$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa File: db5733de-d9ee-315a-b4ee-49bb473ee114.roa (raw, json) Hash identifier: SUiSX/QyYAwP6mG7Ye6S3RODJDUts6L5bz4kdnjMEZc= Subject key identifier: 78:32:DA:AD:63:5E:F1:BE:71:F1:C3:E6:2F:27:80:2A:8D:7A:1E:59 Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F432858494CC93F4C5C36CE6C1469B440 Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 21803 IP address blocks: 209.140.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3f:4c:5c:36:ce:6c:14:69:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=af3479ec-485f-494b-b145-fe7500a27a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:58:27:d4:43:aa:a2:72:b9:71:b9:f4:0f: 22:a3:e0:ed:2d:39:08:8b:58:60:25:b6:60:f2:63: 24:07:44:bf:56:b9:6b:75:90:73:1b:08:8b:6d:90: 79:f8:89:e9:a2:2c:4e:5c:36:15:a3:13:6e:65:4b: b9:93:5d:8e:63:64:77:c5:cf:47:96:08:80:4f:52: a3:c1:f6:18:e8:24:df:c7:15:1d:dd:a1:4e:9e:a8: d6:ac:c9:23:ae:1b:63:06:94:cd:25:c4:22:5f:22: b1:53:2e:69:9a:c0:e9:b9:b0:c7:9e:06:d7:f0:80: 73:a7:29:08:b2:a4:dc:21:56:5a:9f:c3:68:16:4f: e8:52:6c:78:37:0b:93:d8:76:36:ee:63:31:04:4b: 04:56:cd:74:08:ac:43:6b:32:33:81:e3:17:9f:54: 42:95:e9:d3:6f:36:17:b3:39:13:b3:64:ea:b8:df: e8:86:2e:f8:bf:11:75:86:b7:2b:da:54:8c:be:ed: 17:4a:56:a9:52:a9:86:02:1c:04:f1:3e:85:d8:34: a6:d9:61:dc:2e:9e:20:87:d5:3d:25:cb:02:2d:64: 91:d2:8a:05:58:28:d0:33:72:ba:d2:8b:1c:0b:eb: 9e:07:8f:2e:e9:2c:12:45:09:ba:82:1e:7f:94:b3: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:32:DA:AD:63:5E:F1:BE:71:F1:C3:E6:2F:27:80:2A:8D:7A:1E:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: 209.140.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:dc:5d:d3:27:03:bf:1f:95:70:8b:b0:60:2a:26:91:1f:c1: 80:12:45:a5:2c:67:56:8b:08:51:4f:2e:6d:c9:c9:23:70:6f: 16:cb:0c:7d:27:e2:a8:60:c4:b6:72:2b:55:5a:6d:11:88:dd: e7:6a:58:66:21:42:24:f3:c6:f5:a5:2d:14:8b:6a:4b:cc:52: 30:57:8c:99:ff:ec:91:25:8b:79:4a:0e:4b:02:64:f8:97:0f: b5:7a:c2:83:4d:0e:2a:88:9b:c7:f1:a7:77:43:bc:dd:ae:c8: eb:e3:a8:e6:2b:8c:cf:53:40:41:4b:7c:05:bb:e0:82:88:2f: 31:35:a0:e7:cb:35:77:0c:59:77:f9:28:92:0a:26:8a:0d:b1: f5:2f:0c:13:7a:f2:da:ad:3d:88:5d:ab:07:e5:87:d9:f1:c4: 99:59:7a:c3:cd:83:13:79:2b:1c:c8:d0:12:db:de:3d:7d:dd: 04:e3:c4:38:e9:32:eb:ce:42:24:6a:74:d9:89:44:ee:54:51: 99:ca:30:1b:52:e0:a7:05:fe:8a:63:eb:cf:31:09:d5:2b:bd: de:2c:61:4a:d2:5b:75:f1:7e:6e:1b:ed:14:38:fe:fe:8f:ce: d6:7e:32:ec:d3:88:03:6c:ee:ff:2a:2d:b0:6a:a7:85:51:93: 5d:19:b2:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyT9MXDbObBRptEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YWYzNDc5ZWMtNDg1Zi00OTRiLWIxNDUtZmU3NTAwYTI3YTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz39YJ9RDqqJyuXG59A8io+DtLTkIi1hgJbZg 8mMkB0S/VrlrdZBzGwiLbZB5+InpoixOXDYVoxNuZUu5k12OY2R3xc9HlgiAT1Kj wfYY6CTfxxUd3aFOnqjWrMkjrhtjBpTNJcQiXyKxUy5pmsDpubDHngbX8IBzpykI sqTcIVZan8NoFk/oUmx4NwuT2HY27mMxBEsEVs10CKxDazIzgeMXn1RClenTbzYX szkTs2TquN/ohi74vxF1hrcr2lSMvu0XSlapUqmGAhwE8T6F2DSm2WHcLp4gh9U9 JcsCLWSR0ooFWCjQM3K60oscC+ueB48u6SwSRQm6gh5/lLPA/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgy2q1jXvG+cfHD5i8ngCqNeh5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvZGI1NzMzZGUtZDllZS0z MTVhLWI0ZWUtNDliYjQ3M2VlMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0YwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjcXdMnA78flXCLsGAqJpEfwYASRaUsZ1aLCFFPLm3JySNwbxbLDH0n 4qhgxLZyK1VabRGI3edqWGYhQiTzxvWlLRSLakvMUjBXjJn/7JEli3lKDksCZPiX D7V6woNNDiqIm8fxp3dDvN2uyOvjqOYrjM9TQEFLfAW74IKILzE1oOfLNXcMWXf5 KJIKJooNsfUvDBN68tqtPYhdqwflh9nxxJlZesPNgxN5KxzI0BLb3j193QTjxDjp MuvOQiRqdNmJRO5UUZnKMBtS4KcF/opj688xCdUrvd4sYUrSW3Xxfm4b7RQ4/v6P ztZ+MuzTiANs7v8qLbBqp4VRk10Zstk= -----END CERTIFICATE-----Generated at Tue May 6 05:43:23 2025 by rpki-client