$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/8c021314-84f0-3f55-a21d-d6278fb7b41a.roa File: 8c021314-84f0-3f55-a21d-d6278fb7b41a.roa (raw, json) Hash identifier: tnJUOEbTNhaEd0qpm7W1qlczO3Sw8UUsnnaP7rzLvHE= Subject key identifier: B5:17:72:64:5D:3A:97:6E:BC:AC:87:2C:F4:0A:5D:04:17:4D:21:7B Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584A31B5634ADACF7D2262055480 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/8c021314-84f0-3f55-a21d-d6278fb7b41a.roa Signing time: Sun 15 Jun 2025 01:00:49 +0000 ROA not before: Sun 15 Jun 2025 01:00:49 +0000 ROA not after: Sat 13 Sep 2025 01:00:49 +0000 asID: 21947 IP address blocks: 209.137.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:b5:63:4a:da:cf:7d:22:62:05:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jun 15 01:00:49 2025 GMT Not After : Sep 13 01:00:49 2025 GMT Subject: CN=7882ff4d-7d41-4bc3-b8b0-a16963b979d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:17:fa:b4:8a:51:28:38:99:43:d2:26:08: 4f:b4:65:32:b4:41:84:c3:d4:1c:47:7a:f4:c7:2a: 40:0f:e7:c9:b4:dd:ca:45:e7:39:3a:8b:6f:ec:26: f7:5d:55:fd:54:db:a7:d7:d6:af:1d:5a:53:43:45: 5e:ce:93:ef:af:72:86:b6:64:5b:0d:e4:ae:23:4b: f4:2a:ee:cd:16:8e:ca:8d:4b:4b:0c:1a:45:fd:52: 43:a1:64:23:48:28:83:ec:c2:e2:ba:f7:a7:f9:17: dc:7b:bb:ce:1e:c6:31:07:62:6f:68:5f:42:1d:08: b9:f7:c9:1c:a5:e4:a6:cd:ed:73:06:3a:5a:fb:82: c5:55:8f:04:00:cf:8e:32:5f:14:51:f2:10:04:2c: c9:a4:b6:e6:05:a2:39:3a:5b:de:81:ab:dd:31:6f: 26:07:1b:6a:5e:c7:f5:f5:48:a7:3d:bf:fd:52:c3: ce:44:e7:e5:d2:aa:30:2d:d3:e7:de:88:09:e6:ad: f9:38:c2:6a:f0:79:b7:ff:65:0e:eb:2a:a0:6e:a5: 05:21:46:cf:79:bd:c5:58:f1:39:88:2f:7d:c0:ae: b6:0e:71:92:a0:13:18:84:5c:11:af:8c:3f:2d:2e: f8:fc:d2:a7:a1:9f:a4:a9:79:29:b4:23:c2:2b:00: 57:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:17:72:64:5D:3A:97:6E:BC:AC:87:2C:F4:0A:5D:04:17:4D:21:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/8c021314-84f0-3f55-a21d-d6278fb7b41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 209.137.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6b:4d:3a:21:f0:a4:bb:a2:22:5a:d7:32:26:b5:5b:c7:01: 5d:3f:a5:cd:34:e5:25:6b:56:ad:ca:d1:21:90:0f:8e:9b:2d: 0e:0f:ea:a0:9f:b7:a5:3a:95:e3:6b:42:b5:7c:6d:8e:44:9f: fa:f8:fe:11:40:32:b5:81:2d:d6:0f:77:e3:47:0f:21:aa:f7: 7f:ba:ba:aa:1a:ae:b4:c9:60:56:6c:1c:b2:c3:18:4a:44:d7: 78:f8:bf:65:ea:8b:55:6e:b8:6d:27:9d:26:52:2c:14:53:0d: 07:3e:1b:0f:01:d8:ef:13:4f:b0:46:d5:e4:ea:c1:e2:de:6c: 0e:de:e9:b8:74:b4:5b:14:17:a8:51:c8:e9:5a:cf:cb:a3:d0: 66:81:b5:8c:96:9d:a9:e4:ea:02:f4:e7:7e:ef:c9:76:7a:ba: 63:73:76:d1:0e:d5:a9:cb:05:d2:30:fa:f0:79:5b:86:ea:dc: f3:77:af:7a:99:f6:86:27:c4:aa:5f:4f:97:0a:b4:ed:e3:86: 0a:ea:24:91:ed:af:96:b1:fc:6e:52:8c:87:5b:70:f6:2d:ce: 96:c4:b7:43:b7:e5:4b:6c:5d:8d:0f:d9:84:75:86:30:5c:a8: 99:13:dd:00:76:33:ed:05:02:e2:97:33:fe:d3:55:10:75:02: 89:dd:a3:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoxtWNK2s99ImIFVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDYxNTAxMDA0OVoXDTI1MDkxMzAxMDA0OVowLzEtMCsGA1UEAxMk Nzg4MmZmNGQtN2Q0MS00YmMzLWI4YjAtYTE2OTYzYjk3OWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCYX+rSKUSg4mUPSJghPtGUytEGEw9QcR3r0 xypAD+fJtN3KRec5Ootv7Cb3XVX9VNun19avHVpTQ0VezpPvr3KGtmRbDeSuI0v0 Ku7NFo7KjUtLDBpF/VJDoWQjSCiD7MLiuven+Rfce7vOHsYxB2JvaF9CHQi598kc peSmze1zBjpa+4LFVY8EAM+OMl8UUfIQBCzJpLbmBaI5OlvegavdMW8mBxtqXsf1 9UinPb/9UsPOROfl0qowLdPn3ogJ5q35OMJq8Hm3/2UO6yqgbqUFIUbPeb3FWPE5 iC99wK62DnGSoBMYhFwRr4w/LS74/NKnoZ+kqXkptCPCKwBXLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUXcmRdOpduvKyHLPQKXQQXTSF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvOGMwMjEzMTQtODRmMC0z ZjU1LWEyMWQtZDYyNzhmYjdiNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdrTToh8KS7oiJa1zImtVvHAV0/pc005SVrVq3K0SGQD46bLQ4P6qCf t6U6leNrQrV8bY5En/r4/hFAMrWBLdYPd+NHDyGq93+6uqoarrTJYFZsHLLDGEpE 13j4v2Xqi1VuuG0nnSZSLBRTDQc+Gw8B2O8TT7BG1eTqweLebA7e6bh0tFsUF6hR yOlaz8uj0GaBtYyWnank6gL0537vyXZ6umNzdtEO1anLBdIw+vB5W4bq3PN3r3qZ 9oYnxKpfT5cKtO3jhgrqJJHtr5ax/G5SjIdbcPYtzpbEt0O35UtsXY0P2YR1hjBc qJkT3QB2M+0FAuKXM/7TVRB1Aondo3A= -----END CERTIFICATE-----Generated at Tue Jul 1 02:31:48 2025 by rpki-client