$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/02d146e7-6325-3de2-9714-da4c42be27c1.roa File: 02d146e7-6325-3de2-9714-da4c42be27c1.roa (raw, json) Hash identifier: pMOmkioSpAgaFIBq1VDQGWDjOlmyFJ+0v8dfYDfD7WM= Subject key identifier: 94:78:77:FB:BB:05:89:00:9E:02:30:5B:9E:5D:18:71:43:E3:78:6B Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F43285849D594D7682BE5FC150AABAC00 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/02d146e7-6325-3de2-9714-da4c42be27c1.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 13984 IP address blocks: 209.151.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:d7:68:2b:e5:fc:15:0a:ab:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=011d793d-e6d9-4951-8d06-3fa8545c2b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:db:74:e4:47:24:e4:4d:df:d6:05:0c:73: 9e:e4:cb:33:81:7a:64:92:a7:d5:aa:c9:c9:90:58: 9a:82:3f:88:7f:b4:83:6f:07:c0:47:38:06:82:81: 77:9d:d6:cc:05:80:22:ee:27:1c:98:57:ad:a8:5b: 6d:ea:0c:5d:44:56:10:eb:02:f9:56:15:fd:cb:06: 77:58:a0:e0:26:a2:50:62:71:03:73:58:6f:b3:38: a3:48:7e:6e:e6:d8:f2:f3:74:fe:09:cd:ea:a1:91: a9:e4:92:32:40:8c:9c:da:fd:9a:32:3e:00:15:c6: be:dc:2d:0c:7d:00:38:8c:d4:7d:c6:a7:09:9d:fc: 71:e1:c2:b8:32:40:ad:cf:8d:f7:46:12:66:fa:6d: 06:eb:20:df:73:0b:8a:b9:e2:3a:76:a5:99:69:64: 40:fb:c3:50:05:2e:b6:c4:b7:90:03:7e:ee:d2:ce: d3:e7:4c:40:26:35:3c:15:d3:b5:50:35:28:33:94: a9:7d:8a:3f:84:5d:a9:24:fb:34:90:42:fa:cd:67: 41:f2:58:05:41:9d:0b:09:7a:87:de:9e:9c:8a:53: 41:10:b3:8a:b5:2b:cd:73:7c:ea:6e:e7:f3:ec:53: 0e:8c:05:64:e8:9c:52:aa:f0:e7:9e:8c:a8:df:b4: 2a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:78:77:FB:BB:05:89:00:9E:02:30:5B:9E:5D:18:71:43:E3:78:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/02d146e7-6325-3de2-9714-da4c42be27c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 209.151.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e7:97:8b:83:bd:7c:06:fa:02:f0:d3:07:92:ee:bc:40:24: 48:54:60:85:82:c6:95:13:6a:95:a4:35:be:b7:fa:00:84:e9: 61:e3:52:bc:55:58:f5:2c:1c:7c:a3:e8:ab:b0:24:95:d1:50: 03:5a:53:f8:99:e3:fd:18:83:c4:05:05:3b:58:6e:09:b9:0d: 5e:cf:fb:98:40:4f:f5:06:81:ae:84:db:9b:25:50:fd:1e:44: 00:ce:3c:78:10:99:dd:18:d0:c2:02:e6:18:8d:05:65:ab:43: ed:f4:8c:f0:a3:11:5e:13:fb:90:ad:43:d7:2f:cc:da:d5:88: 88:c1:73:13:40:5b:29:99:c9:61:42:0a:86:30:b6:a3:e4:d0: e6:79:7e:1b:b4:c8:ef:02:b8:cc:54:3c:7e:d8:12:df:b8:4d: 58:07:f6:4b:f5:5d:80:a6:66:00:ec:8f:6f:ed:aa:28:42:d8: 27:2e:a9:b3:74:03:18:66:71:ec:f6:b5:97:2e:68:72:42:21: 8b:be:29:1d:89:ba:d4:71:64:96:5b:48:c7:86:43:4e:45:eb: 2a:b2:3e:68:fc:77:ae:fe:3a:87:02:af:00:ac:ad:97:69:b1: 4f:56:d7:2d:67:35:84:97:f1:cb:aa:f1:4f:07:da:a0:1b:02: 37:c0:21:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlNdoK+X8FQqrrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MDExZDc5M2QtZTZkOS00OTUxLThkMDYtM2ZhODU0NWMyYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8/bdORHJORN39YFDHOe5MszgXpkkqfVqsnJ kFiagj+If7SDbwfARzgGgoF3ndbMBYAi7iccmFetqFtt6gxdRFYQ6wL5VhX9ywZ3 WKDgJqJQYnEDc1hvszijSH5u5tjy83T+Cc3qoZGp5JIyQIyc2v2aMj4AFca+3C0M fQA4jNR9xqcJnfxx4cK4MkCtz433RhJm+m0G6yDfcwuKueI6dqWZaWRA+8NQBS62 xLeQA37u0s7T50xAJjU8FdO1UDUoM5SpfYo/hF2pJPs0kEL6zWdB8lgFQZ0LCXqH 3p6cilNBELOKtSvNc3zqbufz7FMOjAVk6JxSqvDnnoyo37QqqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJR4d/u7BYkAngIwW55dGHFD43hrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvMDJkMTQ2ZTctNjMyNS0z ZGUyLTk3MTQtZGE0YzQyYmUyN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZfZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/nl4uDvXwG+gLw0weS7rxAJEhUYIWCxpUTapWkNb63+gCE6WHjUrxV WPUsHHyj6KuwJJXRUANaU/iZ4/0Yg8QFBTtYbgm5DV7P+5hAT/UGga6E25slUP0e RADOPHgQmd0Y0MIC5hiNBWWrQ+30jPCjEV4T+5CtQ9cvzNrViIjBcxNAWymZyWFC CoYwtqPk0OZ5fhu0yO8CuMxUPH7YEt+4TVgH9kv1XYCmZgDsj2/tqihC2CcuqbN0 Axhmcez2tZcuaHJCIYu+KR2JutRxZJZbSMeGQ05F6yqyPmj8d67+OocCrwCsrZdp sU9W1y1nNYSX8cuq8U8H2qAbAjfAITc= -----END CERTIFICATE-----Generated at Tue Jul 1 16:06:35 2025 by rpki-client