$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9db22770-7fc9-33f5-b210-41b7efad06d2.roa File: 9db22770-7fc9-33f5-b210-41b7efad06d2.roa (raw, json) Hash identifier: 03LQN+r304nNFuiB8+hli/6kBsL2sczfdSF8Yy22ItM= Subject key identifier: 9C:33:7B:6E:95:E4:81:5D:54:F9:84:C3:F1:A9:E1:CE:4E:A1:56:C4 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F432858495F409BDB12135D19D7D8E5D0 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9db22770-7fc9-33f5-b210-41b7efad06d2.roa Signing time: Mon 31 Mar 2025 15:45:48 +0000 ROA not before: Mon 31 Mar 2025 15:45:48 +0000 ROA not after: Sun 29 Jun 2025 15:45:48 +0000 asID: 21782 IP address blocks: 67.209.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5f:40:9b:db:12:13:5d:19:d7:d8:e5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Mar 31 15:45:48 2025 GMT Not After : Jun 29 15:45:48 2025 GMT Subject: CN=1a211453-751c-40c6-a00f-b5e2d7cacd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:94:92:fa:d7:55:aa:09:48:2f:72:08:27:db: b6:91:e1:ba:5e:8e:fa:3d:64:36:0f:4a:18:fc:b4: b7:9f:a6:f3:12:6c:7c:bf:a6:d1:ea:1b:f8:67:84: 53:79:c5:9b:4c:6c:3a:c0:9e:7d:fb:56:94:07:20: 0a:51:79:5e:a3:46:94:e2:19:bb:61:38:b3:32:62: e2:4a:d8:04:82:dc:c9:57:28:ae:c3:64:c4:63:45: dc:68:e8:f6:dc:aa:5d:b8:64:29:d1:81:ae:65:df: 3f:60:3e:f2:aa:27:cf:66:2b:5e:c2:1c:e1:56:ab: 3c:5f:aa:c6:24:c3:a7:c8:59:aa:b8:f4:48:06:61: 98:41:c9:e7:cc:36:b5:8c:3c:d9:93:e4:8b:3e:6e: e8:d6:1a:a9:d6:9c:d6:73:6e:a5:93:e7:5f:88:ca: 67:93:78:94:f9:df:12:52:50:58:83:fa:2e:5f:e2: 68:c2:6c:ab:58:ce:64:a3:f5:5c:76:8e:27:e2:56: a5:55:61:60:69:9f:ec:28:42:a3:24:b5:48:fb:67: 5b:91:25:6e:6f:1d:b9:7c:41:f4:fc:69:3e:67:42: 0f:11:12:d3:ee:56:8e:c0:ec:36:4c:2c:80:c3:be: f9:dd:8b:9b:39:a0:c3:c6:5f:c3:57:59:1c:e4:de: 7d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:33:7B:6E:95:E4:81:5D:54:F9:84:C3:F1:A9:E1:CE:4E:A1:56:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9db22770-7fc9-33f5-b210-41b7efad06d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 67.209.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:12:f0:33:bf:e4:e4:bb:c0:67:4f:46:0a:df:b9:7f:a9:61: f6:5c:21:0b:eb:27:f5:15:0d:72:61:d8:30:c2:2c:d7:8b:09: 06:9c:ba:c8:eb:bd:cd:84:a9:fc:c9:94:a5:00:05:6d:bf:62: bb:5b:82:2c:03:31:91:b0:80:3e:85:40:84:c2:65:90:e1:f6: df:f3:d8:52:a2:e6:f8:30:ee:86:9a:e1:f9:2f:47:cc:1e:b4: 97:ea:34:b0:93:29:04:61:c8:76:2a:12:f8:50:35:64:39:f4: ec:f7:a6:ae:08:52:b5:b1:94:37:fd:16:7e:60:5f:a4:d4:9b: bb:df:d4:d8:43:a0:66:3c:c1:6b:da:94:57:c6:f0:a5:40:4c: c1:15:2f:00:ef:bf:bf:eb:49:ef:e4:f1:04:a8:e7:4f:df:16: 44:d1:56:d5:ca:89:2f:f7:8b:32:01:6f:7c:3a:3b:b4:56:94: b3:c3:94:ef:dd:2f:e9:9a:a2:d3:35:f7:b8:c4:82:94:79:3f: a5:b2:78:af:a9:f8:b1:fa:34:a2:f7:47:7b:2a:85:ba:e4:8e: f6:f6:62:48:f6:ed:35:3c:3d:93:94:2c:0b:ad:af:e8:dc:63: af:a4:36:a9:f0:8a:04:d8:99:28:bd:76:2f:fd:fc:c9:f1:7d: 09:a2:b0:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElfQJvbEhNdGdfY5dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MDMzMTE1NDU0OFoXDTI1MDYyOTE1NDU0OFowLzEtMCsGA1UEAxMk MWEyMTE0NTMtNzUxYy00MGM2LWEwMGYtYjVlMmQ3Y2FjZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZSS+tdVqglIL3IIJ9u2keG6Xo76PWQ2D0oY /LS3n6bzEmx8v6bR6hv4Z4RTecWbTGw6wJ59+1aUByAKUXleo0aU4hm7YTizMmLi StgEgtzJVyiuw2TEY0XcaOj23KpduGQp0YGuZd8/YD7yqifPZitewhzhVqs8X6rG JMOnyFmquPRIBmGYQcnnzDa1jDzZk+SLPm7o1hqp1pzWc26lk+dfiMpnk3iU+d8S UlBYg/ouX+JowmyrWM5ko/Vcdo4n4lalVWFgaZ/sKEKjJLVI+2dbkSVubx25fEH0 /Gk+Z0IPERLT7laOwOw2TCyAw7753YubOaDDxl/DV1kc5N59wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwze26V5IFdVPmEw/Gp4c5OoVbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvOWRiMjI3NzAtN2ZjOS0z M2Y1LWIyMTAtNDFiN2VmYWQwNmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9HAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoS8DO/5OS7wGdPRgrfuX+pYfZcIQvrJ/UVDXJh2DDCLNeLCQacusjr vc2EqfzJlKUABW2/YrtbgiwDMZGwgD6FQITCZZDh9t/z2FKi5vgw7oaa4fkvR8we tJfqNLCTKQRhyHYqEvhQNWQ59Oz3pq4IUrWxlDf9Fn5gX6TUm7vf1NhDoGY8wWva lFfG8KVATMEVLwDvv7/rSe/k8QSo50/fFkTRVtXKiS/3izIBb3w6O7RWlLPDlO/d L+maotM197jEgpR5P6WyeK+p+LH6NKL3R3sqhbrkjvb2Ykj27TU8PZOULAutr+jc Y6+kNqnwigTYmSi9di/9/MnxfQmisOw= -----END CERTIFICATE-----Generated at Fri May 9 13:23:32 2025 by rpki-client