$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa File: 5c80a08c-e49d-33f4-b617-5ada5f2af850.roa (raw, json) Hash identifier: kig1c6OgtHjZrzqj/zS1rOiMZOxSXef7dKJR8JsQ9Dw= Subject key identifier: 9A:A4:BF:AE:2C:0A:38:DE:AA:17:13:AD:EF:E7:26:E7:EC:BB:FF:D8 Certificate issuer: /CN=e3370a8c-7e39-490d-985a-a478ce54459f Certificate serial: 010D0C9F4328584A225AC351DF198FD1335E4400 Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 4393 IP address blocks: 209.251.198.0/23 maxlen: 23 209.251.200.0/21 maxlen: 21 209.251.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:c3:51:df:19:8f:d1:33:5e:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=32b23f61-63d2-4003-ba01-60de40b87720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6d:03:6a:f2:75:c7:23:14:de:1c:82:4a:d8: 77:95:9b:39:c8:6e:3b:c6:f7:f1:be:da:77:25:27: 08:3e:12:77:94:f2:9c:a9:6c:61:b7:15:3b:f8:7b: 2f:7d:01:7c:30:a8:a0:82:ee:e4:a5:a4:d0:af:14: b8:6b:8c:86:b4:91:1e:fc:ab:d3:29:c0:7c:9a:31: 43:f9:65:d7:83:59:6b:2e:9a:ba:9d:a0:f9:b4:c8: 05:9a:8c:93:25:3a:8e:f8:b3:85:36:c4:d9:63:30: 3d:40:ab:d3:85:8d:32:30:47:c3:d8:74:4d:27:3b: 8f:1b:74:fb:c4:ea:a3:cc:b3:0a:31:af:99:2c:5e: 88:f0:47:9d:52:34:72:0a:a2:d1:52:8a:10:06:94: f6:3c:e4:16:eb:ac:34:36:31:35:98:36:5d:bb:63: 0e:36:42:c5:f9:d9:91:87:25:1c:29:93:d7:41:3c: 84:97:66:a2:b2:1d:79:9e:a5:ab:80:83:7b:2f:99: cb:2c:d7:02:88:a8:23:89:84:06:37:8f:be:90:f5: 2b:0c:f8:1b:75:fe:4c:c7:7c:39:01:0a:f1:34:f7: 8c:9c:fc:ef:01:8c:7c:a9:f0:4b:93:07:62:b1:63: c8:75:a4:e1:45:5d:96:0c:94:5c:70:c8:9b:fb:a5: af:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A4:BF:AE:2C:0A:38:DE:AA:17:13:AD:EF:E7:26:E7:EC:BB:FF:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl X509v3 Authority Key Identifier: keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer sbgp-ipAddrBlock: critical IPv4: 209.251.198.0-209.251.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ec:46:c8:22:25:e3:5e:5e:5f:bc:89:5d:67:b7:85:0a:a2: a3:a8:e0:43:58:6a:41:6d:7c:b4:6d:07:0d:cd:0e:85:84:03: 19:97:d7:fb:8a:3e:91:ae:ae:c9:1f:91:5d:a2:23:0c:06:55: dd:20:3a:c4:97:38:ed:66:1d:2e:9e:35:c3:97:9d:c6:19:37: a9:d6:42:c7:5f:52:ff:b4:bb:23:06:2e:f6:76:22:1f:21:f2: 3c:23:0d:56:80:a4:d7:15:d0:79:ae:c3:6a:44:35:ed:2a:a7: ff:6c:30:dc:e8:bf:04:7c:d9:a9:2d:30:ac:bb:ac:f3:b6:5e: 63:be:88:bc:8d:a4:60:2b:9a:6b:91:0e:1a:67:a9:36:98:4d: 15:b9:16:c0:71:74:aa:4c:7f:d7:95:1d:be:36:9a:76:8e:42: f0:d1:38:5b:e0:e3:68:f5:99:5d:10:27:a3:09:ce:ec:a4:b5: 71:b0:ba:07:04:a4:e3:c0:44:89:06:9a:ce:b3:62:73:d4:d7: e5:a5:ca:d5:44:9e:e2:c2:4c:84:14:5e:08:fc:39:2b:34:b8: 11:e4:25:52:db:08:00:b5:f5:97:df:58:c4:aa:a2:24:98:7a: af:51:ed:6c:cf:e4:ac:ae:3e:37:55:15:ae:da:da:14:0c:74: 22:2a:d3:6b -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEoiWsNR3xmP0TNeRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMzNzBhOGMtN2UzOS00OTBkLTk4NWEtYTQ3OGNlNTQ0 NTlmMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk MzJiMjNmNjEtNjNkMi00MDAzLWJhMDEtNjBkZTQwYjg3NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh20DavJ1xyMU3hyCSth3lZs5yG47xvfxvtp3 JScIPhJ3lPKcqWxhtxU7+HsvfQF8MKiggu7kpaTQrxS4a4yGtJEe/KvTKcB8mjFD +WXXg1lrLpq6naD5tMgFmoyTJTqO+LOFNsTZYzA9QKvThY0yMEfD2HRNJzuPG3T7 xOqjzLMKMa+ZLF6I8EedUjRyCqLRUooQBpT2POQW66w0NjE1mDZdu2MONkLF+dmR hyUcKZPXQTyEl2aish15nqWrgIN7L5nLLNcCiKgjiYQGN4++kPUrDPgbdf5Mx3w5 AQrxNPeMnPzvAYx8qfBLkwdisWPIdaThRV2WDJRccMib+6WvyQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJqkv64sCjjeqhcTre/nJufsu//YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3 MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4Y2U1NDQ1OWYvNWM4MGEwOGMtZTQ5ZC0z M2Y0LWI2MTctNWFkYTVmMmFmODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTMzNzBhOGMtN2UzOS00OTBkLTk4 NWEtYTQ3OGNlNTQ0NTlmL2UzMzcwYThjLTdlMzktNDkwZC05ODVhLWE0NzhjZTU0 NDU5Zi5jcmwwHwYDVR0jBBgwFoAU4uoLRS/p/vRebN8XfsgDYlxFUiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4 Y2U1NDQ1OWYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHR+8YD BAXR+8AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAT+xGyCIl415eX7yJXWe3hQqio6jgQ1hqQW18tG0HDc0O hYQDGZfX+4o+ka6uyR+RXaIjDAZV3SA6xJc47WYdLp41w5edxhk3qdZCx19S/7S7 IwYu9nYiHyHyPCMNVoCk1xXQea7DakQ17Sqn/2ww3Oi/BHzZqS0wrLus87ZeY76I vI2kYCuaa5EOGmepNphNFbkWwHF0qkx/15Udvjaado5C8NE4W+DjaPWZXRAnownO 7KS1cbC6BwSk48BEiQaazrNic9TX5aXK1USe4sJMhBReCPw5KzS4EeQlUtsIALX1 l99YxKqiJJh6r1HtbM/krK4+N1UVrtraFAx0IirTaw== -----END CERTIFICATE-----Generated at Mon Jun 30 01:22:26 2025 by rpki-client