$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/73cd8657-911e-36b4-886a-32638bce4580.roa File: 73cd8657-911e-36b4-886a-32638bce4580.roa (raw, json) Hash identifier: sGaiY1jrO385i8U2wO3xRNJ6AjAsU5mLfLPJRZSuzqE= Subject key identifier: 98:6E:77:4D:41:50:C4:94:26:15:7B:A5:4E:41:26:98:AC:FA:C6:8F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849C67CB29F2DC8D96CD8EC5140 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/73cd8657-911e-36b4-886a-32638bce4580.roa Signing time: Wed 07 May 2025 15:15:08 +0000 ROA not before: Wed 07 May 2025 15:15:08 +0000 ROA not after: Tue 05 Aug 2025 15:15:08 +0000 asID: 199527 IP address blocks: 209.250.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:7c:b2:9f:2d:c8:d9:6c:d8:ec:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 15:15:08 2025 GMT Not After : Aug 5 15:15:08 2025 GMT Subject: CN=950e3ea4-fde6-4df7-9d74-d954067e91af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:3b:43:16:43:c9:d3:a7:0a:9d:b3:35:a5: e1:92:e2:97:5a:b9:4c:d8:b2:30:91:40:a2:9a:af: cf:9d:0c:1a:3c:9b:db:a5:43:17:fb:ee:db:98:78: ec:34:b6:1a:53:00:34:83:5a:ef:43:ad:15:af:d0: 1a:49:dd:f3:9d:93:6d:99:3e:b2:d0:7f:1b:2f:82: 45:9e:19:cd:ef:dc:b9:4c:d4:e6:0d:f9:3f:2f:9c: c2:c9:5c:0e:ab:7c:3d:60:42:1f:19:0b:60:4c:e1: d8:4c:00:f5:78:1b:a6:01:7f:56:42:60:83:ce:03: 16:ed:5d:ab:98:47:fb:9b:89:e5:ac:dd:4a:1a:1e: 92:93:a5:12:f5:46:65:82:80:bf:90:26:30:66:01: 04:9a:d8:d7:a4:cc:aa:e0:b7:ea:8e:42:d6:be:94: 79:7a:7e:5c:42:5f:da:ca:bc:d5:97:27:2e:53:21: c5:f3:0c:d3:66:d5:0f:17:65:94:8b:4d:0e:bf:fd: ea:39:4f:b7:9b:e1:72:9c:47:c2:0b:ee:92:ab:91: 86:c3:fa:58:14:8b:02:07:1a:96:87:a4:7b:49:d8: 1e:6c:04:75:12:99:85:dd:89:f2:67:ed:c0:bc:23: ef:ab:9c:5f:4b:16:68:74:44:ce:dc:f7:b6:31:96: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6E:77:4D:41:50:C4:94:26:15:7B:A5:4E:41:26:98:AC:FA:C6:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/73cd8657-911e-36b4-886a-32638bce4580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.250.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:4f:9d:29:b9:85:e6:72:e8:08:1d:fe:8e:52:1e:d8:24:b3: 8a:f6:28:0d:98:7c:70:d1:2d:f7:c1:5e:e3:92:f9:e1:3d:b9: 32:af:20:5a:9f:c5:e2:14:c8:5b:e1:38:4d:3d:5b:a8:7a:69: ed:53:c1:b7:1b:e5:c4:08:cc:a9:31:04:80:39:3c:81:cb:de: ce:9e:42:1f:43:16:93:1f:8c:f8:dc:2f:a0:18:e5:34:06:46: af:bf:b6:0e:85:e4:76:64:a2:56:68:cb:e8:ba:9a:b4:aa:52: 53:cf:7a:1b:d0:53:66:d0:9c:75:b8:6c:cd:95:c3:89:40:4c: 03:68:0d:17:fb:ac:8f:39:a2:0e:04:7f:c9:b7:43:f0:3f:b0: 04:ab:f8:49:14:63:57:56:f1:13:de:e0:9f:a1:ee:32:9b:b2: fd:a2:52:78:6b:ad:8f:03:02:17:8e:c4:2d:15:aa:86:af:88: 69:77:21:8c:d6:a9:64:8d:1c:d6:2c:cf:92:b7:c9:9f:28:dd: fc:5f:7c:87:88:d2:c0:ed:be:b2:8b:5d:6e:3b:c4:25:ce:71: 8f:7f:b7:08:54:7d:40:66:ae:01:b1:d4:27:5e:f6:da:f3:12: af:8d:48:85:ed:38:d6:a7:88:7a:ae:9e:89:e0:c6:16:e7:cd: 49:90:cd:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnGfLKfLcjZbNjsUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUwNzE1MTUwOFoXDTI1MDgwNTE1MTUwOFowLzEtMCsGA1UEAxMk OTUwZTNlYTQtZmRlNi00ZGY3LTlkNzQtZDk1NDA2N2U5MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOE7QxZDydOnCp2zNaXhkuKXWrlM2LIwkUCi mq/PnQwaPJvbpUMX++7bmHjsNLYaUwA0g1rvQ60Vr9AaSd3znZNtmT6y0H8bL4JF nhnN79y5TNTmDfk/L5zCyVwOq3w9YEIfGQtgTOHYTAD1eBumAX9WQmCDzgMW7V2r mEf7m4nlrN1KGh6Sk6US9UZlgoC/kCYwZgEEmtjXpMyq4LfqjkLWvpR5en5cQl/a yrzVlycuUyHF8wzTZtUPF2WUi00Ov/3qOU+3m+FynEfCC+6Sq5GGw/pYFIsCBxqW h6R7SdgebAR1EpmF3YnyZ+3AvCPvq5xfSxZodETO3Pe2MZYfFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhud01BUMSUJhV7pU5BJpis+saPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzNjZDg2NTctOTExZS0z NmI0LTg4NmEtMzI2MzhiY2U0NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fp0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJPnSm5heZy6Agd/o5SHtgks4r2KA2YfHDRLffBXuOS+eE9uTKvIFqf xeIUyFvhOE09W6h6ae1Twbcb5cQIzKkxBIA5PIHL3s6eQh9DFpMfjPjcL6AY5TQG Rq+/tg6F5HZkolZoy+i6mrSqUlPPehvQU2bQnHW4bM2Vw4lATANoDRf7rI85og4E f8m3Q/A/sASr+EkUY1dW8RPe4J+h7jKbsv2iUnhrrY8DAheOxC0VqoaviGl3IYzW qWSNHNYsz5K3yZ8o3fxffIeI0sDtvrKLXW47xCXOcY9/twhUfUBmrgGx1Cde9trz Eq+NSIXtONaniHqunongxhbnzUmQzYE= -----END CERTIFICATE-----Generated at Thu May 15 12:37:21 2025 by rpki-client