$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0fabe82f-c68a-356e-aeea-805be4eba4b0.roa File: 0fabe82f-c68a-356e-aeea-805be4eba4b0.roa (raw, json) Hash identifier: MMEgWZ3QJ9cpvyED0P1V/3yTsbf3eDvFvvqmEjNXA7g= Subject key identifier: FD:16:C7:3F:01:0E:C2:68:57:AC:94:AE:3C:D6:E9:C7:66:CE:A0:6E Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584A00DAAED7B2C7385A9E69FB40 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0fabe82f-c68a-356e-aeea-805be4eba4b0.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 11831 IP address blocks: 209.17.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:ae:d7:b2:c7:38:5a:9e:69:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=01aa3faa-6f7a-45c4-894b-11a5360a7f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8e:c0:fa:85:49:77:a8:ac:76:be:dd:1c:16: b8:93:59:a8:62:ae:75:83:2f:27:fe:d8:c6:60:fa: b5:0d:a8:58:48:85:7c:f8:50:2a:c2:d8:08:f5:b7: d6:92:99:6c:bd:37:ed:47:2d:8b:fc:85:2c:02:cf: c9:4a:fb:71:a3:de:b0:76:c6:ac:1d:ce:60:a7:e6: 0a:5f:4b:17:16:40:68:ad:3c:cb:b6:35:c4:93:c0: 48:b1:d4:3f:dd:64:68:f9:9f:da:ed:5b:ab:8a:a8: 8d:81:b2:c4:50:29:d0:aa:4c:07:64:70:38:e7:04: 9c:8f:9f:be:92:e3:ee:92:3b:c8:b4:ae:7a:42:4c: 0d:84:97:f5:1b:d0:29:40:60:9c:2e:d9:f5:d0:c8: 41:90:61:b7:0e:bd:8f:7b:af:f0:6b:f2:38:09:16: fe:a3:e4:54:a2:d2:3f:d2:86:e6:ca:48:0e:9e:c4: 77:f4:58:dd:43:5b:a3:d8:1a:03:cf:0b:0a:7d:3c: f5:19:11:7e:3f:a2:f8:7f:8a:61:8b:dc:a6:52:94: 77:bf:e8:b7:48:f0:50:53:2f:c9:8d:b0:69:dd:d5: a8:e7:13:42:53:aa:0c:ed:fb:82:56:1b:65:d8:cd: 1c:4e:40:18:99:17:ad:30:b5:d3:fb:54:50:6f:fd: 38:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:16:C7:3F:01:0E:C2:68:57:AC:94:AE:3C:D6:E9:C7:66:CE:A0:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0fabe82f-c68a-356e-aeea-805be4eba4b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 209.17.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3f:fe:65:00:e9:f3:c4:3d:b0:42:8d:c0:33:3c:41:fc:94: 7d:a3:ad:fa:f9:8a:9b:f7:79:5d:5e:27:f0:49:50:66:3c:67: 42:9e:45:49:6c:79:8f:d5:09:1e:b9:df:66:16:c0:b5:71:cb: 9d:8d:b4:32:68:ca:92:e7:e0:6b:da:d1:fa:ae:96:5d:d4:97: 6e:ea:92:77:3b:54:81:09:94:d2:d6:ac:30:80:35:50:a4:8d: a5:84:45:92:d8:af:74:fe:5c:ff:8a:eb:73:21:41:19:99:c8: b1:05:ac:44:f4:23:48:73:6c:54:2d:49:9e:6e:1c:c4:45:97: f4:6d:ec:0c:57:42:f1:5b:b2:a2:39:af:9e:83:e2:93:e4:e7: 19:87:45:35:f5:58:cd:7d:41:78:dd:7f:28:2d:c3:f6:f0:51: e6:36:d9:d1:f1:84:45:be:78:28:8a:3b:c9:fd:71:bd:15:89: eb:3f:d0:8f:10:19:11:da:74:2f:d2:52:3e:6b:ee:17:2d:bb: 6b:a0:0e:ac:8e:0c:fc:e3:12:1b:9b:1d:19:96:66:2c:ff:16: 0b:6b:c2:6f:2f:74:8c:24:44:0e:11:89:74:af:bb:18:36:01: 31:76:de:73:a4:4a:b2:13:90:3f:ba:a1:6b:94:04:06:42:51: 28:f9:fc:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2q7Xssc4Wp5p+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk MDFhYTNmYWEtNmY3YS00NWM0LTg5NGItMTFhNTM2MGE3ZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY7A+oVJd6isdr7dHBa4k1moYq51gy8n/tjG YPq1DahYSIV8+FAqwtgI9bfWkplsvTftRy2L/IUsAs/JSvtxo96wdsasHc5gp+YK X0sXFkBorTzLtjXEk8BIsdQ/3WRo+Z/a7VuriqiNgbLEUCnQqkwHZHA45wScj5++ kuPukjvItK56QkwNhJf1G9ApQGCcLtn10MhBkGG3Dr2Pe6/wa/I4CRb+o+RUotI/ 0obmykgOnsR39FjdQ1uj2BoDzwsKfTz1GRF+P6L4f4phi9ymUpR3v+i3SPBQUy/J jbBp3dWo5xNCU6oM7fuCVhtl2M0cTkAYmRetMLXT+1RQb/047QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0Wxz8BDsJoV6yUrjzW6cdmzqBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMGZhYmU4MmYtYzY4YS0z NTZlLWFlZWEtODA1YmU0ZWJhNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA//mUA6fPEPbBCjcAzPEH8lH2jrfr5ipv3eV1eJ/BJUGY8Z0KeRUls eY/VCR6532YWwLVxy52NtDJoypLn4Gva0fqull3Ul27qknc7VIEJlNLWrDCANVCk jaWERZLYr3T+XP+K63MhQRmZyLEFrET0I0hzbFQtSZ5uHMRFl/Rt7AxXQvFbsqI5 r56D4pPk5xmHRTX1WM19QXjdfygtw/bwUeY22dHxhEW+eCiKO8n9cb0Vies/0I8Q GRHadC/SUj5r7hctu2ugDqyODPzjEhubHRmWZiz/Fgtrwm8vdIwkRA4RiXSvuxg2 ATF23nOkSrITkD+6oWuUBAZCUSj5/AQ= -----END CERTIFICATE-----Generated at Sun Jun 15 17:56:39 2025 by rpki-client