$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa File: db5733de-d9ee-315a-b4ee-49bb473ee114.roa (raw, json) Hash identifier: 21RBwY0Y6OerTVc8n/M20SAgw9GGdiNW9jIknWAC3+Y= Subject key identifier: 46:72:FB:30:CC:B4:D5:B7:16:87:E2:4D:E9:07:DE:59:CB:D4:A5:28 Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F4328584A2C2012F2CC4B90FDE8203C80 Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 21803 IP address blocks: 209.140.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:12:f2:cc:4b:90:fd:e8:20:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=c4a520e9-a7f7-48f4-a288-45dbc8f5da0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:33:c9:6b:3d:c0:c3:90:a9:6c:35:47:74:68: 29:20:57:d9:71:2c:41:0f:90:f4:fc:0e:8e:72:4c: bf:26:47:98:68:b2:53:51:64:45:e2:f3:37:d5:12: b8:1a:db:c4:a2:4b:ae:c7:4c:75:d8:15:6c:17:a1: 5e:cb:af:aa:f6:bc:51:2f:74:c5:b6:5b:ac:01:c2: 9c:67:22:5b:41:d3:49:65:64:e2:d9:f5:2d:18:eb: 05:0d:cb:67:75:43:0d:37:de:ea:af:77:74:c4:ec: ba:41:2b:17:c3:c7:ae:08:ab:98:81:2d:77:f6:f0: 17:2d:8d:de:4b:5c:9c:54:00:85:7d:98:3c:42:de: 22:73:30:74:89:47:aa:09:01:a3:8b:4b:d6:7d:b3: 7f:60:66:0e:32:33:08:45:12:a7:53:3a:78:9a:37: 11:9a:4e:91:a3:d5:9f:66:c5:0d:f1:1c:ee:8c:71: 42:0a:02:3c:dc:23:02:ee:41:34:cc:9b:7c:f9:0b: 4a:f8:9a:d1:e7:a6:44:be:57:48:18:29:03:5e:c8: b2:0e:88:6d:47:3d:04:ed:45:a9:25:a6:7e:c2:f0: 89:b7:82:d8:af:13:ec:f2:45:04:9a:37:c6:d8:85: 5c:22:93:9f:be:79:0b:0c:f8:d8:15:f3:94:fd:5f: 5a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:72:FB:30:CC:B4:D5:B7:16:87:E2:4D:E9:07:DE:59:CB:D4:A5:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: 209.140.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:55:83:51:b5:f7:f9:76:18:a0:a7:de:50:b8:f2:ab:d3:4a: 12:e2:05:54:a1:ed:24:9f:16:b8:e2:d7:0f:01:68:b2:76:2b: 11:63:6e:c5:c7:33:14:4a:36:6f:74:c1:33:4a:e0:12:82:b4: 02:e2:32:bd:a2:e6:b8:d1:0a:2c:2b:8a:60:5d:86:5e:d8:7a: 08:98:14:f8:41:97:d8:fb:56:79:e7:e1:81:40:26:97:bd:b8: ff:27:4c:88:ae:a0:c6:c5:de:db:5b:b5:13:4c:d4:3f:5d:b5: ca:32:27:26:ae:5b:76:f7:2b:c9:31:c4:4c:de:a1:06:15:b8: 4f:4e:bb:5e:9c:d5:ef:a6:4c:d1:8f:dd:eb:8b:0b:f3:63:c1: 19:a2:0a:17:37:03:af:33:29:d0:f2:d5:bc:af:70:38:ae:f8: 9d:25:24:a9:eb:a8:b2:5d:6d:a9:3e:75:68:09:05:27:dc:0c: 8d:06:34:7f:d6:4a:99:d0:6e:98:f4:93:57:e1:f6:07:24:e6: 67:6d:78:70:41:9b:64:5e:6e:2b:eb:d8:78:14:d8:7f:e2:75: 92:8d:f5:e8:66:ee:f0:93:7d:c4:c9:a6:48:2a:5f:95:39:02: 3a:21:06:c0:eb:91:70:8d:86:a0:2c:3d:4e:89:54:bf:72:18: d2:41:fe:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBLyzEuQ/eggPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk YzRhNTIwZTktYTdmNy00OGY0LWEyODgtNDVkYmM4ZjVkYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzPJaz3Aw5CpbDVHdGgpIFfZcSxBD5D0/A6O cky/JkeYaLJTUWRF4vM31RK4GtvEokuux0x12BVsF6Fey6+q9rxRL3TFtlusAcKc ZyJbQdNJZWTi2fUtGOsFDctndUMNN97qr3d0xOy6QSsXw8euCKuYgS139vAXLY3e S1ycVACFfZg8Qt4iczB0iUeqCQGji0vWfbN/YGYOMjMIRRKnUzp4mjcRmk6Ro9Wf ZsUN8RzujHFCCgI83CMC7kE0zJt8+QtK+JrR56ZEvldIGCkDXsiyDohtRz0E7UWp JaZ+wvCJt4LYrxPs8kUEmjfG2IVcIpOfvnkLDPjYFfOU/V9ahQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZy+zDMtNW3FofiTekH3lnL1KUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvZGI1NzMzZGUtZDllZS0z MTVhLWI0ZWUtNDliYjQ3M2VlMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0YwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5Vg1G19/l2GKCn3lC48qvTShLiBVSh7SSfFrji1w8BaLJ2KxFjbsXH MxRKNm90wTNK4BKCtALiMr2i5rjRCiwrimBdhl7YegiYFPhBl9j7Vnnn4YFAJpe9 uP8nTIiuoMbF3ttbtRNM1D9dtcoyJyauW3b3K8kxxEzeoQYVuE9Ou16c1e+mTNGP 3euLC/NjwRmiChc3A68zKdDy1byvcDiu+J0lJKnrqLJdbak+dWgJBSfcDI0GNH/W SpnQbpj0k1fh9gck5mdteHBBm2Rebivr2HgU2H/idZKN9ehm7vCTfcTJpkgqX5U5 AjohBsDrkXCNhqAsPU6JVL9yGNJB/h4= -----END CERTIFICATE-----Generated at Mon Jun 30 07:32:58 2025 by rpki-client