$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc25c6f-8a8c-3d9f-8f0b-c5f9c7873f56.roa File: 5bc25c6f-8a8c-3d9f-8f0b-c5f9c7873f56.roa (raw, json) Hash identifier: sxF2yxfwJLJkbOsK/9TUFnvWz9wEz2H6UzYfZ12Wl3I= Subject key identifier: A2:B1:A9:77:2C:62:E7:60:3C:1A:76:C9:82:FB:23:B8:69:E5:0D:10 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DADB0C96C27C285E424730 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc25c6f-8a8c-3d9f-8f0b-c5f9c7873f56.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 7342 IP address blocks: 209.131.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:db:0c:96:c2:7c:28:5e:42:47:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=db7020a9-2191-42f0-a93a-96602796051e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:f0:cb:59:db:1b:c6:8b:c6:6b:82:7d:e6: 5e:5f:6e:99:27:77:53:33:18:e0:6c:f5:e1:b2:db: e2:21:d6:bc:ce:83:5e:c0:e3:5e:7e:d7:28:e0:1d: 31:ba:96:f5:e5:db:ac:7e:b5:b1:d9:c4:e7:42:90: ec:df:ce:96:d6:a5:78:1f:e9:e9:3e:7d:86:14:b1: 4f:aa:e8:ac:1c:fd:34:b7:24:ef:ce:eb:07:87:30: f4:fa:eb:47:19:aa:61:cd:d0:94:f0:59:01:7a:bd: d7:74:f0:b3:eb:95:72:2c:3b:ad:5c:3f:c1:37:0f: cf:76:ee:c6:7b:33:51:e2:7e:a4:38:e3:5e:5b:a2: 7a:c4:7d:ac:80:fc:51:79:71:3e:55:9f:b1:c8:4e: b0:ab:52:86:e6:8c:8a:68:7a:f8:04:ae:0b:fe:0e: b4:d1:f3:6f:f2:dd:fe:73:87:1b:bb:81:6e:3c:52: 58:3a:20:2e:3d:b2:d9:07:8f:fd:01:11:b8:20:30: 1e:54:ce:cf:88:e6:75:06:93:78:77:cb:58:5e:49: 87:05:5a:80:34:49:af:c8:af:cc:df:5a:16:8f:e3: 1f:c0:0d:c5:64:fe:e5:14:de:90:58:dd:3c:7c:df: 56:48:14:a1:91:1c:ee:d3:f8:b0:d7:ff:ae:09:e7: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B1:A9:77:2C:62:E7:60:3C:1A:76:C9:82:FB:23:B8:69:E5:0D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc25c6f-8a8c-3d9f-8f0b-c5f9c7873f56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:79:a3:12:e9:b7:a0:d1:b4:43:d7:c6:a4:d1:df:4f:cd:c1: 66:7e:8b:9e:9c:50:14:42:1a:09:48:fc:d9:5b:75:d7:40:08: 4b:9e:ce:45:fa:5d:a7:d2:4c:fc:0e:fb:b2:5c:e7:46:a8:6a: 5e:2e:23:9f:63:83:04:1d:30:0e:ce:91:b4:b0:88:af:59:dc: 8a:ed:40:fb:70:78:cd:ec:64:2e:27:fa:3c:b1:65:78:ba:07: bd:b4:29:b3:2b:89:a5:cd:c5:24:c8:05:7c:e4:4e:ba:53:5f: 74:65:6c:bf:52:13:e2:87:c6:2b:db:8c:3f:95:b4:5f:6a:d8: 06:e7:f3:90:f0:8b:d3:0e:6d:48:70:c9:6f:8d:92:32:3a:5a: e0:66:b8:ad:6f:9c:27:0f:97:64:08:4b:4d:5a:9b:f3:b1:03: b2:98:32:92:15:9a:0d:d8:df:1a:38:d2:15:32:8b:9b:1b:20: a9:9b:c4:63:44:bd:01:62:3c:f7:31:9a:bb:09:0e:d7:20:3c: c5:9a:00:bd:eb:a9:dd:c3:f7:77:b2:9d:73:41:2c:4d:89:e9: 71:2e:6b:83:b7:36:c8:cb:59:fe:75:d8:4b:85:a4:a1:87:38: 5c:c8:47:77:75:b4:3e:8e:d8:ef:7e:8b:9b:f4:1f:84:57:1e: d7:b9:c7:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2tsMlsJ8KF5CRzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZGI3MDIwYTktMjE5MS00MmYwLWE5M2EtOTY2MDI3OTYwNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd3wy1nbG8aLxmuCfeZeX26ZJ3dTMxjgbPXh stviIda8zoNewONeftco4B0xupb15dusfrWx2cTnQpDs386W1qV4H+npPn2GFLFP quisHP00tyTvzusHhzD0+utHGaphzdCU8FkBer3XdPCz65VyLDutXD/BNw/Pdu7G ezNR4n6kOONeW6J6xH2sgPxReXE+VZ+xyE6wq1KG5oyKaHr4BK4L/g600fNv8t3+ c4cbu4FuPFJYOiAuPbLZB4/9ARG4IDAeVM7PiOZ1BpN4d8tYXkmHBVqANEmvyK/M 31oWj+MfwA3FZP7lFN6QWN08fN9WSBShkRzu0/iw1/+uCed4VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKxqXcsYudgPBp2yYL7I7hp5Q0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWJjMjVjNmYtOGE4Yy0z ZDlmLThmMGItYzVmOWM3ODczZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADF5oxLpt6DRtEPXxqTR30/NwWZ+i56cUBRCGglI/NlbdddACEuezkX6 XafSTPwO+7Jc50aoal4uI59jgwQdMA7OkbSwiK9Z3IrtQPtweM3sZC4n+jyxZXi6 B720KbMriaXNxSTIBXzkTrpTX3RlbL9SE+KHxivbjD+VtF9q2Abn85Dwi9MObUhw yW+NkjI6WuBmuK1vnCcPl2QIS01am/OxA7KYMpIVmg3Y3xo40hUyi5sbIKmbxGNE vQFiPPcxmrsJDtcgPMWaAL3rqd3D93eynXNBLE2J6XEua4O3NsjLWf512EuFpKGH OFzIR3d1tD6O2O9+i5v0H4RXHte5xzU= -----END CERTIFICATE-----Generated at Mon Jun 16 00:41:28 2025 by rpki-client