$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa File: 40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa (raw, json) Hash identifier: pOEG+D7S7Q9W4UoLveqTMp2oHs0bKuxPMjhSjZBDJXk= Subject key identifier: 3F:B8:D0:89:D8:2E:4F:66:A3:FE:29:36:CE:06:A3:67:0B:A1:BC:B2 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584A45403A75C2B1A69E15D32B80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 271 IP address blocks: 209.87.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3a:75:c2:b1:a6:9e:15:d3:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=a8e6fb8c-71f7-4183-9969-f307f227c608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cf:a3:e3:67:04:25:13:bb:96:d1:cb:2e:a7: 3d:58:53:92:06:ff:1a:57:fa:ca:58:9e:9f:17:71: cf:1e:88:a4:91:b0:09:3a:44:2a:2a:1e:63:81:72: ce:de:9c:63:a0:fd:03:c1:b5:e0:8e:f5:9f:23:7b: 2b:f1:ec:18:42:90:78:96:ef:48:58:61:45:4f:2f: 1b:62:83:a2:7b:e6:f0:b7:15:77:a1:95:b7:2c:70: 73:fd:fe:df:7c:35:42:ab:a6:da:ad:9b:5c:54:d7: 31:2c:7b:60:2f:b4:62:d2:4c:a3:26:bf:d3:0d:1b: 12:34:dc:a2:52:c6:7f:ea:a3:9e:7f:73:43:d5:73: 8f:b4:af:db:a9:4c:ba:7f:77:07:72:fb:ff:2d:f8: 9c:ff:d7:c9:5a:1b:a1:72:ba:36:1d:0f:4e:50:a1: 0f:39:70:17:f0:dd:cf:4f:ac:34:d8:98:62:74:e8: 95:e3:58:1a:8e:48:73:d9:bb:55:d0:20:81:13:09: c2:cb:45:c7:bf:bf:32:82:9f:a1:f7:23:03:d5:b6: de:42:2e:cd:4e:6a:c2:54:83:87:44:01:69:84:43: a2:d6:fc:c6:8b:c5:fa:70:18:99:90:d8:53:95:8c: 75:a9:9e:a7:4e:3c:12:da:d5:87:84:f1:86:ec:33: 83:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B8:D0:89:D8:2E:4F:66:A3:FE:29:36:CE:06:A3:67:0B:A1:BC:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c3:5d:60:6e:d9:4a:2c:83:65:82:8b:99:47:e2:42:ed:41: da:c9:3c:24:cc:86:91:a3:4c:88:e2:fb:b1:5d:3a:0a:6f:35: 2e:22:43:da:2f:bb:f2:69:77:31:2d:1f:65:7d:5a:65:3e:9f: 2d:77:6a:dd:66:0b:fa:da:b5:76:fc:e9:db:89:e5:d6:50:01: 04:27:fc:0a:ee:12:0b:5d:93:e8:ee:ea:86:d6:f0:9f:14:2b: 23:4c:ea:a7:97:a0:af:77:b7:5c:5e:38:26:02:6e:a1:40:4e: 0b:b4:c7:35:d5:57:29:4b:ed:b0:bf:7a:18:79:68:8a:64:2f: d0:a1:40:57:6b:23:2b:a3:6b:26:9c:cd:b2:03:82:c9:96:a0: e8:e8:9d:80:57:2b:3a:e7:88:5e:80:c0:22:a8:a3:45:d4:1d: 44:85:75:a9:65:40:86:77:70:2d:ad:2e:ab:61:6d:d2:96:db: 23:73:b7:00:30:c6:fd:7e:c4:a8:84:fb:74:37:a3:7a:79:62: 5f:9f:66:4b:73:6e:5f:98:8c:54:ec:a4:80:04:36:2c:35:ff: 7f:34:1c:de:8e:af:ea:37:16:cb:c9:b7:b5:59:6a:7c:08:28: a0:f2:12:48:34:3c:ed:b1:dc:80:e8:d1:e3:4a:39:39:80:b7: 7b:38:83:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDp1wrGmnhXTK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk YThlNmZiOGMtNzFmNy00MTgzLTk5NjktZjMwN2YyMjdjNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM+j42cEJRO7ltHLLqc9WFOSBv8aV/rKWJ6f F3HPHoikkbAJOkQqKh5jgXLO3pxjoP0DwbXgjvWfI3sr8ewYQpB4lu9IWGFFTy8b YoOie+bwtxV3oZW3LHBz/f7ffDVCq6barZtcVNcxLHtgL7Ri0kyjJr/TDRsSNNyi UsZ/6qOef3ND1XOPtK/bqUy6f3cHcvv/Lfic/9fJWhuhcro2HQ9OUKEPOXAX8N3P T6w02JhidOiV41gajkhz2btV0CCBEwnCy0XHv78ygp+h9yMD1bbeQi7NTmrCVIOH RAFphEOi1vzGi8X6cBiZkNhTlYx1qZ6nTjwS2tWHhPGG7DODjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+40InYLk9mo/4pNs4Go2cLobyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNDBkZjBkOGMtNzhlYi0z OWU4LTgwYjktZGZlYmIxNzNkMGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbDXWBu2Uosg2WCi5lH4kLtQdrJPCTMhpGjTIji+7FdOgpvNS4iQ9ov u/JpdzEtH2V9WmU+ny13at1mC/ratXb86duJ5dZQAQQn/AruEgtdk+ju6obW8J8U KyNM6qeXoK93t1xeOCYCbqFATgu0xzXVVylL7bC/ehh5aIpkL9ChQFdrIyujayac zbIDgsmWoOjonYBXKzrniF6AwCKoo0XUHUSFdallQIZ3cC2tLqthbdKW2yNztwAw xv1+xKiE+3Q3o3p5Yl+fZktzbl+YjFTspIAENiw1/380HN6Or+o3FsvJt7VZanwI KKDyEkg0PO2x3IDo0eNKOTmAt3s4g7A= -----END CERTIFICATE-----Generated at Sun Jun 29 21:35:18 2025 by rpki-client