$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa File: 48351c25-8c04-3be2-9d0c-45dc5703d206.roa (raw, json) Hash identifier: FklIZucPuvOVpyeWPM0mdbupqNrn/VSkstQ0VSHPFvI= Subject key identifier: 46:A9:56:25:D8:BF:BF:50:3B:EF:58:E6:AF:FA:CF:D3:6F:92:DA:B0 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584A2C201386CB110D781D955080 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 13414 IP address blocks: 209.237.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:13:86:cb:11:0d:78:1d:95:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=4cf84ab9-ece3-4ac1-849e-1c49bae61535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f4:68:85:36:92:5b:b0:9e:ea:39:be:be:9a: bf:c9:9b:11:6e:c6:9d:86:6b:b0:33:67:af:51:82: 37:ee:88:ff:7f:29:94:46:e7:98:3c:4a:3e:a0:45: 23:e9:13:ab:dc:f2:7b:1c:29:88:0d:01:58:6e:3c: 3e:63:83:44:14:2c:f6:fb:63:60:89:11:80:f6:ae: a4:f4:98:b5:d3:38:19:c4:52:e2:bf:98:16:a7:f0: c4:33:9a:37:c8:ca:1e:13:e5:d1:76:3b:f5:b9:29: 71:7a:86:eb:d4:25:b3:c4:f8:93:7a:46:7c:aa:71: 3a:27:d7:f8:c7:6f:7a:64:d3:3b:d2:35:1c:eb:4d: 80:82:dd:70:f5:9c:9a:5e:20:11:ec:b2:60:db:37: d3:04:55:42:2e:c7:74:f8:ef:65:96:84:e4:a4:07: 3a:b4:a9:32:3f:0f:6f:e8:b4:80:0b:22:aa:a4:15: 35:a5:ed:4b:1b:70:ae:13:28:52:61:54:13:8a:35: 1d:c2:f5:cb:d4:f8:de:3c:d9:48:61:d6:af:33:1c: c8:c6:53:1c:25:06:03:62:33:2b:0a:55:55:be:f1: b2:91:a8:2c:e6:2e:cb:6c:44:75:a6:59:b9:4c:09: 25:1f:dd:69:36:94:c7:ce:00:b5:67:89:ba:ea:25: 62:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A9:56:25:D8:BF:BF:50:3B:EF:58:E6:AF:FA:CF:D3:6F:92:DA:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:f7:a5:dd:66:55:9c:4b:44:25:cf:df:9d:47:c8:cf:9a:02: 72:e5:dd:c5:f0:06:a0:8f:da:8c:3a:fa:ae:c8:bd:ae:ed:50: 50:53:25:b4:ed:99:46:18:21:76:ee:3f:38:f7:e4:0e:f8:57: 8c:c5:80:d1:4d:a1:5c:95:08:04:80:24:fb:e2:9c:bd:8e:36: 73:91:3e:f3:d1:af:81:b8:83:ec:c6:bb:12:f6:f1:c8:c7:ef: 5f:68:05:41:87:48:c3:bd:af:b5:cd:58:c3:df:e3:33:00:18: ed:f6:98:fb:88:ae:8e:ee:b8:f0:69:6c:7c:d7:f4:98:49:0b: 34:6d:c9:d0:a8:c9:f3:d7:af:a0:ee:25:1d:85:e4:8b:b6:e5: a3:6c:8c:ca:48:ea:25:4a:47:5a:e7:3b:24:84:56:7d:9a:8a: 8b:71:84:33:33:27:e6:a1:82:5b:08:38:02:fe:c0:5e:0e:17: 60:e8:45:05:d9:29:7b:6a:ab:94:7a:58:b1:47:b7:7a:32:6b: ef:3f:27:1d:9a:1d:41:0e:c8:14:5a:64:b9:c0:5f:00:4f:3c: c4:4f:61:38:11:ca:79:f5:28:ec:41:2c:9d:13:8f:cb:2d:0a: e8:f2:32:b9:39:5a:d9:98:f1:e2:2f:08:6c:b6:c1:c1:17:62: 78:ec:e8:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBOGyxENeB2VUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk NGNmODRhYjktZWNlMy00YWMxLTg0OWUtMWM0OWJhZTYxNTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvRohTaSW7Ce6jm+vpq/yZsRbsadhmuwM2ev UYI37oj/fymURueYPEo+oEUj6ROr3PJ7HCmIDQFYbjw+Y4NEFCz2+2NgiRGA9q6k 9Ji10zgZxFLiv5gWp/DEM5o3yMoeE+XRdjv1uSlxeobr1CWzxPiTekZ8qnE6J9f4 x296ZNM70jUc602Agt1w9ZyaXiAR7LJg2zfTBFVCLsd0+O9lloTkpAc6tKkyPw9v 6LSACyKqpBU1pe1LG3CuEyhSYVQTijUdwvXL1PjePNlIYdavMxzIxlMcJQYDYjMr ClVVvvGykags5i7LbER1plm5TAklH91pNpTHzgC1Z4m66iVieQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEapViXYv79QO+9Y5q/6z9NvktqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNDgzNTFjMjUtOGMwNC0z YmUyLTlkMGMtNDVkYzU3MDNkMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALz3pd1mVZxLRCXP351HyM+aAnLl3cXwBqCP2ow6+q7Iva7tUFBTJbTt mUYYIXbuPzj35A74V4zFgNFNoVyVCASAJPvinL2ONnORPvPRr4G4g+zGuxL28cjH 719oBUGHSMO9r7XNWMPf4zMAGO32mPuIro7uuPBpbHzX9JhJCzRtydCoyfPXr6Du JR2F5Iu25aNsjMpI6iVKR1rnOySEVn2aiotxhDMzJ+ahglsIOAL+wF4OF2DoRQXZ KXtqq5R6WLFHt3oya+8/Jx2aHUEOyBRaZLnAXwBPPMRPYTgRynn1KOxBLJ0Tj8st CujyMrk5WtmY8eIvCGy2wcEXYnjs6N4= -----END CERTIFICATE-----Generated at Thu Jun 19 10:53:25 2025 by rpki-client