$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa File: d34bfd9d-57a4-3452-aad3-b812c11a1320.roa (raw, json) Hash identifier: OPmSFkaGMFtbFK5M7q6m1jSMUuAxXx/7sERaRwZhBMM= Subject key identifier: 42:BA:50:34:11:11:D9:21:0E:75:49:60:9D:12:88:8D:F1:DB:52:B4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849ED4FDAA5E5D30151C73B67E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 7342 IP address blocks: 209.131.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:da:a5:e5:d3:01:51:c7:3b:67:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=37b6ab71-93f2-4d6f-84c3-4ce16184dc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3f:45:15:5e:57:f9:69:58:95:e7:e7:d1:cc: cc:3b:d9:92:55:2f:07:f3:86:1c:a3:87:56:ee:b7: 1e:38:81:83:0e:6f:f8:a3:2f:2f:c8:54:d3:3c:44: 65:13:c2:82:a9:dd:91:67:ef:38:82:be:45:a0:c2: 4a:8c:fd:82:e4:8e:24:5c:e0:72:4b:63:7f:50:20: ac:d0:92:25:82:9b:c5:af:2e:d9:0a:b7:48:45:92: a0:57:4b:c0:ea:9a:f0:20:88:72:b4:1d:7f:82:7c: 54:de:89:2f:f1:e7:cf:06:69:70:ce:7c:b8:d7:89: 08:c6:41:a6:85:92:8f:e2:68:28:d6:25:0f:a3:3b: bb:13:8c:2c:1a:8c:e6:b2:5c:bf:18:d2:92:4b:9b: 50:01:bb:b0:d5:31:e9:25:a4:92:b8:fc:35:64:68: 5b:b1:3c:a2:93:16:b5:e1:ce:1b:ec:94:ff:26:27: a7:3f:1a:ec:52:d3:64:1e:bf:06:67:9f:4d:cb:35: 6f:2f:03:5b:64:0e:b9:ed:ce:44:08:d7:63:11:c3: 0e:03:e1:bb:58:95:0e:40:3a:3d:cd:56:02:b9:c2: d4:35:52:b5:24:13:61:c4:b6:88:e0:ed:56:ef:a4: de:e0:1d:03:8d:84:c7:6c:ec:57:bb:84:e5:e8:98: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BA:50:34:11:11:D9:21:0E:75:49:60:9D:12:88:8D:F1:DB:52:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:06:bc:e0:95:91:79:e4:3d:85:0b:1d:7e:6a:18:03:e3:af: a5:c7:11:cc:42:29:e0:6e:4e:67:ba:ad:80:68:4f:20:37:df: 50:4c:71:c9:a6:af:5b:22:b9:69:8a:e2:81:27:7c:7b:cb:2d: b5:1e:fe:19:b1:e5:de:22:60:99:7d:69:37:21:00:14:b5:f3: 75:16:0c:93:f6:0f:8d:d2:64:e5:78:3d:65:d4:33:7b:99:66: 68:2e:d4:af:24:41:d0:77:12:c7:c1:e0:30:86:34:78:60:dd: 0a:c6:05:ab:e2:66:bb:d1:9d:92:bf:28:dd:06:26:a6:f9:cf: e7:83:59:90:38:ff:55:6c:85:d8:3f:a6:a7:40:bf:15:41:45: b0:36:79:fa:99:0f:a0:fa:b3:60:27:5e:26:ec:c5:49:49:fe: 7e:18:b8:c5:f3:4e:5f:02:b4:18:da:22:39:ba:43:0f:ce:95: 50:67:02:20:59:64:d6:bb:de:0a:55:37:98:78:36:bc:a5:ea: f0:23:89:97:22:95:5d:47:a2:f5:fb:ac:2a:b7:2d:5f:86:f4: 85:8d:12:d8:8d:ae:51:1b:d3:fa:0a:5e:6f:90:05:f8:37:e1: cd:1a:d7:d5:28:c8:0a:04:92:fc:fe:de:5e:a1:93:c5:27:9c: c7:eb:eb:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9ql5dMBUcc7Z+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk MzdiNmFiNzEtOTNmMi00ZDZmLTg0YzMtNGNlMTYxODRkYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij9FFV5X+WlYlefn0czMO9mSVS8H84Yco4dW 7rceOIGDDm/4oy8vyFTTPERlE8KCqd2RZ+84gr5FoMJKjP2C5I4kXOByS2N/UCCs 0JIlgpvFry7ZCrdIRZKgV0vA6prwIIhytB1/gnxU3okv8efPBmlwzny414kIxkGm hZKP4mgo1iUPozu7E4wsGozmsly/GNKSS5tQAbuw1THpJaSSuPw1ZGhbsTyikxa1 4c4b7JT/JienPxrsUtNkHr8GZ59NyzVvLwNbZA657c5ECNdjEcMOA+G7WJUOQDo9 zVYCucLUNVK1JBNhxLaI4O1W76Te4B0DjYTHbOxXu4Tl6JhffwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK6UDQREdkhDnVJYJ0SiI3x21K0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDM0YmZkOWQtNTdhNC0z NDUyLWFhZDMtYjgxMmMxMWExMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgGvOCVkXnkPYULHX5qGAPjr6XHEcxCKeBuTme6rYBoTyA331BMccmm r1siuWmK4oEnfHvLLbUe/hmx5d4iYJl9aTchABS183UWDJP2D43SZOV4PWXUM3uZ Zmgu1K8kQdB3EsfB4DCGNHhg3QrGBaviZrvRnZK/KN0GJqb5z+eDWZA4/1Vshdg/ pqdAvxVBRbA2efqZD6D6s2AnXibsxUlJ/n4YuMXzTl8CtBjaIjm6Qw/OlVBnAiBZ ZNa73gpVN5h4Nryl6vAjiZcilV1HovX7rCq3LV+G9IWNEtiNrlEb0/oKXm+QBfg3 4c0a19UoyAoEkvz+3l6hk8UnnMfr6yw= -----END CERTIFICATE-----Generated at Mon Jun 16 00:45:50 2025 by rpki-client