$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa File: 40314b4d-9789-377e-9741-c7a9e2e27829.roa (raw, json) Hash identifier: SJOJYBO2XcScBfsAiiP7nCw8Pok+hq3Edu3OxC0qNLk= Subject key identifier: 53:D5:7D:D4:37:CD:59:1A:EF:A4:3E:28:74:79:74:68:4F:A4:18:33 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A07D5441A06882621000DB1E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 7342 IP address blocks: 209.131.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:44:1a:06:88:26:21:00:0d:b1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=d7069905-d400-4602-85f4-2fc1feda3a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:bd:f2:c2:e4:6d:68:be:87:b0:c4:02:b3: 28:2e:c4:fe:38:1a:d3:ff:d4:cf:84:f1:52:44:55: 88:e3:59:86:a0:b6:a6:02:cb:e9:46:0f:15:af:d8: 41:62:d7:25:bc:c0:c4:5a:fc:c6:d8:e4:d7:30:4a: 7e:f3:b6:f7:60:54:c2:43:88:cb:53:ed:8e:b2:cd: ca:8b:af:6a:16:5a:b9:1b:0f:9f:9b:9e:18:d9:b9: d2:c4:d8:0c:f4:67:94:b9:89:dd:19:22:18:a6:c9: df:71:de:dc:99:47:0d:2a:5a:3c:2c:a7:c7:10:47: 7a:68:c6:7f:ce:0c:d4:53:1d:2b:a1:9b:55:53:2f: d6:e8:1a:94:9f:45:1e:4d:34:84:1c:12:47:53:b9: d0:d5:78:fa:60:80:da:d5:8e:f4:e6:1e:81:b8:df: 3c:29:7b:9e:d8:df:1f:87:b1:36:01:6f:65:90:c2: dd:42:7d:cf:11:33:87:c6:ad:56:8e:6f:6d:46:00: e1:62:f4:15:a2:18:7c:67:78:0c:73:2d:f6:14:6d: 9e:f0:d4:70:2a:63:bb:f7:81:19:42:83:fc:10:49: be:eb:6a:e9:04:0b:a2:a6:6a:fe:7d:cd:0d:53:85: 20:b7:0a:00:29:74:e4:7d:1c:df:5e:04:0e:0a:aa: 64:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D5:7D:D4:37:CD:59:1A:EF:A4:3E:28:74:79:74:68:4F:A4:18:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:21:48:83:50:cd:44:6a:0f:95:ed:01:11:10:d9:b3:bd:3c: 8e:26:3a:b5:5d:b6:ef:1e:6a:16:f6:64:87:fe:44:56:bc:42: c3:e6:92:e2:c0:e9:0f:af:f4:65:7c:9e:b7:74:03:d6:74:bf: a4:76:e5:fc:08:5b:51:02:0d:8c:92:64:40:0f:fd:0f:44:45: ae:d5:6a:32:83:0e:ea:ae:1c:28:ec:ed:7c:4d:c7:72:f0:7c: 3d:32:77:3d:56:c8:61:7c:9b:37:6f:19:52:27:bb:6d:60:a1: 59:d7:1f:8b:fe:4a:96:2f:38:f8:86:29:b8:4a:37:56:92:30: 35:a6:f5:87:f7:d3:b9:36:ed:09:14:c8:69:ed:ab:ff:c6:a4: cd:71:49:0a:2b:0a:ae:a0:06:84:c5:fc:df:7d:9f:96:d7:40: 4a:47:ca:fd:d3:7c:d4:a3:34:99:67:41:8e:04:02:6e:22:4e: 72:71:24:07:cf:ee:52:d4:49:25:22:6d:07:af:36:23:74:cf: 74:22:cd:19:da:ae:e8:0c:cd:70:f2:f4:85:d9:bb:1b:f9:e2: 45:2d:d8:73:33:79:3f:3f:32:56:69:58:13:85:25:97:4c:7b: 65:b2:72:81:83:e0:a3:44:8f:0e:f0:24:3e:bf:2a:c0:76:b4: e5:0e:fb:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1UQaBogmIQANseAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDcwNjk5MDUtZDQwMC00NjAyLTg1ZjQtMmZjMWZlZGEzYTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUK98sLkbWi+h7DEArMoLsT+OBrT/9TPhPFS RFWI41mGoLamAsvpRg8Vr9hBYtclvMDEWvzG2OTXMEp+87b3YFTCQ4jLU+2Oss3K i69qFlq5Gw+fm54Y2bnSxNgM9GeUuYndGSIYpsnfcd7cmUcNKlo8LKfHEEd6aMZ/ zgzUUx0roZtVUy/W6BqUn0UeTTSEHBJHU7nQ1Xj6YIDa1Y705h6BuN88KXue2N8f h7E2AW9lkMLdQn3PETOHxq1Wjm9tRgDhYvQVohh8Z3gMcy32FG2e8NRwKmO794EZ QoP8EEm+62rpBAuipmr+fc0NU4UgtwoAKXTkfRzfXgQOCqpkdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPVfdQ3zVka76Q+KHR5dGhPpBgzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDAzMTRiNGQtOTc4OS0z NzdlLTk3NDEtYzdhOWUyZTI3ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0hSINQzURqD5XtAREQ2bO9PI4mOrVdtu8eahb2ZIf+RFa8QsPmkuLA 6Q+v9GV8nrd0A9Z0v6R25fwIW1ECDYySZEAP/Q9ERa7VajKDDuquHCjs7XxNx3Lw fD0ydz1WyGF8mzdvGVInu21goVnXH4v+SpYvOPiGKbhKN1aSMDWm9Yf307k27QkU yGntq//GpM1xSQorCq6gBoTF/N99n5bXQEpHyv3TfNSjNJlnQY4EAm4iTnJxJAfP 7lLUSSUibQevNiN0z3QizRnarugMzXDy9IXZuxv54kUt2HMzeT8/MlZpWBOFJZdM e2WycoGD4KNEjw7wJD6/KsB2tOUO+1Q= -----END CERTIFICATE-----Generated at Mon Jun 16 05:23:05 2025 by rpki-client