb:42:70:aa:52:fd:6d:67:84: de:19:7d:d0:cc:72:01:57:54:46:ad:b8:4f:4a:a5: 2f:03:56:1c:cb:da:f8:fc:d7:53:c9:a3:3a:fc:58: 58:a9:ca:82:b1:1f:7f:27:07:68:e5:55:52:6e:00: fb:76:d5:da:de:a6:6d:23:b7:74:d3:06:b4:52:59: 26:2f:db:40:9b:73:13:be:d3:38:45:11:8b:7b:5e: d1:74:f8:aa:a0:e5:15:08:64:9b:d3:e9:ba:88:22: a1:24:ff:7c:77:56:ce:24:ca:63:09:f2:f4:c7:9e: c2:24:25:0d:29:70:80:84:3e:b3:a9:0c:3e:da:44: 51:82:64:86:8f:a9:85:50:47:f4:5e:44:e2:8e:12: d4:8d:ee:2a:7b:d5:9f:2e:5d:ce:d9:56:ed:a8:d9: cc:24:dc:ff:e2:9a:df:65:f5:94:8f:b0:79:aa:a8: fb:68:dc:e0:95:f9:4c:2a:a9:49:49:32:d4:10:27: f3:1e:1d:de:07:5f:a2:b8:be:aa:64:ed:b8:08:15: 9c:70:dc:89:4e:a4:a7:03:fe:17:4f:a2:48:d7:27: 37:e9:c8:58:3b:b5:c0:39:1f:91:e8:5e:47:d9:68: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:74:01:DE:2A:AA:D2:14:41:EC:2E:D8:29:5F:39:98:85:EA:94:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/d489c930-352c-3f17-a5d2-b2cc806aff09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl X509v3 Authority Key Identifier: keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer sbgp-ipAddrBlock: critical IPv4: 209.20.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:0b:b1:54:7e:2f:12:39:44:d5:1d:68:89:d1:06:68:dd:8f: 59:bd:09:73:40:ea:fa:e6:75:b3:78:38:34:ab:36:c2:f6:26: 84:3b:f4:0f:b0:24:4a:f5:f1:dc:79:1e:bc:36:ec:5a:ba:61: 6e:51:9b:97:10:36:f3:9f:35:be:d7:2a:f1:de:f4:aa:57:7c: 0f:13:85:9f:8b:db:26:9a:39:b6:85:98:8e:2d:18:b1:4a:83: 73:ab:d7:31:a5:4a:d7:62:0e:f9:21:40:bd:ef:de:16:26:2b: 79:f2:47:08:59:4c:0b:6c:47:49:aa:29:0f:7d:3d:8b:3a:62: e0:0f:be:12:03:b2:f9:70:b0:45:35:f2:05:af:4f:5b:7c:e3: 51:5c:e1:74:42:d3:6a:90:60:40:3f:58:1d:79:97:66:b3:a8: 15:36:d2:47:1c:e9:31:d7:8d:9c:ff:ed:f7:2c:f6:8e:ea:3f: 13:53:0d:7c:b3:f4:95:70:1e:33:2e:ed:80:e5:8e:e1:0c:1b: 17:4b:20:81:03:2b:f4:5c:b4:64:d7:32:60:7e:c3:c0:f5:40: 83:56:7c:5d:b0:51:6d:de:27:a2:88:80:f3:eb:25:2d:fc:c0: 29:c4:fb:e6:f3:a3:af:75:b0:e7:92:29:21:1a:90:7a:3d:1f: 1f:f7:58:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICumjUl9dNaoJm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM5YTdkYTAtMzk3NC00OGMyLWEyYzUtZmNhMWVjMzI4 NDhhMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk MjA0Zjk3NDMtYjBiNC00NGE4LTkxOGUtNzI2MDAxOTFkNjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TTRzfzJHaArVTf8aORaETn6HU67QnCqUv1t Z4TeGX3QzHIBV1RGrbhPSqUvA1Ycy9r4/NdTyaM6/FhYqcqCsR9/Jwdo5VVSbgD7 dtXa3qZtI7d00wa0UlkmL9tAm3MTvtM4RRGLe17RdPiqoOUVCGSb0+m6iCKhJP98 d1bOJMpjCfL0x57CJCUNKXCAhD6zqQw+2kRRgmSGj6mFUEf0XkTijhLUje4qe9Wf Ll3O2VbtqNnMJNz/4prfZfWUj7B5qqj7aNzglflMKqlJSTLUECfzHh3eB1+iuL6q ZO24CBWccNyJTqSnA/4XT6JI1yc36chYO7XAOR+R6F5H2WhaJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ50Ad4qqtIUQewu2ClfOZiF6pRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Yzlh N2RhMC0zOTc0LTQ4YzItYTJjNS1mY2ExZWMzMjg0OGEvZDQ4OWM5MzAtMzUyYy0z ZjE3LWE1ZDItYjJjYzgwNmFmZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWM5YTdkYTAtMzk3NC00OGMyLWEy YzUtZmNhMWVjMzI4NDhhLzVjOWE3ZGEwLTM5NzQtNDhjMi1hMmM1LWZjYTFlYzMy ODQ4YS5jcmwwHwYDVR0jBBgwFoAUy3jo0M7GwrVepCPnCc4BiznyXx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81YzlhN2RhMC0zOTc0LTQ4YzItYTJjNS1mY2Ex ZWMzMjg0OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsLsVR+LxI5RNUdaInRBmjdj1m9CXNA6vrmdbN4ODSrNsL2JoQ79A+w JEr18dx5Hrw27Fq6YW5Rm5cQNvOfNb7XKvHe9KpXfA8ThZ+L2yaaObaFmI4tGLFK g3Or1zGlStdiDvkhQL3v3hYmK3nyRwhZTAtsR0mqKQ99PYs6YuAPvhIDsvlwsEU1 8gWvT1t841Fc4XRC02qQYEA/WB15l2azqBU20kcc6THXjZz/7fcs9o7qPxNTDXyz 9JVwHjMu7YDljuEMGxdLIIEDK/RctGTXMmB+w8D1QINWfF2wUW3eJ6KIgPPrJS38 wCnE++bzo691sOeSKSEakHo9Hx/3WAk= -----END CERTIFICATE-----Generated at Tue Jul 1 23:26:39 2025 by rpki-client