$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/0116482f-4344-303c-8e57-f8e40b8d46aa.roa File: 0116482f-4344-303c-8e57-f8e40b8d46aa.roa (raw, json) Hash identifier: 1NsExiPghlfwdAnBCrWebnhiqR83xL7AFsTbe878sPI= Subject key identifier: 6F:DD:55:EB:05:BF:2E:4D:A4:84:15:FB:04:84:31:9D:D8:C3:D0:90 Certificate issuer: /CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f Certificate serial: 010D0C9F43285849D85F93EB5649EDB793DBEF80 Authority key identifier: DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/0116482f-4344-303c-8e57-f8e40b8d46aa.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 20259 IP address blocks: 209.71.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:93:eb:56:49:ed:b7:93:db:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=5271181a-35d0-4627-9097-b2c886f5f866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:77:1a:59:62:c1:df:89:09:09:86:4c:c4:a0: 4f:b3:ef:13:07:46:a0:c1:3d:28:a5:45:ef:b1:0f: 54:1a:a9:6a:2a:4d:79:9a:33:ec:f2:56:9d:3f:75: f1:6e:00:0c:88:a7:25:d3:a7:1c:d9:4b:36:86:4c: 48:0b:aa:01:54:96:5a:49:1d:41:3a:c3:1f:0a:2a: d2:69:2f:d5:48:db:6c:ed:8b:88:51:9a:96:15:0b: c3:98:e0:25:d5:9a:91:03:46:42:78:b9:c6:3f:1c: a3:d3:dc:44:9f:13:4d:fb:17:28:b4:0e:30:42:7e: 91:32:cc:5c:26:60:68:1c:3f:3d:84:f2:f5:78:40: e1:23:04:6f:b1:f8:32:bb:37:2c:8e:82:2c:86:3a: 99:f5:3d:48:8a:38:59:cb:c1:9b:99:36:7a:ff:3c: 8a:19:42:f4:ab:dd:89:6a:40:5f:2f:ec:a0:89:49: 47:41:e1:5e:f2:92:d5:bb:95:59:48:6f:f5:09:8c: 38:99:3c:c0:52:90:c2:95:26:e2:e9:13:d0:bb:d2: 0e:4c:e3:80:07:ec:fc:f9:55:e6:dd:fc:36:cd:01: 73:95:f0:55:47:75:a8:ea:a5:cc:7a:f4:27:31:69: e4:30:51:fb:20:a8:cd:93:7e:f0:ae:ea:38:17:65: 97:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DD:55:EB:05:BF:2E:4D:A4:84:15:FB:04:84:31:9D:D8:C3:D0:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/0116482f-4344-303c-8e57-f8e40b8d46aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl X509v3 Authority Key Identifier: keyid:DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer sbgp-ipAddrBlock: critical IPv4: 209.71.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:05:3b:80:87:51:a2:96:7f:94:46:2f:97:b1:13:54:05:77: c4:ec:7b:f9:f4:91:24:f5:de:08:10:49:6d:07:42:92:e8:4e: 22:90:ea:2e:46:d5:db:c4:9b:cd:65:be:4f:69:db:6d:80:e1: 23:fa:2d:dd:38:86:49:d4:c3:13:53:1a:f1:59:13:a6:95:13: c3:2f:34:a8:7f:74:dd:51:16:96:06:c5:5b:03:43:d7:25:89: f3:31:04:47:ff:82:c7:e6:69:54:f1:c4:d2:2e:23:e3:a4:9a: 1f:69:08:d5:74:d0:b5:21:d8:29:e6:31:bd:92:0c:51:42:aa: 57:20:46:cc:b8:b6:8a:ae:9a:85:22:f7:de:35:3b:98:78:82: ef:68:f8:f7:5a:87:f0:36:42:9f:22:34:ae:c1:43:53:cf:5a: 2e:51:f2:d2:6e:6b:31:da:ae:96:a1:13:d0:bf:17:2d:9c:fe: 49:11:5c:3b:d0:28:47:96:a5:4d:43:ad:d5:18:1d:4d:2e:bc: de:4f:d9:b6:27:c8:2c:a1:ea:fa:90:9d:83:85:6e:0c:b1:63: 6b:21:2c:f4:d6:53:aa:af:d4:1f:fd:b7:a2:ad:e6:dc:3e:db: 90:b8:9e:f0:22:16:61:80:08:d9:2a:c7:3f:d6:bc:6d:6d:72: fe:45:3c:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5PrVkntt5Pb74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVlZjg3NWEtYzlhNC00NWUwLTliODAtM2VhMTBiZWNh ZDlmMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NTI3MTE4MWEtMzVkMC00NjI3LTkwOTctYjJjODg2ZjVmODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3caWWLB34kJCYZMxKBPs+8TB0agwT0opUXv sQ9UGqlqKk15mjPs8ladP3XxbgAMiKcl06cc2Us2hkxIC6oBVJZaSR1BOsMfCirS aS/VSNts7YuIUZqWFQvDmOAl1ZqRA0ZCeLnGPxyj09xEnxNN+xcotA4wQn6RMsxc JmBoHD89hPL1eEDhIwRvsfgyuzcsjoIshjqZ9T1IijhZy8GbmTZ6/zyKGUL0q92J akBfL+ygiUlHQeFe8pLVu5VZSG/1CYw4mTzAUpDClSbi6RPQu9IOTOOAB+z8+VXm 3fw2zQFzlfBVR3Wo6qXMevQnMWnkMFH7IKjNk37wruo4F2WXBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/dVesFvy5NpIQV+wSEMZ3Yw9CQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZWVm ODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWExMGJlY2FkOWYvMDExNjQ4MmYtNDM0NC0z MDNjLThlNTctZjhlNDBiOGQ0NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGVlZjg3NWEtYzlhNC00NWUwLTli ODAtM2VhMTBiZWNhZDlmLzhlZWY4NzVhLWM5YTQtNDVlMC05YjgwLTNlYTEwYmVj YWQ5Zi5jcmwwHwYDVR0jBBgwFoAU2hd1uxE+8mvw+V5uiVzDDuCoynIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZWVmODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWEx MGJlY2FkOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0UcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUFO4CHUaKWf5RGL5exE1QFd8Tse/n0kST13ggQSW0HQpLoTiKQ6i5G 1dvEm81lvk9p222A4SP6Ld04hknUwxNTGvFZE6aVE8MvNKh/dN1RFpYGxVsDQ9cl ifMxBEf/gsfmaVTxxNIuI+Okmh9pCNV00LUh2CnmMb2SDFFCqlcgRsy4toqumoUi 9941O5h4gu9o+Pdah/A2Qp8iNK7BQ1PPWi5R8tJuazHarpahE9C/Fy2c/kkRXDvQ KEeWpU1DrdUYHU0uvN5P2bYnyCyh6vqQnYOFbgyxY2shLPTWU6qv1B/9t6Kt5tw+ 25C4nvAiFmGACNkqxz/WvG1tcv5FPC0= -----END CERTIFICATE-----Generated at Sun Jun 15 17:22:17 2025 by rpki-client