$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c09881b-27f4-3a0b-8a97-19081d46648e.roa File: 7c09881b-27f4-3a0b-8a97-19081d46648e.roa (raw, json) Hash identifier: gmn+pBoKNVOWyEhS53/eX14CwhJraEXStWV8Da3yguA= Subject key identifier: 38:E1:B6:B1:76:D4:19:26:18:BB:A2:28:7B:29:BD:59:BE:CD:07:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ACB5443497F4D55594356880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c09881b-27f4-3a0b-8a97-19081d46648e.roa Signing time: Mon 28 Apr 2025 09:38:05 +0000 ROA not before: Mon 28 Apr 2025 09:38:05 +0000 ROA not after: Sun 27 Jul 2025 09:38:05 +0000 asID: 32787 IP address blocks: 209.200.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ac:b5:44:34:97:f4:d5:55:94:35:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 09:38:05 2025 GMT Not After : Jul 27 09:38:05 2025 GMT Subject: CN=7a00871e-15cc-4132-812f-8e97d4c88cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9e:2a:ce:74:39:87:e7:f9:d0:3e:b4:8c:77: 22:2b:d5:88:ec:06:bb:4f:65:91:ab:98:65:ed:c4: b1:ab:20:b7:d6:ec:ab:84:c3:0b:69:3b:0e:fd:31: af:b5:f9:b9:33:04:0b:9f:5c:1c:c7:03:e6:2f:03: d8:66:36:4b:0f:38:75:c8:fb:61:34:05:72:eb:12: 70:3a:fc:d6:49:74:f9:1b:ad:e5:c1:30:4b:b2:8a: 48:bd:3a:38:e1:71:4c:77:26:f7:8c:75:33:9b:25: 44:8d:b3:02:94:2b:d9:d2:90:c8:52:25:bf:52:74: 74:8a:26:16:27:e2:0f:49:1a:1a:fd:f6:6e:b9:ee: 92:75:17:78:ec:34:af:a0:ad:4b:d0:81:26:5e:2d: d1:d0:14:13:e1:3f:4a:d3:e0:ac:2d:40:70:46:db: 6d:e4:f9:3d:95:44:f7:a3:d1:aa:71:3d:da:e1:35: b7:1c:43:66:9b:6a:26:b7:b6:d8:29:98:b3:5d:a0: 8a:c7:4f:63:28:d8:56:50:97:f0:b2:c7:51:93:c7: 03:e8:b8:74:c4:bd:c1:d5:fa:b1:9e:5d:fc:23:e7: 5d:d6:51:d4:f0:c8:89:bf:86:9f:71:fb:59:96:95: 92:e8:e3:38:e3:15:24:ad:5d:17:93:0b:35:ca:fa: 2d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E1:B6:B1:76:D4:19:26:18:BB:A2:28:7B:29:BD:59:BE:CD:07:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c09881b-27f4-3a0b-8a97-19081d46648e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:5d:f6:3e:3e:5c:e1:14:e8:c5:fc:45:a2:61:51:09:89:b6: bc:67:b4:b7:8d:b9:86:79:d8:42:95:f3:0b:76:78:5e:9c:5d: 49:fe:26:cc:3e:7f:4f:f9:9e:fc:c8:89:79:33:c1:e6:3a:2b: 79:81:67:c0:65:3d:85:97:ea:23:e6:94:60:89:01:78:03:43: 09:ff:9f:6c:72:66:9e:ed:37:9c:e2:42:3d:97:79:a6:aa:64: 8e:d5:62:97:8e:e4:2b:c4:e8:ff:7c:56:ce:f4:72:5a:34:57: 8d:54:a4:b1:70:a1:38:63:a2:4e:78:9e:1e:c6:0d:f4:1b:67: db:9c:60:bf:62:c1:c5:f9:5e:23:6f:ed:55:16:de:5c:f5:9f: d2:05:13:3b:b1:5a:cc:07:fb:3c:32:70:a3:99:b7:b5:03:1b: 66:42:48:6f:79:c1:df:69:5c:19:ab:53:9f:9e:e6:ba:b6:13: 91:a6:52:53:c3:a2:33:87:29:74:b8:07:77:1b:ad:b4:a9:39: f7:5b:e0:2f:f5:33:f5:2f:1c:c1:70:35:f8:59:92:3e:b0:50: d4:48:7e:df:da:bf:7a:ca:cb:3d:f6:e4:9f:99:b9:96:79:39: 66:23:0a:fe:20:b7:a6:75:b4:f2:43:f1:f4:bf:a6:8d:24:35: 5c:2f:c2:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmstUQ0l/TVVZQ1aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODA5MzgwNVoXDTI1MDcyNzA5MzgwNVowLzEtMCsGA1UEAxMk N2EwMDg3MWUtMTVjYy00MTMyLTgxMmYtOGU5N2Q0Yzg4Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ4qznQ5h+f50D60jHciK9WI7Aa7T2WRq5hl 7cSxqyC31uyrhMMLaTsO/TGvtfm5MwQLn1wcxwPmLwPYZjZLDzh1yPthNAVy6xJw OvzWSXT5G63lwTBLsopIvTo44XFMdyb3jHUzmyVEjbMClCvZ0pDIUiW/UnR0iiYW J+IPSRoa/fZuue6SdRd47DSvoK1L0IEmXi3R0BQT4T9K0+CsLUBwRttt5Pk9lUT3 o9GqcT3a4TW3HENmm2omt7bYKZizXaCKx09jKNhWUJfwssdRk8cD6Lh0xL3B1fqx nl38I+dd1lHU8MiJv4afcftZlpWS6OM44xUkrV0Xkws1yvotRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjhtrF21BkmGLuiKHspvVm+zQeGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2MwOTg4MWItMjdmNC0z YTBiLThhOTctMTkwODFkNDY2NDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cinMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdd9j4+XOEU6MX8RaJhUQmJtrxntLeNuYZ52EKV8wt2eF6cXUn+Jsw+ f0/5nvzIiXkzweY6K3mBZ8BlPYWX6iPmlGCJAXgDQwn/n2xyZp7tN5ziQj2Xeaaq ZI7VYpeO5CvE6P98Vs70clo0V41UpLFwoThjok54nh7GDfQbZ9ucYL9iwcX5XiNv 7VUW3lz1n9IFEzuxWswH+zwycKOZt7UDG2ZCSG95wd9pXBmrU5+e5rq2E5GmUlPD ojOHKXS4B3cbrbSpOfdb4C/1M/UvHMFwNfhZkj6wUNRIft/av3rKyz325J+ZuZZ5 OWYjCv4gt6Z1tPJD8fS/po0kNVwvwv4= -----END CERTIFICATE-----Generated at Fri May 9 02:57:04 2025 by rpki-client