$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa File: 0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa (raw, json) Hash identifier: 1fq8h8kMbKY9iYC7KTukUyAzeYChwAaAghfy4qW89+M= Subject key identifier: 0D:A2:4D:BB:4C:FD:8C:33:53:2F:D9:D8:AA:51:6D:B5:D2:44:A0:3C Certificate issuer: /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0 Certificate serial: 010D0C9F43285849393E7A2C2195F4D5C4754F60 Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 11904 IP address blocks: 209.25.240.0/20 maxlen: 20 209.25.240.0/21 maxlen: 21 209.25.240.0/22 maxlen: 22 209.25.244.0/22 maxlen: 22 209.25.248.0/21 maxlen: 21 209.25.248.0/22 maxlen: 22 209.25.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:7a:2c:21:95:f4:d5:c4:75:4f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=f9174258-b3fa-4faf-86d7-bd098e8687ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:a1:05:df:40:78:4e:7f:8a:7f:e4:85:a9: 3a:52:87:a8:d5:2d:33:9a:8c:03:53:07:b2:f4:ba: 47:42:b3:ac:79:27:f2:e0:e5:dc:f3:49:54:02:58: 59:f3:16:76:4b:7f:5c:6d:16:9f:68:7a:7d:d0:62: 3d:56:ae:75:6c:d5:60:87:59:7d:26:f2:10:9e:3b: be:60:3d:c8:ff:83:47:01:e5:64:f0:89:cd:80:37: 93:43:ce:c1:2a:f4:5c:77:3f:5a:3c:2b:2c:7f:0b: 3b:16:23:42:60:bd:d6:cd:b7:12:d7:31:24:bc:cb: 9d:da:13:22:92:cc:f1:b1:46:5c:f1:bd:82:f3:85: d0:d7:29:46:e6:2e:a9:d7:b5:1f:bf:fe:ea:f5:8b: 28:45:c7:96:86:29:8a:57:05:cd:91:de:39:cd:95: 57:d7:1c:56:b6:d5:0e:d0:45:82:b3:d7:b8:4b:b4: c3:fc:a9:85:20:a1:50:68:c7:4c:cc:3b:0c:74:55: 42:6f:f0:9e:9c:df:c6:75:20:15:77:16:a5:02:e1: c2:fb:01:4d:07:14:6d:62:8e:d0:31:0c:e3:41:49: dc:49:03:f8:85:93:e8:52:bd:5c:de:05:b8:e4:1b: 7f:ff:66:d2:cb:72:7f:87:73:0a:a1:4a:4c:46:bd: c7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A2:4D:BB:4C:FD:8C:33:53:2F:D9:D8:AA:51:6D:B5:D2:44:A0:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl X509v3 Authority Key Identifier: keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer sbgp-ipAddrBlock: critical IPv4: 209.25.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:91:30:1a:39:2f:45:95:61:f7:fe:33:1a:22:ef:f5:78:d5: 10:a8:72:f4:07:eb:17:0c:53:29:9a:3c:21:c6:bb:60:c5:17: b5:f6:5c:22:32:7e:d4:e9:5b:b5:1d:e5:ba:a7:f4:aa:a9:49: 08:12:04:7b:ac:01:ba:12:b1:2a:92:ac:3e:83:79:2a:09:fa: 34:c8:d4:f4:ba:8c:61:11:68:49:8e:d6:85:28:5d:88:3e:af: 57:ef:cf:8f:a7:5c:89:ec:06:fa:24:a7:dc:93:e4:4c:56:2e: 9d:b3:35:53:f4:b0:f2:f7:a9:ff:38:34:d0:8f:fa:10:2c:c3: f4:29:52:b4:38:9b:d4:f8:8f:02:71:0e:8c:dd:6b:2f:99:a5: f0:91:eb:b8:61:45:c9:c2:6f:d6:32:17:56:21:94:31:97:d3: c4:ff:b3:17:bc:79:e6:1e:6d:d7:18:1c:b4:b2:06:bd:f1:17: d8:c1:47:fc:7a:ee:50:e5:19:f4:b8:69:93:89:a9:d7:29:18: 0f:c5:06:4a:fe:6a:63:76:e5:18:0c:db:a7:9b:bc:1a:27:6a: 7f:a5:3b:47:33:76:ef:6a:12:fa:46:a9:ed:93:5c:34:e4:de: cf:e2:3d:85:7c:02:f2:03:4a:73:f9:9c:9b:11:f7:b8:83:78: e0:e8:a4:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnosIZX01cR1T2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEzM2U0N2QtN2M5Ni00YTFmLTlhNWUtYzIwNzJmNWU3 ZmQwMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk ZjkxNzQyNTgtYjNmYS00ZmFmLTg2ZDctYmQwOThlODY4N2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzOhBd9AeE5/in/khak6Uoeo1S0zmowDUwey 9LpHQrOseSfy4OXc80lUAlhZ8xZ2S39cbRafaHp90GI9Vq51bNVgh1l9JvIQnju+ YD3I/4NHAeVk8InNgDeTQ87BKvRcdz9aPCssfws7FiNCYL3WzbcS1zEkvMud2hMi kszxsUZc8b2C84XQ1ylG5i6p17Ufv/7q9YsoRceWhimKVwXNkd45zZVX1xxWttUO 0EWCs9e4S7TD/KmFIKFQaMdMzDsMdFVCb/CenN/GdSAVdxalAuHC+wFNBxRtYo7Q MQzjQUncSQP4hZPoUr1c3gW45Bt//2bSy3J/h3MKoUpMRr3HVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2iTbtM/YwzUy/Z2KpRbbXSRKA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MTMz ZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3MmY1ZTdmZDAvMGY2NTdjNjYtZjM1Zi0z MGI5LWExZmUtYThkZDMzNzFiMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjEzM2U0N2QtN2M5Ni00YTFmLTlh NWUtYzIwNzJmNWU3ZmQwLzYxMzNlNDdkLTdjOTYtNGExZi05YTVlLWMyMDcyZjVl N2ZkMC5jcmwwHwYDVR0jBBgwFoAUV4kUoMAR4yp+Kc6cB1dl/lysiR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82MTMzZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3 MmY1ZTdmZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0RnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGRMBo5L0WVYff+Mxoi7/V41RCocvQH6xcMUymaPCHGu2DFF7X2XCIy ftTpW7Ud5bqn9KqpSQgSBHusAboSsSqSrD6DeSoJ+jTI1PS6jGERaEmO1oUoXYg+ r1fvz4+nXInsBvokp9yT5ExWLp2zNVP0sPL3qf84NNCP+hAsw/QpUrQ4m9T4jwJx Dozday+ZpfCR67hhRcnCb9YyF1YhlDGX08T/sxe8eeYebdcYHLSyBr3xF9jBR/x6 7lDlGfS4aZOJqdcpGA/FBkr+amN25RgM26ebvBonan+lO0czdu9qEvpGqe2TXDTk 3s/iPYV8AvIDSnP5nJsR97iDeODopBI= -----END CERTIFICATE-----Generated at Mon May 5 06:06:32 2025 by rpki-client