$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa File: d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa (raw, json) Hash identifier: 6MfNkAa5uD2NSXZ/Zu4820D4M31ZBfvnmEBZiBAjkVE= Subject key identifier: 34:7E:58:FD:1E:94:55:47:34:FC:D4:73:0B:96:D6:56:5C:01:0D:F8 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584A1B600CDB60A935C624907CE8 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 35908 IP address blocks: 209.11.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:0c:db:60:a9:35:c6:24:90:7c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=33fdec5f-c96c-40eb-902b-7fed2667de03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1f:75:6c:e8:b7:3c:97:99:5a:65:ce:3d:28: 5f:97:df:20:0b:94:10:62:c8:5d:75:55:1a:5a:9a: ba:35:17:0b:b1:fa:82:6d:18:1a:65:27:ad:f6:2c: 87:dd:b4:da:93:18:9d:a3:55:e3:3f:51:57:79:55: 0f:b6:84:a3:9c:a9:52:32:11:83:ce:78:c7:84:b4: 9f:15:b4:d4:42:7c:e8:c6:d0:b5:32:6e:72:24:39: 3b:ee:fc:20:12:ee:58:14:12:0f:a2:88:67:f7:b9: db:d0:56:d7:6b:67:47:f6:06:b9:a5:47:80:fc:dd: 24:10:47:e9:bf:e1:fd:61:da:d2:54:eb:ed:bf:78: ac:ca:4b:46:2b:b8:2c:88:93:fa:f1:aa:2b:7f:3d: ed:f9:9a:2e:b6:6b:17:79:ea:98:8d:0b:19:7e:4d: 1e:52:d1:68:7c:70:c7:b2:32:46:bb:29:3a:e8:ff: 32:9d:9f:db:b0:2e:e4:10:ed:f0:6f:72:0e:3e:db: 23:f4:df:d3:50:c3:95:c6:93:ae:d0:54:15:02:18: 5b:ad:aa:c8:37:b5:de:24:62:a9:83:78:d6:b7:98: f4:fa:a7:9c:24:37:92:71:02:03:da:62:7b:53:39: f2:61:f5:2a:42:56:b9:40:98:8b:2f:7a:63:c7:88: d4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7E:58:FD:1E:94:55:47:34:FC:D4:73:0B:96:D6:56:5C:01:0D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 209.11.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:50:c7:4a:c2:f0:8a:a7:a4:5c:50:ba:12:cf:e6:e3:01:df: 05:93:a6:df:fa:aa:b4:0e:34:ca:3f:7f:ef:dd:ae:83:af:f7: 8c:41:2b:c7:bd:a0:16:1d:7f:3f:b4:9f:b9:58:c6:18:01:53: d9:3f:13:ec:10:b2:a9:e7:b9:a9:9c:a6:49:30:1a:79:84:f6: f5:f9:e4:26:5e:fe:b0:13:29:47:51:06:c5:68:e6:32:b4:9e: 54:6c:3e:85:73:72:af:ca:cd:12:0a:de:2f:64:54:55:9b:af: 9e:94:3f:40:7e:fe:9f:19:36:58:2c:c6:8a:07:64:d1:d7:8e: 6d:3b:81:ad:ab:8d:fd:ed:07:84:0a:e0:84:3a:6e:e0:e3:c9: d0:71:39:53:e9:77:4e:e2:4e:9c:d4:f5:69:62:b5:31:b5:a9: d1:66:86:9b:e8:3e:1c:8b:5e:b8:65:f3:16:cd:1b:93:59:c8: 15:27:64:a0:2b:92:06:fe:31:c2:a0:8c:af:2e:cd:96:be:23: e0:9e:fb:ae:e5:5f:4e:52:54:3e:02:53:8d:73:69:c5:b5:7d: ff:2e:19:51:ac:92:95:b2:2d:ca:79:cc:1b:ff:96:1d:f4:ee: 5e:9e:00:f3:2a:e8:26:13:25:1d:b2:d6:44:91:bc:1d:37:36: f5:01:3b:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAzbYKk1xiSQfOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk MzNmZGVjNWYtYzk2Yy00MGViLTkwMmItN2ZlZDI2NjdkZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh91bOi3PJeZWmXOPShfl98gC5QQYshddVUa Wpq6NRcLsfqCbRgaZSet9iyH3bTakxido1XjP1FXeVUPtoSjnKlSMhGDznjHhLSf FbTUQnzoxtC1Mm5yJDk77vwgEu5YFBIPoohn97nb0FbXa2dH9ga5pUeA/N0kEEfp v+H9YdrSVOvtv3isyktGK7gsiJP68aorfz3t+ZoutmsXeeqYjQsZfk0eUtFofHDH sjJGuyk66P8ynZ/bsC7kEO3wb3IOPtsj9N/TUMOVxpOu0FQVAhhbrarIN7XeJGKp g3jWt5j0+qecJDeScQID2mJ7UznyYfUqQla5QJiLL3pjx4jU/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR+WP0elFVHNPzUcwuW1lZcAQ34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZDZiNTBkYTEtZjAwYy0z OGUxLTkyYzQtYjk3YTRhODBmMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJQx0rC8IqnpFxQuhLP5uMB3wWTpt/6qrQONMo/f+/droOv94xBK8e9 oBYdfz+0n7lYxhgBU9k/E+wQsqnnuamcpkkwGnmE9vX55CZe/rATKUdRBsVo5jK0 nlRsPoVzcq/KzRIK3i9kVFWbr56UP0B+/p8ZNlgsxooHZNHXjm07ga2rjf3tB4QK 4IQ6buDjydBxOVPpd07iTpzU9WlitTG1qdFmhpvoPhyLXrhl8xbNG5NZyBUnZKAr kgb+McKgjK8uzZa+I+Ce+67lX05SVD4CU41zacW1ff8uGVGskpWyLcp5zBv/lh30 7l6eAPMq6CYTJR2y1kSRvB03NvUBO2k= -----END CERTIFICATE-----Generated at Sun Jun 15 19:35:35 2025 by rpki-client