$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa File: ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa (raw, json) Hash identifier: VY+LeH2PZWv0k+ztCg198CZZQ0bztUt6st/ZWLXXMHg= Subject key identifier: 63:B3:7D:19:CE:1F:9D:FC:7A:3C:C9:7D:58:BF:38:B9:F1:44:B9:89 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849ED4FD86632256193E2E10040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 7342 IP address blocks: 209.131.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:d8:66:32:25:61:93:e2:e1:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=11f687c8-4857-4275-bd5b-85bd6df694d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a9:40:bd:fb:aa:7b:73:da:3d:b5:46:0b:a4: f0:84:3b:88:b7:87:2f:d6:65:20:f8:e3:10:10:89: 2e:d3:7c:1e:9e:1b:ef:20:35:10:27:3f:0f:58:63: 10:2b:39:75:82:52:32:a3:9d:c1:70:0e:2f:4d:af: 2d:50:e5:35:54:34:fc:31:ff:37:40:1d:a5:2c:25: b3:65:e0:74:11:e3:c1:99:a6:4a:81:af:9f:32:1b: bc:87:b0:5d:f3:2f:28:79:54:c2:1c:c2:c9:a0:a3: da:95:b1:ad:17:e6:df:a0:96:23:08:ae:9c:74:30: 39:ab:b5:01:75:3d:4d:d9:bd:e9:6c:77:ca:58:68: 58:c4:34:f4:61:b0:4e:cd:2c:37:49:6c:18:fa:8d: d3:15:88:6c:9f:7c:e6:6d:0f:57:8c:a3:e7:94:2e: c9:19:f6:1b:1a:12:c7:c0:cc:3d:cd:72:fa:2f:7c: 30:07:87:e9:39:40:90:01:29:62:7f:cb:5b:0b:18: 81:b3:8b:f3:f6:33:87:9b:39:ac:fc:38:16:4c:7a: c2:41:4a:c8:55:30:3c:c7:3e:35:e4:7f:36:07:6b: dd:5f:53:9a:8f:ec:44:01:9c:60:50:ea:28:a9:2f: 5b:71:48:30:a4:10:4a:71:55:12:1b:39:01:ca:c1: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B3:7D:19:CE:1F:9D:FC:7A:3C:C9:7D:58:BF:38:B9:F1:44:B9:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c8:6f:5c:85:3e:a4:2f:97:71:81:2b:4f:04:d7:ca:c0:d4: c3:25:77:3e:73:de:b8:e9:b5:75:8f:06:6e:f0:18:c0:91:77: 6a:3c:28:a7:ae:27:15:fe:e9:7d:76:20:23:72:e1:17:ba:5f: c8:d0:71:03:7c:45:ab:69:4f:29:ac:b8:46:1d:63:aa:79:3f: ee:20:08:93:39:97:f9:70:8d:41:aa:2b:06:31:b5:a1:a9:09: dd:94:b3:2d:22:08:04:c9:c3:2c:35:1d:9c:f3:ba:ca:a3:f4: 59:01:8d:21:6c:52:e2:b1:ba:2a:17:7f:b0:1c:80:3d:57:e3: 5b:3c:28:83:4d:e2:ae:c7:f9:1d:32:37:65:5b:3a:a4:09:68: aa:e6:50:ab:0b:31:b9:b5:af:cb:36:09:59:c8:37:6a:85:45: 71:48:0e:ed:e9:b0:36:d4:75:4d:77:72:a7:38:42:a4:96:02: d5:4b:32:b3:ca:db:5f:47:56:ce:a0:f2:e7:78:e7:3d:1a:81: bb:9a:d8:9a:de:d2:2e:f5:24:4c:92:d5:8f:d8:65:27:ec:9e: 76:7f:f7:3a:e3:ed:29:04:02:44:0a:5a:d6:fe:11:7d:55:29: 77:7c:d1:c8:c1:2f:8a:56:90:d7:ce:b8:52:17:ef:10:8d:af: 41:c3:84:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9hmMiVhk+LhAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk MTFmNjg3YzgtNDg1Ny00Mjc1LWJkNWItODViZDZkZjY5NGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKlAvfuqe3PaPbVGC6TwhDuIt4cv1mUg+OMQ EIku03wenhvvIDUQJz8PWGMQKzl1glIyo53BcA4vTa8tUOU1VDT8Mf83QB2lLCWz ZeB0EePBmaZKga+fMhu8h7Bd8y8oeVTCHMLJoKPalbGtF+bfoJYjCK6cdDA5q7UB dT1N2b3pbHfKWGhYxDT0YbBOzSw3SWwY+o3TFYhsn3zmbQ9XjKPnlC7JGfYbGhLH wMw9zXL6L3wwB4fpOUCQASlif8tbCxiBs4vz9jOHmzms/DgWTHrCQUrIVTA8xz41 5H82B2vdX1Oaj+xEAZxgUOooqS9bcUgwpBBKcVUSGzkBysHAlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOzfRnOH538ejzJfVi/OLnxRLmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmZhMmVlYWYtZmUzNS0z ZDRlLWE1MDMtZDEyZDhhMTVlNjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfIb1yFPqQvl3GBK08E18rA1MMldz5z3rjptXWPBm7wGMCRd2o8KKeu JxX+6X12ICNy4Re6X8jQcQN8RatpTymsuEYdY6p5P+4gCJM5l/lwjUGqKwYxtaGp Cd2Usy0iCATJwyw1HZzzusqj9FkBjSFsUuKxuioXf7AcgD1X41s8KINN4q7H+R0y N2VbOqQJaKrmUKsLMbm1r8s2CVnIN2qFRXFIDu3psDbUdU13cqc4QqSWAtVLMrPK 219HVs6g8ud45z0agbua2Jre0i71JEyS1Y/YZSfsnnZ/9zrj7SkEAkQKWtb+EX1V KXd80cjBL4pWkNfOuFIX7xCNr0HDhMI= -----END CERTIFICATE-----Generated at Mon Jun 16 17:44:52 2025 by rpki-client