$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa File: 00d48a25-0292-390b-8771-b64ad9beccdb.roa (raw, json) Hash identifier: apuZCqFvGMLj16or/LRvphVe8Uw2ZR88Mm3E/ZBe+wo= Subject key identifier: 2B:CC:90:03:27:BC:32:37:42:6C:9F:3D:D2:35:E8:17:DC:FE:37:85 Certificate issuer: /CN=a91fff12-f74d-4a80-9a5d-f225534bc527 Certificate serial: 010D0C9F43285849B6DF569CEA41040B078B5718 Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 46595 IP address blocks: 209.169.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:56:9c:ea:41:04:0b:07:8b:57:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=6581b5fe-4773-404c-b6f1-9910fffc7822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:57:f7:64:6c:9d:b0:60:43:48:bc:09:34:c6: 9e:c2:2e:37:57:36:c2:ac:00:76:91:57:83:c1:4a: 58:f1:1a:8d:60:61:24:85:11:ff:2d:be:ac:3b:b9: 66:7b:21:14:c0:9b:91:99:70:69:44:44:64:72:bf: 20:b0:b8:b3:17:09:04:9c:b6:f0:2e:27:f3:01:a4: bf:67:d8:5e:f5:56:f0:b7:39:55:d8:de:20:6b:2e: 48:a3:78:5d:ba:83:12:51:eb:d2:81:d0:26:04:7b: 6a:b8:c0:3e:01:55:9b:20:59:b9:f9:08:d7:12:a8: d8:46:3a:b9:36:9b:72:db:41:86:7c:b6:48:dc:06: 87:32:de:7b:42:83:97:01:b9:53:ed:b3:09:a4:ec: df:78:53:cd:41:7e:a2:09:df:3e:c6:5d:b6:9a:5c: 07:c0:d0:51:41:3a:f5:08:47:b8:11:fd:9b:4b:f0: cc:a3:fa:ff:19:5e:8a:a2:a5:be:99:bd:c5:df:89: cc:a4:60:36:89:d9:72:a6:c8:ef:9c:72:b5:29:59: 43:8d:9d:65:1b:84:0c:a4:88:8c:33:64:3e:f3:19: f8:41:e9:8b:a0:ab:34:4f:09:c7:72:e5:d9:7d:a2: c5:49:fa:0b:2f:ee:4b:9e:3c:00:5c:5d:79:2a:99: 8b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CC:90:03:27:BC:32:37:42:6C:9F:3D:D2:35:E8:17:DC:FE:37:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl X509v3 Authority Key Identifier: keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer sbgp-ipAddrBlock: critical IPv4: 209.169.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:88:6b:89:a5:dc:20:2c:20:33:45:3c:22:27:bf:7b:31:ba: b2:de:2c:d2:06:64:cd:0b:f7:65:1f:3c:f6:37:e1:c1:c8:3d: 63:fb:d1:33:d9:83:09:49:eb:05:dd:c9:12:e6:04:5c:97:5c: d2:3e:ba:7d:72:79:9c:c5:89:9f:e4:79:fb:3b:e5:68:90:c3: 30:20:b5:d5:e9:74:96:a1:33:1f:3a:b9:3e:02:90:37:70:cb: 27:3c:40:00:96:0a:47:4a:cf:10:58:31:c8:e7:ca:f2:19:5e: fe:63:92:08:80:f1:fc:2e:c5:a5:49:0d:cd:c0:b1:1a:10:28: 36:28:38:ed:da:da:d3:fc:24:ed:9f:06:5d:f5:52:61:e2:91: 6c:3f:ef:f6:df:9a:5a:fb:21:46:18:e7:f5:95:46:96:3b:0f: dd:b5:e4:cd:35:0f:2b:de:3f:fb:73:e3:99:28:45:94:67:6f: 93:03:6b:3c:5d:0a:b7:1f:e3:9b:60:1b:1b:de:71:47:de:f4: 00:f8:24:90:54:49:56:2e:e2:64:22:0d:52:c6:4b:82:23:4d: 10:42:ea:79:d6:7d:75:49:e9:51:44:5b:3e:fc:00:15:4b:4a: 85:e1:49:17:38:2e:35:c4:77:59:47:4f:f5:48:6d:9b:e3:bd: ad:42:1e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm231ac6kEECweLVxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkxZmZmMTItZjc0ZC00YTgwLTlhNWQtZjIyNTUzNGJj NTI3MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk NjU4MWI1ZmUtNDc3My00MDRjLWI2ZjEtOTkxMGZmZmM3ODIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVf3ZGydsGBDSLwJNMaewi43VzbCrAB2kVeD wUpY8RqNYGEkhRH/Lb6sO7lmeyEUwJuRmXBpRERkcr8gsLizFwkEnLbwLifzAaS/ Z9he9VbwtzlV2N4gay5Io3hduoMSUevSgdAmBHtquMA+AVWbIFm5+QjXEqjYRjq5 Npty20GGfLZI3AaHMt57QoOXAblT7bMJpOzfeFPNQX6iCd8+xl22mlwHwNBRQTr1 CEe4Ef2bS/DMo/r/GV6KoqW+mb3F34nMpGA2idlypsjvnHK1KVlDjZ1lG4QMpIiM M2Q+8xn4QemLoKs0TwnHcuXZfaLFSfoLL+5LnjwAXF15KpmL3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvMkAMnvDI3QmyfPdI16Bfc/jeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hOTFm ZmYxMi1mNzRkLTRhODAtOWE1ZC1mMjI1NTM0YmM1MjcvMDBkNDhhMjUtMDI5Mi0z OTBiLTg3NzEtYjY0YWQ5YmVjY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTkxZmZmMTItZjc0ZC00YTgwLTlh NWQtZjIyNTUzNGJjNTI3L2E5MWZmZjEyLWY3NGQtNGE4MC05YTVkLWYyMjU1MzRi YzUyNy5jcmwwHwYDVR0jBBgwFoAUArhCAeKkLoXp5IhjfTqSng/BxOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hOTFmZmYxMi1mNzRkLTRhODAtOWE1ZC1mMjI1 NTM0YmM1MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0akAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuIa4ml3CAsIDNFPCInv3sxurLeLNIGZM0L92UfPPY34cHIPWP70TPZ gwlJ6wXdyRLmBFyXXNI+un1yeZzFiZ/kefs75WiQwzAgtdXpdJahMx86uT4CkDdw yyc8QACWCkdKzxBYMcjnyvIZXv5jkgiA8fwuxaVJDc3AsRoQKDYoOO3a2tP8JO2f Bl31UmHikWw/7/bfmlr7IUYY5/WVRpY7D9215M01DyveP/tz45koRZRnb5MDazxd Crcf45tgGxvecUfe9AD4JJBUSVYu4mQiDVLGS4IjTRBC6nnWfXVJ6VFEWz78ABVL SoXhSRc4LjXEd1lHT/VIbZvjva1CHkI= -----END CERTIFICATE-----Generated at Sat May 10 13:42:06 2025 by rpki-client