$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/ae0a55c7-9f99-37de-bebc-cb4c40bdc630.roa File: ae0a55c7-9f99-37de-bebc-cb4c40bdc630.roa (raw, json) Hash identifier: F0DEJ1equQyEkwJBgaGuTPc9UQbUdHFC9tSCN3v5YWA= Subject key identifier: 8F:39:9C:F4:43:54:BA:C0:3C:98:8E:12:51:00:05:BD:6A:70:7A:71 Certificate issuer: /CN=9ae61efc-a402-4975-bfe7-f7ddda75a628 Certificate serial: 010D0C9F4328584A1B60063426355E5766F08B80 Authority key identifier: 57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/ae0a55c7-9f99-37de-bebc-cb4c40bdc630.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 6206 IP address blocks: 209.135.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:06:34:26:35:5e:57:66:f0:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae61efc-a402-4975-bfe7-f7ddda75a628 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=add26ecc-a3c3-4d9c-83d2-c7a43fc82201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ea:c5:5a:0d:61:ac:e7:66:49:06:98:2c:19: 79:bd:30:8d:55:ab:80:92:83:c8:39:c5:90:0c:a8: f0:c3:3e:75:53:93:dd:6a:d9:6c:ba:d6:fa:e6:13: 37:65:60:45:79:7e:a6:fa:46:7c:e0:7a:85:66:ea: bc:71:fc:dd:0a:ed:51:ed:0f:7a:0c:10:77:1a:f4: 71:45:51:5f:da:88:3b:70:c9:c5:88:52:e9:56:4c: d3:8b:07:3f:a2:b0:a3:6d:2b:6f:71:47:c0:e0:84: 75:62:20:cc:01:01:82:23:46:f2:a6:85:36:11:35: b0:0b:e9:0b:3f:f3:4e:5c:41:dc:71:8d:f1:cb:13: b9:b0:39:9d:fe:52:a4:74:ef:76:d0:7f:ae:17:12: fb:8e:75:a0:c2:ee:f2:92:89:99:11:40:eb:69:a4: 43:0d:b2:8f:28:51:3f:87:67:d4:69:12:d1:d5:91: 5c:ea:a7:55:32:b1:50:e7:cc:ef:9a:b9:e0:20:f3: 39:50:c0:db:d9:08:4d:74:af:57:b1:a4:78:ad:d0: bd:58:b0:45:87:fb:fa:22:82:db:91:01:14:dd:74: 00:f9:4f:d6:94:a2:cb:25:4c:4a:a8:b7:8c:17:27: c9:4f:4f:e7:8a:61:b7:a9:36:9e:64:d3:f1:3e:dd: 72:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:39:9C:F4:43:54:BA:C0:3C:98:8E:12:51:00:05:BD:6A:70:7A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/ae0a55c7-9f99-37de-bebc-cb4c40bdc630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.crl X509v3 Authority Key Identifier: keyid:57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer sbgp-ipAddrBlock: critical IPv4: 209.135.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:28:b1:a1:e8:a6:7b:55:a5:b3:fb:47:19:79:46:42:92:05: ae:60:54:ae:6c:64:b8:19:58:78:1e:ba:50:53:b4:2d:b6:d7: 24:ae:32:ae:8e:48:8a:79:38:dc:1b:15:7f:dd:ca:72:8b:8a: 63:3c:b6:45:cc:6b:0b:37:53:1f:5a:96:7a:39:4f:41:5f:58: f8:c6:87:8e:eb:2a:51:1d:29:5b:7f:c3:ce:c8:59:86:9c:2b: 78:82:29:e0:e1:70:34:66:ac:b6:9c:de:64:4a:5a:a0:53:87: 2d:5b:27:dd:ea:fb:bc:05:9d:bc:82:10:d1:0a:e0:80:82:bd: fd:d2:f2:bc:99:86:5f:40:e9:c3:fe:14:4d:3d:f7:86:53:79: 9b:43:0d:6d:e6:cf:b3:f5:45:de:cc:f7:75:1f:f5:d1:da:a2: d6:ed:2b:f7:4f:25:c1:05:40:3f:fe:41:ac:b2:62:af:58:86: 96:d3:b2:f2:04:f1:f6:d0:80:6f:88:78:d4:a4:7e:b4:fb:c0: 2b:9a:25:ff:f1:23:2f:79:35:e6:9d:76:2d:0d:60:22:78:4c: bd:9c:0a:0e:a0:46:a9:26:46:64:04:08:c0:81:d7:cb:d3:9f: ad:18:de:cb:d6:92:a7:31:e7:1b:93:10:3e:c8:ae:31:4a:3e: 02:61:db:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAY0JjVeV2bwi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFlNjFlZmMtYTQwMi00OTc1LWJmZTctZjdkZGRhNzVh NjI4MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk YWRkMjZlY2MtYTNjMy00ZDljLTgzZDItYzdhNDNmYzgyMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnerFWg1hrOdmSQaYLBl5vTCNVauAkoPIOcWQ DKjwwz51U5Pdatlsutb65hM3ZWBFeX6m+kZ84HqFZuq8cfzdCu1R7Q96DBB3GvRx RVFf2og7cMnFiFLpVkzTiwc/orCjbStvcUfA4IR1YiDMAQGCI0bypoU2ETWwC+kL P/NOXEHccY3xyxO5sDmd/lKkdO920H+uFxL7jnWgwu7ykomZEUDraaRDDbKPKFE/ h2fUaRLR1ZFc6qdVMrFQ58zvmrngIPM5UMDb2QhNdK9XsaR4rdC9WLBFh/v6IoLb kQEU3XQA+U/WlKLLJUxKqLeMFyfJT0/nimG3qTaeZNPxPt1yFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI85nPRDVLrAPJiOElEABb1qcHpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YWU2 MWVmYy1hNDAyLTQ5NzUtYmZlNy1mN2RkZGE3NWE2MjgvYWUwYTU1YzctOWY5OS0z N2RlLWJlYmMtY2I0YzQwYmRjNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWFlNjFlZmMtYTQwMi00OTc1LWJm ZTctZjdkZGRhNzVhNjI4LzlhZTYxZWZjLWE0MDItNDk3NS1iZmU3LWY3ZGRkYTc1 YTYyOC5jcmwwHwYDVR0jBBgwFoAUV/x20jYvyqmQzdr7t7/ue7aAmuQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85YWU2MWVmYy1hNDAyLTQ5NzUtYmZlNy1mN2Rk ZGE3NWE2MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0YewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4osaHopntVpbP7Rxl5RkKSBa5gVK5sZLgZWHgeulBTtC221ySuMq6O SIp5ONwbFX/dynKLimM8tkXMaws3Ux9alno5T0FfWPjGh47rKlEdKVt/w87IWYac K3iCKeDhcDRmrLac3mRKWqBThy1bJ93q+7wFnbyCENEK4ICCvf3S8ryZhl9A6cP+ FE0994ZTeZtDDW3mz7P1Rd7M93Uf9dHaotbtK/dPJcEFQD/+QayyYq9YhpbTsvIE 8fbQgG+IeNSkfrT7wCuaJf/xIy95Neaddi0NYCJ4TL2cCg6gRqkmRmQECMCB18vT n60Y3svWkqcx5xuTED7IrjFKPgJh24A= -----END CERTIFICATE-----Generated at Sun Jun 15 16:01:09 2025 by rpki-client