$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b35b8b65-6955-3251-af82-5084781c68ea.roa File: b35b8b65-6955-3251-af82-5084781c68ea.roa (raw, json) Hash identifier: BOZxHf5kW2E1FPJ3IdyNsSzy22ZiCuBzBb2qr4HTRtI= Subject key identifier: 34:04:B0:89:79:80:D9:E8:8B:11:2D:69:EE:0F:61:CA:95:DD:AA:2F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849F01A70B1487896E5AE3DD7C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b35b8b65-6955-3251-af82-5084781c68ea.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 18821 IP address blocks: 209.51.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:70:b1:48:78:96:e5:ae:3d:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=d7ac22d5-842c-404a-8eaa-94a2d442f5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:85:05:05:b7:f1:58:58:37:0e:a0:ae:ee: 77:fe:86:c5:e3:34:f2:c5:5d:9a:38:00:ba:3f:c7: 03:64:2d:3c:c6:5b:35:6e:51:bf:81:ac:d3:d9:12: ef:1a:5b:98:dc:c5:f0:b0:19:60:2f:44:42:ea:82: db:03:ff:1e:90:32:cc:33:6f:bf:34:87:e9:0a:61: ce:e7:84:4a:72:7f:56:34:f2:89:df:33:35:5e:15: 7e:46:82:04:a3:00:7f:34:af:f9:19:fe:ae:ed:95: e1:2c:a6:ed:de:42:48:f7:e5:b2:4d:a2:ec:4e:10: 81:d8:e8:97:7d:8f:5e:2d:40:0c:13:de:bf:b2:dc: b6:65:59:a5:1e:66:72:24:73:25:db:f1:9e:b5:40: 09:bf:4c:b6:c3:8a:27:95:47:0a:bc:ad:56:a8:22: 20:ee:96:08:26:7a:08:85:fa:e5:01:d3:4a:f4:41: 7e:0a:8c:74:08:12:d0:34:80:2c:a4:13:95:e1:af: a5:9d:58:d3:74:b2:c2:92:5c:7f:cb:f5:3f:33:7b: 7d:2b:62:67:e2:86:5f:45:41:19:63:31:96:ea:f8: 4b:b7:4e:bb:68:be:67:23:62:0e:92:eb:2c:30:b2: cd:27:c9:3d:c1:f8:fe:cc:f2:fd:9e:31:53:5b:75: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:04:B0:89:79:80:D9:E8:8B:11:2D:69:EE:0F:61:CA:95:DD:AA:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b35b8b65-6955-3251-af82-5084781c68ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 209.51.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:2a:2d:fb:e6:e4:07:f9:30:79:4b:30:5b:8a:22:6e:9f:30: dd:7a:4f:51:17:b8:d3:08:11:8e:fa:f3:7f:05:17:80:f0:55: 94:fa:6d:b0:f8:83:29:27:81:39:ff:89:f3:e7:f5:18:31:c7: b6:86:cf:a1:47:67:3a:11:f2:65:19:b8:89:8b:ff:8d:c0:dd: 84:44:b2:a9:5b:b0:88:5e:9a:0c:63:86:f5:81:96:b3:91:b8: 6e:43:3b:ca:a9:c5:84:05:46:4f:25:78:8f:af:02:2f:8a:b9: 4c:44:2d:9e:85:3f:e3:ba:13:e4:fa:e2:5b:9f:3b:3f:7a:39: 71:bd:5f:f5:3b:98:dd:d3:e6:0d:ed:78:9d:87:61:28:9c:38: 17:4f:5c:2b:47:bd:2a:3b:bf:e9:d5:b9:ee:01:27:dc:1f:bc: b7:16:89:b8:fc:b1:7e:95:43:f0:4a:d3:57:00:7f:7d:84:ad: d5:5a:3e:d8:2f:02:6d:54:0a:33:3c:76:77:25:94:46:3c:55: ca:94:79:d9:86:94:43:35:05:7f:2d:72:80:bf:6d:cf:9a:93: b5:c1:9b:03:59:90:be:97:e4:11:d9:59:5a:d1:ca:7a:49:5d: 78:da:b6:92:7d:de:ae:50:89:65:46:8e:33:41:75:9f:98:31: c8:41:7d:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGnCxSHiW5a4918AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk ZDdhYzIyZDUtODQyYy00MDRhLThlYWEtOTRhMmQ0NDJmNWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx+FBQW38VhYNw6gru53/obF4zTyxV2aOAC6 P8cDZC08xls1blG/gazT2RLvGluY3MXwsBlgL0RC6oLbA/8ekDLMM2+/NIfpCmHO 54RKcn9WNPKJ3zM1XhV+RoIEowB/NK/5Gf6u7ZXhLKbt3kJI9+WyTaLsThCB2OiX fY9eLUAME96/sty2ZVmlHmZyJHMl2/GetUAJv0y2w4onlUcKvK1WqCIg7pYIJnoI hfrlAdNK9EF+Cox0CBLQNIAspBOV4a+lnVjTdLLCklx/y/U/M3t9K2Jn4oZfRUEZ YzGW6vhLt067aL5nI2IOkussMLLNJ8k9wfj+zPL9njFTW3UynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQEsIl5gNnoixEtae4PYcqV3aovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjM1YjhiNjUtNjk1NS0z MjUxLWFmODItNTA4NDc4MWM2OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TOnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0qLfvm5Af5MHlLMFuKIm6fMN16T1EXuNMIEY76838FF4DwVZT6bbD4 gykngTn/ifPn9Rgxx7aGz6FHZzoR8mUZuImL/43A3YREsqlbsIhemgxjhvWBlrOR uG5DO8qpxYQFRk8leI+vAi+KuUxELZ6FP+O6E+T64lufOz96OXG9X/U7mN3T5g3t eJ2HYSicOBdPXCtHvSo7v+nVue4BJ9wfvLcWibj8sX6VQ/BK01cAf32ErdVaPtgv Am1UCjM8dncllEY8VcqUedmGlEM1BX8tcoC/bc+ak7XBmwNZkL6X5BHZWVrRynpJ XXjatpJ93q5QiWVGjjNBdZ+YMchBffg= -----END CERTIFICATE-----Generated at Sun Jun 29 14:01:21 2025 by rpki-client