$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa File: 0c0b966f-cc08-36fa-8094-773d54a45b9d.roa (raw, json) Hash identifier: QkGlmSqdU6A6CAePoki0XmpGIbj32O+CQrBItvsYC1g= Subject key identifier: E4:8E:90:55:BF:CE:35:A6:C1:69:16:62:67:D7:00:ED:EC:8D:E5:4E Certificate issuer: /CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9 Certificate serial: 010D0C9F43285849FCAA7079B098AC054D03FB00 Authority key identifier: C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 396982 IP address blocks: 209.209.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:70:79:b0:98:ac:05:4d:03:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=6a5e40dd-357b-4c7c-9dda-ed9bb9787c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:2a:cb:5b:a5:16:11:d3:3d:36:a8:13:54: 1c:bc:8f:82:88:a2:99:14:09:a8:13:0e:ea:34:c3: bc:95:26:91:1f:f9:e2:59:a5:b2:7d:f7:be:aa:45: 04:8c:e5:9d:a6:83:9d:92:6d:1e:ed:95:36:a2:27: 13:f1:c1:69:d9:ce:10:f4:e9:2c:57:78:1c:e8:c5: f6:1c:d0:02:70:36:b8:9f:74:cf:99:27:f2:d6:5f: 79:4f:1e:52:de:38:52:54:41:aa:c4:09:55:2e:e6: 31:8c:85:ff:d4:2c:9f:0f:9b:f3:f3:68:23:8e:ef: c9:95:db:d3:63:bb:5a:52:67:c4:b0:79:67:38:7d: d7:8e:0d:b7:db:f1:03:23:6e:5f:a3:37:6e:34:97: 21:bf:27:38:56:ca:72:77:8b:58:3b:f7:e7:b4:e2: 30:a7:67:b8:6e:e8:17:f9:ae:7c:43:92:50:dd:b3: 52:9b:6b:d2:65:58:0d:4d:f9:05:a2:c5:be:15:05: c1:be:d3:b5:a2:44:23:65:14:45:7f:bc:76:a6:95: 84:57:d1:2b:d7:7b:b7:24:a6:e1:67:7f:4f:50:56: 74:4d:13:e6:d5:cf:f8:f8:3e:89:e9:57:76:3d:e8: a1:f3:93:b3:c5:24:dd:af:2e:9f:cf:44:71:9b:9d: cf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8E:90:55:BF:CE:35:A6:C1:69:16:62:67:D7:00:ED:EC:8D:E5:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.crl X509v3 Authority Key Identifier: keyid:C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer sbgp-ipAddrBlock: critical IPv4: 209.209.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:24:9b:84:8a:9e:d7:10:6d:26:d8:28:60:ba:1b:2e:b8:c8: 9c:cc:56:34:24:04:d5:70:47:dd:ff:7d:e4:a0:e1:17:eb:f0: 74:31:a4:fa:e3:90:a3:28:80:bb:27:bb:19:e6:b4:f4:19:5f: 69:53:18:fb:5f:e1:f6:cc:db:c8:75:b2:5f:f9:5e:f4:73:14: e3:f9:bc:5e:93:c6:51:9a:ab:12:6c:79:94:97:b2:7c:39:40: 4a:87:ec:4a:1c:12:2e:5e:a9:96:cd:a6:4b:a0:4d:3e:45:ad: 76:1c:5a:14:c5:91:bc:40:5d:83:31:31:2f:91:5b:7a:01:ac: 51:5d:2a:4a:33:d6:a6:79:c9:a2:d8:ad:a2:e0:0d:39:7f:a1: 51:b8:a3:74:37:82:6f:52:e4:e5:ec:3e:ed:31:87:fa:38:92: b2:2d:54:81:96:2e:64:f8:78:97:5b:cb:57:29:5a:e3:2a:6c: 66:b4:15:12:26:a1:31:d5:80:1f:fb:5b:ce:75:36:4d:24:36: 3c:98:23:0f:40:41:c5:fa:31:85:1d:76:91:17:a8:0a:80:4f: 2a:3d:7c:21:f5:ca:77:ec:b5:a0:ba:0f:ef:06:f4:9d:d5:6f: 20:07:49:8d:e6:a4:b1:e1:c8:41:54:7e:51:79:73:9b:d1:f5: c5:6e:c4:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnB5sJisBU0D+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjgyN2E3NGItMDIxZi00YWE0LWE1NTgtNjdkMmQ2YzIy ZmU5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NmE1ZTQwZGQtMzU3Yi00YzdjLTlkZGEtZWQ5YmI5Nzg3Yzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Qqy1ulFhHTPTaoE1QcvI+CiKKZFAmoEw7q NMO8lSaRH/niWaWyffe+qkUEjOWdpoOdkm0e7ZU2oicT8cFp2c4Q9OksV3gc6MX2 HNACcDa4n3TPmSfy1l95Tx5S3jhSVEGqxAlVLuYxjIX/1CyfD5vz82gjju/JldvT Y7taUmfEsHlnOH3Xjg232/EDI25fozduNJchvyc4Vspyd4tYO/fntOIwp2e4bugX +a58Q5JQ3bNSm2vSZVgNTfkFosW+FQXBvtO1okQjZRRFf7x2ppWEV9Er13u3JKbh Z39PUFZ0TRPm1c/4+D6J6Vd2Peih85OzxSTdry6fz0Rxm53PdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSOkFW/zjWmwWkWYmfXAO3sjeVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODI3 YTc0Yi0wMjFmLTRhYTQtYTU1OC02N2QyZDZjMjJmZTkvMGMwYjk2NmYtY2MwOC0z NmZhLTgwOTQtNzczZDU0YTQ1YjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjgyN2E3NGItMDIxZi00YWE0LWE1 NTgtNjdkMmQ2YzIyZmU5LzY4MjdhNzRiLTAyMWYtNGFhNC1hNTU4LTY3ZDJkNmMy MmZlOS5jcmwwHwYDVR0jBBgwFoAUwdsOiPLFFzLwUvfATkOCurREVpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ODI3YTc0Yi0wMjFmLTRhYTQtYTU1OC02N2Qy ZDZjMjJmZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgkm4SKntcQbSbYKGC6Gy64yJzMVjQkBNVwR93/feSg4Rfr8HQxpPrj kKMogLsnuxnmtPQZX2lTGPtf4fbM28h1sl/5XvRzFOP5vF6TxlGaqxJseZSXsnw5 QEqH7EocEi5eqZbNpkugTT5FrXYcWhTFkbxAXYMxMS+RW3oBrFFdKkoz1qZ5yaLY raLgDTl/oVG4o3Q3gm9S5OXsPu0xh/o4krItVIGWLmT4eJdby1cpWuMqbGa0FRIm oTHVgB/7W851Nk0kNjyYIw9AQcX6MYUddpEXqAqATyo9fCH1ynfstaC6D+8G9J3V byAHSY3mpLHhyEFUflF5c5vR9cVuxO0= -----END CERTIFICATE-----Generated at Sun Jun 15 15:17:32 2025 by rpki-client